neoctl-web 0.1.0

package/plugins/xhs-artifact/artifacts.mjs

@@ -0,0 +1,388 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import {
+  parseXhsArtifactToolOutput,
+  XHS_ARTIFACT_EDITOR_HINT,
+  XHS_ARTIFACT_INPUT_SCHEMA,
+  XHS_IMAGE_FIELDS,
+  XHS_PAYLOAD_FIELDS,
+} from './xhs-artifact-contract.mjs';
+
+export class XhsArtifactRegistry {
+  constructor(options = {}) {
+    this.entries = new Map();
+    this.storageDir = path.resolve(options.storageDir || path.join(process.cwd(), '.neoctl-web', 'xhs-artifacts'));
+    this.sessionsDir = path.resolve(options.sessionsDir || path.join(os.homedir(), '.neoctl', 'sessions'));
+  }
+
+  add(entry) {
+    const now = Date.now();
+    const artifact = normalizeArtifact({
+      id: crypto.randomUUID(),
+      type: 'xhs-post',
+      title: '',
+      payload: {},
+      content: '',
+      sessionId: undefined,
+      createdAt: now,
+      updatedAt: now,
+      ...entry,
+    });
+    this.entries.set(artifact.id, artifact);
+    this.persist(artifact);
+    return cloneArtifact(artifact);
+  }
+
+  get(id, sessionId) {
+    const artifactId = safeArtifactId(id);
+    if (!artifactId) return undefined;
+    const artifact = this.entries.get(artifactId) || this.load(artifactId) || this.recoverFromTranscript(artifactId, sessionId);
+    if (artifact) this.entries.set(artifact.id, artifact);
+    if (!artifactBelongsToSession(artifact, sessionId)) return undefined;
+    return artifact ? cloneArtifact(artifact) : undefined;
+  }
+
+  update(id, patch, sessionId) {
+    const artifact = this.get(id, sessionId);
+    if (!artifact) return undefined;
+    if (typeof patch.title === 'string') artifact.title = patch.title.trim().slice(0, 160);
+    if (patch.payload !== undefined) artifact.payload = validateEditorPayload(patch.payload);
+    if (typeof patch.content === 'string') artifact.content = patch.content;
+    artifact.updatedAt = Date.now();
+    this.entries.set(artifact.id, artifact);
+    this.persist(artifact);
+    return cloneArtifact(artifact);
+  }
+
+  load(id) {
+    try {
+      return normalizeArtifact(JSON.parse(fs.readFileSync(this.artifactFile(id), 'utf8')));
+    } catch (error) {
+      if (error?.code !== 'ENOENT') console.warn(`failed to load xhs artifact ${id}:`, error);
+      return undefined;
+    }
+  }
+
+  persist(artifact) {
+    fs.mkdirSync(this.storageDir, { recursive: true });
+    const target = this.artifactFile(artifact.id);
+    const temporary = `${target}.${process.pid}.${crypto.randomBytes(4).toString('hex')}.tmp`;
+    fs.writeFileSync(temporary, `${JSON.stringify(artifact, null, 2)}\n`, 'utf8');
+    fs.renameSync(temporary, target);
+  }
+
+  recoverFromTranscript(id, sessionId) {
+    const safeSessionId = safeSessionDirectoryName(sessionId);
+    if (!safeSessionId) return undefined;
+    try {
+      const transcript = fs.readFileSync(path.join(this.sessionsDir, safeSessionId, 'transcript.jsonl'), 'utf8');
+      const lines = transcript.split(/\r?\n/).filter(Boolean);
+      for (let index = lines.length - 1; index >= 0; index -= 1) {
+        let entry;
+        try { entry = JSON.parse(lines[index]); } catch { continue; }
+        for (const block of entry?.message?.blocks || []) {
+          if (block?.type !== 'tool_result' || !['open_xhs_artifact_editor', 'read_xhs_artifact'].includes(block.name)) continue;
+          const recovered = parseXhsArtifactToolOutput(block.output);
+          if (String(recovered?.id || '') !== id) continue;
+          const artifact = normalizeArtifact({ ...recovered, sessionId: recovered.sessionId || safeSessionId });
+          this.persist(artifact);
+          return artifact;
+        }
+      }
+    } catch (error) {
+      if (error?.code !== 'ENOENT') console.warn(`failed to recover xhs artifact ${id}:`, error);
+    }
+    return undefined;
+  }
+
+  artifactFile(id) {
+    return path.join(this.storageDir, `${id}.json`);
+  }
+}
+
+export function createOpenXhsArtifactEditorTool(options) {
+  return {
+    name: 'open_xhs_artifact_editor',
+    description: XHS_ARTIFACT_EDITOR_HINT,
+    inputSchema: XHS_ARTIFACT_INPUT_SCHEMA,
+    metadata: {
+      readOnly: false,
+      concurrent: true,
+      visible: true,
+      requiresApproval: false,
+      maxResultSizeChars: 60000,
+    },
+    validate(input) {
+      const payload = validateEditorPayload(input?.payload);
+      return {
+        artifactId: String(input?.artifact_id || '').trim(),
+        title: payload.title,
+        payload,
+        content: '',
+      };
+    },
+    async execute(input, context) {
+      const sessionId = context?.session?.sessionId;
+      const artifact = input.artifactId
+        ? options.registry.update(input.artifactId, { title: input.title, payload: input.payload, content: input.content }, sessionId)
+        : options.registry.add({
+            title: input.title,
+            payload: input.payload,
+            content: input.content,
+            sessionId: context.session?.sessionId,
+          });
+      if (!artifact) throw new Error(`xhs artifact not found: ${input.artifactId}; call read_xhs_artifact first or omit artifact_id to create a new editor`);
+      const action = input.artifactId ? 'Updated' : 'Opened';
+      return {
+        ok: true,
+        output: {
+          artifact: clientArtifact(artifact),
+          action: action.toLowerCase(),
+          _ui: xhsArtifactPresentation(artifact),
+        },
+        summary: `${action} Xiaohongshu editor ${artifact.id}`,
+      };
+    },
+  };
+}
+
+export function xhsArtifactPresentation(artifact, sessionId = artifact?.sessionId) {
+  if (!artifact?.id) return undefined;
+  const query = sessionId ? `?sessionId=${encodeURIComponent(sessionId)}` : '';
+  return {
+    title: '编辑小红书笔记',
+    bodyTitle: artifact.title || '小红书笔记',
+    text: '可编辑笔记已就绪。',
+    presentationLevel: 'primary',
+    resources: [{
+      kind: 'embed',
+      url: `/api/xhs-artifacts/${encodeURIComponent(artifact.id)}/editor${query}`,
+      label: artifact.title || '小红书笔记编辑器',
+      height: 720,
+    }],
+  };
+}
+
+export function createReadXhsArtifactTool(options) {
+  return {
+    name: 'read_xhs_artifact',
+    description: 'Read the latest user-edited Xiaohongshu editor state. Before revising, call this with the artifact id, preserve the returned user edits, then call open_xhs_artifact_editor with artifact_id set to the same id and a complete exact payload.',
+    inputSchema: {
+      type: 'object',
+      properties: { id: { type: 'string', description: 'Artifact id returned by open_xhs_artifact_editor.' } },
+      required: ['id'],
+      additionalProperties: false,
+    },
+    metadata: {
+      readOnly: true,
+      concurrent: true,
+      visible: true,
+      requiresApproval: false,
+      maxResultSizeChars: 60000,
+    },
+    validate(input) {
+      const id = String(input?.id || '').trim();
+      if (!id) throw new Error('id is required');
+      return { id };
+    },
+    async execute(input, context) {
+      const artifact = options.registry.get(input.id, context?.session?.sessionId);
+      if (!artifact) throw new Error(`xhs artifact not found: ${input.id}`);
+      return { ok: true, output: { artifact: clientArtifact(artifact) }, summary: '已读取稿件' };
+    },
+  };
+}
+
+export async function serveXhsArtifact(registry, req, res, id, readJsonBody, sessionId) {
+  if (req.method === 'GET') {
+    const artifact = registry.get(id, sessionId);
+    return artifact ? sendJson(res, { ok: true, artifact: clientArtifact(artifact) }) : sendJson(res, { error: 'artifact not found' }, 404);
+  }
+  if (req.method === 'PUT') {
+    const body = await readJsonBody(req);
+    assertExactKeys(body, ['title', 'payload'], 'request');
+    const payload = validateEditorPayload(body?.payload);
+    const artifact = registry.update(id, { title: payload.title, payload }, sessionId);
+    return artifact ? sendJson(res, { ok: true, artifact: clientArtifact(artifact) }) : sendJson(res, { error: 'artifact not found' }, 404);
+  }
+  return sendJson(res, { error: 'method not allowed' }, 405);
+}
+
+function normalizeArtifact(value) {
+  const payload = validateEditorPayload(value.payload);
+  return {
+    id: String(value.id),
+    type: String(value.type || 'xhs-post'),
+    title: payload.title,
+    payload,
+    content: String(value.content || ''),
+    sessionId: value.sessionId,
+    createdAt: Number(value.createdAt || Date.now()),
+    updatedAt: Number(value.updatedAt || Date.now()),
+  };
+}
+
+function clientArtifact(artifact) {
+  return {
+    id: artifact.id,
+    type: artifact.type,
+    title: artifact.title,
+    payload: clientPayload(artifact.payload),
+    sessionId: artifact.sessionId,
+    createdAt: artifact.createdAt,
+    updatedAt: artifact.updatedAt,
+  };
+}
+
+function clientPayload(payload) {
+  return {
+    title: payload.title,
+    body: payload.body,
+    interaction: payload.interaction,
+    hashtags: [...payload.hashtags],
+    images: payload.images.map(clientImage),
+    review: payload.review,
+  };
+}
+
+function clientImage(image) {
+  return {
+    url: safeImageUrl(image.url),
+    caption: image.caption,
+    overlay: image.overlay,
+    note: image.note,
+  };
+}
+
+function validateEditorPayload(value) {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) {
+    throw contractError('payload must be an object');
+  }
+  assertExactKeys(value, XHS_PAYLOAD_FIELDS, 'payload');
+
+  const title = requireEditorString(value.title, 'payload.title').trim().slice(0, 160);
+  const body = requireEditorString(value.body, 'payload.body').trim();
+  const interaction = requireEditorString(value.interaction, 'payload.interaction').trim();
+  const review = requireEditorString(value.review, 'payload.review').trim();
+  if (!title) throw contractError('payload.title must contain the final post title');
+  if (!body) throw contractError('payload.body must contain final publish-ready正文 only');
+  validateBodyBoundaries(body, title);
+  if (!Array.isArray(value.hashtags)) throw contractError('payload.hashtags must be an array of strings such as ["#话题"]');
+  if (!Array.isArray(value.images)) throw contractError('payload.images must be an array of {url, caption, overlay, note} objects');
+  if (!value.images.length) throw contractError('payload.images must contain at least one image or planned placeholder');
+
+  const hashtags = value.hashtags.map((tag, index) => {
+    if (typeof tag !== 'string') throw contractError(`payload.hashtags[${index}] must be a string`);
+    const normalized = tag.trim().replace(/^＃/u, '#');
+    if (!/^#[^\s#]+$/u.test(normalized)) throw contractError(`payload.hashtags[${index}] must be exactly one #topic without spaces`);
+    return normalized.slice(0, 100);
+  });
+  const images = value.images.map((image, index) => validateEditorImage(image, index));
+
+  return {
+    title,
+    body,
+    interaction,
+    hashtags: [...new Set(hashtags)].slice(0, 40),
+    images,
+    review,
+  };
+}
+
+function validateEditorImage(value, index) {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) {
+    throw contractError(`payload.images[${index}] must be an object with url, caption, overlay, note`);
+  }
+  assertExactKeys(value, XHS_IMAGE_FIELDS, `payload.images[${index}]`);
+  const rawUrl = requireEditorString(value.url, `payload.images[${index}].url`).trim();
+  const url = safeImageUrl(rawUrl);
+  if (rawUrl && !url) {
+    throw contractError(`payload.images[${index}].url must be a real http(s) URL, /api/ URL, or absolute local image path; use "" for a placeholder`);
+  }
+  const caption = requireEditorString(value.caption, `payload.images[${index}].caption`).trim();
+  const overlay = requireEditorString(value.overlay, `payload.images[${index}].overlay`).trim();
+  const note = requireEditorString(value.note, `payload.images[${index}].note`).trim();
+  if (!url && !caption && !note) throw contractError(`payload.images[${index}] is an empty placeholder; describe the planned image in caption or note`);
+  return {
+    url,
+    caption: caption.slice(0, 1000),
+    overlay: overlay.slice(0, 500),
+    note: note.slice(0, 2000),
+  };
+}
+
+function requireEditorString(value, field) {
+  if (typeof value !== 'string') throw contractError(`${field} must be a string`);
+  return value;
+}
+
+function safeImageUrl(...values) {
+  const url = String(values.find((value) => typeof value === 'string') || '').trim();
+  if (!url || /^data:/i.test(url)) return '';
+  if (/^(?:https?:|\/api\/)/i.test(url)) return url.slice(0, 2048);
+  if (isLocalFilePath(url)) return `/api/local-images/${encodeURIComponent(Buffer.from(url, 'utf8').toString('base64url'))}`;
+  return '';
+}
+
+function isLocalFilePath(value) {
+  return /^[a-zA-Z]:[\\/]/.test(value) || value.startsWith('\\\\') || value.startsWith('/');
+}
+
+function assertExactKeys(value, expected, path) {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) throw contractError(`${path} must be an object`);
+  const actual = Object.keys(value);
+  const missing = expected.filter((key) => !actual.includes(key));
+  const extra = actual.filter((key) => !expected.includes(key));
+  if (missing.length || extra.length) {
+    const details = [
+      missing.length ? `missing ${missing.join(', ')}` : '',
+      extra.length ? `unexpected ${extra.join(', ')}` : '',
+    ].filter(Boolean).join('; ');
+    throw contractError(`${path} must contain exactly ${expected.join(', ')} (${details})`);
+  }
+}
+
+function validateBodyBoundaries(body, title) {
+  const firstLine = body.split(/\r?\n/).map((line) => line.trim()).find(Boolean) || '';
+  if (firstLine === title || firstLine.replace(/^#{1,6}\s*/, '') === title) {
+    throw contractError('payload.body must not repeat payload.title as its first line');
+  }
+  if (/```|~~~/.test(body)) throw contractError('payload.body must not contain fenced Markdown or JSON');
+  if (/^\s*#{1,6}\s*(?:标题|正文|笔记正文|发布文案|配图|图片方案|话题标签|标签|审核|review)\s*[:：]?\s*$/imu.test(body)) {
+    throw contractError('payload.body must not contain editor section headings');
+  }
+  if (/(?:^|\s)#[^\s#]+/u.test(body)) throw contractError('payload.body must not contain hashtags; put them in payload.hashtags');
+  if (/^\s*\{[\s\S]*"(?:title|body|images|hashtags)"\s*:/u.test(body)) {
+    throw contractError('payload.body must not contain serialized tool JSON');
+  }
+}
+
+function contractError(message) {
+  return new Error(`Invalid Xiaohongshu editor payload: ${message}. Retry open_xhs_artifact_editor with the exact documented schema; do not send Markdown or alternate fields.`);
+}
+
+function safeArtifactId(value) {
+  const id = String(value || '').trim();
+  return id && /^[A-Za-z0-9._-]+$/u.test(id) && path.basename(id) === id ? id : '';
+}
+
+function safeSessionDirectoryName(value) {
+  const id = String(value || '').trim();
+  return id && /^[A-Za-z0-9._:-]+$/u.test(id) && !id.includes('..') && path.basename(id) === id ? id : '';
+}
+
+function artifactBelongsToSession(artifact, sessionId) {
+  const expected = String(sessionId || '').trim();
+  return Boolean(artifact) && (!expected || !artifact.sessionId || artifact.sessionId === expected);
+}
+
+function cloneArtifact(artifact) {
+  return JSON.parse(JSON.stringify(artifact));
+}
+
+function sendJson(res, value, status = 200) {
+  res.writeHead(status, { 'Content-Type': 'application/json; charset=utf-8', 'Cache-Control': 'no-store' });
+  res.end(JSON.stringify(value));
+}

package/plugins/xhs-artifact/editor-page.mjs

@@ -0,0 +1,73 @@
+function escapeHtml(value) {
+  return String(value ?? '')
+    .replace(/&/g, '&')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;')
+    .replace(/"/g, '&quot;')
+    .replace(/'/g, '&#39;');
+}
+
+function serialize(value) {
+  return JSON.stringify(value).replace(/</g, '\\u003c').replace(/-->/g, '--\\u003e');
+}
+
+export function serveXhsEditorPage(res, artifact, options = {}) {
+  const sessionId = String(options.sessionId || artifact.sessionId || '');
+  const apiUrl = `/api/xhs-artifacts/${encodeURIComponent(artifact.id)}${sessionId ? `?sessionId=${encodeURIComponent(sessionId)}` : ''}`;
+  const html = renderXhsEditorPage(artifact, apiUrl);
+  res.writeHead(200, {
+    'Content-Type': 'text/html; charset=utf-8',
+    'Content-Length': String(Buffer.byteLength(html)),
+    'Cache-Control': 'no-store',
+    'Content-Security-Policy': "default-src 'self'; img-src 'self' data: blob: https: http:; style-src 'unsafe-inline'; script-src 'unsafe-inline'; connect-src 'self'",
+  });
+  res.end(html);
+}
+
+export function renderXhsEditorPage(artifact, apiUrl) {
+  return `<!doctype html>
+<html lang="zh-CN">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width,initial-scale=1">
+  <title>${escapeHtml(artifact.title || '小红书笔记')}</title>
+  <style>
+    :root{color-scheme:light;--bg:#fff;--panel:#fff;--panel2:#f7f7f7;--media:#f5f5f5;--text:#191919;--copy:#333;--muted:#8b8b8b;--line:#ededed;--accent:#ff2442;--soft:#fff0f2;--shadow:0 16px 48px rgba(0,0,0,.1);--neo-surface:#fff;--neo-text:#111827;--neo-border:#1f2937;--neo-shadow:#cbd5e1;--neo-pink:#ed68ac;--neo-active:#111827;--neo-active-text:#fff}
+    :root[data-theme=dark]{color-scheme:dark;--bg:#09090b;--panel:#111113;--panel2:#18181b;--media:#050505;--text:#f5f5f5;--copy:#f5f5f5;--muted:#96969d;--line:#2b2b2f;--accent:#ff2442;--soft:#35151c;--shadow:0 20px 60px rgba(0,0,0,.5);--neo-surface:#303842;--neo-text:#f3f4f6;--neo-border:#d8dee9;--neo-shadow:#111318;--neo-pink:#9d416f;--neo-active:#f3f4f6;--neo-active-text:#111827}
+    *{box-sizing:border-box;scrollbar-width:none}*::-webkit-scrollbar{display:none}html,body{margin:0;min-height:100%;background:var(--bg);color:var(--text);font:14px/1.6 system-ui,-apple-system,"Segoe UI",sans-serif}button,input,textarea{font:inherit}button{cursor:pointer}
+    .shell{display:grid;gap:12px;padding:10px;background:var(--bg)}.head{display:flex;min-height:42px;align-items:center;justify-content:flex-end;border:0;background:transparent;padding:0 0 2px;color:var(--neo-text);box-shadow:none}
+    .actions{display:flex;align-items:center;justify-content:flex-end;gap:8px;flex-wrap:nowrap}.segmented{display:flex;gap:6px;background:transparent}.segmented button,.save,.screen,.upload,.small{background:var(--neo-surface);color:var(--neo-text);padding:7px 12px;font-weight:700}.segmented button,.save,.screen{border:2px solid var(--neo-border);border-radius:0;box-shadow:2px 2px 0 var(--neo-shadow)}.segmented button.active{background:var(--neo-active);color:var(--neo-active-text)}.save{background:var(--neo-pink);padding-inline:18px}.screen{background:var(--neo-surface)}.segmented button:active,.save:active,.screen:active{transform:translate(2px,2px);box-shadow:none}.save:disabled{opacity:.55}.status{min-width:42px;color:var(--muted);font-size:12px;line-height:1;white-space:nowrap;pointer-events:none}.status:empty{display:none}
+    .grid{display:grid;grid-template-columns:minmax(300px,.9fr) minmax(380px,1.1fr);gap:14px;align-items:start}.grid.preview{display:block;max-width:1050px;width:100%;margin:auto}.grid.edit{display:block;max-width:900px;width:100%;margin:auto}.hidden{display:none!important}
+    .preview-card,.form{border-radius:18px;box-shadow:none}.preview-card{display:grid;grid-template-columns:minmax(0,1.42fr) minmax(310px,.78fr);min-height:610px;overflow:hidden;border:1px solid var(--line);background:var(--panel);color:var(--text)}.grid:not(.preview) .preview-card{display:block;min-height:0}.media{position:relative;min-height:610px;background:var(--media);display:grid;place-items:center;overflow:hidden}.grid:not(.preview) .media{min-height:340px;aspect-ratio:4/3}.media img{width:100%;height:100%;object-fit:cover}.media.image-missing{background:radial-gradient(circle at 18% 18%,rgba(255,36,66,.12),transparent 26%),radial-gradient(circle at 82% 78%,rgba(255,137,154,.16),transparent 28%),var(--media)}.placeholder{display:grid;justify-items:center;gap:8px;width:min(320px,70%);padding:30px 24px;color:var(--muted);text-align:center}.placeholder-art{display:grid;place-items:center;width:68px;height:68px;margin-bottom:5px;border-radius:20px;background:var(--soft);color:var(--accent);font-size:30px;transform:rotate(-4deg)}.placeholder strong{color:var(--text);font-size:16px}.placeholder small{max-width:260px;font-size:13px;line-height:1.55}.overlay{position:absolute;left:24px;right:24px;bottom:26px;border-radius:10px;color:white;font-size:26px;font-weight:900;text-align:center;text-shadow:0 2px 12px #000;background:rgba(0,0,0,.34);padding:9px 12px}.arrows{position:absolute;left:14px;right:14px;top:50%;display:flex;justify-content:space-between;pointer-events:none}.arrows button{pointer-events:auto;width:36px;height:36px;border:0;border-radius:50%;background:rgba(0,0,0,.48);color:white;font-size:22px;backdrop-filter:blur(8px)}.dots{position:absolute;left:0;right:0;bottom:9px;text-align:center;color:white;text-shadow:0 1px 4px #000}.media.image-missing .dots{color:var(--muted);text-shadow:none}.body{position:relative;display:flex;min-width:0;max-height:610px;flex-direction:column;padding:22px;overflow:auto;background:var(--panel)}.author{display:flex;align-items:center;gap:10px;margin-bottom:20px;font-weight:700}.avatar{display:grid;place-items:center;width:38px;height:38px;border-radius:50%;background:linear-gradient(135deg,#ff8a9c,#ff2442);color:white}.author-name{min-width:0;flex:1}.follow{border:0;border-radius:999px;background:var(--accent);color:white;padding:7px 20px;font-weight:700}h1{margin:0 0 10px;font-size:19px;line-height:1.4}.preview-card .copy{white-space:pre-wrap;margin:0;color:var(--copy)}.preview-card .interaction{margin:14px 0 0;color:var(--copy)}.tags{display:flex;gap:6px;flex-wrap:wrap;margin-top:15px}.tags span{color:#3d6dcc;font-weight:550}:root[data-theme=dark] .tags span{color:#8ab4f8}.post-meta{margin-top:18px;padding-bottom:18px;border-bottom:1px solid var(--line);color:var(--muted);font-size:12px}.social{display:flex;align-items:center;justify-content:space-between;gap:8px;margin-top:auto;padding-top:18px;color:var(--muted)}.social span{display:inline-flex;align-items:center;gap:4px}.social b{color:var(--text);font-size:17px}
+    .form{display:grid;gap:13px;padding:18px}.field{display:grid;gap:5px}.field span,.images-head strong{font-size:12px;font-weight:700}.field input,.field textarea{width:100%;border:1px solid var(--line);border-radius:10px;background:var(--panel2);color:var(--text);padding:10px 12px;outline:none}.field textarea{min-height:112px;resize:vertical}.field input:focus,.field textarea:focus{border-color:var(--accent);box-shadow:0 0 0 3px color-mix(in srgb,var(--accent) 14%,transparent)}.images-head{display:flex;align-items:center;justify-content:space-between}.upload,.small{border:1px solid var(--line);border-radius:999px;background:var(--panel2)}.image-row{display:grid;grid-template-columns:92px minmax(0,1fr);gap:10px;border-top:1px solid var(--line);padding:12px 0}.thumb{width:92px;aspect-ratio:1;border:1px solid var(--line);border-radius:10px;background:var(--panel2);overflow:hidden;padding:0}.thumb img{width:100%;height:100%;object-fit:cover}.image-fields{display:grid;gap:7px}.image-fields input{padding:7px 9px}.row-actions{display:flex;gap:7px}.danger{color:var(--accent)}.empty{color:var(--muted);padding:14px;border:1px dashed var(--line);border-radius:10px}
+    :fullscreen{overflow:auto;background:var(--bg)}:fullscreen .shell{min-height:100vh}:fullscreen .grid.preview{max-width:1400px}:fullscreen .preview-card{min-height:calc(100vh - 100px)}:fullscreen .media{min-height:calc(100vh - 100px)}:fullscreen .body{max-height:calc(100vh - 100px)}
+    @media(max-width:760px){.shell{padding:8px}.head{align-items:stretch;flex-direction:column}.grid{grid-template-columns:1fr}.preview-card{display:block;min-height:0}.media{min-height:360px;aspect-ratio:4/5}.body{max-height:none}.image-row{grid-template-columns:72px minmax(0,1fr)}.thumb{width:72px}.overlay{font-size:20px}}
+  </style>
+</head>
+<body>
+  <main class="shell">
+    <header class="head"><div class="actions"><div class="segmented"><button data-mode="preview">预览</button><button data-mode="both">双栏</button><button data-mode="edit">编辑</button></div><button id="fullscreen" class="screen" type="button">全屏</button><button id="save" class="save">保存</button><span id="status" class="status"></span></div></header>
+    <section id="grid" class="grid">
+      <article id="preview" class="preview-card"><div id="mediaStage" class="media"><div id="media"></div><div id="overlay" class="overlay hidden"></div><div class="arrows"><button id="prev" aria-label="上一张">‹</button><button id="next" aria-label="下一张">›</button></div><div id="dots" class="dots"></div></div><div class="body"><div class="author"><span class="avatar">喵</span><span class="author-name">喵乘舰</span><button class="follow" type="button">关注</button></div><h1 id="previewTitle"></h1><p id="previewBody" class="copy"></p><p id="interaction" class="interaction"></p><div id="tags" class="tags"></div><div class="post-meta">刚刚 · 小红书</div><footer class="social"><span><b>♡</b> 赞</span><span><b>☆</b> 收藏</span><span><b>◯</b> 评论</span></footer></div></article>
+      <form id="form" class="form"><label class="field"><span>标题</span><input id="title" maxlength="160"></label><label class="field"><span>正文</span><textarea id="body"></textarea></label><label class="field"><span>互动文案</span><textarea id="interactionInput"></textarea></label><label class="field"><span>话题标签（空格分隔）</span><input id="hashtags"></label><label class="field"><span>审核备注</span><textarea id="review"></textarea></label><div class="images-head"><strong>配图</strong><div><button id="upload" class="upload" type="button">上传图片</button> <button id="add" class="upload" type="button">添加配图</button></div></div><input id="files" class="hidden" type="file" accept="image/*" multiple><div id="images"></div></form>
+    </section>
+  </main>
+  <script>
+    const initial=${serialize(artifact)};const apiUrl=${serialize(apiUrl)};let draft=clone(initial.payload||{}),active=0,saveTimer=0;const $=id=>document.getElementById(id);
+    const params=new URLSearchParams(location.search);const requestedTheme=params.get('theme');document.documentElement.dataset.theme=requestedTheme==='dark'?'dark':requestedTheme==='light'?'light':matchMedia('(prefers-color-scheme: dark)').matches?'dark':'light';
+    function clone(v){return JSON.parse(JSON.stringify(v))}function esc(v){return String(v??'').replace(/[&<>"']/g,c=>({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c]))}function tags(v){return [...new Set(String(v||'').split(/[\\s,，、]+/).filter(Boolean).map(x=>x.startsWith('#')?x:'#'+x))]}
+    function field(id,key){$(id).value=key==='hashtags'?(draft[key]||[]).join(' '):draft[key]||'';$(id).addEventListener('input',e=>{draft[key]=key==='hashtags'?tags(e.target.value):e.target.value;renderPreview();scheduleSave()})}
+    field('title','title');field('body','body');field('interactionInput','interaction');field('hashtags','hashtags');field('review','review');
+    function missingMedia(image){return '<div class="placeholder"><span class="placeholder-art">▧</span><strong>待添加配图</strong><small>'+esc(image?.caption||image?.note||'上传图片后将在这里预览')+'</small></div>'}function showMissingMedia(image){$('mediaStage').classList.add('image-missing');$('media').innerHTML=missingMedia(image);$('overlay').classList.add('hidden')}function renderPreview(){const images=draft.images||[];active=Math.max(0,Math.min(active,Math.max(0,images.length-1)));const image=images[active];$('previewTitle').textContent=draft.title||'未命名笔记';$('previewBody').textContent=draft.body||'';$('interaction').textContent=draft.interaction||'';$('tags').innerHTML=(draft.hashtags||[]).map(x=>'<span>'+esc(x)+'</span>').join('');$('mediaStage').classList.remove('image-missing');if(image?.url){$('media').innerHTML='<img src="'+esc(image.url)+'" alt="'+esc(image.caption||'配图')+'">';$('media').querySelector('img')?.addEventListener('error',()=>showMissingMedia(image),{once:true})}else{showMissingMedia(image)}$('overlay').textContent=image?.overlay||'';$('overlay').classList.toggle('hidden',!image?.overlay||$('mediaStage').classList.contains('image-missing'));$('prev').classList.toggle('hidden',images.length<2);$('next').classList.toggle('hidden',images.length<2);$('dots').textContent=images.length>1?(active+1)+' / '+images.length:''}
+    function renderImages(){const host=$('images'),images=draft.images||[];host.innerHTML=images.length?images.map((im,i)=>'<section class="image-row" data-index="'+i+'"><button class="thumb" type="button" data-pick="'+i+'">'+(im.url?'<img src="'+esc(im.url)+'" alt="">':'配图 '+(i+1))+'</button><div class="image-fields"><input data-key="url" value="'+esc(im.url)+'" placeholder="图片 URL"><input data-key="caption" value="'+esc(im.caption)+'" placeholder="图片说明"><input data-key="overlay" value="'+esc(im.overlay)+'" placeholder="画面文案"><textarea data-key="note" placeholder="备注">'+esc(im.note)+'</textarea><div class="row-actions"><button type="button" class="small" data-upload="'+i+'">上传替换</button><button type="button" class="small danger" data-remove="'+i+'">删除</button></div></div></section>').join(''):'<div class="empty">还没有配图</div>'}
+    $('images').addEventListener('input',e=>{const row=e.target.closest('[data-index]');if(!row||!e.target.dataset.key)return;draft.images[+row.dataset.index][e.target.dataset.key]=e.target.value;renderPreview();scheduleSave()});$('images').addEventListener('click',e=>{const pick=e.target.closest('[data-pick]');if(pick){active=+pick.dataset.pick;renderPreview()}const remove=e.target.closest('[data-remove]');if(remove){draft.images.splice(+remove.dataset.remove,1);renderImages();renderPreview();scheduleSave()}const upload=e.target.closest('[data-upload]');if(upload){$('files').dataset.target=upload.dataset.upload;$('files').click()}});
+    $('prev').onclick=()=>{active=(active-1+(draft.images||[]).length)%(draft.images||[]).length;renderPreview()};$('next').onclick=()=>{active=(active+1)%(draft.images||[]).length;renderPreview()};let wheelLock=0;$('mediaStage').addEventListener('wheel',e=>{const images=draft.images||[];if(images.length<2)return;e.preventDefault();const now=Date.now();if(now<wheelLock)return;wheelLock=now+320;const delta=Math.abs(e.deltaY)>=Math.abs(e.deltaX)?e.deltaY:e.deltaX;active=(active+(delta>=0?1:-1)+images.length)%images.length;renderPreview()},{passive:false});$('add').onclick=()=>{(draft.images||(draft.images=[])).push({url:'',caption:'配图 '+((draft.images?.length||0)+1),overlay:'',note:''});renderImages();scheduleSave()};$('upload').onclick=()=>{$('files').dataset.target='';$('files').click()};
+    $('files').onchange=async e=>{const files=[...e.target.files];e.target.value='';if(!files.length)return;setStatus('上传中…');try{const uploaded=[];for(const file of files){const data=await new Promise((resolve,reject)=>{const r=new FileReader;r.onload=()=>resolve(String(r.result).replace(/^data:[^,]*,/,''));r.onerror=()=>reject(r.error);r.readAsDataURL(file)});const res=await fetch('/api/uploads',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({name:file.name,mimeType:file.type,data})});const body=await res.json();if(!res.ok||!body.file?.url)throw new Error(body.error||'上传失败');uploaded.push({url:body.file.url,caption:file.name.replace(/\\.[^.]+$/,''),overlay:'',note:file.name})}const target=Number(e.target.dataset.target);if(e.target.dataset.target!==''&&draft.images[target]){draft.images[target]={...draft.images[target],...uploaded.shift()}}draft.images.push(...uploaded);renderImages();renderPreview();await save()}catch(err){setStatus(err.message||String(err),true)}};
+    function setMode(mode){localStorage.setItem('neoctl.plugin.xhs.mode.v2',mode);document.querySelectorAll('[data-mode]').forEach(b=>b.classList.toggle('active',b.dataset.mode===mode));$('grid').className='grid '+mode;$('preview').classList.toggle('hidden',mode==='edit');$('form').classList.toggle('hidden',mode==='preview');resize()}document.querySelectorAll('[data-mode]').forEach(b=>b.onclick=()=>setMode(b.dataset.mode));
+    $('fullscreen').onclick=async()=>{if(document.fullscreenElement)await document.exitFullscreen();else await document.documentElement.requestFullscreen()};document.addEventListener('fullscreenchange',()=>{$('fullscreen').textContent=document.fullscreenElement?'退出全屏':'全屏'});
+    function scheduleSave(){clearTimeout(saveTimer);saveTimer=setTimeout(save,600);setStatus('待保存')}function payload(){return{title:draft.title||'',body:draft.body||'',interaction:draft.interaction||'',hashtags:draft.hashtags||[],images:draft.images||[],review:draft.review||''}}async function save(){clearTimeout(saveTimer);$('save').disabled=true;setStatus('保存中…');try{const res=await fetch(apiUrl,{method:'PUT',headers:{'Content-Type':'application/json'},body:JSON.stringify({title:draft.title,payload:payload()})});const body=await res.json();if(!res.ok||body.error)throw new Error(body.error||'保存失败');draft=clone(body.artifact.payload);setStatus('已保存');renderPreview();renderImages()}catch(err){setStatus(err.message||String(err),true)}finally{$('save').disabled=false;resize()}}$('save').onclick=save;$('form').onsubmit=e=>e.preventDefault();function setStatus(v,error=false){$('status').textContent=v;$('status').style.color=error?'#ef4444':''}
+    function resize(){parent.postMessage({type:'neo-plugin-resource-resize',height:Math.min(1400,Math.max(480,document.documentElement.scrollHeight))},location.origin)}new ResizeObserver(resize).observe(document.body);renderPreview();renderImages();setMode(localStorage.getItem('neoctl.plugin.xhs.mode.v2')||'preview');
+  </script>
+</body>
+</html>`;
+}

package/plugins/xhs-artifact/index.mjs

@@ -0,0 +1,48 @@
+import path from 'node:path';
+import { createOpenXhsArtifactEditorTool, createReadXhsArtifactTool, serveXhsArtifact, XhsArtifactRegistry, xhsArtifactPresentation } from './artifacts.mjs';
+import { serveXhsEditorPage } from './editor-page.mjs';
+import { parseXhsArtifactToolOutput } from './xhs-artifact-contract.mjs';
+
+export function createPlugin(context) {
+  const configuredStorageDir = String(context.env.NEO_XHS_ARTIFACTS_DIR || '').trim();
+  const storageDir = configuredStorageDir
+    ? path.resolve(configuredStorageDir)
+    : path.join(context.appDataDir || path.join(context.pluginDir, '.data'), 'xhs-artifacts');
+  const registry = new XhsArtifactRegistry({ storageDir });
+  return {
+    tools: [
+      createOpenXhsArtifactEditorTool({ registry }),
+      createReadXhsArtifactTool({ registry }),
+    ],
+    presentToolResult({ toolName, output, ok, sessionId }) {
+      if (!ok) return undefined;
+      if (toolName === 'read_xhs_artifact') {
+        return { title: '读取小红书笔记', text: '已读取稿件。', presentationLevel: 'process' };
+      }
+      if (toolName !== 'open_xhs_artifact_editor') return undefined;
+      const artifact = parseXhsArtifactToolOutput(output);
+      return artifact ? xhsArtifactPresentation(artifact, sessionId) : undefined;
+    },
+    async route(req, res, url, helpers) {
+      if (!['GET', 'PUT'].includes(req.method || '') || !url.pathname.startsWith('/api/xhs-artifacts/')) return false;
+      const suffix = url.pathname.slice('/api/xhs-artifacts/'.length);
+      const editorMatch = /^([^/]+)\/editor$/.exec(suffix);
+      const id = decodeURIComponent(editorMatch?.[1] || suffix);
+      if (editorMatch) {
+        if (req.method !== 'GET') {
+          helpers.sendJson?.(res, { error: 'method not allowed' }, 405);
+          return true;
+        }
+        const artifact = registry.get(id, url.searchParams.get('sessionId') || undefined);
+        if (!artifact) {
+          helpers.sendJson?.(res, { error: 'artifact not found' }, 404);
+          return true;
+        }
+        serveXhsEditorPage(res, artifact, { sessionId: url.searchParams.get('sessionId') || undefined });
+        return true;
+      }
+      await serveXhsArtifact(registry, req, res, id, helpers.readJsonBody, url.searchParams.get('sessionId') || undefined);
+      return true;
+    },
+  };
+}

package/plugins/xhs-artifact/neo-plugin.json

@@ -0,0 +1,9 @@
+{
+  "protocol": "neo-plugin/v1",
+  "id": "xhs-artifact",
+  "name": "小红书编辑器",
+  "version": "1.0.0",
+  "entry": "index.mjs",
+  "defaultEnabled": true,
+  "description": "提供小红书稿件编辑器工具、持久化和 HTTP 访问能力。"
+}