weflow-cli 1.6.1 → 1.6.2

package/scripts/watch_issues.py

@@ -0,0 +1,212 @@
+#!/usr/bin/env python3
+"""Watch a GitHub repo's issues and email new activity.
+
+Meant to run from Windows Task Scheduler rather than from an editor session, so
+notifications arrive whether or not anything else is running.
+
+Credentials are read from outside the repository:
+
+    ~/.weflow-issue-watch.json
+    {
+      "smtp_user": "1473517806@qq.com",
+      "smtp_auth": "<QQ 邮箱 SMTP 授权码，不是登录密码>",
+      "mail_to":   "1473517806@qq.com",
+      "repo":      "zhuobichen/weflow-cli"
+    }
+
+Only `smtp_auth` is required; the rest default to the values above. The file is
+never written by this script and never belongs in the repo.
+
+First run seeds the state file without sending anything, so a fresh install does
+not mail the entire issue history.
+"""
+import json
+import os
+import smtplib
+import subprocess
+import sys
+from email.header import Header
+from email.mime.text import MIMEText
+from email.utils import formataddr
+
+CONFIG_PATH = os.path.join(os.path.expanduser('~'), '.weflow-issue-watch.json')
+STATE_PATH = os.path.join(os.path.expanduser('~'), '.weflow-issue-watch-state.json')
+
+DEFAULTS = {
+    'repo': 'zhuobichen/weflow-cli',
+    'smtp_host': 'smtp.qq.com',
+    'smtp_port': 465,
+    'smtp_user': '1473517806@qq.com',
+    'mail_to': '1473517806@qq.com',
+}
+
+
+def load_config():
+    config = dict(DEFAULTS)
+    try:
+        with open(CONFIG_PATH, encoding='utf-8') as handle:
+            config.update(json.load(handle))
+    except (OSError, ValueError):
+        pass
+    if os.environ.get('WEFLOW_SMTP_AUTH'):
+        config['smtp_auth'] = os.environ['WEFLOW_SMTP_AUTH']
+    return config
+
+
+# Task Scheduler starts with a thinner PATH than an interactive shell, so `gh`
+# is not always resolvable by name there.
+GH_CANDIDATES = ['gh', r'C:\Program Files\GitHub CLI\gh.exe']
+
+
+def _runnable(candidate):
+    if os.sep in candidate:
+        return os.path.isfile(candidate)
+    from shutil import which
+    return which(candidate) is not None
+
+
+def gh(args):
+    """Run `gh` and parse its JSON output, or None when it fails."""
+    executable = next((c for c in GH_CANDIDATES if _runnable(c)), GH_CANDIDATES[0])
+    try:
+        result = subprocess.run(
+            [executable, *args], capture_output=True, timeout=60, encoding='utf-8')
+    except (OSError, subprocess.SubprocessError):
+        return None
+    if result.returncode != 0 or not result.stdout.strip():
+        return None
+    try:
+        return json.loads(result.stdout)
+    except ValueError:
+        return None
+
+
+def fetch_activity(repo, since_issue=0):
+    """(issues, comments) newer than what has already been reported.
+
+    Comments are fetched per issue rather than from the repo-wide endpoint so an
+    issue that is merely edited does not look like new activity.
+    """
+    issues = gh(['api', f'repos/{repo}/issues?state=all&sort=created&direction=desc&per_page=30'])
+    if issues is None:
+        return None, None
+
+    new_issues = [i for i in issues if not i.get('pull_request') and i['number'] > since_issue]
+    comments = []
+    # Only the busiest recent issues can have new replies; 30 is plenty.
+    for issue in issues:
+        if issue.get('pull_request'):
+            continue
+        rows = gh(['api', f'repos/{repo}/issues/{issue["number"]}/comments?per_page=100'])
+        if not rows:
+            continue
+        for row in rows:
+            if row['user']['login'] != 'zhuobichen':
+                comments.append({
+                    'issue': issue['number'],
+                    'title': issue['title'],
+                    'id': row['id'],
+                    'author': row['user']['login'],
+                    'body': row['body'],
+                })
+    return new_issues, comments
+
+
+def load_state():
+    try:
+        with open(STATE_PATH, encoding='utf-8') as handle:
+            return json.load(handle)
+    except (OSError, ValueError):
+        return None
+
+
+def save_state(state):
+    try:
+        with open(STATE_PATH, 'w', encoding='utf-8') as handle:
+            json.dump(state, handle, ensure_ascii=False, indent=2)
+    except OSError:
+        pass
+
+
+def send_mail(config, subject, body):
+    message = MIMEText(body, 'plain', 'utf-8')
+    message['Subject'] = Header(subject, 'utf-8')
+    message['From'] = formataddr(('WeFlow Issue Watch', config['smtp_user']))
+    message['To'] = config['mail_to']
+    with smtplib.SMTP_SSL(config['smtp_host'], config['smtp_port'], timeout=30) as server:
+        server.login(config['smtp_user'], config['smtp_auth'])
+        server.sendmail(config['smtp_user'], [config['mail_to']], message.as_string())
+
+
+def main():
+    config = load_config()
+    if not config.get('smtp_auth'):
+        print(f'未配置邮件授权码，跳过。请创建 {CONFIG_PATH}，填入 smtp_auth。')
+        return 0
+
+    repo = config['repo']
+    state = load_state()
+    issues = gh(['api', f'repos/{repo}/issues?state=all&sort=created&direction=desc&per_page=30'])
+    if issues is None:
+        print('无法访问 GitHub（gh 未登录或网络不通），本次跳过。')
+        return 0
+
+    # Seed on first run: remember what exists, send nothing.
+    if state is None:
+        highest = max([i['number'] for i in issues if not i.get('pull_request')] or [0])
+        seen_comments = []
+        for issue in issues:
+            if issue.get('pull_request'):
+                continue
+            rows = gh(['api', f'repos/{repo}/issues/{issue["number"]}/comments?per_page=100']) or []
+            seen_comments.extend(r['id'] for r in rows if r['user']['login'] != 'zhuobichen')
+        save_state({'last_issue': highest, 'seen_comments': seen_comments})
+        print(f'首次运行，已记录基线（最新 issue #{highest}，{len(seen_comments)} 条历史回复），不发送邮件。')
+        return 0
+
+    new_issues, comments = fetch_activity(repo, state.get('last_issue', 0))
+    if new_issues is None:
+        return 0
+
+    seen = set(state.get('seen_comments', []))
+    fresh = [c for c in comments if c['id'] not in seen]
+
+    if not new_issues and not fresh:
+        print('无新动态。')
+        return 0
+
+    lines = []
+    for issue in new_issues:
+        lines.append(f'【新 issue】#{issue["number"]} {issue["title"]}')
+        lines.append(f'  来自: {issue["user"]["login"]}')
+        lines.append(f'  {issue["html_url"]}')
+        lines.append('')
+    for comment in fresh:
+        lines.append(f'【新回复】#{comment["issue"]} {comment["title"]}')
+        lines.append(f'  来自: {comment["author"]}')
+        lines.append('  ' + comment['body'][:600].replace('\n', '\n  '))
+        lines.append(f'  https://github.com/{repo}/issues/{comment["issue"]}')
+        lines.append('')
+
+    body = '\n'.join(lines)
+    summary = []
+    if new_issues:
+        summary.append(f'{len(new_issues)} 个新 issue')
+    if fresh:
+        summary.append(f'{len(fresh)} 条新回复')
+    try:
+        send_mail(config, f'[WeFlow] {" / ".join(summary)}', body)
+    except Exception as error:
+        # Leave the state untouched so the next run retries instead of
+        # silently swallowing the notification.
+        print(f'发送失败，本次不记录状态，下次重试: {type(error).__name__}: {error}')
+        return 1
+
+    highest = max([i['number'] for i in issues if not i.get('pull_request')] + [state.get('last_issue', 0)])
+    save_state({'last_issue': highest, 'seen_comments': list(seen | {c['id'] for c in fresh})})
+    print(f'已发送通知：{" / ".join(summary)}')
+    return 0
+
+
+if __name__ == '__main__':
+    sys.exit(main())

package/scripts/watch_mail.py

@@ -0,0 +1,131 @@
+#!/usr/bin/env python3
+"""Queue instructions the user sends to the agent mailbox.
+
+A pure script - no model, no tokens. It runs from Windows Task Scheduler and
+its only job is to notice new mail from an allowlisted sender and append it to
+a local queue file. Acting on those instructions happens later, from a normal
+session, which is when a model is running anyway.
+
+That split matters: waking a model every few minutes just to discover there is
+no mail costs tokens for nothing. This script does the waiting for free.
+
+    ~/.weflow-mail-queue.jsonl   one JSON object per pending instruction
+    ~/.weflow-mail-state.json    message ids already queued
+
+Only mail whose From address is exactly the allowlisted one is ever read or
+queued. Mail from anyone else is left untouched - not read, not marked, not
+queued.
+"""
+import json
+import os
+import subprocess
+import sys
+
+STATE_PATH = os.path.join(os.path.expanduser('~'), '.weflow-mail-state.json')
+QUEUE_PATH = os.path.join(os.path.expanduser('~'), '.weflow-mail-queue.jsonl')
+
+# Exact address, not a display name: a sender name can say anything.
+ALLOWED_SENDERS = {'1473517806@qq.com'}
+
+AGENTLY_CANDIDATES = [
+    # The npm shim is a .cmd on Windows; subprocess needs the extension spelled
+    # out, since a bare `agently-cli` is not an executable image.
+    r'C:\Users\Administrator\AppData\Roaming\npm\agently-cli.cmd',
+    'agently-cli.cmd',
+    'agently-cli',
+]
+
+
+def _runnable(candidate):
+    if os.path.isabs(candidate):
+        return os.path.isfile(candidate)
+    from shutil import which
+    return which(candidate) is not None
+
+
+def agently(args):
+    """Run agently-cli and return its parsed JSON, or None."""
+    executable = next((c for c in AGENTLY_CANDIDATES if _runnable(c)), None)
+    if not executable:
+        print('未找到 agently-cli，跳过。')
+        return None
+    try:
+        result = subprocess.run(
+            [executable, *args], capture_output=True, timeout=90, encoding='utf-8')
+    except (OSError, subprocess.SubprocessError) as error:
+        print(f'agently-cli 调用失败: {type(error).__name__}')
+        return None
+    # agently-cli pretty-prints its JSON across many lines, so parse the whole
+    # payload from the first brace rather than looking for a single-line blob.
+    text = result.stdout.strip()
+    start = text.find('{')
+    if start < 0:
+        return None
+    try:
+        return json.JSONDecoder().raw_decode(text[start:])[0]
+    except ValueError:
+        return None
+
+
+def load_json(path, fallback):
+    try:
+        with open(path, encoding='utf-8') as handle:
+            return json.load(handle)
+    except (OSError, ValueError):
+        return fallback
+
+
+def main():
+    state = load_json(STATE_PATH, {'seen': []})
+    seen = set(state.get('seen', []))
+
+    listing = agently(['message', '+list', '--limit', '20'])
+    if not listing or not listing.get('ok'):
+        print('读取邮箱失败（未授权或网络不通），本次跳过。')
+        return 0
+
+    messages = (listing.get('data') or {}).get('data') or []
+    queued = 0
+    for summary in messages:
+        sender = (summary.get('from') or {}).get('email', '')
+        if sender not in ALLOWED_SENDERS:
+            continue
+        message_id = summary.get('message_id', '')
+        if not message_id or message_id in seen:
+            continue
+
+        detail = agently(['message', '+read', '--id', message_id])
+        body = ''
+        if detail and detail.get('ok'):
+            body = ((detail.get('data') or {}).get('text')
+                    or (detail.get('data') or {}).get('body') or '')
+        if not body:
+            body = summary.get('snippet', '')
+
+        entry = {
+            'message_id': message_id,
+            'from': sender,
+            'subject': summary.get('subject', ''),
+            'created_at': summary.get('created_at', ''),
+            'body': body,
+        }
+        with open(QUEUE_PATH, 'a', encoding='utf-8') as handle:
+            handle.write(json.dumps(entry, ensure_ascii=False) + '\n')
+        seen.add(message_id)
+        queued += 1
+
+    if queued:
+        with open(STATE_PATH, 'w', encoding='utf-8') as handle:
+            json.dump({'seen': sorted(seen)}, handle, ensure_ascii=False, indent=2)
+        print(f'已排队 {queued} 封来自授权发件人的邮件。')
+    else:
+        # Still persist first-run state so the backlog is not queued later.
+        if not os.path.exists(STATE_PATH):
+            with open(STATE_PATH, 'w', encoding='utf-8') as handle:
+                json.dump({'seen': sorted(seen)}, handle, ensure_ascii=False, indent=2)
+        print('无新指令邮件。')
+    return 0
+
+
+if __name__ == '__main__':
+    sys.exit(main())

package/src/core/ntCore.ts

@@ -119,6 +119,10 @@ export class NtCore {
           WEFLOW_DB_PATH: values.dbPath,
           WEFLOW_NT_KEY: values.key,
           WEFLOW_NT_SALT: values.salt,
+          // WeChat rolls conversations into new message_*.db shards, each with
+          // a key PBKDF2-derived from this shared passphrase. Without it only
+          // shard 0 opens, and every read silently stops at its last write.
+          WEFLOW_NT_PASSPHRASE: (configService.get('favPassphrase') || configService.get('decryptKey') || '') || undefined,
           WEFLOW_CONTACT_DB: values.contactDbPath || undefined,
           WEFLOW_CONTACT_KEY: values.contactKey || undefined,
           WEFLOW_CONTACT_SALT: values.contactSalt || undefined,

package/src/services/chatService.ts

@@ -388,11 +388,20 @@ export class ChatService {
 
   /** 当前连接是否支持收藏查询 */
   isFavSupported(): boolean {
-    if (!this.connected || this.activeVersion !== '4.x' || !this.ntCore) return false
-    const favPath = configService.get('favDbPath')
-    const favKey = configService.get('favKey')
-    const favPass = configService.get('favPassphrase')
-    return !!(favPath && (favKey || favPass))
+    return this.favUnavailableReason() === null
+  }
+
+  /**
+   * 收藏不可用的具体原因, null 表示可用。
+   *
+   * 旧实现把「通道不对」和「没配密钥」压成一个 false, 于是没配 favKey 时报的是
+   * 「需 4.x NT 连接」—— 与用户实际看到的状态(4.x 已连接)矛盾, 也指错了修改方向。
+   */
+  favUnavailableReason(): 'channel' | 'path' | 'key' | null {
+    if (!this.connected || this.activeVersion !== '4.x' || !this.ntCore) return 'channel'
+    if (!configService.get('favDbPath')) return 'path'
+    if (!configService.get('favKey') && !configService.get('favPassphrase')) return 'key'
+    return null
   }
 
   /** 解析收藏密钥: 优先 favKey, 其次从 favPassphrase + 库 salt 派生 */

package/src/services/exportService.ts

@@ -150,6 +150,10 @@ export class ExportService {
           // hundred of them costs minutes in PIL.
           WEFLOW_FULL_IMAGES: options.fullImages ? '1' : undefined,
           WEFLOW_EXPORT_DATE: date || undefined,
+          // Without this the Python path exported the entire history: `--limit`
+          // only ever reached the fallback renderer, so a capped export of a
+          // busy group silently produced hundreds of files.
+          WEFLOW_EXPORT_LIMIT: limit > 0 ? String(limit) : undefined,
         }),
       })
 
@@ -205,7 +209,12 @@ export class ExportService {
 
   async exportExcel(talker: string, outputDir: string, limit = 0, from?: number, to?: number): Promise<ExportResult> {
     try {
-      const ExcelJS = await import('exceljs')
+      // exceljs is CJS-only, so a dynamic import hands back a namespace whose
+      // only member is `default`. `new ExcelJS.Workbook()` on the namespace
+      // itself is a TypeError, which the catch below used to swallow into a
+      // bare "Excel 导出失败".
+      const mod: any = await import('exceljs')
+      const ExcelJS = mod.default ?? mod
       const messages = await chatService.getMessagesInRange(talker, limit, from, to)
       if (messages.length === 0) {
         return { success: false, error: '未找到消息' }
@@ -236,8 +245,11 @@ export class ExportService {
       const filePath = join(dir, `${talker}_messages.xlsx`)
       await workbook.xlsx.writeFile(filePath)
       return { success: true, path: filePath, count: messages.length }
-    } catch {
-      return { success: false, error: 'Excel 导出失败' }
+    } catch (e: any) {
+      // Keep the reason: a bare label turned a one-line library error into an
+      // undiagnosable "export failed" for both users and agents.
+      const reason = e?.message ? `: ${String(e.message).slice(0, 200)}` : ''
+      return { success: false, error: `Excel 导出失败${reason}` }
     }
   }
 

package/src/utils/pythonProcessEnv.ts

@@ -34,12 +34,28 @@ export function createPythonProcessEnv(
   return env
 }
 
+/**
+ * Last non-empty stderr line, with anything key-shaped redacted.
+ *
+ * The scripts report the actual cause on stderr ("缺少公众号数据库密钥: ..."),
+ * and discarding it left operators with a bare exit code to search for.
+ */
+function stderrTail(stderr: unknown): string {
+  const text = typeof stderr === 'string'
+    ? stderr
+    : Buffer.isBuffer(stderr) ? stderr.toString('utf8') : ''
+  const lines = text.split('\n').map(line => line.trim()).filter(Boolean)
+  const line = lines[lines.length - 1] || ''
+  return line.replace(/\b[0-9a-fA-F]{32,}\b/g, '<已隐藏>').slice(0, 200)
+}
+
 export function safeSubprocessError(error: unknown, label = '子进程执行失败'): string {
-  const value = error as { code?: unknown; killed?: boolean; signal?: unknown }
+  const value = error as { code?: unknown; killed?: boolean; signal?: unknown; stderr?: unknown }
   if (value?.code === 'ENOENT') return `${label}: 运行时或命令不可用`
   if (value?.code === 'ETIMEDOUT' || value?.killed || value?.signal) return `${label}: 执行超时或被终止`
   if (typeof value?.code === 'number' || /^\d+$/.test(String(value?.code || ''))) {
-    return `${label} (exit ${String(value.code)})`
+    const detail = stderrTail(value?.stderr)
+    return `${label} (exit ${String(value.code)})${detail ? `: ${detail}` : ''}`
   }
   return label
 }