netizen-cli 0.14.4__tar.gz → 0.15.0__tar.gz

{netizen_cli-0.14.4/netizen_cli.egg-info → netizen_cli-0.15.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: netizen-cli
-Version: 0.14.4
+Version: 0.15.0
 Summary: Use native Codex threads through a Feishu Channel.
 Requires-Python: <3.15,>=3.11
 Requires-Dist: h11==0.16.0

{netizen_cli-0.14.4 → netizen_cli-0.15.0}/README.md

@@ -37,8 +37,8 @@
   管理的原生会话执行，沿用运行主机上的工具和工作目录。
 - **边做边沟通。** 普通任务执行时继续发消息，可以补充条件或调整方向；也可以开启
   [过程卡](skills/netizen-user-guide/references/feedback-and-files.md#飞书中的运行反馈)查看进展。
-- **带上图片与讨论背景。** 支持图片、逐条引用，以及可选的
-  [群聊上下文](skills/netizen-user-guide/references/messages.md#发送消息引用与图片)。
+- **带上文件、图片与讨论背景。** 支持图片、逐条引用，以及可选的群聊上下文；
+  [文件附件](skills/netizen-user-guide/references/messages.md#图片与其他附件)先保存原件到本地，供 Agent 按需读取。
 - **取回本轮文件。** 完成后从回复卡片中按需发送有原生执行记录的文件；发送的是点击时
   的当前内容，详见[文件说明](skills/netizen-user-guide/references/feedback-and-files.md#查看和发送本轮文件)。
 - **保留上下文，另开一条讨论。** 用
@@ -171,10 +171,12 @@ Side 会在同一聊天中新建话题，可继续多轮讨论。它与原会话
 ## 管理与维护
 
 实例管理员可以通过 **Admin Web** 集中管理项目、会话、Side 话题、会话默认配置和定时任务，
-并在“系统维护”中查看安装信息或重启服务。发送 `/admin` 可获取当前实例的管理 URL
+会话列表支持关键词搜索、本页按项目分组和查看最近一轮回答；“系统管理”可配置提问时 @
+发起人（默认关闭），并查看、逐个删除输入附件。“系统维护”提供安装信息和服务重启。
+发送 `/admin` 可获取当前实例的管理 URL
 和根目录，无需创建会话。未指定端口时首次从 `8787` 起分配并保存，各实例独立监听；
 管理页使用飞书登录，并核对当前应用的管理员名单，命令不会返回凭据或免登录链接。
-Admin 是实例必备能力；管理员可在“系统管理 → 权限管理 → 管理员”中维护名单。
+Admin 是实例必备能力；管理员可在“系统管理 → 管理员”中维护名单。
 服务重启后需要重新登录。
 [访问方式](docs/deployment.md#配置与管理页访问)见部署文档。飞书登录与管理员维护描述
 当前源码行为，真人和平台验收尚未完成，见[验收状态](docs/deployment.md#admin-飞书登录与管理员维护验收)。
@@ -188,8 +190,10 @@ Admin 是实例必备能力；管理员可在“系统管理 → 权限管理
 - **共享环境。** 飞书应用的可用范围和群成员关系控制谁能访问；同一实例复用服务账号，
   不提供按用户或项目隔离的权限体系。Admin Web 面向受信内网，名单中的管理员权限相同。
 - **输入与输出。** 支持文本、普通图片和富文本图片，也可提供飞书 2.0 卡片、合并转发与转发话题作为
-  [背景材料](skills/netizen-user-guide/references/messages.md#卡片合并转发与转发话题)。材料内部的媒体只提供未读附件描述；直接文件和音视频仍不支持。
-  飞书 1.0 卡片明确不支持。
+  [背景材料](skills/netizen-user-guide/references/messages.md#卡片合并转发与转发话题)。当前消息和准确逐条引用中的普通文件
+  可下载为输入原件；任一文件准备失败则整条输入不提交。补充历史、卡片和合并转发内部的
+  普通文件只提供附件描述。文件夹、音视频和飞书 1.0 卡片不支持。
+  输入原件可在 Admin 清理，删除可能影响正在执行或后续任务读取。
   输出文件按本轮原生记录发现，不扫描工作区补齐，也不自动上传。
 - **Codex 能力有宿主差异。** 飞书复用原生会话和工具，但并非每个 App/CLI 控件都可用；
   全新会话采用 `auto_review`，持久分支沿用原生继承权限；不提供 App 的 Ask/Custom 选择器。

{netizen_cli-0.14.4 → netizen_cli-0.15.0}/config.example.yaml

@@ -33,6 +33,12 @@ sessionTools:
     mode: all
     chatIds: []
 
+# Independent instance-wide mentions on each new native question card.
+# Admin -> System -> Question notifications can change this at runtime.
+# Existing cards are not mentioned again; progress/completion settings are independent.
+questionNotifications:
+  mentionInitiator: false
+
 # Required management UI, using this app's Feishu administrator identities.
 # It listens on all interfaces for direct access inside the trusted private network.
 adminWeb:

{netizen_cli-0.14.4 → netizen_cli-0.15.0}/netizen_cli/__init__.py

@@ -1,3 +1,3 @@
 """Netizen: a thin Feishu Channel for native Codex Threads."""
 
-__version__ = "0.14.4"
+__version__ = "0.15.0"

netizen_cli-0.15.0/netizen_cli/admin/file_previews.py

@@ -0,0 +1,205 @@
+"""Bounded, inert Markdown previews for the authenticated Project file browser."""
+
+from __future__ import annotations
+
+from collections.abc import Callable, Iterator, Sequence
+from urllib.parse import unquote, urlsplit
+
+from markdown_it import MarkdownIt
+from markdown_it.token import Token
+
+
+MAX_MARKDOWN_BYTES = 256 * 1024
+MAX_PREVIEW_BYTES = 1024 * 1024
+MAX_MARKDOWN_TOKENS = 20_000
+MAX_MARKDOWN_IMAGES = 8
+
+_MARKDOWN = MarkdownIt("commonmark", {
+    "html": False,
+    "linkify": False,
+    "maxNesting": 20,
+})
+
+
+class PreviewUnavailable(ValueError):
+    """The source remains viewable, but its rendered preview exceeds a budget."""
+
+
+def _unsafe_characters(value: str) -> bool:
+    return "\\" in value or any(
+        ord(char) < 32 or 127 <= ord(char) <= 159 for char in value
+    )
+
+
+def _local_path(value: str, directory: list[str]) -> str | None:
+    if value.startswith("/") or _unsafe_characters(value):
+        return None
+    parts = directory.copy()
+    for part in value.split("/"):
+        if part.casefold() == ".git":
+            return None
+        if part in ("", "."):
+            continue
+        if part == "..":
+            if not parts:
+                return None
+            parts.pop()
+        else:
+            parts.append(part)
+    return "/".join(parts)
+
+
+def _target(value: str, directory: list[str]) -> tuple[str, str] | None:
+    """Classify decoded URLs without allowing another decoding pass to change them."""
+    if _unsafe_characters(value):
+        return None
+    try:
+        decoded = unquote(value, errors="strict")
+        if _unsafe_characters(decoded) or unquote(decoded, errors="strict") != decoded:
+            return None
+        parts = urlsplit(value)
+        decoded_parts = urlsplit(decoded)
+        # Decoding may reveal an unsafe scheme or authority, but encoded # and
+        # ? in a local filename must not become URL separators.
+        if decoded_parts.scheme != parts.scheme or decoded_parts.netloc != parts.netloc:
+            return None
+    except (UnicodeError, ValueError):
+        return None
+    if parts.scheme:
+        if parts.scheme not in {"http", "https", "mailto"}:
+            return None
+        if parts.scheme in {"http", "https"} and not parts.netloc:
+            return None
+        if parts.scheme == "mailto" and not parts.path:
+            return None
+        return "external", value
+    if parts.netloc or parts.query or not parts.path:
+        # Headings deliberately have no ids. Pure fragments cannot navigate the
+        # containing Admin document; file fragments open that file from the top.
+        return None
+    local_path = unquote(parts.path, errors="strict")
+    if (relative := _local_path(local_path, directory)) is None:
+        return None
+    directory_hint = local_path.endswith("/") or local_path.rsplit("/", 1)[-1] in {".", ".."}
+    return "directory" if directory_hint else "local", relative
+
+
+def _tokens(tokens: Sequence[Token]) -> Iterator[Token]:
+    for token in tokens:
+        yield token
+        if token.children:
+            yield from _tokens(token.children)
+
+
+def _replace_image(token: Token, reason: str) -> None:
+    label = " ".join(_image_alt(token.children or []).split())[:120] or "图片"
+    token.type, token.tag = "text", ""
+    token.content = f"〔图片：{label}；{reason}〕"
+    token.attrs, token.children = {}, None
+
+
+def _image_alt(tokens: Sequence[Token]) -> str:
+    # markdown-it-py's default image alt renderer omits text_special/code_inline.
+    # Flatten those parsed tokens to plain text so entities and code stay visible,
+    # and nested Markdown images never become independent resource requests.
+    parts: list[str] = []
+    for token in tokens:
+        if token.type in {"text", "text_special", "code_inline"}:
+            parts.append(token.content)
+        elif token.type in {"softbreak", "hardbreak"}:
+            parts.append("\n")
+        elif token.children:
+            parts.append(_image_alt(token.children))
+    return "".join(parts)
+
+
+def _escaped_bytes(value: str) -> int:
+    return (
+        len(value.encode("utf-8"))
+        + value.count("&") * 4
+        + value.count('"') * 5
+        + (value.count("<") + value.count(">")) * 3
+    )
+
+
+def _check_render_budget(tokens: Sequence[Token]) -> None:
+    # A conservative upper bound before rendering also limits reference-link
+    # amplification: many small [x] uses can share a very long URL/title. Count
+    # inline source and image children too rather than underestimate HTML output.
+    size = 0
+    for token in _tokens(tokens):
+        size += 64 + 2 * len(token.tag) + _escaped_bytes(token.content)
+        size += _escaped_bytes(token.info)
+        for key, value in token.attrs.items():
+            size += len(key) + 4 + _escaped_bytes(str(value))
+        if size > MAX_PREVIEW_BYTES:
+            raise PreviewUnavailable("Markdown 预览内容过大，请查看源码。")
+
+
+def render_markdown(
+    text: str,
+    *,
+    path: str,
+    image_url: Callable[[str], str],
+) -> str:
+    """Render safe HTML; image_url maps a root-relative file to its Admin endpoint.
+
+    Local links carry ``data-file-browser-path`` for the file browser to intercept;
+    the empty path identifies its root. Explicit directory targets additionally
+    carry ``data-file-browser-directory="true"``.
+    Remote images and fragment-only links remain inert. No filesystem or network
+    access occurs here; the file endpoint separately validates image contents.
+    """
+    try:
+        length = len(text.encode("utf-8"))
+    except UnicodeError as exc:
+        raise PreviewUnavailable("文件包含无法预览的文本编码，请查看源码。") from exc
+    if length > MAX_MARKDOWN_BYTES:
+        raise PreviewUnavailable("Markdown 文件超过 256 KiB，请查看源码。")
+    if not path or _local_path(path, []) != path:
+        raise PreviewUnavailable("Markdown 文件路径无效，请查看源码。")
+    directory = path.split("/")[:-1]
+    env: dict[str, object] = {}
+    tokens = _MARKDOWN.parse(text, env)
+    if sum(1 for _ in _tokens(tokens)) > MAX_MARKDOWN_TOKENS:
+        raise PreviewUnavailable("Markdown 内容过于复杂，请查看源码。")
+    _check_render_budget(tokens)
+
+    images = 0
+    for token in _tokens(tokens):
+        if token.type == "link_open":
+            target = _target(token.attrGet("href") or "", directory)
+            token.attrs.pop("href", None)
+            if target is None:
+                continue
+            kind, value = target
+            if kind == "external":
+                token.attrSet("href", value)
+                token.attrSet("rel", "noopener noreferrer")
+                token.attrSet("target", "_blank")
+            else:
+                token.attrSet("href", "#")
+                token.attrSet("data-file-browser-path", value)
+                if kind == "directory":
+                    token.attrSet("data-file-browser-directory", "true")
+        elif token.type == "image":
+            target = _target(token.attrGet("src") or "", directory)
+            if target is None or target[0] != "local":
+                _replace_image(token, "仅预览当前根目录内的相对路径图片")
+            elif images >= MAX_MARKDOWN_IMAGES:
+                _replace_image(token, "本页最多预览 8 张图片")
+            else:
+                token.children = [Token(
+                    "text", "", 0, content=_image_alt(token.children or []),
+                )]
+                token.attrSet("src", image_url(target[1]))
+                token.attrSet("loading", "lazy")
+                token.attrSet("decoding", "async")
+                token.attrSet("referrerpolicy", "no-referrer")
+                images += 1
+
+    _check_render_budget(tokens)
+    rendered = _MARKDOWN.renderer.render(tokens, _MARKDOWN.options, env)
+    if len(rendered.encode("utf-8")) > MAX_PREVIEW_BYTES:
+        raise PreviewUnavailable("Markdown 预览内容过大，请查看源码。")
+    return rendered

{netizen_cli-0.14.4 → netizen_cli-0.15.0}/netizen_cli/admin/static/admin.css

@@ -20,7 +20,9 @@ body.time-range-modal-open { overflow: hidden; }
 button, input, select, textarea { font: inherit; }
 button { cursor: pointer; }
 .topbar { display: flex; justify-content: space-between; align-items: center; gap: 24px; padding: 12px clamp(20px, 4vw, 56px); background: #10213f; color: white; }
-.topbar-brand { flex: 1; min-width: 0; }
+.topbar-brand { display: flex; align-items: center; gap: 12px; flex: 1; min-width: 0; }
+.topbar-brand-text { min-width: 0; }
+.brand-logo { display: block; flex: none; }
 .topbar h1 { font-size: 24px; line-height: 1.2; }
 .topbar .instance-root { margin: 4px 0 0; line-height: 1.4; }
 .topbar .identity-toolbar { flex-wrap: nowrap; max-width: 50%; }
@@ -203,6 +205,7 @@ button:focus-visible, input:focus-visible, select:focus-visible { outline: 3px s
 .login-body { min-height: 100vh; min-height: 100svh; display: grid; place-items: center; padding: clamp(12px, 3vw, 24px); }
 .login-card { width: min(420px, 100%); min-width: 0; margin: 0; padding: clamp(20px, 5vw, 28px); border: 1px solid var(--line); border-radius: 14px; background: var(--paper); box-shadow: 0 8px 28px rgb(23 39 68 / 6%); font-size: 14px; line-height: 1.6; }
 .login-heading h1 { font-size: 28px; line-height: 1.2; }
+.login-heading .brand-logo { margin-bottom: 12px; }
 .login-heading p { margin: 8px 0 0; color: var(--muted); font-size: 13px; }
 .login-instance { margin: 20px 0; padding: 10px 12px; border-radius: 8px; background: var(--wash); }
 .login-instance > span { color: var(--muted); font-size: 12px; }
@@ -244,6 +247,8 @@ button:focus-visible, input:focus-visible, select:focus-visible { outline: 3px s
 body.schedule-drawer-open, body.defaults-drawer-open, body.session-settings-drawer-open, body.workspace-drawer-open { overflow: hidden; }
 .editor-drawer { position: fixed; inset: 0 0 0 auto; margin: 0; padding: 0; width: min(720px, 100vw); max-width: 100vw; height: 100dvh; max-height: 100dvh; border: 0; color: var(--ink); background: var(--paper); box-shadow: -12px 0 40px rgb(23 39 68 / 16%); }
 .editor-drawer::backdrop { background: rgb(16 33 63 / 35%); }
+.rename-dialog { width: min(520px, calc(100vw - 32px)); padding: 0; border: 0; border-radius: 12px; color: var(--ink); background: var(--paper); box-shadow: 0 12px 40px rgb(23 39 68 / 16%); }
+.rename-dialog::backdrop { background: rgb(16 33 63 / 35%); }
 #schedule-editor { height: 100%; display: flex; flex-direction: column; border: 0; border-radius: 0; padding: 0; margin: 0; }
 .schedule-editor-head { display: flex; align-items: center; justify-content: space-between; gap: 16px; padding: 22px 24px; border-bottom: 1px solid var(--line); }
 .schedule-editor-head h3 { margin: 0; font-size: 22px; }
@@ -464,3 +469,8 @@ body.schedule-detail-open { overflow: hidden; }
   .topbar-brand { flex-basis: 100%; }
   .topbar .identity-toolbar { max-width: 100%; justify-content: flex-start; }
 }
+
+.session-layout { display: flex; align-items: center; flex-wrap: wrap; gap: 12px; margin: 12px 0; }
+.session-layout label { display: flex; align-items: center; gap: 8px; }
+.session-project-group th { background: var(--wash); font-weight: 600; }
+.session-answer-content { white-space: pre-wrap; overflow-wrap: anywhere; font-family: inherit; line-height: 1.65; }