mirror of
https://github.com/hansjone/dsh-im-ops.git
synced 2026-10-09 01:53:21 +08:00
oliver
6107692418
connection.rpc.handle looks up webServer on a Cordis fiber that does not inject it, so channel routes never registered after host restart. Co-authored-by: Cursor <cursoragent@cursor.com>
238 lines
11 KiB
JavaScript
238 lines
11 KiB
JavaScript
import QRCode from 'qrcode';
|
|
import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from '../shared/context-enhancement-rpc.mjs';
|
|
import { SET_ACCESS_POLICY_ENDPOINT, validAccessPolicyPayload } from '../shared/access-policy-rpc.mjs';
|
|
import { SET_GROUP_SESSION_SCOPE_ENDPOINT, validGroupSessionScopePayload } from '../shared/group-session-scope-rpc.mjs';
|
|
import { resolveRpcAuthority } from '../../rpc-authority.mjs';
|
|
import { installConnectionRpcChannel } from '../../connection-rpc-mount.mjs';
|
|
import { publicWorkspaceError, SET_WORKSPACE_ENDPOINT, validWorkspacePayload } from '../shared/workspace-rpc.mjs';
|
|
import { SET_AGENT_PRESET_ENDPOINT, validAgentPresetPayload } from '../shared/agent-preset-rpc.mjs';
|
|
import {
|
|
connectionTestTargetUnavailable,
|
|
publicConnectionTestResult,
|
|
} from '../../../../src/channels/shared/connection-test.mjs';
|
|
|
|
export const WECOM_RPC_CHANNEL = '/wecom';
|
|
export const WECOM_ENDPOINTS = Object.freeze({
|
|
status: 'connection.status',
|
|
beginProvisioning: 'provision.begin',
|
|
pollProvisioning: 'provision.poll',
|
|
cancelProvisioning: 'provision.cancel',
|
|
bindCredentials: 'bot.bind-credentials',
|
|
reconnectBot: 'bot.reconnect',
|
|
deleteBot: 'bot.delete',
|
|
setWorkspace: SET_WORKSPACE_ENDPOINT,
|
|
setAgentPreset: SET_AGENT_PRESET_ENDPOINT,
|
|
setContextEnhancement: SET_CONTEXT_ENHANCEMENT_ENDPOINT,
|
|
setAccessPolicy: SET_ACCESS_POLICY_ENDPOINT,
|
|
setGroupSessionScope: SET_GROUP_SESSION_SCOPE_ENDPOINT,
|
|
});
|
|
export const WECOM_RPC_ENDPOINTS = Object.freeze(Object.values(WECOM_ENDPOINTS));
|
|
|
|
const FORBIDDEN_PUBLIC_KEYS = new Set([
|
|
'secret', 'secretRef', 'scode', 'remoteBotId', 'verificationUrl', 'bot_info', 'botid',
|
|
]);
|
|
|
|
function isRecord(value) {
|
|
return value !== null && typeof value === 'object' && !Array.isArray(value);
|
|
}
|
|
|
|
function exactKeys(value, allowed) {
|
|
return isRecord(value) && Object.keys(value).every((key) => allowed.includes(key));
|
|
}
|
|
|
|
function validId(value) {
|
|
return typeof value === 'string' && /^[A-Za-z0-9_-]{1,128}$/.test(value);
|
|
}
|
|
|
|
function validCredential(value, maxLength) {
|
|
return typeof value === 'string' && value.trim().length > 0 && value.length <= maxLength;
|
|
}
|
|
|
|
function payloadFailure(endpoint, payload) {
|
|
if (!isRecord(payload)) return 'Payload must be an object.';
|
|
if (endpoint === WECOM_ENDPOINTS.status) return exactKeys(payload, []) ? null : 'connection.status does not accept fields.';
|
|
if (endpoint === WECOM_ENDPOINTS.beginProvisioning) {
|
|
return exactKeys(payload, ['locale']) && (payload.locale === undefined || payload.locale === 'zh-CN')
|
|
? null : 'provision.begin received unsupported fields.';
|
|
}
|
|
if ([WECOM_ENDPOINTS.pollProvisioning, WECOM_ENDPOINTS.cancelProvisioning].includes(endpoint)) {
|
|
return exactKeys(payload, ['attemptId']) && validId(payload.attemptId)
|
|
? null : `${endpoint} requires an attemptId.`;
|
|
}
|
|
if (endpoint === WECOM_ENDPOINTS.bindCredentials) {
|
|
return exactKeys(payload, ['botId', 'secret'])
|
|
&& validCredential(payload.botId, 512)
|
|
&& validCredential(payload.secret, 1024)
|
|
? null : 'bot.bind-credentials requires Bot ID and Secret.';
|
|
}
|
|
if (endpoint === WECOM_ENDPOINTS.reconnectBot) {
|
|
return exactKeys(payload, ['botId', 'sendTest'])
|
|
&& validId(payload.botId)
|
|
&& (payload.sendTest === undefined || payload.sendTest === true)
|
|
? null : 'bot.reconnect requires a botId and optional sendTest=true.';
|
|
}
|
|
if (endpoint === WECOM_ENDPOINTS.deleteBot) {
|
|
return exactKeys(payload, ['botId', 'confirm']) && validId(payload.botId) && payload.confirm === true
|
|
? null : 'bot.delete requires a botId and confirm=true.';
|
|
}
|
|
if (endpoint === WECOM_ENDPOINTS.setWorkspace) {
|
|
return validWorkspacePayload(payload)
|
|
? null : '请输入工作区绝对路径。';
|
|
}
|
|
if (endpoint === WECOM_ENDPOINTS.setAgentPreset) {
|
|
return validAgentPresetPayload(payload)
|
|
? null : '请选择 Agent Preset。';
|
|
}
|
|
if (endpoint === WECOM_ENDPOINTS.setContextEnhancement) {
|
|
return validContextEnhancementPayload(payload)
|
|
? null : '请提交有效的上下文增强设置。';
|
|
}
|
|
if (endpoint === WECOM_ENDPOINTS.setAccessPolicy) {
|
|
return validAccessPolicyPayload(payload)
|
|
? null : '请提交有效的访问设置。';
|
|
}
|
|
if (endpoint === WECOM_ENDPOINTS.setGroupSessionScope) {
|
|
return validGroupSessionScopePayload(payload)
|
|
? null : '请提交有效的群会话策略。';
|
|
}
|
|
return 'Unknown Enterprise WeChat endpoint.';
|
|
}
|
|
|
|
function sanitizePublic(value) {
|
|
if (Array.isArray(value)) return value.map(sanitizePublic);
|
|
if (!isRecord(value)) return value;
|
|
const safe = {};
|
|
for (const [key, child] of Object.entries(value)) {
|
|
if (!FORBIDDEN_PUBLIC_KEYS.has(key)) safe[key] = sanitizePublic(child);
|
|
}
|
|
return safe;
|
|
}
|
|
|
|
async function qrDataUrl(value) {
|
|
return QRCode.toDataURL(value, {
|
|
type: 'image/png', errorCorrectionLevel: 'M', margin: 2, width: 320,
|
|
});
|
|
}
|
|
|
|
async function withEncodedQr(value, encodeQr) {
|
|
if (!value || typeof value.verificationUrl !== 'string') return sanitizePublic(value);
|
|
return sanitizePublic({ ...value, qrCodeDataUrl: await encodeQr(value.verificationUrl) });
|
|
}
|
|
|
|
async function publicStatus(status, encodeQr) {
|
|
const value = structuredClone(status);
|
|
if (value?.provisioning) value.provisioning = await withEncodedQr(value.provisioning, encodeQr);
|
|
return sanitizePublic(value);
|
|
}
|
|
|
|
export function createWecomRpcHandler(controller, { encodeQr = qrDataUrl } = {}) {
|
|
for (const method of ['status', 'startProvisioning', 'registrationStatus', 'cancelProvisioning', 'bindCredentials', 'reconnectBot', 'deleteBot']) {
|
|
if (typeof controller?.[method] !== 'function') {
|
|
throw new TypeError(`A complete Enterprise WeChat controller is required (${method})`);
|
|
}
|
|
}
|
|
const qrCache = new Map();
|
|
const cachedEncode = (url) => {
|
|
let encoded = qrCache.get(url);
|
|
if (!encoded) {
|
|
if (qrCache.size >= 16) qrCache.delete(qrCache.keys().next().value);
|
|
encoded = Promise.resolve().then(() => encodeQr(url));
|
|
qrCache.set(url, encoded);
|
|
}
|
|
return encoded;
|
|
};
|
|
return async (endpoint, payload, signal) => {
|
|
if (signal?.aborted) return { ok: false, error: { code: 'cancelled', message: 'The request was cancelled.' } };
|
|
if (!WECOM_RPC_ENDPOINTS.includes(endpoint)) {
|
|
return { ok: false, error: { code: 'bad-request', message: 'Unknown Enterprise WeChat endpoint.' } };
|
|
}
|
|
const invalid = payloadFailure(endpoint, payload);
|
|
if (invalid) return { ok: false, error: { code: 'bad-request', message: invalid } };
|
|
try {
|
|
let value;
|
|
if (endpoint === WECOM_ENDPOINTS.status) value = await publicStatus(await controller.status(), cachedEncode);
|
|
else if (endpoint === WECOM_ENDPOINTS.beginProvisioning) {
|
|
value = await withEncodedQr(await controller.startProvisioning(), cachedEncode);
|
|
} else if (endpoint === WECOM_ENDPOINTS.pollProvisioning) {
|
|
const current = await controller.registrationStatus(payload.attemptId);
|
|
if (!current) return { ok: false, error: { code: 'bad-request', message: 'The provisioning attempt no longer exists.' } };
|
|
value = await withEncodedQr(current, cachedEncode);
|
|
} else if (endpoint === WECOM_ENDPOINTS.cancelProvisioning) {
|
|
value = sanitizePublic(await controller.cancelProvisioning(payload.attemptId));
|
|
} else if (endpoint === WECOM_ENDPOINTS.bindCredentials) {
|
|
value = await publicStatus(await controller.bindCredentials(payload), cachedEncode);
|
|
} else if (endpoint === WECOM_ENDPOINTS.reconnectBot) {
|
|
const snapshot = await controller.reconnectBot(payload.botId);
|
|
if (signal?.aborted) {
|
|
return { ok: false, error: { code: 'cancelled', message: 'The request was cancelled.' } };
|
|
}
|
|
let testMessage;
|
|
if (payload.sendTest === true) {
|
|
const connected = snapshot?.bots?.some(
|
|
(bot) => bot?.botId === payload.botId && bot?.connected === true,
|
|
);
|
|
if (!connected || typeof controller.sendConnectionTest !== 'function') {
|
|
testMessage = publicConnectionTestResult(
|
|
connectionTestTargetUnavailable('企业微信机器人'),
|
|
);
|
|
} else {
|
|
try {
|
|
await controller.sendConnectionTest(payload.botId);
|
|
testMessage = publicConnectionTestResult();
|
|
} catch (error) {
|
|
testMessage = publicConnectionTestResult(error);
|
|
}
|
|
}
|
|
}
|
|
value = await publicStatus({ ...snapshot, ...(testMessage ? { testMessage } : {}) }, cachedEncode);
|
|
} else if (endpoint === WECOM_ENDPOINTS.setWorkspace) {
|
|
if (typeof controller.updateWorkspace !== 'function') throw new Error('Workspace update is unavailable');
|
|
value = await publicStatus(
|
|
await controller.updateWorkspace(payload.botId, payload.workspace),
|
|
cachedEncode,
|
|
);
|
|
} else if (endpoint === WECOM_ENDPOINTS.setContextEnhancement) {
|
|
if (typeof controller.updateContextEnhancement !== 'function') throw new Error('Context enhancement update is unavailable');
|
|
value = await controller.updateContextEnhancement(
|
|
payload.botId, payload.config, (status) => publicStatus(status, cachedEncode),
|
|
);
|
|
} else if (endpoint === WECOM_ENDPOINTS.setAccessPolicy) {
|
|
if (typeof controller.updateAccessPolicy !== 'function') throw new Error('Access policy update is unavailable');
|
|
value = await controller.updateAccessPolicy(
|
|
payload.botId, payload.policy, (status) => publicStatus(status, cachedEncode),
|
|
);
|
|
} else if (endpoint === WECOM_ENDPOINTS.setGroupSessionScope) {
|
|
if (typeof controller.updateGroupSessionScope !== 'function') throw new Error('Group session scope update is unavailable');
|
|
value = await controller.updateGroupSessionScope(
|
|
payload.botId, payload.groupSessionScope, (status) => publicStatus(status, cachedEncode),
|
|
);
|
|
} else if (endpoint === WECOM_ENDPOINTS.setAgentPreset) {
|
|
if (typeof controller.updateAgentPreset !== 'function') throw new Error('Agent preset update is unavailable');
|
|
value = await publicStatus(
|
|
await controller.updateAgentPreset(payload.botId, payload.agentPreset),
|
|
cachedEncode,
|
|
);
|
|
} else {
|
|
value = await publicStatus(await controller.deleteBot(payload.botId), cachedEncode);
|
|
}
|
|
return signal?.aborted
|
|
? { ok: false, error: { code: 'cancelled', message: 'The request was cancelled.' } }
|
|
: { ok: true, value };
|
|
} catch (error) {
|
|
const workspaceError = publicWorkspaceError(error);
|
|
return signal?.aborted
|
|
? { ok: false, error: { code: 'cancelled', message: 'The request was cancelled.' } }
|
|
: { ok: false, error: workspaceError
|
|
?? { code: 'wecom-operation-failed', message: '企业微信操作失败，请稍后重试。' } };
|
|
}
|
|
};
|
|
}
|
|
|
|
export function installWecomRpc(ctx, controller, options, authority) {
|
|
resolveRpcAuthority(authority);
|
|
return installConnectionRpcChannel(
|
|
ctx,
|
|
WECOM_RPC_CHANNEL,
|
|
createWecomRpcHandler(controller, options),
|
|
);
|
|
}
|