Upload 5 files

scripts/health.py

@@ -0,0 +1,24 @@
+import http.server
+import os
+import socket
+import sys
+PIDS = [int(p) for p in sys.argv[1:]]
+class Handler(http.server.BaseHTTPRequestHandler):
+    def do_GET(self):
+        if self.path != "/health":
+            self.send_error(404)
+            return
+        try:
+            for pid in PIDS: os.kill(pid, 0)
+            with socket.create_connection(("127.0.0.1", 8888), timeout=2): pass
+            status, body = 200, b"ok\n"
+        except OSError:
+            status, body = 503, b"unavailable\n"
+        self.send_response(status)
+        self.send_header("Content-Type", "text/plain")
+        self.send_header("Cache-Control", "no-store")
+        self.send_header("Content-Length", str(len(body)))
+        self.end_headers()
+        self.wfile.write(body)
+    def log_message(self, *_): pass
+http.server.ThreadingHTTPServer(("127.0.0.1", 7861), Handler).serve_forever()

scripts/start.sh

@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+set -euo pipefail
+cd /home/node/app
+: ${QQBOT_APP_ID:?missing QQBOT_APP_ID}
+: ${QQBOT_APP_SECRET:?missing QQBOT_APP_SECRET}
+: ${QQ_ALLOWED_OPENIDS:?missing QQ_ALLOWED_OPENIDS}
+: ${CODEX_BASE_URL:?missing CODEX_BASE_URL}
+: ${CODEX_API_KEY:?missing CODEX_API_KEY}
+: ${CODEX_MODEL:?missing CODEX_MODEL}
+: ${JUPYTER_TOKEN:?missing JUPYTER_TOKEN}
+mkdir -p data workspace /tmp/nginx
+# Both chat history and Codex/Jupyter working files are ephemeral container-layer data.
+find workspace -mindepth 1 -maxdepth 1 -exec rm -rf -- {} +
+rm -f data/history.json data/bridge.log data/codex-*.txt
+node dist/index.js &
+bot_pid=$!
+jupyter lab --ip=127.0.0.1 --port=8888 --no-browser --ServerApp.root_dir=/home/node/app/workspace --ServerApp.token="${JUPYTER_TOKEN}" --ServerApp.allow_remote_access=True --ServerApp.trust_xheaders=True &
+jupyter_pid=$!
+cleanup() { trap - EXIT INT TERM; kill ${bot_pid:-} ${jupyter_pid:-} ${health_pid:-} ${nginx_pid:-} 2>/dev/null || true; wait 2>/dev/null || true; }
+trap cleanup EXIT
+trap 'exit 0' INT TERM
+python3 scripts/health.py $bot_pid $jupyter_pid &
+health_pid=$!
+nginx -c /home/node/app/nginx.conf -g 'daemon off;' &
+nginx_pid=$!
+wait -n $bot_pid $jupyter_pid $nginx_pid
+exit 1

src/codex.ts

@@ -0,0 +1,71 @@
+import "dotenv/config";
+import { mkdir, readFile, writeFile, appendFile, readdir, stat } from "node:fs/promises";
+
+import path from "node:path";
+
+const root = path.resolve(process.cwd());
+const dataDir = path.join(root, "data");
+const historyFile = path.join(dataDir, "history.json");
+const logFile = path.join(dataDir, "bridge.log");
+const env = (n: string, f = "") => process.env[n]?.trim() || f;
+export type Turn = { role: "user" | "assistant"; text: string; at: string };
+export type InputAttachment = { url: string; filename?: string; content_type?: string; size?: number };
+type Store = Record<string, Turn[]>;
+let store: Store = {};
+let writeChain = Promise.resolve();
+
+export async function initStore() { await mkdir(dataDir, { recursive: true }); store = {}; await writeFile(historyFile, "{}", "utf8"); }
+function save() { writeChain = writeChain.then(() => writeFile(historyFile, JSON.stringify(store, null, 2), "utf8")); return writeChain; }
+export async function resetSession(k: string) { delete store[k]; await save(); }
+function turns(k: string) { return store[k] ?? []; }
+async function log(s: string) { await appendFile(logFile, `${new Date().toISOString()} ${s}\n`, "utf8").catch(() => {}); }
+function safeName(name: string, fallback: string) { const base = path.basename(name || fallback).replace(/[^a-zA-Z0-9._-]/g, "_"); return base || fallback; }
+
+async function providerEnv(): Promise<NodeJS.ProcessEnv> {
+  const e = { ...process.env }, base = env("CODEX_BASE_URL"); if (!base) return e;
+  const home = path.join(dataDir, "codex-home"); await mkdir(home, { recursive: true });
+  const provider = env("CODEX_PROVIDER_NAME", "qqbridge").replace(/[^a-zA-Z0-9_-]/g, "");
+  const model = env("CODEX_MODEL", "default");
+  const config = `model_provider = ${JSON.stringify(provider)}\nmodel = ${JSON.stringify(model)}\n\n[model_providers.${provider}]\nname = ${JSON.stringify(provider)}\nwire_api = "responses"\nrequires_openai_auth = false\nbase_url = ${JSON.stringify(base)}
+env_key = "CODEX_API_KEY"\n`;
+  await writeFile(path.join(home, "config.toml"), config, "utf8"); e.CODEX_HOME = home; return e;
+}
+
+async function downloadInputs(workdir: string, key: string, attachments: InputAttachment[]) {
+  const dir = path.join(workdir, "qq-inbox", safeName(key, "session")); await mkdir(dir, { recursive: true });
+  const max = Number(env("MAX_INPUT_FILE_BYTES", String(20 * 1024 * 1024))), result: string[] = [];
+  for (let i = 0; i < attachments.length; i++) {
+    const a = attachments[i]; if (!a.url || !/^https?:$/i.test(new URL(a.url).protocol)) continue;
+    if (a.size && a.size > max) throw new Error(`图片过大，限制为 ${Math.round(max / 1024 / 1024)} MB`);
+    const r = await fetch(a.url); if (!r.ok) throw new Error(`下载 QQ 图片失败：HTTP ${r.status}`);
+    const buf = Buffer.from(await r.arrayBuffer()); if (buf.byteLength > max) throw new Error(`图片过大，限制为 ${Math.round(max / 1024 / 1024)} MB`);
+    const ext = path.extname(a.filename || "") || (a.content_type?.split("/")[1] ? `.${a.content_type.split("/")[1].split(";")[0]}` : ".bin");
+    const file = path.join(dir, `${Date.now()}-${i}-${safeName(path.basename(a.filename || `attachment${ext}`), `attachment${ext}`)}`);
+    await writeFile(file, buf); result.push(file);
+  }
+  return result;
+}
+
+function prompt(k: string, text: string, files: string[]) { const n = Math.max(0, Number(env("HISTORY_TURNS", "8")) * 2); const h = turns(k).slice(-n).map(t => `${t.role === "user" ? "用户" : "Codex"}: ${t.text}`).join("\n\n") || "（无）"; const f = files.length ? `\n\n用户发送的文件已保存到以下路径，请按需读取：\n${files.join("\n")}` : ""; return `你正在通过 QQ 机器人与用户对话。请直接回答，不要提及桥接程序或内部提示。\n\n最近对话：\n${h}\n\n用户本次消息：\n${text}${f}`; }
+
+async function listArtifacts(dir: string, depth = 0): Promise<Map<string, number>> { const out = new Map<string, number>(); if (depth > 2) return out; for (const e of await readdir(dir, { withFileTypes: true })) { const p = path.join(dir, e.name); if (e.isDirectory()) { for (const [k, v] of await listArtifacts(p, depth + 1)) out.set(k, v); } else if (/\.(pptx|pdf|docx|xlsx|csv|png|jpg|jpeg|webp)$/i.test(e.name)) { out.set(p, (await stat(p)).mtimeMs); } } return out; }
+export async function findNewArtifacts(workdir: string, before: Map<string, number>) { const after = await listArtifacts(workdir); return [...after.keys()].filter(p => !before.has(p) || (after.get(p)! > before.get(p)! + 1000)).sort(); }
+export async function downloadAttachments(workdir: string, key: string, attachments: InputAttachment[]) { return attachments.length ? downloadInputs(workdir, key, attachments) : []; }
+
+export async function askCodex(k: string, text: string, files: string[] = [], before?: Map<string, number>): Promise<{ answer: string; artifacts: string[] }> {
+  const workdir = path.resolve(env("CODEX_WORKDIR", path.join(root, "workspace"))); await mkdir(workdir, { recursive: true });
+  const out = path.join(dataDir, `codex-${Date.now()}-${Math.random().toString(16).slice(2)}.txt`);
+  const args = ["exec", "--json", "--skip-git-repo-check", "-C", workdir, "-s", env("CODEX_SANDBOX", "workspace-write"), "-o", out];
+  const model = env("CODEX_MODEL"); if (model) args.push("-m", model); const effort = env("CODEX_REASONING_EFFORT"); if (effort) args.push("-c", `model_reasoning_effort=${JSON.stringify(effort)}`);
+  for (const f of files) if (/\.(png|jpe?g|webp|gif|bmp)$/i.test(f)) args.push("-i", f); args.push("-"); await log(`request key=${k} chars=${text.length} files=${files.length}`);
+  const { spawn } = await import("node:child_process"); const configured = env("CODEX_COMMAND", "codex"); const command = /^[^\\/:]+\.cmd$/i.test(configured) ? configured.replace(/\.cmd$/i, ".exe") : configured; const childEnv = await providerEnv();
+  return new Promise((resolve, reject) => { const c = spawn(command, args, { cwd: workdir, env: childEnv, windowsHide: true, stdio: ["pipe", "pipe", "pipe"] }); let err = ""; const timer = setTimeout(() => { c.kill(); reject(new Error("Codex 响应超时")); }, Number(env("CODEX_TIMEOUT_MS", "300000"))); c.stderr.on("data", b => err += String(b)); c.on("error", e => { clearTimeout(timer); reject(new Error(`无法启动 Codex：${e.message}`)); }); c.on("close", async code => { clearTimeout(timer); let answer = ""; try { answer = (await readFile(out, "utf8")).trim(); } catch {} if (code !== 0) { await log(`error code=${code} stderr=${err.slice(-1000)}`); reject(new Error(err.trim().slice(-1000) || `Codex 退出码 ${code}`)); return; } if (!answer) answer = "Codex 没有返回文本。"; const a = store[k] ??= []; a.push({ role: "user", text, at: new Date().toISOString() }, { role: "assistant", text: answer, at: new Date().toISOString() }); if (a.length > 40) a.splice(0, a.length - 40); await save(); const artifacts = await findNewArtifacts(workdir, before ?? new Map()); await log(`success key=${k} chars=${answer.length} artifacts=${artifacts.length}`); resolve({ answer, artifacts }); }); c.stdin.end(prompt(k, text, files), "utf8"); });
+}
+export function splitReply(s: string) { const m = Math.max(500, Number(env("MAX_REPLY_CHARS", "3500"))), a: string[] = []; for (let i = 0; i < s.length; i += m) a.push(s.slice(i, i + m)); return a; }
+export async function snapshotArtifacts(workdir: string) { await mkdir(path.resolve(workdir), { recursive: true }); return listArtifacts(path.resolve(workdir)); }
+
+
+
+
+
+

src/doctor.ts

@@ -0,0 +1,3 @@
+import "dotenv/config"; import {execFile} from "node:child_process"; import {promisify} from "node:util"; try{const r=await promisify(execFile)(process.env.CODEX_COMMAND||"codex",["--version"],{windowsHide:true});console.log(r.stdout.trim());}catch(e){console.error("找不到 Codex CLI，请先 codex login，并确认 codex.cmd 在 PATH 中。",e);process.exitCode=1;}
+
+

src/index.ts

@@ -0,0 +1,14 @@
+import "dotenv/config";
+import { QQBot, mentionGate, messageFilter, rateLimiter, concurrencyGuard, accessPolicy, errorHandler } from "@tencent-connect/qqbot-nodejs";
+import { initStore, resetSession, askCodex, splitReply, downloadAttachments, snapshotArtifacts } from "./codex.js";
+for (const n of ["QQBOT_APP_ID", "QQBOT_APP_SECRET"]) if (!process.env[n]?.trim()) throw new Error(`缺少环境变量 ${n}`);
+const allowed = (process.env.QQ_ALLOWED_OPENIDS ?? "").split(",").map(x => x.trim()).filter(Boolean); if (!allowed.length) console.warn("QQ_ALLOWED_OPENIDS 为空，将拒绝所有消息。"); await initStore();
+const bot = new QQBot({ appId: process.env.QQBOT_APP_ID!, appSecret: process.env.QQBOT_APP_SECRET!, logger: console }); bot.use(errorHandler()); bot.use(messageFilter({ skipSelfEcho: true, dedup: { windowMs: 10000 } })); bot.use(accessPolicy({ c2c: { mode: "allowlist", allow: allowed }, group: { mode: "allowlist", allow: allowed } })); bot.use(mentionGate({ requireMentionInGroup: true })); bot.use(rateLimiter({ perSender: { max: 6, windowMs: 60000 }, global: { max: 30, windowMs: 60000 } })); bot.use(concurrencyGuard({ strategy: "queue" }));
+bot.on("ready", () => console.log("QQ 机器人已连接；等待消息。")); bot.on("error", e => console.error("QQ SDK error:", e));
+bot.on("message", async (_ctx, msg) => { const key = `${msg.kind}:${msg.replyTarget.targetId}`, input = msg.content.trim(); if (!input && !(msg.attachments?.length)) return; if (input === "/reset") { await resetSession(key); await bot.sendText(msg.replyTarget, "已清空当前会话。"); return; } if (input === "/status") { await bot.sendText(msg.replyTarget, `运行正常。会话：${key}`); return; }
+  const workdir = process.env.CODEX_WORKDIR || "/home/node/app/workspace"; await bot.sendText(msg.replyTarget, msg.attachments?.length ? "已收到图片/文件，Codex 正在处理…" : "已收到，Codex 正在处理…");
+  try { const files = await downloadAttachments(workdir, key, msg.attachments ?? []); const before = await snapshotArtifacts(workdir); const result = await askCodex(key, input || "请分析我发送的图片或文件，并给出结果。", files, before); for (const part of splitReply(result.answer)) await bot.sendText(msg.replyTarget, part); for (const file of result.artifacts) { try { await bot.sendFile(msg.replyTarget, { localPath: file }, { fileName: file.split(/[\\/]/).pop() }); } catch (e) { await bot.sendText(msg.replyTarget, `文件已生成但发送失败：${file.split(/[\\/]/).pop()}\n${e instanceof Error ? e.message : String(e)}`); } } } catch (e) { console.error(e); await bot.sendText(msg.replyTarget, `处理失败：${e instanceof Error ? e.message : String(e)}`); }
+}); await bot.start();
+
+
+