Consolidate approved trial client updates and preserve composer runtime

electron/services/cloud-agents.ts

@@ -49,11 +49,13 @@ const MESSAGES: Record<string, string> = {
   knowledge_processing: '知识库有文档正在处理，请完成后再维护',
   agent_archived: '请先从归档恢复智能体，再启用',
   attachment_too_large: '附件最大支持 5 MB',
+  attachment_invalid: '附件内容或文件名称无效，请重新选择文件',
   avatar_too_large: '头像图片不能超过 5 MB',
   avatar_invalid: '请选择有效的 PNG、JPEG、WebP 或 GIF 图片（最大 5 MB）',
   download_failed: '文件保存失败，请重试',
   channel_not_found: '微信渠道不存在或已解绑',
   channel_operation_conflict: '微信渠道正在处理其他操作，请稍后查看状态',
+  channel_operation_unconfirmed: '微信绑定的变更尚未确认，请查看待确认操作后重试',
   channel_request_invalid: '微信渠道请求无效，请刷新后重试',
   channel_rate_limited: '微信渠道操作过于频繁，请稍后重试',
   channel_conversation_not_found: '微信会话不存在或已关闭',
@@ -423,9 +425,20 @@ export class CloudAgentsModule {
     let plan;
     try { plan = operationPlan(value); }
     catch { throw new CloudAgentsError(422, 'invalid_input'); }
-    const invoke = async () => plan.project(await this.request(plan.path, plan.method, plan.body, plan.cloud === 'ws'));
+    const invoke = async () => {
+      const result = plan.project(await this.request(plan.path, plan.method, plan.body, plan.cloud === 'ws'));
+      if (plan.operation === 'unbindChannelAccount') {
+        const value = record(result), channel = record(value.channel);
+        if (value.unbound !== true || value.disconnected !== true || channel.id !== plan.input.channel_account_id
+          || channel.enabled !== false || channel.target_agent_slug !== null || channel.health !== 'login_required') {
+          // Keep the original operation in recovery until both routing and login are confirmed removed.
+          throw new CloudAgentsError(503, 'channel_operation_unconfirmed');
+        }
+      }
+      return result;
+    };
     const recoverable = ['submit', 'preview', 'resume', 'publish', 'createApplication', 'createKey', 'createKnowledge', 'processKnowledge', 'createSchedule', 'runSchedule', 'importKnowledgeAttachment', 'createChild',
-      'createChannelAccount', 'routeChannelAccount', 'enableChannelAccount', 'pauseChannelAccount', 'disconnectChannelAccount',
+      'createChannelAccount', 'routeChannelAccount', 'enableChannelAccount', 'pauseChannelAccount', 'disconnectChannelAccount', 'unbindChannelAccount',
       'channelAccountWechatBindStart', 'channelAccountWechatBindVerification', 'channelAccountWechatUnbind',
       'createChannelBinding', 'switchChannelBindingAgent', 'enableChannelBinding', 'pauseChannelBinding', 'disconnectChannelBinding',
       'wechatBindStart', 'wechatBindVerification', 'wechatUnbind',
@@ -489,8 +502,46 @@ export class CloudAgentsModule {
   }
 
   async upload(): Promise<CloudUpload | null> {
+    const binding = getWorksSquareAccountBinding();
+    if (!binding) throw new CloudAgentsError(401, 'session_expired');
     const body = await this.pickUpload();
+    this.requireCurrent(binding);
     if (!body) return null;
+    const result = await this.uploadTemporaryAttachment(body);
+    this.requireCurrent(binding);
+    return result;
+  }
+
+  async uploadBytes(value: unknown): Promise<CloudUpload> {
+    const binding = getWorksSquareAccountBinding();
+    if (!binding) throw new CloudAgentsError(401, 'session_expired');
+    const input = record(value);
+    const limit = 5 * 1024 * 1024;
+    if (Object.keys(input).some(key => !['bytesBase64', 'fileName', 'mimeType'].includes(key))
+      || typeof input.fileName !== 'string' || !input.fileName.trim() || input.fileName.length > 255
+      || /[\\/]/.test(input.fileName) || Array.from(input.fileName).some(char => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127)
+      || ['.', '..'].includes(input.fileName)
+      || typeof input.mimeType !== 'string' || input.mimeType.length > 127
+      || !/^[a-zA-Z0-9][a-zA-Z0-9!#$&^_.+-]*\/[a-zA-Z0-9][a-zA-Z0-9!#$&^_.+-]*$/.test(input.mimeType)
+      || typeof input.bytesBase64 !== 'string' || !input.bytesBase64) {
+      throw new CloudAgentsError(422, 'attachment_invalid', 'definitive_failure');
+    }
+    if (input.bytesBase64.length > Math.ceil(limit / 3) * 4) throw new CloudAgentsError(422, 'attachment_too_large', 'definitive_failure');
+    if (input.bytesBase64.length % 4 !== 0 || !/^[A-Za-z0-9+/]+={0,2}$/.test(input.bytesBase64)) {
+      throw new CloudAgentsError(422, 'attachment_invalid', 'definitive_failure');
+    }
+    const bytes = Buffer.from(input.bytesBase64, 'base64');
+    if (!bytes.length || bytes.toString('base64') !== input.bytesBase64) throw new CloudAgentsError(422, 'attachment_invalid', 'definitive_failure');
+    if (bytes.length > limit) throw new CloudAgentsError(422, 'attachment_too_large', 'definitive_failure');
+    const body = new FormData();
+    body.append('file', new Blob([new Uint8Array(bytes)], { type: input.mimeType }), input.fileName);
+    this.requireCurrent(binding);
+    const result = await this.uploadTemporaryAttachment(body);
+    this.requireCurrent(binding);
+    return result;
+  }
+
+  private async uploadTemporaryAttachment(body: FormData): Promise<CloudUpload> {
     const result = record(await this.request('/api/makelore/attachments/tmp', 'POST', body));
     return {
       object_name: textField(result.object_name, 2048), file_name: textField(result.file_name, 255),