fe90cc7b24
(cherry picked from commit 583df3ec63e25a1fd34def0dac13405396b8b663) none of our endpoints will ever contain `..` (they might, maybe, at some point, contain `.`, as in `something/get.html`?), so every `Mk:api()` call to an endpoint that contains `..` can't work: let's reject it outright Co-authored-by: Julia <julia@insertdomain.name> Co-authored-by: dakkar <dakkar@thenautilus.net>
87 lines
2.9 KiB
TypeScript
87 lines
2.9 KiB
TypeScript
/*
|
|
* SPDX-FileCopyrightText: syuilo and misskey-project
|
|
* SPDX-License-Identifier: AGPL-3.0-only
|
|
*/
|
|
|
|
import { utils, values } from '@syuilo/aiscript';
|
|
import * as os from '@/os.js';
|
|
import { misskeyApi } from '@/scripts/misskey-api.js';
|
|
import { $i } from '@/account.js';
|
|
import { miLocalStorage } from '@/local-storage.js';
|
|
import { customEmojis } from '@/custom-emojis.js';
|
|
import { url, lang } from '@/config.js';
|
|
import { nyaize } from '@/scripts/nyaize.js';
|
|
import { RateLimiter } from '@/scripts/rate-limiter.js';
|
|
|
|
export function aiScriptReadline(q: string): Promise<string> {
|
|
return new Promise(ok => {
|
|
os.inputText({
|
|
title: q,
|
|
}).then(({ result: a }) => {
|
|
ok(a ?? '');
|
|
});
|
|
});
|
|
}
|
|
|
|
export function createAiScriptEnv(opts) {
|
|
const rateLimiter = new RateLimiter<string>({ duration: 1000 * 15, max: 30 });
|
|
|
|
return {
|
|
USER_ID: $i ? values.STR($i.id) : values.NULL,
|
|
USER_NAME: $i ? values.STR($i.name) : values.NULL,
|
|
USER_USERNAME: $i ? values.STR($i.username) : values.NULL,
|
|
CUSTOM_EMOJIS: utils.jsToVal(customEmojis.value),
|
|
LOCALE: values.STR(lang),
|
|
SERVER_URL: values.STR(url),
|
|
'Mk:dialog': values.FN_NATIVE(async ([title, text, type]) => {
|
|
await os.alert({
|
|
type: type ? type.value : 'info',
|
|
title: title.value,
|
|
text: text.value,
|
|
});
|
|
return values.NULL;
|
|
}),
|
|
'Mk:confirm': values.FN_NATIVE(async ([title, text, type]) => {
|
|
const confirm = await os.confirm({
|
|
type: type ? type.value : 'question',
|
|
title: title.value,
|
|
text: text.value,
|
|
});
|
|
return confirm.canceled ? values.FALSE : values.TRUE;
|
|
}),
|
|
'Mk:api': values.FN_NATIVE(async ([ep, param, token]) => {
|
|
utils.assertString(ep);
|
|
if (ep.value.includes('://') || ep.value.includes('..')) {
|
|
throw new Error('invalid endpoint');
|
|
}
|
|
if (token) {
|
|
utils.assertString(token);
|
|
// バグがあればundefinedもあり得るため念のため
|
|
if (typeof token.value !== 'string') throw new Error('invalid token');
|
|
}
|
|
const actualToken: string|null = token?.value ?? opts.token ?? null;
|
|
if (!rateLimiter.hit(ep.value)) return values.ERROR('rate_limited', values.NULL);
|
|
return misskeyApi(ep.value, utils.valToJs(param), actualToken, undefined, 'aiscript').then(res => {
|
|
return utils.jsToVal(res);
|
|
}, err => {
|
|
return values.ERROR('request_failed', utils.jsToVal(err));
|
|
});
|
|
}),
|
|
'Mk:save': values.FN_NATIVE(([key, value]) => {
|
|
utils.assertString(key);
|
|
miLocalStorage.setItem(`aiscript:${opts.storageKey}:${key.value}`, JSON.stringify(utils.valToJs(value)));
|
|
return values.NULL;
|
|
}),
|
|
'Mk:load': values.FN_NATIVE(([key]) => {
|
|
utils.assertString(key);
|
|
return utils.jsToVal(JSON.parse(miLocalStorage.getItem(`aiscript:${opts.storageKey}:${key.value}`)));
|
|
}),
|
|
'Mk:url': values.FN_NATIVE(() => {
|
|
return values.STR(window.location.href);
|
|
}),
|
|
'Mk:nyaize': values.FN_NATIVE(([text]) => {
|
|
utils.assertString(text);
|
|
return values.STR(nyaize(text.value));
|
|
}),
|
|
};
|
|
}
|