Files
hack/tools/scripts/llm-key-hunter/results/_cache/content/bijesh-regmi_unifiedmessageinbox.json
T
OpenCode 68a9071cf1 feat: reconcile local master with origin (exa/hot-platform hunters, leaks ledger, latest results)
Local branch had diverged from origin/master (sibling commits on the same base). Rewrote local history linearly on top of origin/master, folding in all local content: exa/hot-platform discovery hunters, leaks ledger, nightly sweep orchestrator, updated .gitignore and skill docs, plus the latest hunt output and vault state. Remote-only files (vault keys, channel scripts) were restored rather than dropped, so the resulting tree is a full union of both sides.
2026-08-07 12:53:47 +08:00

1 line
14 KiB
JSON

{"repo": "bijesh-regmi/unifiedmessageinbox", "files": {"src/config.js": {"3c7c6676c7c3020f01902a721a68c49db57d566e": {"t": 1785745518.7792988, "n": 2276, "h": "848205cb728c30a1", "c": "const DEFAULT_GRAPH_VERSION = \"v23.0\";\n\nexport function loadConfig(env = process.env) {\n const aiProvider = String(env.AI_PROVIDER ?? \"openai\").toLowerCase();\n\n return {\n port: Number(env.PORT ?? 3000),\n publicBaseUrl: env.PUBLIC_BASE_URL ?? \"\",\n storage: {\n dataFile: env.INBOX_DATA_FILE ?? \"\"\n },\n ai: {\n enabled: toBoolean(env.AI_ENABLED, false),\n autoAnalyze: toBoolean(env.AI_AUTO_ANALYZE, false),\n provider: aiProvider,\n apiKey: getProviderApiKey(env, aiProvider),\n baseUrl: env.AI_BASE_URL ?? \"\",\n model: env.AI_MODEL ?? \"\",\n timeoutMs: Number(env.AI_TIMEOUT_MS ?? 20000),\n maxTextChars: Number(env.AI_MAX_TEXT_CHARS ?? 4000),\n jsonMode: toBoolean(env.AI_JSON_MODE, true)\n },\n webhookVerifyToken: env.WEBHOOK_VERIFY_TOKEN ?? \"dev_verify_token\",\n graphApiVersion: env.META_GRAPH_VERSION ?? DEFAULT_GRAPH_VERSION,\n metaAppSecret: env.META_APP_SECRET ?? \"\",\n facebook: {\n pageId: env.FACEBOOK_PAGE_ID ?? \"\",\n accessToken: env.FACEBOOK_PAGE_ACCESS_TOKEN ?? \"\"\n },\n instagram: {\n businessAccountId: env.INSTAGRAM_BUSINESS_ACCOUNT_ID ?? \"\",\n accessToken: env.INSTAGRAM_PAGE_ACCESS_TOKEN ?? env.FACEBOOK_PAGE_ACCESS_TOKEN ?? \"\"\n },\n whatsapp: {\n phoneNumberId: env.WHATSAPP_PHONE_NUMBER_ID ?? \"\",\n accessToken: env.WHATSAPP_ACCESS_TOKEN ?? \"\"\n },\n x: {\n consumerSecret: env.X_CONSUMER_SECRET ?? \"\",\n bearerToken: env.X_BEARER_TOKEN ?? \"\",\n accessToken: env.X_ACCESS_TOKEN ?? \"\"\n },\n tiktok: {\n clientKey: env.TIKTOK_CLIENT_KEY ?? \"\",\n clientSecret: env.TIKTOK_CLIENT_SECRET ?? \"\"\n }\n };\n}\n\nfunction toBoolean(value, fallback) {\n if (value === undefined) {\n return fallback;\n }\n\n return [\"1\", \"true\", \"yes\", \"on\"].includes(String(value).toLowerCase());\n}\n\nfunction getProviderApiKey(env, provider) {\n if (env.AI_API_KEY) {\n return env.AI_API_KEY;\n }\n\n const providerKeyMap = {\n openai: env.OPENAI_API_KEY,\n chatgpt: env.OPENAI_API_KEY,\n gemini: env.GEMINI_API_KEY,\n mistral: env.MISTRAL_API_KEY,\n deepseek: env.DEEPSEEK_API_KEY,\n kimi: env.KIMI_API_KEY ?? env.MOONSHOT_API_KEY,\n moonshot: env.MOONSHOT_API_KEY ?? env.KIMI_API_KEY\n };\n\n return providerKeyMap[provider] ?? \"\";\n}\n"}, "4863963e1489fa354fdcfbd967e310bc7fd50447": {"t": 1785753813.679369, "n": 2276, "h": "848205cb728c30a1", "c": "const DEFAULT_GRAPH_VERSION = \"v23.0\";\n\nexport function loadConfig(env = process.env) {\n const aiProvider = String(env.AI_PROVIDER ?? \"openai\").toLowerCase();\n\n return {\n port: Number(env.PORT ?? 3000),\n publicBaseUrl: env.PUBLIC_BASE_URL ?? \"\",\n storage: {\n dataFile: env.INBOX_DATA_FILE ?? \"\"\n },\n ai: {\n enabled: toBoolean(env.AI_ENABLED, false),\n autoAnalyze: toBoolean(env.AI_AUTO_ANALYZE, false),\n provider: aiProvider,\n apiKey: getProviderApiKey(env, aiProvider),\n baseUrl: env.AI_BASE_URL ?? \"\",\n model: env.AI_MODEL ?? \"\",\n timeoutMs: Number(env.AI_TIMEOUT_MS ?? 20000),\n maxTextChars: Number(env.AI_MAX_TEXT_CHARS ?? 4000),\n jsonMode: toBoolean(env.AI_JSON_MODE, true)\n },\n webhookVerifyToken: env.WEBHOOK_VERIFY_TOKEN ?? \"dev_verify_token\",\n graphApiVersion: env.META_GRAPH_VERSION ?? DEFAULT_GRAPH_VERSION,\n metaAppSecret: env.META_APP_SECRET ?? \"\",\n facebook: {\n pageId: env.FACEBOOK_PAGE_ID ?? \"\",\n accessToken: env.FACEBOOK_PAGE_ACCESS_TOKEN ?? \"\"\n },\n instagram: {\n businessAccountId: env.INSTAGRAM_BUSINESS_ACCOUNT_ID ?? \"\",\n accessToken: env.INSTAGRAM_PAGE_ACCESS_TOKEN ?? env.FACEBOOK_PAGE_ACCESS_TOKEN ?? \"\"\n },\n whatsapp: {\n phoneNumberId: env.WHATSAPP_PHONE_NUMBER_ID ?? \"\",\n accessToken: env.WHATSAPP_ACCESS_TOKEN ?? \"\"\n },\n x: {\n consumerSecret: env.X_CONSUMER_SECRET ?? \"\",\n bearerToken: env.X_BEARER_TOKEN ?? \"\",\n accessToken: env.X_ACCESS_TOKEN ?? \"\"\n },\n tiktok: {\n clientKey: env.TIKTOK_CLIENT_KEY ?? \"\",\n clientSecret: env.TIKTOK_CLIENT_SECRET ?? \"\"\n }\n };\n}\n\nfunction toBoolean(value, fallback) {\n if (value === undefined) {\n return fallback;\n }\n\n return [\"1\", \"true\", \"yes\", \"on\"].includes(String(value).toLowerCase());\n}\n\nfunction getProviderApiKey(env, provider) {\n if (env.AI_API_KEY) {\n return env.AI_API_KEY;\n }\n\n const providerKeyMap = {\n openai: env.OPENAI_API_KEY,\n chatgpt: env.OPENAI_API_KEY,\n gemini: env.GEMINI_API_KEY,\n mistral: env.MISTRAL_API_KEY,\n deepseek: env.DEEPSEEK_API_KEY,\n kimi: env.KIMI_API_KEY ?? env.MOONSHOT_API_KEY,\n moonshot: env.MOONSHOT_API_KEY ?? env.KIMI_API_KEY\n };\n\n return providerKeyMap[provider] ?? \"\";\n}\n"}, "20a6d3c016751a9e4437f65cada2d1e20018b2dd": {"t": 1785753815.0478983, "n": 1146, "h": "bc969555e950f52c", "c": "const DEFAULT_GRAPH_VERSION = \"v23.0\";\n\nexport function loadConfig(env = process.env) {\n return {\n port: Number(env.PORT ?? 3000),\n publicBaseUrl: env.PUBLIC_BASE_URL ?? \"\",\n storage: {\n dataFile: env.INBOX_DATA_FILE ?? \"\"\n },\n webhookVerifyToken: env.WEBHOOK_VERIFY_TOKEN ?? \"dev_verify_token\",\n graphApiVersion: env.META_GRAPH_VERSION ?? DEFAULT_GRAPH_VERSION,\n metaAppSecret: env.META_APP_SECRET ?? \"\",\n facebook: {\n pageId: env.FACEBOOK_PAGE_ID ?? \"\",\n accessToken: env.FACEBOOK_PAGE_ACCESS_TOKEN ?? \"\"\n },\n instagram: {\n businessAccountId: env.INSTAGRAM_BUSINESS_ACCOUNT_ID ?? \"\",\n accessToken: env.INSTAGRAM_PAGE_ACCESS_TOKEN ?? env.FACEBOOK_PAGE_ACCESS_TOKEN ?? \"\"\n },\n whatsapp: {\n phoneNumberId: env.WHATSAPP_PHONE_NUMBER_ID ?? \"\",\n accessToken: env.WHATSAPP_ACCESS_TOKEN ?? \"\"\n },\n x: {\n consumerSecret: env.X_CONSUMER_SECRET ?? \"\",\n bearerToken: env.X_BEARER_TOKEN ?? \"\",\n accessToken: env.X_ACCESS_TOKEN ?? \"\"\n },\n tiktok: {\n clientKey: env.TIKTOK_CLIENT_KEY ?? \"\",\n clientSecret: env.TIKTOK_CLIENT_SECRET ?? \"\"\n }\n };\n}\n"}, "1a6923c219846ea1bf9cec2943b8678b0cee8d37": {"t": 1785753816.36978, "n": 1082, "h": "49b483314967c128", "c": "const DEFAULT_GRAPH_VERSION = \"v23.0\";\n\nexport function loadConfig(env = process.env) {\n return {\n port: Number(env.PORT ?? 3000),\n publicBaseUrl: env.PUBLIC_BASE_URL ?? \"\",\n webhookVerifyToken: env.WEBHOOK_VERIFY_TOKEN ?? \"dev_verify_token\",\n graphApiVersion: env.META_GRAPH_VERSION ?? DEFAULT_GRAPH_VERSION,\n metaAppSecret: env.META_APP_SECRET ?? \"\",\n facebook: {\n pageId: env.FACEBOOK_PAGE_ID ?? \"\",\n accessToken: env.FACEBOOK_PAGE_ACCESS_TOKEN ?? \"\"\n },\n instagram: {\n businessAccountId: env.INSTAGRAM_BUSINESS_ACCOUNT_ID ?? \"\",\n accessToken: env.INSTAGRAM_PAGE_ACCESS_TOKEN ?? env.FACEBOOK_PAGE_ACCESS_TOKEN ?? \"\"\n },\n whatsapp: {\n phoneNumberId: env.WHATSAPP_PHONE_NUMBER_ID ?? \"\",\n accessToken: env.WHATSAPP_ACCESS_TOKEN ?? \"\"\n },\n x: {\n consumerSecret: env.X_CONSUMER_SECRET ?? \"\",\n bearerToken: env.X_BEARER_TOKEN ?? \"\",\n accessToken: env.X_ACCESS_TOKEN ?? \"\"\n },\n tiktok: {\n clientKey: env.TIKTOK_CLIENT_KEY ?? \"\",\n clientSecret: env.TIKTOK_CLIENT_SECRET ?? \"\"\n }\n };\n}\n"}}, "src/ai/providers.js": {"3c7c6676c7c3020f01902a721a68c49db57d566e": {"t": 1786068489.698982, "n": 6329, "h": "5af02a7419832dcd", "c": "import { HttpError } from \"../http.js\";\n\nconst OPENAI_COMPATIBLE_DEFAULTS = {\n openai: {\n baseUrl: \"https://api.openai.com/v1\",\n model: \"gpt-4o-mini\"\n },\n chatgpt: {\n baseUrl: \"https://api.openai.com/v1\",\n model: \"gpt-4o-mini\"\n },\n mistral: {\n baseUrl: \"https://api.mistral.ai/v1\",\n model: \"mistral-large-latest\"\n },\n deepseek: {\n baseUrl: \"https://api.deepseek.com/v1\",\n model: \"deepseek-chat\"\n },\n kimi: {\n baseUrl: \"https://api.moonshot.ai/v1\",\n model: \"kimi-k2.6\"\n },\n moonshot: {\n baseUrl: \"https://api.moonshot.ai/v1\",\n model: \"kimi-k2.6\"\n },\n compatible: {\n baseUrl: \"\",\n model: \"\"\n }\n};\n\nconst GEMINI_DEFAULTS = {\n baseUrl: \"https://generativelanguage.googleapis.com/v1beta\",\n model: \"gemini-2.5-flash\"\n};\n\nexport function createLlmClient(aiConfig, options = {}) {\n const fetchImpl = options.fetchImpl ?? fetch;\n const provider = String(aiConfig.provider ?? \"openai\").toLowerCase();\n\n if (provider === \"mock\") {\n return createMockClient(aiConfig);\n }\n\n if (!aiConfig.enabled) {\n return createDisabledClient(\"AI is disabled\");\n }\n\n if (!aiConfig.apiKey) {\n return createDisabledClient(`Missing API key for AI provider \"${provider}\"`);\n }\n\n if (provider === \"gemini\") {\n const defaults = GEMINI_DEFAULTS;\n return createGeminiClient({\n fetchImpl,\n apiKey: aiConfig.apiKey,\n baseUrl: aiConfig.baseUrl || defaults.baseUrl,\n model: aiConfig.model || defaults.model,\n timeoutMs: aiConfig.timeoutMs\n });\n }\n\n const defaults = OPENAI_COMPATIBLE_DEFAULTS[provider] ?? OPENAI_COMPATIBLE_DEFAULTS.compatible;\n const baseUrl = aiConfig.baseUrl || defaults.baseUrl;\n const model = aiConfig.model || defaults.model;\n\n if (!baseUrl || !model) {\n return createDisabledClient(\n `AI provider \"${provider}\" needs AI_BASE_URL and AI_MODEL`\n );\n }\n\n return createOpenAiCompatibleClient({\n fetchImpl,\n provider,\n apiKey: aiConfig.apiKey,\n baseUrl,\n model,\n timeoutMs: aiConfig.timeoutMs,\n jsonMode: aiConfig.jsonMode\n });\n}\n\nfunction createDisabledClient(reason) {\n return {\n enabled: false,\n reason,\n provider: \"disabled\",\n model: null,\n async completeJson() {\n throw new HttpError(503, \"ai_not_configured\", reason);\n }\n };\n}\n\nfunction createMockClient(aiConfig) {\n return {\n enabled: true,\n provider: \"mock\",\n model: aiConfig.model || \"mock-risk-model\",\n async completeJson(prompt) {\n const text = `${prompt.system}\\n${prompt.user}`.toLowerCase();\n const fraud = /(wire|gift card|password|otp|crypto|bank|urgent payment)/.test(text);\n const harassment = /(idiot|stupid|hate)/.test(text);\n\n return {\n contentFlags: harassment\n ? [{ type: \"harassment\", severity: \"medium\", reason: \"Insulting language\" }]\n : [],\n fraudRisk: {\n level: fraud ? \"high\" : \"low\",\n score: fraud ? 0.92 : 0.08,\n signals: fraud ? [\"Payment or credential pressure\"] : [],\n recommendedAction: fraud ? \"review\" : \"allow\"\n },\n customerIntent: fraud ? \"suspicious_payment_request\" : \"general_message\",\n summary: fraud ? \"Message asks for risky payment or credentials.\" : \"No obvious risk.\",\n language: \"en\",\n confidence: fraud || harassment ? 0.82 : 0.55\n };\n }\n };\n}\n\nfunction createOpenAiCompatibleClient({\n fetchImpl,\n provider,\n apiKey,\n baseUrl,\n model,\n timeoutMs,\n jsonMode\n}) {\n return {\n enabled: true,\n provider,\n model,\n async completeJson(prompt) {\n const payload = {\n model,\n messages: [\n { role: \"system\", content: prompt.system },\n { role: \"user\", content: prompt.user }\n ],\n temperature: 0\n };\n\n if (jsonMode) {\n payload.response_format = { type: \"json_object\" };\n }\n\n const data = await postWithTimeout({\n fetchImpl,\n timeoutMs,\n url: `${baseUrl.replace(/\\/$/, \"\")}/chat/completions`,\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\"\n },\n payload\n });\n\n return parseJsonText(data.choices?.[0]?.message?.content);\n }\n };\n}\n\nfunction createGeminiClient({ fetchImpl, apiKey, baseUrl, model, timeoutMs }) {\n return {\n enabled: true,\n provider: \"gemini\",\n model,\n async completeJson(prompt) {\n const data = await postWithTimeout({\n fetchImpl,\n timeoutMs,\n url: `${baseUrl.replace(/\\/$/, \"\")}/models/${model}:generateContent`,\n headers: {\n \"x-goog-api-key\": apiKey,\n \"Content-Type\": \"application/json\"\n },\n payload: {\n systemInstruction: {\n parts: [{ text: prompt.system }]\n },\n contents: [\n {\n role: \"user\",\n parts: [{ text: prompt.user }]\n }\n ],\n generationConfig: {\n responseMimeType: \"application/json\",\n temperature: 0\n }\n }\n });\n\n const text = data.candidates?.[0]?.content?.parts\n ?.map((part) => part.text ?? \"\")\n .join(\"\");\n\n return parseJsonText(text);\n }\n };\n}\n\nasync function postWithTimeout({ fetchImpl, timeoutMs, url, headers, payload }) {\n const controller = new AbortController();\n const timeout = setTimeout(() => controller.abort(), timeoutMs);\n\n try {\n const response = await fetchImpl(url, {\n method: \"POST\",\n headers,\n body: JSON.stringify(payload),\n signal: controller.signal\n });\n\n const data = await response.json().catch(() => ({}));\n if (!response.ok) {\n throw new HttpError(\n response.status,\n \"ai_provider_request_failed\",\n data.error?.message ?? response.statusText\n );\n }\n\n return data;\n } finally {\n clearTimeout(timeout);\n }\n}\n\nfunction parseJsonText(text) {\n if (!text) {\n throw new HttpError(502, \"ai_provider_empty_response\", \"AI provider returned no text\");\n }\n\n const cleaned = String(text)\n .trim()\n .replace(/^```json\\s*/i, \"\")\n .replace(/^```\\s*/i, \"\")\n .replace(/```$/i, \"\")\n .trim();\n\n try {\n return JSON.parse(cleaned);\n } catch {\n throw new HttpError(502, \"ai_provider_invalid_json\", \"AI provider did not return valid JSON\");\n }\n}\n"}}}}