@aalis/plugin-session-confirm 0.5.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ace Nyan <ace@acenyan.com>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+import type { Context } from '@aalis/core';
+export declare const name = "@aalis/plugin-session-confirm";
+export declare const displayName = "\u4F1A\u8BDD\u786E\u8BA4";
+export declare const subsystem = "authority";
+export declare const provides: string[];
+export declare const inject: {
+    required: string[];
+    optional: string[];
+};
+export declare function apply(ctx: Context): Promise<void>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAW3C,eAAO,MAAM,IAAI,kCAAkC,CAAC;AACpD,eAAO,MAAM,WAAW,6BAAS,CAAC;AAClC,eAAO,MAAM,SAAS,cAAc,CAAC;AACrC,eAAO,MAAM,QAAQ,UAAsB,CAAC;AAC5C,eAAO,MAAM,MAAM;;;CAGlB,CAAC;AAwGF,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BvD"}

package/dist/index.js

@@ -0,0 +1,143 @@
+// ----- 会话确认：协调器实现 + onebot/cli 等「仅消息总线」平台的确认传输 -----
+//
+// 协调器（待确认登记 / 超时 / 解析 Y-YS / 文案）是平台无关的功能，**实现一份**于此，经
+// `session-confirm` 服务（契约在 plugin-session-confirm-api）暴露 createChannel，供任何平台复用：
+//   - 本插件自用：bus 通道（投递走 gateway 总线）+ '*' fallback handler + inbound:confirm 相位拦截，
+//     覆盖 onebot/cli 等仅靠消息总线的会话型平台。
+//   - WebUI：注入自己的 WS 投递拿一条通道，保留 WS type:'confirm'（前端「确认模式」信号），在
+//     WS-onmessage 调 feed —— 与本插件共用同一协调器实现，零重复。
+//
+// 纯协议（parseConfirmReply / composeConfirmPrompt）是本插件私有的无状态实现，内联于此——
+// 契约包（authority-api）只放类型、不放实现（避免运行时跨包边 + 版本漂移）。
+import { INBOUND_PHASE } from '@aalis/plugin-gateway-api';
+export const name = '@aalis/plugin-session-confirm';
+export const displayName = '会话确认';
+export const subsystem = 'authority';
+export const provides = ['session-confirm'];
+export const inject = {
+    required: ['gateway'],
+    optional: ['authority'],
+};
+/** 确认等待超时（毫秒）；超时默认拒（无人在场即安全失败）。 */
+const CONFIRM_TIMEOUT_MS = 60_000;
+/** YS（本会话放行）授予时长（秒）。 */
+const SESSION_GRANT_SECONDS = 600;
+/** 把一条确认回复文本解析为决策（纯函数）：Y=本次、YS=本会话（always 不接受会话记忆）、其余=取消。 */
+function parseConfirmReply(replyText, always, sessionGrantSeconds) {
+    const t = replyText.trim().toLowerCase();
+    const yes = t === 'y' || t === 'yes';
+    if (always)
+        return yes || t === 'ys' ? { allowed: true } : false;
+    if (t === 'ys')
+        return { allowed: true, grant: { scope: 'session', durationSeconds: sessionGrantSeconds } };
+    if (yes)
+        return { allowed: true, grant: { scope: 'once' } };
+    return false;
+}
+/** 组合确认提示文案（纯函数，所有平台一致）。 */
+function composeConfirmPrompt(request, always, sessionGrantSeconds) {
+    const label = request.type === 'command' ? '指令' : '工具';
+    const nameStr = request.type === 'command' ? `/${request.name}` : request.name;
+    return always
+        ? `⚠️ ${label} ${nameStr} 是高危操作，每次都需确认。回复 Y 确认执行本次；其他任意输入取消。`
+        : `⚠️ ${label} ${nameStr} 是高危操作。回复 Y 仅允许本次；回复 YS 本会话 ${Math.round(sessionGrantSeconds / 60)} 分钟内放行；其他任意输入取消。`;
+}
+/** 协调器工厂（平台无关）：注入投递，拿回 { handler, feed }。 */
+function createChannel(deliver) {
+    // 每个 session 一条 FIFO 队列：确认是会话内一问一答，但同一回合并行工具可触发多个确认请求，
+    // 必须串行排队（队首发提示、应答/超时后出队投递下一个），不能抢占式互相 resolve(false)。
+    const queues = new Map();
+    /** 给队首发确认提示并启动其超时计时（首次入队 / 上一个结算出队后调用）。 */
+    const present = (sessionId) => {
+        const head = queues.get(sessionId)?.[0];
+        if (!head)
+            return;
+        head.timer = setTimeout(() => {
+            // 超时只结算队首：出队、投递、resolve，再推进下一个。
+            const q = queues.get(sessionId);
+            if (q?.[0])
+                q.shift();
+            if (q && q.length === 0)
+                queues.delete(sessionId);
+            deliver(head.request, '⏰ 操作确认已超时，已自动取消。');
+            head.resolve(false);
+            present(sessionId);
+        }, CONFIRM_TIMEOUT_MS);
+        head.timer.unref?.(); // 待确认定时器不阻止进程优雅退出
+        deliver(head.request, composeConfirmPrompt(head.request, head.always, SESSION_GRANT_SECONDS));
+    };
+    const handler = request => new Promise(resolve => {
+        const waiter = {
+            request,
+            resolve,
+            timer: undefined,
+            always: request.confirm === 'always',
+            userId: request.userId,
+        };
+        const q = queues.get(request.sessionId);
+        if (q) {
+            q.push(waiter); // 已有未决：排队，等队首结算后再发
+        }
+        else {
+            queues.set(request.sessionId, [waiter]);
+            present(request.sessionId); // 队首：立即发提示
+        }
+    });
+    const feed = (sessionId, replyText, replyUserId) => {
+        const q = queues.get(sessionId);
+        const head = q?.[0];
+        if (!q || !head)
+            return false;
+        // 仅触发者本人能应答：群里 sessionId=群，否则任意成员都能替授权方确认。
+        // 私聊/webui 触发者与应答者天然同人；二者皆 undefined 也视为同人（系统注入等无 userId 场景）。
+        if (head.userId !== replyUserId)
+            return false;
+        clearTimeout(head.timer);
+        q.shift();
+        if (q.length === 0)
+            queues.delete(sessionId);
+        head.resolve(parseConfirmReply(replyText, head.always, SESSION_GRANT_SECONDS));
+        present(sessionId); // 推进下一个未决确认
+        return true;
+    };
+    const dispose = () => {
+        // 卸载/热重载：清所有未决确认的超时定时器并安全拒掉（resolve false），避免 Promise 永挂 + 定时器卡退出。
+        for (const q of queues.values()) {
+            for (const w of q) {
+                clearTimeout(w.timer);
+                w.resolve(false);
+            }
+        }
+        queues.clear();
+    };
+    return { handler, feed, dispose };
+}
+export async function apply(ctx) {
+    const service = { createChannel };
+    ctx.provide('session-confirm', service);
+    // 自用 bus 通道：覆盖 onebot/cli 等仅靠消息总线的会话型平台。
+    const busChannel = createChannel((request, text) => {
+        const gateway = ctx.getService('gateway');
+        void gateway?.dispatchOutbound({
+            content: text,
+            sessionId: request.sessionId,
+            platform: request.platform,
+            source: 'system',
+        });
+    });
+    // authority 可能晚于本插件上线 → whenService 在其上线/重启时注册 '*' fallback（精确平台 handler 优先）。
+    ctx.whenService('authority', authority => {
+        if (authority.setConfirmHandler) {
+            authority.setConfirmHandler('*', busChannel.handler);
+            ctx.logger.debug('会话确认 fallback handler 已注册 (*)');
+        }
+    });
+    // inbound:confirm 相位（最前）：命中未决确认即喂入解析并吞掉，避免触达 agent（防 abort 在途生成）。
+    ctx.middleware(INBOUND_PHASE.CONFIRM, async (data, next) => {
+        if (busChannel.feed(data.message.sessionId, data.message.content ?? '', data.message.userId))
+            return; // 吞掉确认回复
+        return next();
+    });
+    ctx.onDispose(() => busChannel.dispose());
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,EAAE;AACF,sDAAsD;AACtD,gFAAgF;AAChF,iFAAiF;AACjF,mCAAmC;AACnC,gEAAgE;AAChE,gDAAgD;AAChD,EAAE;AACF,mEAAmE;AACnE,gDAAgD;AAUhD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAG1D,MAAM,CAAC,MAAM,IAAI,GAAG,+BAA+B,CAAC;AACpD,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC;AAClC,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAAC;AACrC,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAC5C,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,QAAQ,EAAE,CAAC,SAAS,CAAC;IACrB,QAAQ,EAAE,CAAC,WAAW,CAAC;CACxB,CAAC;AAEF,mCAAmC;AACnC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,wBAAwB;AACxB,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,6DAA6D;AAC7D,SAAS,iBAAiB,CAAC,SAAiB,EAAE,MAAe,EAAE,mBAA2B;IACxF,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,CAAC;IACrC,IAAI,MAAM;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACjE,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,mBAAmB,EAAE,EAAE,CAAC;IAC5G,IAAI,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC;IAC5D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4BAA4B;AAC5B,SAAS,oBAAoB,CAAC,OAAsB,EAAE,MAAe,EAAE,mBAA2B;IAChG,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC/E,OAAO,MAAM;QACX,CAAC,CAAC,MAAM,KAAK,IAAI,OAAO,qCAAqC;QAC7D,CAAC,CAAC,MAAM,KAAK,IAAI,OAAO,+BAA+B,IAAI,CAAC,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,kBAAkB,CAAC;AAClH,CAAC;AAED,6CAA6C;AAC7C,SAAS,aAAa,CAAC,OAAuD;IAS5E,uDAAuD;IACvD,sDAAsD;IACtD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE3C,2CAA2C;IAC3C,MAAM,OAAO,GAAG,CAAC,SAAiB,EAAQ,EAAE;QAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3B,gCAAgC;YAChC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAChC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAE,CAAC,CAAC,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,SAAS,CAAC,CAAC;QACrB,CAAC,EAAE,kBAAkB,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,kBAAkB;QACxC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAChG,CAAC,CAAC;IAEF,MAAM,OAAO,GAAyB,OAAO,CAAC,EAAE,CAC9C,IAAI,OAAO,CAA2B,OAAO,CAAC,EAAE;QAC9C,MAAM,MAAM,GAAW;YACrB,OAAO;YACP,OAAO;YACP,KAAK,EAAE,SAAqD;YAC5D,MAAM,EAAE,OAAO,CAAC,OAAO,KAAK,QAAQ;YACpC,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC;QACF,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,EAAE,CAAC;YACN,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB;QACrC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YACxC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM,IAAI,GAAG,CAAC,SAAiB,EAAE,SAAiB,EAAE,WAAoB,EAAW,EAAE;QACnF,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QAC9B,2CAA2C;QAC3C,8DAA8D;QAC9D,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,KAAK,CAAC;QAC9C,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,KAAK,EAAE,CAAC;QACV,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAC/E,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;QAChC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,mEAAmE;QACnE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YAChC,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClB,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,GAAY;IACtC,MAAM,OAAO,GAA0B,EAAE,aAAa,EAAE,CAAC;IACzD,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAExC,yCAAyC;IACzC,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE;QACjD,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAiB,SAAS,CAAC,CAAC;QAC1D,KAAK,OAAO,EAAE,gBAAgB,CAAC;YAC7B,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,GAAG,CAAC,WAAW,CAAmB,WAAW,EAAE,SAAS,CAAC,EAAE;QACzD,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAC;YAChC,SAAS,CAAC,iBAAiB,CAAC,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;YACrD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QACzD,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,SAAS;QAC/G,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;AAC5C,CAAC"}

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@aalis/plugin-session-confirm",
+  "version": "0.5.0",
+  "license": "MIT",
+  "description": "会话确认协调器：提供 session-confirm 服务（createChannel）供各平台复用，并经 gateway 总线覆盖 onebot/cli 等会话型平台",
+  "type": "module",
+  "keywords": [
+    "aalis",
+    "aalis-plugin"
+  ],
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@aalis/plugin-authority-api": "^0.5.0",
+    "@aalis/plugin-gateway-api": "^0.5.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.7.0",
+    "@aalis/core": "0.5.0",
+    "@aalis/plugin-session-confirm-api": "0.5.0"
+  },
+  "peerDependencies": {
+    "@aalis/core": ">=0.2.0 <1.0.0"
+  },
+  "aalis": {
+    "service": {
+      "required": [
+        "gateway"
+      ],
+      "optional": [
+        "authority"
+      ],
+      "provides": [
+        "session-confirm"
+      ]
+    }
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch"
+  }
+}