@barryfan2045/dsh-matrix 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Hi-Barry
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,286 @@
+# dsh-matrix
+
+用 **Matrix** 远程驱动 DSH(DeepSeek Harness)编码代理：每个聊天房间对应一个 agent 会话，斜杠命令、提问、审批都能在聊天室里完成。
+
+Drive [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) from **Matrix** — every room is an agent session; slash commands, questions and approvals all work from your phone.
+
+[简体中文](#简体中文) | [English](#english)
+
+---
+
+## 简体中文
+
+### 它是什么
+
+dsh-matrix 是一个 DSH 的 Cordis 插件包（bundle 形态）。装上后，`dsh --profile matrix` 就是一个常驻的 Matrix 桥：
+
+```
+Matrix 聊天室 <--> dsh-matrix(桥插件,DSH 进程内) <--> Agent 会话(同进程)
+```
+
+- **不是子进程桥**：会话就是 DSH 自己的 Agent，重启后自动恢复（resume），上下文不丢
+- **完整命令面**：`/compact`、`/plan`、`/goal` 等 DSH 命令透传；桥自带 `/model`、`/thinking`、`/stop`、`/queue`、`/interrupt`、`/sessions`、`/name`、`/status`、`/help`
+- **提问进房间**：agent 的 `ask_user_question` 会渲染成编号列表发到房间，回一条消息就是答案
+- **审批进房间**：沙箱升级请求会在房间里问 (y/n)，一条消息放行
+- **多模型在线切换**：`/model <provider/id>` 即切，对话上下文保持
+- **端到端加密（E2EE）**：加密房间正常收发（matrix-bot-sdk + Rust crypto）
+- **信任与挑战认证**：陌生用户首聊需回日志里的 6 位验证码；`/trusted`、`/revoke` 管理
+- **附件**：发图片给房间，agent 用视觉能力读图（DSH 原生 attachments）
+
+### 安装（三步）
+
+前置：Node >= 20、一个 Matrix bot 账号、已安装 `dsh`。
+
+```bash
+# 1) 建 profile 并装桥
+dsh plugin --profile matrix add @barryfan2045/dsh-matrix
+
+# 2) 写配置: ~/.dsh/profiles/matrix/cordis.patch.yml 追加(chmod 600)
+- id: matrix-bridge
+  config:
+    homeserver: https://matrix.example.com
+    username: bot
+    password: "xxx"          # 或 accessToken: syt_xxx
+    trustedUsers: ['@you:matrix.example.com']
+    workdir: /home/you/Projects
+
+# 3) 跑起来(或交给 systemd)
+dsh --profile matrix
+```
+
+> **装不上的话**：第 1 步可能报 `ERR_PNPM_IGNORED_BUILDS` —— pnpm 默认不跑依赖的
+> 构建脚本，而加密原生库（`@matrix-org/matrix-sdk-crypto-nodejs`）要靠它下载预编译
+> 二进制。此时依赖已写进 profile 的 `package.json`，但命令非零退出，dsh 就中止了，
+> 插件并没有真正挂上。把 `~/.dsh/profiles/matrix/pnpm-workspace.yaml` 里
+> `allowBuilds:` 下那行改成 `true`，再跑一次 `dsh plugin --profile matrix install` 即可。
+> 用 `dsh-matrix install-profile` 安装的话，这一步会自动处理。
+
+> **E2EE 突然收不到加密消息**：日志里若反复出现 `Can't find the room key to decrypt the
+> event`，先看启动时那两行：`E2EE 已启用(crypto: …)` 与 `matrix 登录成功: …`。
+> 桥现在会**复用 crypto 存储里的设备身份**去登录（日志里带 `(复用设备 XXXXXXXX)`），
+> "设备密钥挂在 A、`/sync` 却在听 B"这种分叉不会再发生。
+> 只有当日志出现 `E2EE 设备身份分叉` 的 WARN（用 `accessToken` 直连时才会）才需要复位：
+> 跑 `dsh-matrix reset-crypto`，默认把旧存储**改名备份**（`--purge` 才真删）。
+> 代价要想清楚 —— **换存储 = 换设备身份**，Element 那边会看到一个新设备、需要重新验证，
+> 历史加密消息也解不开。复位后 `dsh-matrix enable` 恢复服务。
+> 另外：复位只换本地存储，**不会**删服务端上的旧设备（它们会成为孤儿设备、拖慢加密发送）；
+> 用 `dsh-matrix prune-devices` 清理（默认只列出，确认后加 `--yes`）。
+
+在 Element（或任何 Matrix 客户端）里给 bot 发私信即可开聊。
+
+### 运维命令（`dsh-matrix`）
+
+| 命令 | 作用 |
+|---|---|
+| `setup` | 配置向导，写 `~/.dsh/dsh-matrix.json`（0600） |
+| `install-profile` | 挂载 bundle + 幂等生成 profile patch |
+| `enable` / `start` / `stop` / `restart` / `disable` | systemd user unit 生命周期 |
+| `status` / `logs` | 查看服务状态 / 跟踪日志 |
+| `run` | 前台运行（等价 `dsh --profile <实例名>`） |
+| `reset-crypto` | 复位 crypto 存储（默认**改名备份**，`--purge` 才真删） |
+| `prune-devices` | 清理账号上遗留的孤儿设备——**默认只列出**，加 `--yes` 才真删 |
+
+> **什么是孤儿设备**：桥以前每次密码登录都会新建设备（现已修好）。这些旧设备的私钥
+> 早已随着复位的 crypto 目录作废，却仍然留在账号上、参与**每一次**加密发送的设备列表
+> （要把房间密钥逐个分享给它们），实测能把首次发送拖到分钟级。清理时会保留
+> **当前桥设备**，其余先列出来给你确认：
+>
+> ```bash
+> dsh-matrix prune-devices                       # 演练:只列出,不删任何设备
+> dsh-matrix prune-devices --yes                 # 确认后真删(不可逆)
+> dsh-matrix prune-devices --yes --keep-days 7   # 顺带保留最近 7 天活动过的
+> ```
+>
+> 删设备需要 Matrix 的 UI auth 重认证，所以运维配置里得有 `password`（只有
+> `accessToken` 时会明确报错，不会静默失败）。
+> **这条命令有一条硬规矩：绝不新建设备。** 它会复用 crypto 存储里的设备身份去登录；
+> 万一找不到既有身份（比如换了 `DSH_HOME`），它会**直接拒绝并告诉你怎么办**，而不是
+> 默默造一个新设备 —— 那正好是它要治的毛病。桥自定义过 `dataDir` 时用
+> `--data-dir <dir>` 指过来。
+
+### 常用命令
+
+| 命令 | 作用 |
+|---|---|
+| 普通文本 | 空闲 -> 开回合；运行中 -> steer 注入当前回合 |
+| `/stop` `/abort` `/queue <文本>` `/interrupt <文本>` `/last` | 回合控制（对齐 pi TUI 语义） |
+| `/model [provider/id]` `/models` `/thinking [档位]` | 查看/切换模型与推理档位 |
+| `/sessions` `/name <标题>` `/status` `/export` | 会话管理（`/sessions` 列出本进程已知的会话） |
+| `/compact` `/plan` `/goal` … | DSH 原生命令透传（按当前 profile 实时列出） |
+| `/help` | 全量命令表（桥命令 + 透传命令） |
+| `/trusted` `/revoke <用户>` | 信任名单管理（admin） |
+| `/channels` `/enable` `/disable` | 群聊响应模式：全部 / 仅 @ 提到 / 仅信任用户（admin） |
+| `/pmctl new\|list\|show\|rm\|mv\|rename` | 多项目管理（仅管理房间） |
+| `y` / `n` / 数字 / 「取消」 | 回答房间里的提问与审批 |
+
+### 与 pi-courier 的差异
+
+| 维度 | pi-courier | dsh-matrix |
+|---|---|---|
+| 运行形态 | 外部 RPC 子进程（pi CLI），每会话一个进程 | DSH 进程内插件（Cordis bundle），会话就是 DSH Agent |
+| 会话恢复 | 自己管进程与上下文 | DSH 原生 `resume`，重启进程后上下文不丢 |
+| 提问 | 无 | agent 的 `ask_user_question` 渲染成编号列表进房间 |
+| 审批 | 无 | 沙箱升级审批进房间，一条 `y`/`n` 放行 |
+| 命令面 | pi 自己的命令表 | 桥命令 + DSH 原生命令透传（`/help` 实时列出） |
+| 登录 | `/login` `/logout` `/auth`（OAuth 设备码） | 无此命令：DSH 用 settings/credentials 里的 API key |
+| `/autocompact` `/autoretry` | 支持（写 pi 全局设置） | 未实现：全局设置 vs composition 行，语义不可平移 |
+| `/reload` | 支持（重启 pi 进程） | 未实现：进程内插件没有子进程可重启 |
+| `/new` | 支持 | 未实现：房间↔会话是确定性一对一，同房间换会话会牵动持久化/鉴权/账本；要全新上下文请用 `/pmctl new` 开新房间 |
+| `/clear` `/cost` `/cyclemodel` `/cyclethinking` `/bash` | 支持 | 未实现（不在本规格的用户故事内） |
+
+### 来自 pi-courier
+
+本项目移植自 [pi-courier](https://github.com/Hi-Barry/pi-courier)（MIT）的 Matrix 层——
+传输、挑战认证、引用缓存、格式化逻辑在这里重获新生；架构从「外部 RPC 子进程」换成了
+「DSH 进程内插件」。再上游致谢 [tintinweb/pi-messenger-bridge](https://github.com/tintinweb/pi-messenger-bridge)（MIT）。
+逐文件的来源标注与致谢见 [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md)。
+
+### 许可
+
+MIT，全文见 [LICENSE](LICENSE)。
+
+---
+
+## English
+
+### What it is
+
+dsh-matrix is a **Cordis plugin (bundle)** for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness).
+Once installed, `dsh --profile matrix` is a long-running Matrix bridge:
+
+```
+Matrix room <--> dsh-matrix (plugin, inside the DSH process) <--> agent session (same process)
+```
+
+- **Not a child-process bridge**: the session *is* a DSH agent, and it resumes after a restart with its context intact.
+- **Full command surface**: DSH commands (`/compact`, `/plan`, `/goal`, …) pass through; the bridge adds `/model`, `/thinking`, `/stop`, `/queue`, `/interrupt`, `/sessions`, `/name`, `/status`, `/help`.
+- **Questions land in the room**: the agent's `ask_user_question` is rendered as a numbered list — one reply is the answer.
+- **Approvals land in the room**: a sandbox escalation asks `(y/n)` in the room; one message lets it through.
+- **Live model switching**: `/model <provider/id>` switches mid-conversation without losing context.
+- **End-to-end encryption**: encrypted rooms work (matrix-bot-sdk + Rust crypto).
+- **Trust on first contact**: a stranger's first DM must echo a 6-digit code printed in the log; `/trusted` and `/revoke` manage the list.
+- **Attachments**: send an image and the agent reads it through DSH's native attachments (vision).
+
+### Install (three steps)
+
+Prerequisites: Node >= 20, a Matrix bot account, and `dsh` installed.
+
+```bash
+# 1) create the profile and install the bridge
+dsh plugin --profile matrix add @barryfan2045/dsh-matrix
+
+# 2) append this to ~/.dsh/profiles/matrix/cordis.patch.yml (chmod 600)
+- id: matrix-bridge
+  config:
+    homeserver: https://matrix.example.com
+    username: bot
+    password: "xxx"          # or accessToken: syt_xxx
+    trustedUsers: ['@you:matrix.example.com']
+    workdir: /home/you/Projects
+
+# 3) run it (or hand it to systemd)
+dsh --profile matrix
+```
+
+> **If step 1 fails**: it may abort with `ERR_PNPM_IGNORED_BUILDS` — pnpm does not run
+> dependency build scripts by default, and the crypto native library
+> (`@matrix-org/matrix-sdk-crypto-nodejs`) needs its postinstall to download a prebuilt
+> binary. The dependency is already in the profile's `package.json`, but the non-zero exit
+> makes dsh stop before mounting the bundle. Set the `allowBuilds:` entry in
+> `~/.dsh/profiles/matrix/pnpm-workspace.yaml` to `true` and re-run
+> `dsh plugin --profile matrix install`. Installing through `dsh-matrix install-profile`
+> handles this automatically.
+
+> **E2EE suddenly stops delivering encrypted messages**: if the log keeps repeating
+> `Can't find the room key to decrypt the event`, first check the two startup lines:
+> `E2EE 已启用(crypto: …)` and `matrix 登录成功: …`. The bridge now **reuses the device
+> identity stored in its crypto store** when it logs in (the log says
+> `(复用设备 XXXXXXXX)`), so the split brain — device keys uploaded for device A while
+> `/sync` listens as device B — no longer happens.
+> Only if you see the `E2EE 设备身份分叉` WARN (possible only on the `accessToken` path)
+> should you reset: run `dsh-matrix reset-crypto`, which **renames the old store to a
+> backup** by default (`--purge` deletes it). Be aware of the cost — **a new store means a
+> new device identity**: Element will show a new device that needs re-verification, and old
+> encrypted messages stay unreadable. Then `dsh-matrix enable` to bring the bridge back.
+> Note: a reset only swaps the local store — it does **not** delete the old devices on the
+> server (they become orphans and slow encrypted sends down). Clean them up with
+> `dsh-matrix prune-devices` (lists only by default; add `--yes` to actually delete).
+
+DM the bot from Element (or any Matrix client) to start chatting.
+
+### Ops commands (`dsh-matrix`)
+
+| Command | Effect |
+|---|---|
+| `setup` | Config wizard; writes `~/.dsh/dsh-matrix.json` (0600) |
+| `install-profile` | Mounts the bundle + idempotently writes the profile patch |
+| `enable` / `start` / `stop` / `restart` / `disable` | systemd user unit lifecycle |
+| `status` / `logs` | Service status / follow logs |
+| `run` | Foreground run (same as `dsh --profile <name>`) |
+| `reset-crypto` | Reset the crypto store (**renames to a backup**; `--purge` deletes) |
+| `prune-devices` | Clean up leftover orphan devices — **lists only** unless you add `--yes` |
+
+> **What is an orphan device?** The bridge used to create a brand-new device on every
+> password login (fixed now). Those old devices' private keys died with the crypto store
+> they were reset away from, yet they still sit on the account and take part in **every**
+> encrypted send (the room key gets shared with each of them) — measured to push the first
+> send into the minutes. Pruning always keeps the **current bridge device** and lists the
+> rest for you to confirm first:
+>
+> ```bash
+> dsh-matrix prune-devices                       # dry run: lists, deletes nothing
+> dsh-matrix prune-devices --yes                 # actually delete (irreversible)
+> dsh-matrix prune-devices --yes --keep-days 7   # also keep devices seen in the last 7 days
+> ```
+>
+> Deleting a device needs Matrix UI auth re-authentication, so the ops config must have a
+> `password` (with only an `accessToken` it fails loudly rather than silently).
+> **This command has one hard rule: it never creates a device.** It logs in by reusing the
+> device identity in the crypto store; if it cannot find an existing identity (e.g. you
+> pointed at a different `DSH_HOME`) it **refuses and tells you what to do** instead of
+> quietly minting a new device — which is exactly the disease it exists to cure. If the
+> bridge uses a custom `dataDir`, pass `--data-dir <dir>`.
+
+### Commands
+
+| Command | Effect |
+|---|---|
+| Plain text | idle -> starts a turn; running -> steers the current turn |
+| `/stop` `/abort` `/queue <text>` `/interrupt <text>` `/last` | Turn control (same semantics as the pi TUI) |
+| `/model [provider/id]` `/models` `/thinking [level]` | Show/switch model and reasoning effort |
+| `/sessions` `/name <title>` `/status` `/export` | Session management (`/sessions` lists the sessions this process knows) |
+| `/compact` `/plan` `/goal` … | DSH commands, passed through (listed live from the current profile) |
+| `/help` | Full command table (bridge commands + pass-through) |
+| `/trusted` `/revoke <user>` | Trusted-list management (admin) |
+| `/channels` `/enable` `/disable` | Group response mode: all / mentions only / trusted users only (admin) |
+| `/pmctl new\|list\|show\|rm\|mv\|rename` | Multi-project management (management room only) |
+| `y` / `n` / a number / "cancel" | Answer a question or approval in the room |
+
+### Differences from pi-courier
+
+| Aspect | pi-courier | dsh-matrix |
+|---|---|---|
+| Runtime shape | External RPC child process (pi CLI), one per session | In-process DSH plugin (Cordis bundle); the session *is* the DSH agent |
+| Session restore | Manages its own processes and context | DSH-native `resume`; context survives a restart |
+| Questions | none | the agent's `ask_user_question` becomes a numbered list in the room |
+| Approvals | none | sandbox escalation asks in the room; one `y`/`n` releases it |
+| Command surface | pi's own command table | bridge commands + DSH pass-through (listed live by `/help`) |
+| Login | `/login` `/logout` `/auth` (OAuth device code) | no such command: DSH uses API keys from settings/credentials |
+| `/autocompact` `/autoretry` | supported (writes pi's global settings) | not implemented: global settings vs composition rows |
+| `/reload` | supported (restarts the pi process) | not implemented: an in-process plugin has no child process to restart |
+| `/new` | supported | not implemented: a room maps to exactly one session, so a same-room reset would ripple through persistence, auth and ledgers. Use `/pmctl new` to start a fresh room/session |
+| `/clear` `/cost` `/cyclemodel` `/cyclethinking` `/bash` | supported | not implemented (outside this spec's user stories) |
+
+### Ported from pi-courier
+
+This project ports the Matrix layer of [pi-courier](https://github.com/Hi-Barry/pi-courier) (MIT):
+transport, challenge auth, the quote cache and the formatting logic all live on here. The architecture
+changed from "external RPC child process" to "in-process DSH plugin". Upstream thanks to
+[tintinweb/pi-messenger-bridge](https://github.com/tintinweb/pi-messenger-bridge) (MIT).
+Per-file attribution is in [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md).
+
+### License
+
+MIT — see [LICENSE](LICENSE). Includes code ported from pi-courier (MIT) and
+tintinweb/pi-messenger-bridge (MIT); per-file attribution is in
+[THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md).

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,53 @@
+# 第三方来源与致谢
+
+dsh-matrix 以 MIT 许可发布（见 [LICENSE](./LICENSE)）。下面列出实际被移植进本仓库的
+上游代码。上游同样都是 MIT，逐文件的来源标注写在对应源码文件的头部注释里。
+
+## pi-courier — https://github.com/Hi-Barry/pi-courier
+
+Copyright (c) 2026 Hi-Barry — MIT。
+
+本项目的 Matrix 传输层、挑战认证、引用缓存、附件账本、格式化与运维 CLI 移植自
+pi-courier。**架构不同**：pi-courier 是「外部 RPC 子进程」，dsh-matrix 是
+「DSH 进程内 Cordis 插件」；移植的是层内逻辑，不是进程模型。
+
+主要落点（文件头注释里逐一标注了上游对应文件）：
+
+| 本仓库 | 上游来源 |
+|---|---|
+| `src/matrix/transport.ts` | `src/transports/matrix.ts`、`src/matrix-utils.ts`、`src/matrix-rooms.ts` |
+| `src/matrix/matrix-events.ts` | pi-courier 事件翻译模块 |
+| `src/auth/challenge.ts` | `src/challenge-auth.ts` |
+| `src/auth/admin-commands.ts` | `src/auth/admin-commands.ts` |
+| `src/auth/store.ts` | pi-courier 认证存储 |
+| `src/bridge/attachments-ledger.ts` | pi-courier 附件账本 |
+| `src/bridge/quote-cache.ts` | `src/quote-cache.ts` |
+| `src/bridge/pmctl.ts`、`src/bridge/projects.ts` | pi-courier 多项目管理 |
+| `src/cli/systemd.ts`、`src/cli/systemd-hint.ts` | pi-courier 部署脚本 |
+| `src/logger.ts` | `src/logger.ts` |
+
+## tintinweb/pi-messenger-bridge — https://github.com/tintinweb/pi-messenger-bridge
+
+Copyright (c) tintinweb — MIT。
+
+这是更上游的项目：pi-courier 的 Matrix 传输层与挑战认证源自它，dsh-matrix 又从
+pi-courier 承接了这一层。在此一并致谢。
+
+## 依赖
+
+运行时依赖（`matrix-bot-sdk`、`@matrix-org/matrix-sdk-crypto-nodejs`、
+`@deepseek-ai/*`）各自遵循其自身许可，见 `package.json` 与
+`node_modules/<包>/LICENSE`。
+
+## 头像资源（assets/avatars/）
+
+`assets/avatars/` 下的 13 张 PNG（`instance-01.png` … `instance-12.png` +
+`management.png`）来自上游 [pi-courier](https://github.com/Hi-Barry/pi-courier)（MIT）
+的 `assets/avatars/`，是上游原创的 AI 生成美术（candy / 棉花糖动物风格，512×512）。
+
+本项目把它们**等比缩到 128×128 后入库**：上游 13 张合计约 6.4MB，而本包（不含图）才
+140KB，原样入库会让包体积涨约 47 倍，且二进制一旦进 git 历史就无法回收。缩放由
+`scripts/downscale-avatars.mjs` 完成（只依赖 node 内置 zlib，可复现），源目录是只读的
+上游克隆，不入本仓库。
+
+想换成自己的图：同名覆盖 `assets/avatars/` 下的文件即可，不需要改代码。

package/cordis.patch.yml

@@ -0,0 +1,13 @@
+# dsh-matrix bundle patch:插入桥插件行。
+# 凭据与偏好由 profile 用户层按 id `matrix-bridge` 覆盖 config(spike 实测的挂层方式)。
+- insert:
+    # 提问进房间的模型侧开关:桥 profile 挂载 ask_user_question 工具
+    # (userQuestions 服务行由 base 提供,这里只补工具)
+    - id: tool-ask-user
+      name: '@deepseek-ai/dsh-tool-ask-user'
+
+    - id: matrix-bridge
+      name: '@barryfan2045/dsh-matrix'
+      config:
+        # 全部可被 profile 层覆盖;这里只放安全默认值
+        logLevel: info

package/dist/auth/admin-commands.d.ts

@@ -0,0 +1,47 @@
+/**
+ * T2: bridge admin commands (/trusted, /revoke) - pure functions ported in
+ * spirit from pi-courier src/auth/admin-commands.ts (MIT).
+ *
+ * parse turns text into a command value; execute mutates only through the
+ * injected AuthStore and returns the one room-facing reply string. The admin
+ * gate lives here (the bridge diverges from pi-courier's trusted-only rule:
+ * these two commands are admin-only, others get a permission notice).
+ *
+ * Scope note: /revoke only touches the RUNTIME trust list; users seeded from
+ * the row-config snapshot must be removed from the config itself (T10 ops).
+ */
+import type { AuthStore } from './store.ts';
+export type AdminCommand = {
+    name: 'trusted';
+} | {
+    name: 'revoke';
+    target?: string;
+} | {
+    name: 'channels';
+} | {
+    name: 'enable';
+    roomId?: string;
+    mode?: string;
+} | {
+    name: 'disable';
+    roomId?: string;
+};
+export declare function adminCommandNames(): string[];
+/** Match a message against the bridge admin command set (first token, case-insensitive). */
+export declare function parseAdminCommand(text: string): AdminCommand | undefined;
+export interface AdminExecDeps {
+    store: AuthStore;
+    /** Who sent the command (raw MXID). */
+    sender: string;
+    /** Admin decision, injected by the pipeline (store admin ?? static first). */
+    isAdmin: (userId: string) => boolean;
+    /** Trust decision (T8: /enable is trusted-level). Defaults to isAdmin. */
+    isTrusted?: (userId: string) => boolean;
+    /** Room the command came from (T8: current-room /enable target). */
+    roomId?: string;
+    /** Host-side chatter hook (defaults to no-op). */
+    notify?: (message: string) => void;
+}
+/** Run a parsed admin command; returns the text to send back to the room. */
+export declare function executeAdminCommand(cmd: AdminCommand, deps: AdminExecDeps): string;
+//# sourceMappingURL=admin-commands.d.ts.map

package/dist/auth/admin-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-commands.d.ts","sourceRoot":"","sources":["../../src/auth/admin-commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,YAAY,CAAA;AAExD,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AASxC,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAE5C;AAED,4FAA4F;AAC5F,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAiBxE;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,SAAS,CAAA;IAChB,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAA;IACd,8EAA8E;IAC9E,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAA;IACpC,0EAA0E;IAC1E,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAA;IACvC,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,kDAAkD;IAClD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CACnC;AAED,6EAA6E;AAC7E,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,MAAM,CA8ClF"}

package/dist/auth/admin-commands.js

@@ -0,0 +1,112 @@
+const COMMAND_NAMES = new Set(['trusted', 'revoke', 'channels', 'enable', 'disable']);
+const CHANNEL_MODES = ['all', 'mentions', 'trusted-only'];
+function isChannelMode(value) {
+    return value !== undefined && CHANNEL_MODES.includes(value);
+}
+export function adminCommandNames() {
+    return [...COMMAND_NAMES];
+}
+/** Match a message against the bridge admin command set (first token, case-insensitive). */
+export function parseAdminCommand(text) {
+    const parts = text.trim().split(/\s+/);
+    const head = (parts[0] ?? '').toLowerCase();
+    if (head === '/trusted')
+        return { name: 'trusted' };
+    if (head === '/revoke') {
+        return parts[1] !== undefined ? { name: 'revoke', target: parts[1] } : { name: 'revoke' };
+    }
+    if (head === '/channels')
+        return { name: 'channels' };
+    if (head === '/enable') {
+        // Two args → explicit target room; one arg → the current room's mode.
+        if (parts.length >= 3)
+            return { name: 'enable', roomId: parts[1], mode: parts[2] };
+        return { name: 'enable', roomId: undefined, mode: parts[1] };
+    }
+    if (head === '/disable') {
+        return parts[1] !== undefined ? { name: 'disable', roomId: parts[1] } : { name: 'disable' };
+    }
+    return undefined;
+}
+/** Run a parsed admin command; returns the text to send back to the room. */
+export function executeAdminCommand(cmd, deps) {
+    const isTrusted = deps.isTrusted ?? deps.isAdmin;
+    // T8 group commands keep their own permission ladder: /enable is
+    // trusted-level (spec US32), /disable and /channels stay admin-only.
+    if (cmd.name === 'enable') {
+        if (!isTrusted(deps.sender))
+            return `⛔ 权限不足:/enable 仅 trusted 用户可用。`;
+        return executeEnable(cmd, deps);
+    }
+    if (cmd.name === 'disable' || cmd.name === 'channels') {
+        if (!deps.isAdmin(deps.sender))
+            return `⛔ 权限不足:/${cmd.name} 仅管理员可用。`;
+        return cmd.name === 'channels' ? executeChannels(deps) : executeDisable(cmd, deps);
+    }
+    if (!deps.isAdmin(deps.sender)) {
+        return `⛔ 权限不足:/${cmd.name} 仅管理员可用。`;
+    }
+    if (cmd.name === 'trusted') {
+        const state = deps.store.get();
+        if (state.trustedUsers.length === 0)
+            return '信任名单为空(还没有人通过挑战认证)。';
+        const lines = state.trustedUsers.map((id) => `• ${id}${id === state.adminUserId ? '(管理员)' : ''}`);
+        return [`信任名单 (${state.trustedUsers.length}):`, ...lines].join('\n');
+    }
+    // /revoke
+    const target = cmd.target;
+    if (!target)
+        return '用法: /revoke <mxid>';
+    const state = deps.store.get();
+    const index = state.trustedUsers.indexOf(target);
+    if (index === -1)
+        return `❌ ${target} 不在信任名单(运行时名单只收录通过挑战认证的用户;配置里的静态用户请改配置文件)。`;
+    state.trustedUsers.splice(index, 1);
+    if (state.adminUserId === target) {
+        // Revoke demotes: the earliest remaining runtime-trusted user takes over,
+        // otherwise fall back to the pipeline's static-list admin rule.
+        const next = state.trustedUsers[0];
+        if (next !== undefined)
+            state.adminUserId = next;
+        else
+            delete state.adminUserId;
+    }
+    deps.store.set(state);
+    deps.notify?.(`Revoked: ${target}`);
+    return `🔓 已回收 ${target} 的信任。`;
+}
+// ── T8: group room toggles ─────────────────────────────────────────────
+function executeEnable(cmd, deps) {
+    const usage = '用法: /enable <all|mentions|trusted-only>(本房间)或 /enable <roomId> <模式>(DM)';
+    // Three-arg form carries an explicit room; one-arg form targets the room
+    // the command was sent in (needs the pipeline to supply deps.roomId).
+    const roomId = cmd.roomId ?? deps.roomId;
+    if (!roomId)
+        return usage;
+    if (!isChannelMode(cmd.mode))
+        return usage;
+    const state = deps.store.get();
+    state.channels[roomId] = { enabled: true, mode: cmd.mode };
+    deps.store.set(state);
+    deps.notify?.(`Enabled channel ${roomId} (${cmd.mode})`);
+    return `✅ ${cmd.roomId ? `房间 ${roomId}` : '本房间'}已启用 (mode: ${cmd.mode})`;
+}
+function executeDisable(cmd, deps) {
+    const roomId = cmd.roomId;
+    if (!roomId)
+        return '用法: /disable <roomId>';
+    const state = deps.store.get();
+    const entry = state.channels[roomId];
+    if (!entry || !entry.enabled)
+        return `❌ 房间 ${roomId} 没有启用,无需停用。`;
+    entry.enabled = false;
+    deps.store.set(state);
+    deps.notify?.(`Disabled channel ${roomId}`);
+    return `🚫 已停用 ${roomId}(mode 保留,可再 /enable)。`;
+}
+function executeChannels(deps) {
+    const channels = deps.store.get().channels;
+    const lines = Object.entries(channels).map(([id, c]) => `• ${id}: ${c.enabled ? '✅' : '❌'} (${c.mode})`);
+    return lines.length > 0 ? ['群房间策略:', ...lines].join('\n') : '还没有配置任何群房间(默认全部沉默)。';
+}
+//# sourceMappingURL=admin-commands.js.map

package/dist/auth/admin-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-commands.js","sourceRoot":"","sources":["../../src/auth/admin-commands.ts"],"names":[],"mappings":"AAqBA,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAA;AACrF,MAAM,aAAa,GAA2B,CAAC,KAAK,EAAE,UAAU,EAAE,cAAc,CAAC,CAAA;AAEjF,SAAS,aAAa,CAAC,KAAyB;IAC9C,OAAO,KAAK,KAAK,SAAS,IAAK,aAAmC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AACpF,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,CAAC,GAAG,aAAa,CAAC,CAAA;AAC3B,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACtC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IAC3C,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IACnD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IAC3F,CAAC;IACD,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;IACrD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,sEAAsE;QACtE,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;QAClF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9D,CAAC;IACD,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IAC7F,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAgBD,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CAAC,GAAiB,EAAE,IAAmB;IACxE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAA;IAEhD,iEAAiE;IACjE,qEAAqE;IACrE,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,gCAAgC,CAAA;QACpE,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACjC,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACtD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,WAAW,GAAG,CAAC,IAAI,UAAU,CAAA;QACpE,OAAO,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACpF,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,OAAO,WAAW,GAAG,CAAC,IAAI,UAAU,CAAA;IACtC,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;QAC9B,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,qBAAqB,CAAA;QACjE,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAClC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5D,CAAA;QACD,OAAO,CAAC,SAAS,KAAK,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtE,CAAC;IAED,UAAU;IACV,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;IACzB,IAAI,CAAC,MAAM;QAAE,OAAO,oBAAoB,CAAA;IAExC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;IAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAChD,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,MAAM,4CAA4C,CAAA;IAEhF,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IACnC,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;QACjC,0EAA0E;QAC1E,gEAAgE;QAChE,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAClC,IAAI,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,WAAW,GAAG,IAAI,CAAA;;YAC3C,OAAO,KAAK,CAAC,WAAW,CAAA;IAC/B,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACrB,IAAI,CAAC,MAAM,EAAE,CAAC,YAAY,MAAM,EAAE,CAAC,CAAA;IACnC,OAAO,UAAU,MAAM,OAAO,CAAA;AAChC,CAAC;AAED,0EAA0E;AAE1E,SAAS,aAAa,CAAC,GAA8C,EAAE,IAAmB;IACxF,MAAM,KAAK,GAAG,yEAAyE,CAAA;IACvF,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAA;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACzB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IAE1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;IAC9B,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAA;IAC1D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACrB,IAAI,CAAC,MAAM,EAAE,CAAC,mBAAmB,MAAM,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAA;IACxD,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,cAAc,GAAG,CAAC,IAAI,GAAG,CAAA;AAC1E,CAAC;AAED,SAAS,cAAc,CAAC,GAA+C,EAAE,IAAmB;IAC1F,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;IACzB,IAAI,CAAC,MAAM;QAAE,OAAO,uBAAuB,CAAA;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;IAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACpC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,QAAQ,MAAM,aAAa,CAAA;IAChE,KAAK,CAAC,OAAO,GAAG,KAAK,CAAA;IACrB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACrB,IAAI,CAAC,MAAM,EAAE,CAAC,oBAAoB,MAAM,EAAE,CAAC,CAAA;IAC3C,OAAO,UAAU,MAAM,uBAAuB,CAAA;AAChD,CAAC;AAED,SAAS,eAAe,CAAC,IAAmB;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAA;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,GAAG,CAC7D,CAAA;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAA;AACnF,CAAC"}