@cxyhhhhh/dsh-qqbot 0.5.4-dev.202610281447 → 0.5.4-dev.202610301949

package/CHANGELOG.md

@@ -8,10 +8,36 @@
 
 ## [0.5.4] - 2026-10-28
 
+### 新功能
+
+- **新增 `/bot-me` 指令**：查看发送者 OpenID（私聊为 user openid，群聊为群成员 openid 与群 openid），作为白名单配置的自助入口——用户拿 ID 交管理员加入名单即可。
+- **管理指令白名单鉴权**：`/preset`、`/model` 私聊/群聊均可用，但仅限白名单用户，非白名单成员不可切换 preset/模型（群聊中切换影响该群会话）；指令的私聊/群聊适用范围在 `/bot-help` 中标注。（#5）
+
+### ⚠️ 行为变更（安全默认）
+
+- **访问控制默认收紧**：私聊默认白名单且留空拒绝所有人（此前留空会静默放行）；群聊默认开放（有进群门槛与 @bot 双前置）。扫码绑定时私聊自动切白名单并重置为扫码用户（重绑即换人），绑定即授权。
+- **工作目录默认独立**：Agent 工作目录缺省为 `~/.dsh-qqbot/workspace`，不再跟随 DSH 进程目录；显式配置 `cwd` 可覆盖。
+- **审批按钮校验权限**：白名单模式下审批按钮只对名单内用户生效——非授权成员点击无效，私聊卡片转发后他人点击同样无效。
+
 ### 问题修复
 
-- **保存配置不再破坏其他插件配置**：绑定、改配置、解绑时，cordis.patch.yml 里其他插件的内容（含注释）原样保留，不再被整份重写。（#53）
-- **长提示词可保存**：配置保存的请求体上限从 4KB 调整为 512KB，长 system prompt / 群聊提示词与大白名单不再被拒。（#69）
+- **保存配置不再破坏其他插件**：绑定、改配置、解绑只改自己的条目，其他插件内容与注释原样保留。（#53）
+- **长提示词可保存**：配置保存请求体上限从 4KB 提高到 512KB。（#69）
+- **视觉链路隐患修复**：`qqbot_describe_image` 的消息来源改为新版会话格式，未来图片注入主对话不会报错。（#77）
+- **会话 id 加固**：统一 `session-` 前缀（#81）——社区插件不再误判，多进程并发不产生重复 id；老会话沿用原 id。
+- **切换模型修复**：`/model` 崩溃与切换后重启的「历史加载失败」均已修复，会话历史完整保留。
+- **会话事件读取修复**：`/tokens` 显示 0、`/export` 导出为空、审批按钮不回显被审批命令——均已修复。
+- **压缩修复**：`/compact` 误报「压缩能力不可用」或「当前无活跃会话」——均已修复；后者场景会自动从磁盘拉起会话再压缩。
+- **修复 link 安装后保存配置失败**：`dsh plugin add link:` 安装时界面保存一直报「无法定位 profile 目录」，现已修复；多 profile 共享源码时按当前进程的 profile 精确写入，仍失败时提示手动编辑 `cordis.patch.yml`。（#78）
+- **修复白名单默认值可被绕过**：完全省略 `access` 配置时私聊仍回落开放模式（外层默认值未随子字段更新），现已对齐白名单并加测试钉死。（#94）
+- **审批卡片防混淆与身份加固**：按钮绑定本次审批的唯一标识，旧卡片点击不再生效；白名单模式下点击者身份缺失同样拒绝。（#94）
+- **文件发送路径白名单解析符号链接**：按真实位置判定，root 内的符号链接指向外部时拒绝访问。（#94）
+- **图片附件按真实格式命名扩展名**：QQ 网关对图片统一标注 `image/png`（实际多为 GIF/JPEG），落盘文件名照搬导致按扩展名解码的读图工具失败；现按文件头（magic bytes）识别真实格式并校正扩展名，字节不变、不转码，识别不了的格式保持原行为。（#76）
+- **统一 workspace 路径解析**：新增插件目录单一事实源（`~/.dsh-qqbot`），workspace、media、模型偏好等子路径统一派生，未配置 `cwd` 时不再误用宿主进程目录（此前导致 workspace 内文件发送被误拒）；不存在的文件也改为报「文件不存在」而非误报路径不允许。
+
+### 内部改进
+
+- 新增宿主 API 适配层，统一兼容宿主新旧版本的接口形态。
 
 ## [0.5.3] - 2026-10-27
 

package/CHANGELOG_EN.md

@@ -8,10 +8,36 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 ## [0.5.4] - 2026-10-28
 
+### New Features
+
+- **New `/bot-me` command**: shows the sender's OpenIDs (user openid in DMs; group-member openid and group openid in groups) as a self-service entry for allowlist onboarding — users hand the IDs to an admin to be added to the lists.
+- **Admin command authorization**: `/preset` and `/model` work in both DMs and groups, but only allowlisted users may switch the preset or model (a group switch affects that group's session); each command's DM/group availability is shown in `/bot-help`. (#5)
+
+### ⚠️ Behavior Changes (secure defaults)
+
+- **Access control tightened by default**: DMs default to allowlist with an empty list rejecting everyone (previously empty lists silently allowed everyone); groups default to open (guarded by group membership and the @-mention gate). On QR binding, DMs switch to allowlist with the list reset to the scanning user (rebinding swaps the owner) — binding grants access.
+- **Isolated default workspace**: the agent working directory now defaults to `~/.dsh-qqbot/workspace` instead of following the DSH process directory; set `cwd` explicitly to override.
+- **Approval buttons check permissions**: in allowlist mode, approval buttons only take effect for allowlisted users — clicks by non-authorized members and forwarded DM cards clicked by others are ignored.
+
 ### Fixed
 
-- **Saving configuration no longer clobbers other plugins**: binding, saving settings, and unbinding now edit cordis.patch.yml in place — other plugins' entries and comments are preserved instead of the whole file being rewritten. (#53)
-- **Long prompts can be saved**: the settings-save request body limit is raised from 4KB to 512KB, so long system / group prompts and large allowlists are no longer rejected. (#69)
+- **Saving configuration no longer clobbers other plugins**: binding, saving settings, and unbinding only touch this plugin's own entry; other plugins' content and comments are preserved. (#53)
+- **Long prompts can be saved**: the settings-save request body limit is raised from 4KB to 512KB. (#69)
+- **Vision-path hazard fixed**: the `qqbot_describe_image` message source now uses the current session format, so future image injection into the main conversation will not fail. (#77)
+- **Hardened session ids**: unified `session-` prefix (#81) — community plugins no longer misjudge QQ sessions, multi-process concurrency produces no duplicate ids, and existing sessions keep their original ids.
+- **Fixed model switching**: both the `/model` crash and the "history failed to load" error after restarting post-switch are fixed, with conversation history fully preserved.
+- **Fixed session-event reads**: `/tokens` showing 0, `/export` producing empty output, and approval buttons not echoing the gated command — all fixed.
+- **Fixed compaction**: `/compact` wrongly reporting the service as unavailable or "no active session" — fixed; in the latter case the session is revived from disk before compacting.
+- **Fixed config save failure with link installs**: saving from the settings UI kept reporting "profile directory not found" when installed via `dsh plugin add link:` — fixed. With multiple profiles sharing the same source, writes target the profile of the current process. Remaining failures point at manually editing `cordis.patch.yml`. (#78)
+- **Fixed allowlist default bypass**: omitting `access` entirely still fell back to open DMs (the outer schema default was not updated with the field defaults) — now aligned to allowlist and pinned by tests. (#94)
+- **Approval cards bound to their request and hardened**: buttons now carry the pending approval's unique nonce, so stale cards no longer settle; in allowlist mode a missing clicker identity is rejected too. (#94)
+- **File-send path allowlist resolves symlinks**: paths are judged by their real locations; a symlink inside an allowed root pointing outside is rejected. (#94)
+- **Image attachments named by their real format**: the QQ gateway labels all images `image/png` (most are actually GIF/JPEG), so saved files carried wrong extensions and extension-based image decoding failed; extensions are now corrected from the file header (magic bytes) — bytes unchanged, no transcoding, unknown formats keep the original behavior. (#76)
+- **Unified workspace path resolution**: introduced a single source of truth for the plugin data directory (`~/.dsh-qqbot`), from which the workspace, media, and model-preference paths are uniformly derived; without an explicit `cwd` the host process directory is no longer wrongly used (previously causing workspace file sends to be denied). Missing files now report "file not found" instead of a misleading path denial.
+
+### Internal
+
+- Added a host-API adapter layer that uniformly supports both old and new host interface shapes.
 
 ## [0.5.3] - 2026-10-27
 

package/README.md

@@ -17,7 +17,7 @@
 
 <table>
 <tr>
-<td align="center" width="50%"><img src="./assets/docs/qqgroup.jpg" height="360" alt="QQ 群二维码" /><br /><b>QQ 开发者交流群</b><br /><sub>群号: 1032635674</sub></td>
+<td align="center" width="50%"><img src="./assets/docs/qqgroup.jpg" height="360" alt="QQ 群二维码" /><br /><b>QQ 开发者交流群</b><br /><sub>1群: 1032635674 · 2群: 1056948758</sub></td>
 <td align="center" width="50%"><img src="./assets/docs/qqchannel.jpg" height="360" alt="QQ 频道二维码" /><br /><b>QQ 开发者社区频道</b><br /><sub>频道号: 20dnumts4z</sub></td>
 </tr>
 </table>
@@ -218,7 +218,7 @@ src/
 
 ## 会话路由
 
-sessionKey: `qqbot:${appId}:${scope}:${peerId}`，由 SHA-256 确定性派生 SessionId，重启后可恢复。
+sessionKey: `qqbot:${appId}:${scope}:${peerId}`，新会话铸造 UUID 会话 id 并持久化到 `model-prefs.json`，重启后按持久化 id 恢复；0.5.x 老会话按原派生 id 沿用。
 
 解析策略：进程内复用 → 持久化恢复 → 全新创建。
 

package/README_EN.md

@@ -17,7 +17,7 @@ Scan to join the QQ group / channel
 
 <table>
 <tr>
-<td align="center" width="50%"><img src="./assets/docs/qqgroup.jpg" height="360" alt="QQ Group QR Code" /><br /><b>QQ Developer Group</b><br /><sub>Group ID: 1032635674</sub></td>
+<td align="center" width="50%"><img src="./assets/docs/qqgroup.jpg" height="360" alt="QQ Group QR Code" /><br /><b>QQ Developer Group</b><br /><sub>Group 1: 1032635674 · Group 2: 1056948758</sub></td>
 <td align="center" width="50%"><img src="./assets/docs/qqchannel.jpg" height="360" alt="QQ Channel QR Code" /><br /><b>QQ Developer Channel</b><br /><sub>Channel ID: 20dnumts4z</sub></td>
 </tr>
 </table>
@@ -209,7 +209,7 @@ src/
 
 ## Session Routing
 
-sessionKey: `qqbot:${appId}:${scope}:${peerId}`, with the SessionId derived deterministically via SHA-256 so sessions survive restarts.
+sessionKey: `qqbot:${appId}:${scope}:${peerId}`; a UUID session id is minted for new sessions and persisted to `model-prefs.json`, resuming by the persisted id after restarts; pre-0.6 sessions keep their originally derived ids.
 
 Resolution strategy: in-process reuse → persisted resume → fresh create.
 

package/cordis.patch.yml

@@ -24,9 +24,4 @@
         maxQueue: 20
         processingTimeoutMs: 1800000
         historyLimit: 10
-        access:
-          c2cMode: open
-          c2cAllow: []
-          groupMode: open
-          groupAllow: []
         debug: false

package/lib/client.js

@@ -178,11 +178,12 @@ window.__ModuleLoader__.load({
 		*          gone 表示插件未启用（从未注册过路由），recheck 废弃当前
 		*          定时器并立即重新轮询（新轮询链取代旧链，不产生双计时器）。
 		*/
-		function useBindState() {
+		function useBindState(enabled = true) {
 			const [state, setState] = (0, react.useState)(null);
 			const [gone, setGone] = (0, react.useState)(false);
 			const recheckRef = (0, react.useRef)(() => {});
 			(0, react.useEffect)(() => {
+				if (!enabled) return;
 				let stopped = false;
 				let sawRoute = false;
 				let generation = 0;
@@ -443,10 +444,14 @@ window.__ModuleLoader__.load({
 				}
 			}, "手动填写")));
 		}
-		/** 依据宿主相位渲染面板主体（各展示位共用） */
-		function BindPanelBody() {
+		/** 依据宿主相位渲染面板主体（可注入共享轮询结果避免双计时器） */
+		function BindPanelBody(props) {
 			usePanelStyles();
-			const { state, gone, recheck } = useBindState();
+			const injected = props?.state !== void 0;
+			const internal = useBindState(!injected);
+			const state = injected ? props.state : internal.state;
+			const gone = injected ? props.gone ?? false : internal.gone;
+			const recheck = injected ? props.recheck ?? (() => {}) : internal.recheck;
 			const [lastQr, setLastQr] = (0, react.useState)(null);
 			(0, react.useEffect)(() => {
 				if (state === null) return;
@@ -704,13 +709,14 @@ window.__ModuleLoader__.load({
 		* 保存仅提交变更键（服务端按白名单合并），保存成功后提示
 		* HMR 重载语义（进行中的机器人会话将重置）。
 		*/
-		function ConfigPanel() {
+		function ConfigPanel(props) {
 			useConfigPanelStyles();
 			const [initial, setInitial] = (0, react.useState)(null);
 			const [form, setForm] = (0, react.useState)(null);
 			const [busy, setBusy] = (0, react.useState)(false);
 			const [result, setResult] = (0, react.useState)(null);
 			const [loadError, setLoadError] = (0, react.useState)(null);
+			const bindPhase = props?.bindPhase;
 			(0, react.useEffect)(() => {
 				let stopped = false;
 				fetch(BIND_CONFIG_PATH, { cache: "no-store" }).then(async (res) => {
@@ -725,7 +731,7 @@ window.__ModuleLoader__.load({
 				return () => {
 					stopped = true;
 				};
-			}, []);
+			}, [bindPhase]);
 			const patch = (0, react.useCallback)((key, value) => {
 				setForm((current) => current === null ? current : {
 					...current,
@@ -789,7 +795,7 @@ window.__ModuleLoader__.load({
 			}, "正在加载配置…");
 			const dirty = Object.keys(form).some((key) => !shallowEqual(form[key], initial[key]));
 			const access = form.access ?? {
-				c2cMode: "open",
+				c2cMode: "allowlist",
 				c2cAllow: [],
 				groupMode: "open",
 				groupAllow: []
@@ -936,9 +942,14 @@ window.__ModuleLoader__.load({
 				fill: "var(------icon_primary, #1A1A1A)"
 			}));
 		}
-		/** 设置页「QQ Bot」栏目：面板常驻展示绑定状态 */
+		/** 设置页栏目：共享一份绑定状态轮询，驱动绑定面板与配置刷新 */
 		function QQBotSettingsSection() {
-			return (0, react.createElement)("div", null, (0, react.createElement)(BindPanelBody), (0, react.createElement)(ConfigPanel));
+			const { state, gone, recheck } = useBindState();
+			return (0, react.createElement)("div", null, (0, react.createElement)(BindPanelBody, {
+				state,
+				gone,
+				recheck
+			}), (0, react.createElement)(ConfigPanel, { bindPhase: state?.phase }));
 		}
 		/** 主面板页面：与设置栏目同一内容，包一层滚动留白容器（plugins.detail.actions 的跳转目标） */
 		function QQBotPage() {