@cxyhhhhh/dsh-qqbot 0.5.4-dev.202610292027 → 0.5.4-dev.202610302146

package/CHANGELOG.md

@@ -8,7 +8,12 @@
 
 ## [0.5.4] - 2026-10-28
 
-### ⚠️ 行为变更（安全默认，#83）
+### 新功能
+
+- **新增 `/bot-me` 指令**：查看发送者 OpenID（私聊为 user openid，群聊为群成员 openid 与群 openid），作为白名单配置的自助入口——用户拿 ID 交管理员加入名单即可。
+- **管理指令白名单鉴权**：`/preset`、`/model` 私聊/群聊均可用，但仅限白名单用户，非白名单成员不可切换 preset/模型（群聊中切换影响该群会话）；指令的私聊/群聊适用范围在 `/bot-help` 中标注。（#5）
+
+### ⚠️ 行为变更（安全默认）
 
 - **访问控制默认收紧**：私聊默认白名单且留空拒绝所有人（此前留空会静默放行）；群聊默认开放（有进群门槛与 @bot 双前置）。扫码绑定时私聊自动切白名单并重置为扫码用户（重绑即换人），绑定即授权。
 - **工作目录默认独立**：Agent 工作目录缺省为 `~/.dsh-qqbot/workspace`，不再跟随 DSH 进程目录；显式配置 `cwd` 可覆盖。
@@ -24,6 +29,16 @@
 - **会话事件读取修复**：`/tokens` 显示 0、`/export` 导出为空、审批按钮不回显被审批命令——均已修复。
 - **压缩修复**：`/compact` 误报「压缩能力不可用」或「当前无活跃会话」——均已修复；后者场景会自动从磁盘拉起会话再压缩。
 - **修复 link 安装后保存配置失败**：`dsh plugin add link:` 安装时界面保存一直报「无法定位 profile 目录」，现已修复；多 profile 共享源码时按当前进程的 profile 精确写入，仍失败时提示手动编辑 `cordis.patch.yml`。（#78）
+- **修复白名单默认值可被绕过**：完全省略 `access` 配置时私聊仍回落开放模式（外层默认值未随子字段更新），现已对齐白名单并加测试钉死。（#94）
+- **审批卡片防混淆与身份加固**：按钮绑定本次审批的唯一标识，旧卡片点击不再生效；白名单模式下点击者身份缺失同样拒绝。（#94）
+- **文件发送路径白名单解析符号链接**：按真实位置判定，root 内的符号链接指向外部时拒绝访问。（#94）
+- **图片附件按真实格式命名扩展名**：QQ 网关对图片统一标注 `image/png`（实际多为 GIF/JPEG），落盘文件名照搬导致按扩展名解码的读图工具失败；现按文件头（magic bytes）识别真实格式并校正扩展名，字节不变、不转码，识别不了的格式保持原行为。（#76）
+- **统一 workspace 路径解析**：新增插件目录单一事实源（`~/.dsh-qqbot`），workspace、media、模型偏好等子路径统一派生，未配置 `cwd` 时不再误用宿主进程目录（此前导致 workspace 内文件发送被误拒）；不存在的文件也改为报「文件不存在」而非误报路径不允许。
+- **vision 配置自动补写不再破坏 settings.yaml**：启动时为视觉模型补写 `input` 声明改用文档保真编辑（注释、锚点、其他配置原样保留）+ 原子写 + 并发冲突时放弃重试，此前全量重序列化会抹掉文件里的全部注释与排版。
+- **偏好文件并发安全**：`model-prefs.json`（会话 id 映射，多实例/多进程共享）改为原子写 + 写前合并其他写者的条目，多 bot 或多 profile 并存不再互相覆盖丢映射；删除操作带墓碑防止被并发写复活；读取/写入失败升级为可见告警（此前仅 debug 甚至静默，映射丢失表现为「QQ 里丢上下文」且无从排查）。
+- **修复会话列表可能打不开**：恢复会话失败时只在确认磁盘上确实没有该会话后才新建，日志损坏、后端故障等原因不再沿用同一会话 id 重复创建（此前会把同一 id 写进多个目录，宿主随后拒绝加载整个会话列表）；这类故障改为明确报错并记录日志，恢复后原会话历史仍在。
+- **修复并发消息可能切错会话**：旧版本的会话 id 由用户标识确定性派生，仅用于迁移存量会话，不再用于新建；同一会话的并发请求（斜杠指令与普通消息同时到达）合并为一次恢复/创建，不再产生两个互相覆盖且无人回收的会话实例。
+- **vision 配置补写不再丢数字精度**：补写 `input` 声明时整数按原文保留，用户 `settings.yaml` 里的大整数（安装 id、时间戳等）不再被截断。
 
 ### 内部改进
 

package/CHANGELOG_EN.md

@@ -8,7 +8,12 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 ## [0.5.4] - 2026-10-28
 
-### ⚠️ Behavior Changes (secure defaults, #83)
+### New Features
+
+- **New `/bot-me` command**: shows the sender's OpenIDs (user openid in DMs; group-member openid and group openid in groups) as a self-service entry for allowlist onboarding — users hand the IDs to an admin to be added to the lists.
+- **Admin command authorization**: `/preset` and `/model` work in both DMs and groups, but only allowlisted users may switch the preset or model (a group switch affects that group's session); each command's DM/group availability is shown in `/bot-help`. (#5)
+
+### ⚠️ Behavior Changes (secure defaults)
 
 - **Access control tightened by default**: DMs default to allowlist with an empty list rejecting everyone (previously empty lists silently allowed everyone); groups default to open (guarded by group membership and the @-mention gate). On QR binding, DMs switch to allowlist with the list reset to the scanning user (rebinding swaps the owner) — binding grants access.
 - **Isolated default workspace**: the agent working directory now defaults to `~/.dsh-qqbot/workspace` instead of following the DSH process directory; set `cwd` explicitly to override.
@@ -24,6 +29,16 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - **Fixed session-event reads**: `/tokens` showing 0, `/export` producing empty output, and approval buttons not echoing the gated command — all fixed.
 - **Fixed compaction**: `/compact` wrongly reporting the service as unavailable or "no active session" — fixed; in the latter case the session is revived from disk before compacting.
 - **Fixed config save failure with link installs**: saving from the settings UI kept reporting "profile directory not found" when installed via `dsh plugin add link:` — fixed. With multiple profiles sharing the same source, writes target the profile of the current process. Remaining failures point at manually editing `cordis.patch.yml`. (#78)
+- **Fixed allowlist default bypass**: omitting `access` entirely still fell back to open DMs (the outer schema default was not updated with the field defaults) — now aligned to allowlist and pinned by tests. (#94)
+- **Approval cards bound to their request and hardened**: buttons now carry the pending approval's unique nonce, so stale cards no longer settle; in allowlist mode a missing clicker identity is rejected too. (#94)
+- **File-send path allowlist resolves symlinks**: paths are judged by their real locations; a symlink inside an allowed root pointing outside is rejected. (#94)
+- **Image attachments named by their real format**: the QQ gateway labels all images `image/png` (most are actually GIF/JPEG), so saved files carried wrong extensions and extension-based image decoding failed; extensions are now corrected from the file header (magic bytes) — bytes unchanged, no transcoding, unknown formats keep the original behavior. (#76)
+- **Unified workspace path resolution**: introduced a single source of truth for the plugin data directory (`~/.dsh-qqbot`), from which the workspace, media, and model-preference paths are uniformly derived; without an explicit `cwd` the host process directory is no longer wrongly used (previously causing workspace file sends to be denied). Missing files now report "file not found" instead of a misleading path denial.
+- **Vision config auto-patch no longer clobbers settings.yaml**: the startup fix-up that declares `input` for the vision model now uses fidelity-preserving document editing (comments, anchors, and other settings kept as-is) with atomic writes and conflict-aware retry; the previous full re-serialization wiped all comments and formatting from the file.
+- **Concurrent-safe preference file**: `model-prefs.json` (the session-id mapping shared by multi-bot and multi-profile setups) now writes atomically and merges other writers' entries before overwriting, so coexisting bots/profiles no longer clobber each other's mappings; deletions carry tombstones so concurrent writes cannot resurrect them; load/write failures surface as visible warnings (previously debug-only or silent — a lost mapping showed up as "lost context in QQ" with nothing to trace).
+- **Fixed an unopenable session list**: when resuming a session fails, a new one is created only after confirming the session is genuinely absent on disk; corrupt logs and backend failures no longer recreate the same session id (which used to write one id into several directories, after which the host refused to load the whole session list). Such failures now fail loudly with a log entry, and the original history is still there once the fault clears.
+- **Fixed concurrent messages landing on the wrong session**: the legacy session id derived from the user identity is now only used to migrate existing sessions, never to create new ones; concurrent requests for the same session (a slash command arriving alongside a normal message) are coalesced into one resume/create, so two mutually overwriting, never-reclaimed session instances are no longer produced.
+- **Vision config patch keeps numeric precision**: integers are preserved verbatim when the `input` declaration is added, so large integers in the user's `settings.yaml` (install ids, timestamps) are no longer truncated.
 
 ### Internal
 

package/doc/defect-review-config-session-id.md

@@ -0,0 +1,209 @@
+# dsh 配置写入与会话 id 缺陷审查
+
+> 审查基线：`main@078c338`（0.5.4）
+> 复现用例：分支 `test/defect-repro-config-session`（提交 `0202760`）
+> 修复：D1 `e5902f6`、E3 `e49dadf`、E1/E2 与 D1 数值保真（本分支）
+> 日期：2026-10-30
+
+## 1. 背景
+
+用户反馈两类问题，需确认 0.5.4 是否已修复：
+
+1. 以不恰当的方式操作 dsh 配置，安装后用户可能丢失自己的配置；
+2. 以不恰当的方式固定会话 id（未沿用 dsh 的 UUID 方式），边界情况（如多进程并发）下会话列表可能出现重复 id，导致用户无法打开 dsh。
+
+## 2. 结论速览
+
+| 问题 | 结论 |
+|---|---|
+| 1. 操作 dsh 配置 | **已修复**：`cordis.patch.yml` 与 `~/.dsh/settings.yaml` 写入均满足文档保真 + 原子写 |
+| 2. 固定会话 id | **已修复**：新 id 为 `session-${randomUUID()}`；确定性 id 仅用于迁移存量会话 |
+
+缺陷清单与当前状态：
+
+| 编号 | 缺陷 | 严重度 | 状态 |
+|---|---|---|---|
+| D1 | `settings.yaml` 整文件 load+dump：丢注释、改值、非原子、无锁 | 高 | ✅ 已修复（`e5902f6` + 本分支补数值保真） |
+| E1 | `resume` 任何失败都当「会话不存在」，用同一 id 盲目 `create`，错误被吞 | 高 | ✅ 已修复（本分支） |
+| E2 | 并发窗口内用 0.5.x 确定性 legacy id 新建会话 | 高 | ✅ 已修复（本分支） |
+| E3 | `model-prefs.json` 无并发/崩溃保护，损坏后静默回落 legacy id | 中 | ✅ 已修复（`e49dadf`） |
+| — | 行首 tab 规范化会改写多行文本内容 | — | ❌ 误报，已澄清 |
+
+修复后用例语义由「复现当前错误行为」改为「钉死修复后行为」，文件与分组保持不变。
+
+## 3. 问题 1：dsh 配置写入
+
+### 3.1 已修复：`cordis.patch.yml`（提交 17a5c80、9d2cc6c）
+
+`src/setup/persist.ts` 改用 eemeli/yaml Document API 原地编辑，满足四条约束：
+
+| 约束 | 位置 |
+|---|---|
+| 文档保真（注释/锚点/`!!js`/insert 行原样保留） | `applyEdit`、`PARSE_OPTIONS` |
+| fail-closed（非法 YAML / 顶层非数组 / config 非映射 / 锚点共享拒写） | `parseProfilePatch`、`findEntryConfig`（128-178 行） |
+| 原子写（同目录临时文件 + rename） | `editProfilePatch`（97-105 行） |
+| 乐观校验 + 读回验证 + 回滚 | `editProfilePatch`（89-122 行） |
+
+三个入口 `persistCredentialsToProfile` / `removeCredentialsFromProfile` / `updateProfileConfig`（234-375 行）只改 `im-qqbot` 条目；`updateProfileConfig` 不碰 `appId/appSecret`。调用方：`src/index.ts:51`、`src/setup/index.ts:133`、`src/setup/bind-routes.ts:151/328`。测试：`persist.test.ts`、`bind-integration.test.ts`。
+
+> 设计行为（非缺陷，需知悉）：扫码重新绑定会把私聊白名单 `c2cAllow` 整体替换为扫码者一人（`overwriteC2cAllowlist`，205-214 行）。原本配置了多人白名单的用户会感知为「配置被覆盖」。
+
+### 3.2 已修复：D1 `~/.dsh/settings.yaml`（提交 e5902f6，数值保真见本分支）
+
+**位置**：`src/media/vision-tool.ts` `ensureVisionInputModal`，由 `src/gateway/bootstrap.ts` 在每次启动时调用。
+
+**触发条件**：`vision.enabled` 且该视觉模型未声明 `input: [..., image]`。补齐后幂等，因此每个模型通常只在首次启动时触发一次。
+
+采纳了修复建议 2（叶子级编辑而非停写）。改动后满足：
+
+| 约束 | 实现 |
+|---|---|
+| 文档保真 | `parseDocument` + 逐层 `get` 定位到目标模型后 `model.set('input', ...)`，注释/锚点/其他命名空间原文保留 |
+| 数值保真 | `parseDocument(..., { intAsBigInt: true })`，整数不经 double 中转（否则大整数回写丢精度） |
+| 原子写 | 同目录临时文件 + `renameSync`，失败时清理临时文件 |
+| 乐观校验 | 写前重读比对，窗口内被外部改动则放弃本次补写（幂等，下次启动重试） |
+| fail-closed | 解析失败 / 定位不到目标只 `warn`，不阻断启动、不写文件 |
+
+**回归用例**：`src/media/vision-tool.test.ts` 覆盖注释与锚点保真（D1-1）、其他命名空间值保真（D1-2）、原子写与无临时文件残留（D1-3）、乐观校验让宿主写入胜出（D1-4）；`src/media/vision-modal.test.ts` 覆盖补写生效、幂等、fail-closed、tab 归一化。
+
+**遗留（低风险，已评估）**：未使用宿主 `dsh-settings-file` 的跨进程写锁（`withFileLock`），乐观校验只把竞态窗口收窄到「读回比对 → rename」之间；临时文件名固定 `.imqqbot.tmp`，多进程同时首启会互相踩。该路径每模型仅首启触发一次且失败不损坏原文件，暂不引入锁依赖。
+
+## 4. 问题 2：会话 id
+
+### 4.1 已修复（提交 0a1abbb）
+
+`src/session/session-id.ts`：
+
+- `mintSessionId()` = `session-${randomUUID()}`，与宿主一致（`packages/host/apiproxy/src/api-proxy.ts:2168/2415`）；
+- `legacyDerivedSessionId()` 保留 0.5.x 的 SHA-256 派生算法，**仅用于定位存量会话**。
+
+`src/session/session-manager.ts` 用到新 id 的位置：
+
+| 场景 | 位置 |
+|---|---|
+| `/model` 切换 fork 子会话 | 328 行 |
+| `/new` | 591 行 |
+| 首次创建 | 536-541 行 |
+| legacy 迁移：resume 命中则沿用并落盘 | 455-465、515、533 行 |
+
+### 4.2 已修复：E1 resume 失败按原因分流
+
+**原缺陷**：`getOrCreate` 的 `catch {}` 吞掉错误，prefs 已记录 id X 时，`resume(X)` 无论因何失败（日志损坏、IO 错误、HMR 期间同 id 未释放、preset 挂载失败等）都会接着 `create(X)`。宿主自身只在确认磁盘不存在时才 create（`packages/core/agent-loop/src/index.ts` 406-428 行，注释 “corruption and backend failures stay loud”）。
+
+**后果**（修复前）：跨进程且两个进程 cwd 不同时，jsonl 后端 `link()` 的 EEXIST 保护只覆盖同一 project 目录，同一 id 落在两个目录，之后 `list()` 抛 `duplicate JSONL session id`，**会话列表整体无法打开**——即用户反馈的现象；0.5.x 老会话遇一次瞬时错误即被永久弃用。
+
+**修复**：宿主调用收口到 `src/host/adapter.ts`（该文件的定位就是「收口所有版本漂移点」），`session-manager` 不再直接 `ctx.get('sessionPersistence')`。
+
+- adapter 新增 `sessionExists(sessionId): Promise<boolean | undefined>`，三种结果语义互不混同：
+  | 结果 | 含义 | 调用方动作 |
+  |---|---|---|
+  | `true` | 会话在盘上 | 拒绝重建，warn 后抛原 resume 错误 |
+  | `false` | 宿主报 `SessionPersistenceNotFoundError` | 允许首次创建 |
+  | `undefined` | 旧宿主无该服务，无求证手段 | 按 resume 结果创建，warn 留痕 |
+  | 抛出 | 求证过程本身失败（后端故障） | 拒绝重建，不能据此断言不存在 |
+- **判定只认错误 `name`**，不做 `cause` 链回溯、不做 `ENOENT`、不做文案猜测。参照 `dsh-im` 的 `isSessionNotFound`（只比对 code）与其注释「never recognize arbitrary internal failures」：resume/load 的报错可能来自别的环节（preset 挂载、工具缺失、同 id 未释放），宽泛的文案匹配会把「工具 not found」误判成「会话不存在」，恰好触发本要防的重建。不 import 宿主错误类——插件未直接依赖 session-persistence 包，跨 realm 的 `instanceof` 也不可靠。
+- 顺带把原先散落的 `resolvePersistedPreset` 的 `ctx.get` 也收到 adapter 的 `sessionHeader`。
+- `mayCreateAfterResumeFailure(key, sessionId, resumeError)` 只负责按上表分流并记日志，返回 false 时由调用方抛原 resume 错误（原错误信息量大于求证错误）。
+
+> 比建议的 `list()` 更省：`load` 是单条查询，且只在 create 路径触发一次。
+
+**回归用例**：adapter 侧 4 个（load 成功 / NotFound name / 文案含 not found 但 name 不符 → 抛 / 无服务 → undefined）；session-manager 侧 E1-1（会话在盘上不重建、prefs 不改写、日志可见）、E1-2（瞬时错误不弃用 legacy，故障恢复后仍能恢复）、E1-3（求证失败按存在处理，抛原 resume 错误）、E1-4（确认缺失 → 即使 resume 报 IO 错误也允许创建）、E1-5（旧宿主降级路径留痕）。
+
+### 4.3 已修复：E2 确定性 id 不进入新建路径
+
+**原缺陷**：prefs 为空时候选为 legacy id L，`resume(L)` 等待期间 prefs 被并发写入会使 `if (!getSessionId(key))` 不成立，局部 `sessionId` 仍为 L，于是用 0.5.x 确定性 id 新建会话；同时同 key 并发 `getOrCreate` 会各自 create，先建的 agent 被覆盖且未 dispose。
+
+并发写入来源未变：`/new` 同步写 prefs，`/compact` 从磁盘拉起会话，斜杠指令位于 `concurrencyGuard` 之前（`src/gateway/middleware-setup.ts`）。
+
+**修复**：
+
+- `openSession` 进入时记录 `candidateIsLegacy`（prefs 是否 miss），不再以「此刻 prefs 是否为空」作判据；
+- 新增 `resolveCreateId(key, candidate, candidateIsLegacy)`：prefs 在窗口内被改写则采用其最新 id（内存与 prefs 指向同一会话）；候选来自 legacy 派生则一律铸造新 id；候选来自 prefs 且确认缺失则沿用该 id；
+- create 成功后统一 `persistSessionId`，内存与 prefs 不再分叉；
+- `getOrCreate` 外层加 per-key singleflight（`inflight` Map）：同 key 并发复用同一次 resume/create，后到者只更新回复目标与活跃时间；完成或失败后清理在途记录。
+
+**回归用例**：E2-1（`/new` 并发写入 → 采用 prefs 最新 id，不用 legacy）、E2-2（`/compact` 与普通消息并发 → 一次 resume/create、无多余 agent）、E2-3（singleflight 失败时双方收到同一错误且在途记录已清理）。
+
+### 4.4 已修复：E3 `model-prefs.json` 并发/崩溃保护（提交 e49dadf）
+
+原缺陷：映射只存于全局 `~/.dsh-qqbot/model-prefs.json`，启动读一次、之后全量快照覆盖写（非原子、无锁、写前不重读），读取失败仅在 debug 下打日志。
+
+修复后（`src/model/prefs-store.ts`）：同目录临时文件（名带 pid + 随机后缀，跨进程互不覆盖）+ rename；`mergeDisk` 写前重读按 key 合并，内存覆盖同 key；引入**删除墓碑**防止「本进程的删除被并发写复活」（建议之外的补充）；加载失败经 `onError` 无条件告警；发现损坏先备份到 `.corrupted.<ts>` 再覆盖，保留人工恢复的余地。
+
+**回归用例**：`prefs-store.test.ts` 覆盖多实例写前合并、内存覆盖同 key、外部写入新 key 不丢、删除墓碑、原子写与临时文件清理；`session-manager.test.ts` E3-4 钉死「映射丢失留下可见日志」。
+
+### 4.5 其他
+
+- `session-manager.ts` 头部过时注释（「SessionId 由 sessionKey 确定性派生」）已更新为当前语义：映射存于 prefs，新 id 由 `mintSessionId()` 铸造，确定性 id 仅用于迁移；
+- 宿主调用统一经 `host/adapter.ts`，`session-manager` 内不再出现 `ctx.get`（`agentPresets` 的读取仍在 manager 内，因其返回的是插件自有服务契约而非宿主漂移点）。
+
+### 4.6 与 dsh-im 的做法对照
+
+`dsh-im` 走 RPC 架构，但同一问题的处理方式可直接借鉴，本次修复据此收紧：
+
+| 关注点 | dsh-im | 本插件 |
+|---|---|---|
+| 判定收口 | `shared/session-error.mjs` 导出 `isSessionNotFound(code)`，13 处调用方只问布尔 | `host/adapter.ts` 导出 `sessionExists(id)`，调用方只看三态 |
+| 判定严格度 | 只比对 code（`session-not-found` / `session/not-found`），注释明示不认任意 internal 错误 | 只比对错误 `name`，不做 cause 回溯/文案猜测 |
+| 旧宿主兼容 | 单独的 `isSessionLogCorrupt`，**限定** method 白名单 + 特定文案签名才认 | `sessionExists` 返回 `undefined` 表示无求证手段，不猜 |
+| 存在性求证 | `sessionExists()` 先查归档再读 history，归档算存在（否则会静默绑新会话） | `load` 单条查询，求证失败则抛而非当作不存在 |
+
+本次按此修正了初版实现的两处过度设计：删掉 `resume-failure.ts` 的 8 层 `cause` 回溯与 `/not found|no such|does not exist/i` 宽泛正则（该正则会把「工具 not found」误判成「会话不存在」），把宿主访问从 `session-manager` 挪进 adapter。
+
+## 5. 误报澄清
+
+此前判断「行首 tab 规范化 `/^\t+/gm` 会改写多行文本块（如提示词）内容」**不成立**：
+
+- 合法 YAML 中第 0 列 tab 不可能出现在块标量内部（js-yaml 直接报 `tab characters must not be used in indentation`）；
+- 块内缩进之后的 tab 不匹配 `/^\t+/m`；
+- 多行引号字符串续行前导空白在折叠时本就被剥离。
+
+该规范化只影响宿主本身也无法解析的非法文件。用例「误报澄清」固定该结论。
+
+## 6. 验证方法
+
+### 6.1 用例约定
+
+- 用例现已全部为回归用例，断言**修复后的期望行为**；原「缺陷复现」断言（钉死当时的错误行为）已随修复逐条翻转，编号与分组保留，便于对照本文档追溯；
+- 每组配有「对照组」用例，证明测试装置本身正确（正常路径行为符合预期）。
+
+### 6.2 隔离手段
+
+| 依赖 | 隔离方式 |
+|---|---|
+| `~/.dsh-qqbot` | `vi.mock('../shared/dirs.ts')` 指向临时目录，不触碰真实插件目录 |
+| `~/.dsh/settings.yaml` | `DSH_HOME` 指向临时目录 |
+| 写入中途失败 / 宿主并发写 | `vi.mock('node:fs')` 包装 `writeFileSync` / `readFileSync` 注入钩子 |
+| 宿主 agent 注册表 | fake `get/resume/create`，用 deferred Promise 精确控制并发时序 |
+| 宿主 persistence | `persistenceCtx(load)` 注入替身，覆盖 `sessionExists` 的四种结果；默认 `absentCtx`（磁盘无会话）对应全新用户，`emptyCtx`（无服务）对应旧宿主降级 |
+
+### 6.3 变异检查
+
+修复前曾临时为 `getOrCreate` 加最小修复（非「不存在」错误向上抛 + legacy 候选一律铸造）以排除「用例空转」：E1/E2 共 4 个用例全部变红，对照组保持通过。修复落地后这 4 个用例按期望行为重写，仍由同一组装置驱动。
+
+### 6.4 运行
+
+```bash
+pnpm install --frozen-lockfile
+pnpm vitest run
+pnpm tsc
+```
+
+结果：26 个文件 291 个用例全部通过，`tsc` 无错。项目以 pnpm 管理依赖（`pnpm-lock.yaml`），仓库内的 `package-lock.json` 并非事实源，勿用 `npm ci`。
+
+## 7. 覆盖边界
+
+- 「会话列表出现重复 id 导致 dsh 无法打开」的最终后果发生在宿主侧，插件单测无法覆盖；单测钉死的是插件侧前提——不再对已存在 id / legacy 固定 id 发起 create，宿主侧行为依据阅读 deepseek-harness 源码；
+- `sessionExists` 在旧宿主（无 `sessionPersistence`）上返回 `undefined`，此时退回「按 resume 结果创建」——等同修复前行为，E1-5 钉死该降级路径会留日志，但真实旧宿主未实测；
+- 项目当前无 ESLint 配置，`pnpm lint` 不可用。
+
+## 8. 变更影响评估
+
+| 问题 | 回答 |
+|---|---|
+| 影响接口 | 会话创建/恢复（所有入站消息、`/new`、`/compact`、`/model`）；启动时视觉配置自检 |
+| 向后兼容 | legacy 迁移语义保持：prefs 未命中时仍探测 legacy 一次，resume 命中则沿用并落盘 |
+| 行为变更 | resume 因非缺失原因失败时不再静默重建，改为向上抛——用户会看到报错而非被切到空会话；故障恢复后原会话历史仍在 |
+| 灰度 | 会话路由变更影响全部用户，建议先在测试 bot 验证老用户（0.5.x 会话）恢复路径 |
+| 数据迁移 | 无 DDL；`model-prefs.json` 格式不变 |
+| 回滚 | 代码回滚即可；E3 修复引入的备份文件不影响旧版本读取 |

package/lib/commands/auth.d.ts

@@ -0,0 +1,18 @@
+/**
+ * 命令鉴权 — 挂到 SlashCommand.authorized 的白名单校验
+ *
+ * 名单语义与审批按钮校验（approval-channel）一致：c2cMode=allowlist 时发送者
+ * 必须在 c2cAllow；身份缺失同样拒绝（fail-closed）。open 模式放行。
+ */
+import type { SlashCommandHandlerContext } from '@tencent-connect/qqbot-nodejs';
+import type { Logger } from '../types.ts';
+/** 鉴权配置投影（结构化，便于单测） */
+export interface CommandAuthConfigLike {
+    access: {
+        c2cMode: 'open' | 'allowlist' | 'disabled';
+        c2cAllow: readonly string[];
+    };
+}
+/** 构造命令白名单鉴权回调 */
+export declare function commandAllowlistAuth(config: CommandAuthConfigLike, logger?: Logger): (ctx: SlashCommandHandlerContext) => boolean | string;
+//# sourceMappingURL=auth.d.ts.map

package/lib/commands/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,uBAAuB;AACvB,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,GAAG,WAAW,GAAG,UAAU,CAAC;QAC3C,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;KAC7B,CAAC;CACH;AAID,kBAAkB;AAClB,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,qBAAqB,EAC7B,MAAM,CAAC,EAAE,MAAM,GACd,CAAC,GAAG,EAAE,0BAA0B,KAAK,OAAO,GAAG,MAAM,CAUvD"}

package/lib/commands/auth.js

@@ -0,0 +1,15 @@
+const DENIED = '⚠️ 无权限执行此命令';
+/** 构造命令白名单鉴权回调 */
+export function commandAllowlistAuth(config, logger) {
+    return (ctx) => {
+        if (config.access.c2cMode !== 'allowlist')
+            return true;
+        const senderId = ctx.message.senderId;
+        if (!senderId || !config.access.c2cAllow.includes(senderId)) {
+            logger?.warn(`im-qqbot: command auth denied: sender=${senderId ?? '(missing)'}`);
+            return DENIED;
+        }
+        return true;
+    };
+}
+//# sourceMappingURL=auth.js.map

package/lib/commands/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAiBA,MAAM,MAAM,GAAG,aAAa,CAAC;AAE7B,kBAAkB;AAClB,MAAM,UAAU,oBAAoB,CAClC,MAA6B,EAC7B,MAAe;IAEf,OAAO,CAAC,GAAG,EAAE,EAAE;QACb,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QACvD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5D,MAAM,EAAE,IAAI,CAAC,yCAAyC,QAAQ,IAAI,WAAW,EAAE,CAAC,CAAC;YACjF,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC"}

package/{dist → lib}/commands/help.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"help.d.ts","sourceRoot":"","sources":["../../src/commands/help.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGlE,2BAA2B;AAC3B,wBAAgB,WAAW,CACzB,EAAE,MAAM,EAAE,EAAE,WAAW,EACvB,WAAW,EAAE,MAAM,kBAAkB,EAAE,GACtC,kBAAkB,CAoCpB"}
+{"version":3,"file":"help.d.ts","sourceRoot":"","sources":["../../src/commands/help.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGlE,2BAA2B;AAC3B,wBAAgB,WAAW,CACzB,EAAE,MAAM,EAAE,EAAE,WAAW,EACvB,WAAW,EAAE,MAAM,kBAAkB,EAAE,GACtC,kBAAkB,CAsCpB"}

package/{dist → lib}/commands/help.js

@@ -4,6 +4,7 @@ export function helpCommand({ config }, allCommands) {
     return {
         name: 'bot-help',
         category: 'qqbot',
+        scope: 'all',
         description: '查看所有指令',
         handler: async (cmdCtx) => {
             const agentCmds = [];
@@ -17,7 +18,8 @@ export function helpCommand({ config }, allCommands) {
                 const out = [];
                 for (const cmd of cmds) {
                     const name = Array.isArray(cmd.name) ? cmd.name[0] : cmd.name;
-                    out.push(`<qqbot-cmd-input text="/${name}" show="/${name}"/> ${cmd.description ?? ''}`);
+                    const scopeTag = cmd.scope === 'c2c' ? ' 💬私聊' : cmd.scope === 'group' ? ' 👥群聊' : '';
+                    out.push(`<qqbot-cmd-input text="/${name}" show="/${name}"/>${scopeTag} ${cmd.description ?? ''}`);
                 }
                 return out;
             };

package/lib/commands/help.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"help.js","sourceRoot":"","sources":["../../src/commands/help.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzE,2BAA2B;AAC3B,MAAM,UAAU,WAAW,CACzB,EAAE,MAAM,EAAe,EACvB,WAAuC;IAEvC,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,KAAK;QACZ,WAAW,EAAE,QAAQ;QACrB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACxB,MAAM,SAAS,GAAyB,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAyB,EAAE,CAAC;YAC3C,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,EAAE,CAAC;gBAChC,IAAI,GAAG,CAAC,MAAM;oBAAE,SAAS;gBACzB,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/D,CAAC;YAED,MAAM,MAAM,GAAG,CAAC,IAA0B,EAAY,EAAE;gBACtD,MAAM,GAAG,GAAa,EAAE,CAAC;gBACzB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;oBAC9D,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtF,GAAG,CAAC,IAAI,CAAC,2BAA2B,IAAI,YAAY,IAAI,MAAM,QAAQ,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC;gBACrG,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC,CAAC;YAEF,MAAM,KAAK,GAAa,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;YAEhD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;YACzD,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,gBAAgB,cAAc,EAAE,CAAC,CAAC;YACjD,MAAM,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;YAC3E,OAAO,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/{dist → lib}/commands/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAQlE;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,GAAG,kBAAkB,EAAE,CAkBxE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAQlE;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,GAAG,kBAAkB,EAAE,CAmBxE"}

package/{dist → lib}/commands/index.js

@@ -3,7 +3,7 @@ import { modelCommand } from "./model.js";
 import { presetCommand } from "./preset.js";
 import { statusCommand } from "./status.js";
 import { helpCommand } from "./help.js";
-import { pingCommand, versionCommand, stopCommand } from "./misc.js";
+import { pingCommand, versionCommand, stopCommand, meCommand } from "./misc.js";
 /**
  * 构建标准命令列表
  */
@@ -18,6 +18,7 @@ export function buildCommandList(deps) {
         // QQBot 特有
         pingCommand(),
         versionCommand(deps),
+        meCommand(deps),
         statusCommand(deps),
     ];
     // help 需要访问完整列表（含自身），通过闭包惰性引用

package/lib/commands/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEhF;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAiB;IAChD,MAAM,QAAQ,GAAyB;QACrC,iBAAiB;QACjB,UAAU,CAAC,IAAI,CAAC;QAChB,cAAc,CAAC,IAAI,CAAC;QACpB,YAAY,CAAC,IAAI,CAAC;QAClB,aAAa,CAAC,IAAI,CAAC;QACnB,WAAW,CAAC,IAAI,CAAC;QACjB,WAAW;QACX,WAAW,EAAE;QACb,cAAc,CAAC,IAAI,CAAC;QACpB,SAAS,CAAC,IAAI,CAAC;QACf,aAAa,CAAC,IAAI,CAAC;KACpB,CAAC;IAEF,8BAA8B;IAC9B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEjD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/{dist → lib}/commands/misc.d.ts

@@ -1,7 +1,7 @@
 /**
  * 杂项命令
  *
- * - /bot-ping /bot-version：QQBot 插件特有（连通性测试、版本信息）
+ * - /bot-ping /bot-version /bot-me：QQBot 插件特有（连通性测试、版本、身份）
  * - /stop：中止当前生成（对应底层 agent cancel，通用能力）
  */
 import type { CommandDeps, CategorizedCommand } from './types.ts';
@@ -9,6 +9,13 @@ import type { CommandDeps, CategorizedCommand } from './types.ts';
 export declare function pingCommand(): CategorizedCommand;
 /** /bot-version — 查看版本信息 */
 export declare function versionCommand({ manager }: CommandDeps): CategorizedCommand;
+/**
+ * /bot-me — 查看发送者身份标识
+ *
+ * 私聊返回 user openid、群聊返回群成员 openid 与群 openid
+ * （分别对应 access.c2cAllow / groupAllow 的名单 key）。
+ */
+export declare function meCommand({ config }: CommandDeps): CategorizedCommand;
 /** /stop — 中止当前生成（隐藏） */
 export declare function stopCommand({ manager }: CommandDeps): CategorizedCommand;
 //# sourceMappingURL=misc.d.ts.map

package/lib/commands/misc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"misc.d.ts","sourceRoot":"","sources":["../../src/commands/misc.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGlE,wCAAwC;AACxC,wBAAgB,WAAW,IAAI,kBAAkB,CA8BhD;AAED,4BAA4B;AAC5B,wBAAgB,cAAc,CAAC,EAAE,OAAO,EAAE,EAAE,WAAW,GAAG,kBAAkB,CAY3E;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,EAAE,MAAM,EAAE,EAAE,WAAW,GAAG,kBAAkB,CAgBrE;AAED,yBAAyB;AACzB,wBAAgB,WAAW,CAAC,EAAE,OAAO,EAAE,EAAE,WAAW,GAAG,kBAAkB,CAqBxE"}

package/{dist → lib}/commands/misc.js

@@ -1,9 +1,10 @@
-import { getScopePeer, PLUGIN_VERSION } from "../shared/index.js";
+import { getScopePeer, PLUGIN_VERSION, sendMarkdownChunked } from "../shared/index.js";
 /** /bot-ping — 测试当前 dsh 与 QQ 连接的网络延迟 */
 export function pingCommand() {
     return {
         name: 'bot-ping',
         category: 'qqbot',
+        scope: 'all',
         description: '测试当前 dsh 与 QQ 连接的网络延迟',
         usage: [
             '/bot-ping',
@@ -35,6 +36,7 @@ export function versionCommand({ manager }) {
     return {
         name: 'bot-version',
         category: 'qqbot',
+        scope: 'all',
         description: '查看版本信息',
         handler: () => {
             const current = manager.getEffectiveModel('c2c', '');
@@ -43,11 +45,35 @@ export function versionCommand({ manager }) {
         },
     };
 }
+/**
+ * /bot-me — 查看发送者身份标识
+ *
+ * 私聊返回 user openid、群聊返回群成员 openid 与群 openid
+ * （分别对应 access.c2cAllow / groupAllow 的名单 key）。
+ */
+export function meCommand({ config }) {
+    return {
+        name: 'bot-me',
+        category: 'qqbot',
+        scope: 'all',
+        description: '查看你的 OpenID',
+        handler: async (cmdCtx) => {
+            const senderId = cmdCtx.message.senderId ?? 'unknown';
+            const lines = [`🆔 你的 OpenID：**${senderId}**`];
+            if (cmdCtx.message.groupOpenid) {
+                lines.push(`👥 本群 OpenID：**${cmdCtx.message.groupOpenid}**`);
+            }
+            await sendMarkdownChunked(cmdCtx, lines.join('\n'), config.textChunkLimit);
+            return { kind: 'noop' };
+        },
+    };
+}
 /** /stop — 中止当前生成（隐藏） */
 export function stopCommand({ manager }) {
     return {
         name: 'stop',
         category: 'agent',
+        scope: 'all',
         description: '中止当前生成',
         hidden: true,
         handler: (cmdCtx) => {

package/lib/commands/misc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"misc.js","sourceRoot":"","sources":["../../src/commands/misc.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEvF,wCAAwC;AACxC,MAAM,UAAU,WAAW;IACzB,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,KAAK;QACZ,WAAW,EAAE,uBAAuB;QACpC,KAAK,EAAE;YACL,WAAW;YACX,EAAE;YACF,2BAA2B;YAC3B,kBAAkB;SACnB,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;YACjC,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YACpD,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC5B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,OAAO,GAAG,GAAG,GAAG,SAAS,CAAC;YAChC,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,GAAG,SAAS,CAAC;YAC9C,MAAM,aAAa,GAAG,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC;YAC3C,OAAO;gBACL,SAAS;gBACT,SAAS,OAAO,IAAI;gBACpB,aAAa,UAAU,IAAI;gBAC3B,aAAa,aAAa,IAAI;aAC/B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,4BAA4B;AAC5B,MAAM,UAAU,cAAc,CAAC,EAAE,OAAO,EAAe;IACrD,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,KAAK;QACZ,WAAW,EAAE,QAAQ;QACrB,OAAO,EAAE,GAAG,EAAE;YACZ,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACrD,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YAC5E,OAAO,cAAc,cAAc,aAAa,SAAS,EAAE,CAAC;QAC9D,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,EAAE,MAAM,EAAe;IAC/C,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,KAAK;QACZ,WAAW,EAAE,aAAa;QAC1B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAC;YACtD,MAAM,KAAK,GAAG,CAAC,kBAAkB,QAAQ,IAAI,CAAC,CAAC;YAC/C,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;YAC3E,OAAO,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,yBAAyB;AACzB,MAAM,UAAU,WAAW,CAAC,EAAE,OAAO,EAAe;IAClD,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,KAAK;QACZ,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE;YAClB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACvD,4CAA4C;YAC5C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9D,OAAO,YAAY,CAAC;YACtB,CAAC;YAED,gDAAgD;YAChD,6BAA6B;YAC7B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACtC,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/lib/commands/model.d.ts

@@ -0,0 +1,6 @@
+/**
+ * 模型命令：/model — 查看或切换模型
+ */
+import type { CommandDeps, CategorizedCommand } from './types.ts';
+export declare function modelCommand({ manager, config, logger }: CommandDeps): CategorizedCommand;
+//# sourceMappingURL=model.d.ts.map

package/lib/commands/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../src/commands/model.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAIlE,wBAAgB,YAAY,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,WAAW,GAAG,kBAAkB,CAoEzF"}

package/{dist → lib}/commands/model.js

@@ -1,8 +1,12 @@
+import { commandAllowlistAuth } from "./auth.js";
 import { getScopePeer, sendMarkdownChunked } from "../shared/index.js";
-export function modelCommand({ manager, config }) {
+export function modelCommand({ manager, config, logger }) {
     return {
         name: 'model',
         category: 'agent',
+        // 管理类指令：私聊/群聊均可用，但仅限白名单用户（与 /preset 同构）
+        scope: 'all',
+        authorized: commandAllowlistAuth(config, logger),
         description: '查看或切换模型（用法: /model [provider/model]）',
         handler: async (cmdCtx) => {
             const { scope, peerId } = getScopePeer(cmdCtx);

package/lib/commands/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../src/commands/model.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEvE,MAAM,UAAU,YAAY,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAe;IACnE,OAAO;QACL,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,OAAO;QACjB,wCAAwC;QACxC,KAAK,EAAE,KAAK;QACZ,UAAU,EAAE,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC;QAChD,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACxB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAEhD,2BAA2B;YAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBACzD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,mBAAmB,EAAE,CAAC;gBAEnD,iDAAiD;gBACjD,IAAI,cAAc,GAAG,QAAQ,CAAC;gBAC9B,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;oBAC9F,cAAc,GAAG,OAAO,EAAE,IAAI,IAAI,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBAC3E,CAAC;gBAED,MAAM,KAAK,GAAa;oBACtB,aAAa;oBACb,EAAE;oBACF,aAAa,cAAc,EAAE;iBAC9B,CAAC;gBAEF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;oBAClC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;wBACvB,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;wBAC1C,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;wBACrD,KAAK,CAAC,IAAI,CAAC,iCAAiC,SAAS,kBAAkB,WAAW,KAAK,CAAC,CAAC;oBAC3F,CAAC;gBACH,CAAC;gBAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,+BAA+B,CAAC,CAAC;gBAEhD,MAAM,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;gBAC3E,OAAO,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC;YACnC,CAAC;YAED,uBAAuB;YACvB,IAAI,QAAgB,CAAC;YACrB,IAAI,KAAa,CAAC;YAElB,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC9B,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC1B,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,+BAA+B;gBAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBACzD,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,mBAAmB,CAAC;gBACpD,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YAED,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;gBACxB,OAAO,2EAA2E,CAAC;YACrF,CAAC;YAED,MAAM,OAAO,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YACnE,OAAO,YAAY,QAAQ,IAAI,KAAK,iBAAiB,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/{dist → lib}/commands/preset.d.ts

@@ -4,5 +4,5 @@
  * 无参数列出可用 preset（可点击切换），有参数切换，reset/default 重置为默认。
  */
 import type { CommandDeps, CategorizedCommand } from './types.ts';
-export declare function presetCommand({ manager, config }: CommandDeps): CategorizedCommand;
+export declare function presetCommand({ manager, config, logger }: CommandDeps): CategorizedCommand;
 //# sourceMappingURL=preset.d.ts.map

package/lib/commands/preset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preset.d.ts","sourceRoot":"","sources":["../../src/commands/preset.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAIlE,wBAAgB,aAAa,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,WAAW,GAAG,kBAAkB,CA2D1F"}

package/{dist → lib}/commands/preset.js

@@ -1,8 +1,12 @@
+import { commandAllowlistAuth } from "./auth.js";
 import { getScopePeer, sendMarkdownChunked } from "../shared/index.js";
-export function presetCommand({ manager, config }) {
+export function presetCommand({ manager, config, logger }) {
     return {
         name: 'preset',
         category: 'agent',
+        // 管理类指令：私聊/群聊均可用，但仅限白名单用户（复用审批的名单语义）
+        scope: 'all',
+        authorized: commandAllowlistAuth(config, logger),
         description: '查看或切换 agent preset（用法: /preset [id]）',
         handler: async (cmdCtx) => {
             const { scope, peerId } = getScopePeer(cmdCtx);

package/lib/commands/preset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preset.js","sourceRoot":"","sources":["../../src/commands/preset.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEvE,MAAM,UAAU,aAAa,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAe;IACpE,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,OAAO;QACjB,qCAAqC;QACrC,KAAK,EAAE,KAAK;QACZ,UAAU,EAAE,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC;QAChD,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACxB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAEhD,uBAAuB;YACvB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,OAAO,uBAAuB,CAAC;gBACjC,CAAC;gBAED,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBACvD,MAAM,SAAS,GAAG,MAAM,EAAE,WAAW,IAAI,OAAO,CAAC,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAEnF,MAAM,KAAK,GAAa,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;gBACpD,KAAK,CAAC,IAAI,CAAC,WAAW,SAAS,IAAI,IAAI,EAAE,CAAC,CAAC;gBAC3C,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,sBAAsB,CAAC,CAAC;gBACvC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;oBACxB,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtD,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,EAAE,mBAAmB,OAAO,KAAK,CAAC,CAAC;gBACpF,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,4CAA4C,CAAC,CAAC;gBAE7D,MAAM,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;gBAC3E,OAAO,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC;YACnC,CAAC;YAED,sCAAsC;YACtC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC3C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBACjE,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,MAAM,CAAC;YACxD,CAAC;YAED,eAAe;YACf,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACrE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;oBACvB,KAAK,aAAa;wBAChB,OAAO,0CAA0C,CAAC;oBACpD,KAAK,gBAAgB;wBACnB,OAAO,cAAc,IAAI,EAAE,CAAC;oBAC9B,KAAK,QAAQ;wBACX,OAAO,UAAU,IAAI,UAAU,OAAO,CAAC,OAAO,IAAI,MAAM,EAAE,CAAC;oBAC7D;wBACE,OAAO,SAAS,OAAO,CAAC,OAAO,IAAI,MAAM,EAAE,CAAC;gBAChD,CAAC;YACH,CAAC;YAED,OAAO,iBAAiB,IAAI,sCAAsC,CAAC;QACrE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/{dist → lib}/commands/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/commands/session.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGlE,oCAAoC;AACpC,wBAAgB,UAAU,CAAC,EAAE,OAAO,EAAE,EAAE,WAAW,GAAG,kBAAkB,CAWvE;AAED,0BAA0B;AAC1B,wBAAgB,cAAc,CAAC,EAAE,OAAO,EAAE,EAAE,WAAW,GAAG,kBAAkB,CA8B3E"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/commands/session.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGlE,oCAAoC;AACpC,wBAAgB,UAAU,CAAC,EAAE,OAAO,EAAE,EAAE,WAAW,GAAG,kBAAkB,CAYvE;AAED,0BAA0B;AAC1B,wBAAgB,cAAc,CAAC,EAAE,OAAO,EAAE,EAAE,WAAW,GAAG,kBAAkB,CA+B3E"}

package/{dist → lib}/commands/session.js

@@ -4,6 +4,7 @@ export function newCommand({ manager }) {
     return {
         name: ['new', 'reset', 'clear'],
         category: 'agent',
+        scope: 'all',
         description: '开始新会话（清空上下文）',
         handler: (cmdCtx) => {
             const { scope, peerId } = getScopePeer(cmdCtx);
@@ -17,6 +18,7 @@ export function compactCommand({ manager }) {
     return {
         name: 'compact',
         category: 'agent',
+        scope: 'all',
         description: '压缩会话历史（摘要替换旧记录，保留上下文）',
         handler: async (cmdCtx) => {
             const { scope, peerId } = getScopePeer(cmdCtx);

package/lib/commands/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/commands/session.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,oCAAoC;AACpC,MAAM,UAAU,UAAU,CAAC,EAAE,OAAO,EAAe;IACjD,OAAO;QACL,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC;QAC/B,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,KAAK;QACZ,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE;YAClB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAC/C,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACnC,OAAO,UAAU,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,0BAA0B;AAC1B,MAAM,UAAU,cAAc,CAAC,EAAE,OAAO,EAAe;IACrD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,KAAK;QACZ,WAAW,EAAE,uBAAuB;QACpC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACxB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE;gBACnD,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE;aAC/D,CAAC,CAAC;YAEH,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;gBACf,IAAI,CAAC,OAAO,CAAC,QAAQ;oBAAE,OAAO,UAAU,CAAC;gBACzC,OAAO,SAAS,OAAO,CAAC,QAAQ,YAAY,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC;YAC5E,CAAC;YAED,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;gBACvB,KAAK,YAAY;oBACf,OAAO,SAAS,CAAC;gBACnB,KAAK,MAAM;oBACT,OAAO,YAAY,CAAC;gBACtB,KAAK,aAAa;oBAChB,OAAO,+CAA+C,CAAC;gBACzD;oBACE,OAAO,SAAS,OAAO,CAAC,OAAO,IAAI,MAAM,EAAE,CAAC;YAChD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/{dist → lib}/commands/status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGlE,6BAA6B;AAC7B,wBAAgB,aAAa,CAAC,EAAE,OAAO,EAAE,EAAE,WAAW,GAAG,kBAAkB,CAoB1E"}
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGlE,6BAA6B;AAC7B,wBAAgB,aAAa,CAAC,EAAE,OAAO,EAAE,EAAE,WAAW,GAAG,kBAAkB,CAqB1E"}

package/{dist → lib}/commands/status.js

@@ -4,6 +4,7 @@ export function statusCommand({ manager }) {
     return {
         name: 'bot-status',
         category: 'qqbot',
+        scope: 'all',
         description: '查看当前会话状态',
         handler: (cmdCtx) => {
             const { scope, peerId } = getScopePeer(cmdCtx);

package/lib/commands/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAEtE,6BAA6B;AAC7B,MAAM,UAAU,aAAa,CAAC,EAAE,OAAO,EAAe;IACpD,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,KAAK;QACZ,WAAW,EAAE,UAAU;QACvB,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE;YAClB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YACrC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YAC/E,OAAO;gBACL,SAAS;gBACT,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE;gBAC9D,OAAO,SAAS,EAAE;gBAClB,WAAW,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE;gBACjC,QAAQ,MAAM,CAAC,YAAY,IAAI,CAAC,EAAE;gBAClC,SAAS,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE;aACnD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC"}

package/{dist → lib}/commands/types.d.ts

@@ -6,9 +6,11 @@
 import type { SlashCommand } from '@tencent-connect/qqbot-nodejs';
 import type { SessionManager } from '../session/index.ts';
 import type { ImQQBotConfig } from '../config.ts';
+import type { Logger } from '../types.ts';
 export interface CommandDeps {
     manager: SessionManager;
     config: ImQQBotConfig;
+    logger?: Logger;
 }
 /** 命令分类：agent = 底层 agent 通用能力，qqbot = 插件特有 */
 export type CommandCategory = 'agent' | 'qqbot';

package/lib/commands/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/commands/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,8CAA8C;AAC9C,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,OAAO,CAAC;AAEhD,gDAAgD;AAChD,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,QAAQ,EAAE,eAAe,CAAC;CAC3B"}