@napuketto/adapter 0.1.0 → 0.2.1

package/dist/onebot11/index.d.mts

@@ -636,7 +636,13 @@ declare function escapeCqParam(value: string): string;
 declare function unescapeCqText(text: string): string;
 /** 编码单个 CQ 码（undefined 参数自动省略）。 */
 declare function encodeCqCode(type: string, params: Record<string, string | number | undefined>): string;
-/** 解析一条消息文本 → 文本片段与 CQ 码片段的混合数组（文本已反转义）。 */
+/**
+ * 解析一条消息文本 → 文本片段与 CQ 码片段的混合数组（文本已反转义）。
+ *
+ * 手工 indexOf 扫描而非全局正则（/\[CQ:[^\]]*\]/g）：消息文本不可信，正则在
+ * 「大量 [CQ: 前缀且无闭合 ]」的输入下每个起点都全量回扫，复杂度 O(n²)
+ * （CodeQL polynomial-redos）。indexOf 语义等价：从 [CQ: 起到其后第一个 ]。
+ */
 declare function parseCqMessage(text: string): Array<string | CqCode>;
 /** 将混合片段数组序列化回消息文本（parseCqMessage 的逆操作）。 */
 declare function serializeCqParts(parts: Array<string | CqCode>): string;
@@ -766,6 +772,11 @@ declare class NapukettoOneBot11Adapter extends BaseProtocolAdapter<OB11Config> {
   subscribeOnly(): Promise<void>;
   /** 仅退订（与 subscribeOnly 配对的进程级清理；传输关闭仍走 stop()）。 */
   unsubscribeOnly(): void;
+  /**
+   * 单条 sysmsg 字节块：解码 → 识别 → 命中才广播，未识别打结构化校准日志
+   * （识别表为空时全部走日志路径，design.md §7.5）。
+   */
+  private handleSysMsgBlob;
   /**
    * 广播消息事件（P2-19：接收方向 ID 转换）。
    * 收集 at uid → 一次批量 uidToUin → 构造上下文 → 翻译广播。

package/dist/onebot11/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/onebot11/helper/message-unique.ts","../../src/onebot11/api/one-bot-api.ts","../../src/onebot11/action/error-map.ts","../../src/onebot11/action/group/get-group-at-all-remain.ts","../../src/onebot11/types/index.ts","../../src/onebot11/event/base.ts","../../src/onebot11/event/message.ts","../../src/onebot11/event/meta.ts","../../src/onebot11/event/notice.ts","../../src/onebot11/event/request.ts","../../src/onebot11/event/index.ts","../../src/onebot11/action/index.ts","../../src/onebot11/helper/codec/cqcode.ts","../../src/onebot11/helper/codec/segment.ts","../../src/onebot11/helper/config.ts","../../src/onebot11/helper/data.ts","../../src/onebot11/adapter.ts","../../src/onebot11/transport.ts"],"mappings":";;;;;;cAkBa;;mBAEQ;;mBAEA;;mBAEA;;UAET;;mBAES;;;;;EAMjB,MAAM,eAAe,OAAO;;EAmB5B,SAAS;;EAKT,aAAa;;EAKb,QAAQ,gBAAgB;;EAKxB,QAAQ;;UAYA;;;;;UCvDK;;EAEb;;EAEA,mBAAmB;;EAEnB;;EAEA;;EAEA,aAAa;;EAEb,gBAAgB;;;UAIH;EACb,QAAQ;EACR,UAAU;EACV,gBAAgB;EAChB,WAAW;EACX,WAAW;EACX,cAAc;EACd,YAAY;EACZ,gBAAgB;EAChB,QAAQ;;EAER;IAAQ;IAAa;;;EAErB,QAAQ;;EAER,aAAa;;;;;;cAOJ;;WAEA,QAAQ;;WAER,UAAU;;WAEV,gBAAgB;;WAEhB,WAAW;;WAEX,WAAW;;WAEX,cAAc;;WAEd,YAAY;;WAEZ,gBAAgB;;WAEhB,QAAQ;;WAER,YAAY;;WAEZ,eAAe;;WAEf;IAAQ;IAAa;;;WAErB;;WAEA;;WAEA,mBAAmB;;WAEnB;;WAEA;;WAEA,aAAa;;WAEb,gBAAgB;EAEzB,YAAY,MAAM;;EAuBlB,SAAS,iBAAiB,QAAQ;;EAKlC,SAAS,iBAAiB,QAAQ;;;;;cCzHzB,kBAAkB;;;;UCMd;EACb;EACA;EACA;;;;;;;;;UCba,WAAW;EACxB;EACA;EACA,MAAM;EACN;EACA;;;KAIQ;EACJ;EAAc;IAAQ;;;EACtB;EAAY;IAAQ;IAAY;;;EAChC;EAAc;IAAQ;;;EACtB;EAAe;IAAQ;IAAc;;;EACrC;EAAgB;IAAQ;IAAc;;;EACtC;EAAe;IAAQ;IAAc;;;EACrC;EAAc;IAAQ;;;EACtB;EAAe;IAAQ;;;EACvB;EAAiB;IAAQ;;;EACzB;EAAc;IAAQ;;;EACtB;EAAa;IAAQ;;;EACrB;EAAgB;IAAQ;;;;KAGpB,uBAAuB;;UAGlB;EACb;EACA;EACA;EACA;;;UAIa;EACb;EACA;EACA;EACA;;;UAIa;EACb;EACA;;;UAIa;EACb;EACA;EACA;EACA;IACI;IACA;IACA;IACA;;EAEJ;EACA,SAAS;EACT;EACA;EACA;;;KAIQ;;UAGK;EACb;EACA;EACA;EACA;EACA,MAAM;EACN;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;EAEA;EACA;EACA;EACA;EACA;EACA;;;UAIa;EACb;EACA;EACA;;;UAIa;EACb;EACA;EACA,MAAM;EACN;;EAEA;EACA;EACA;EACA;;;UAIa;EACb;EACA;EACA;EACA;EACA;;;UAIa;EACb;EACA;EACA;;;UAIa;EACb;EACA,oBAAoB;EACpB,gBAAgB;EAChB,gBAAgB;EAChB,aAAa;EACb,oBAAoB;EACpB,cAAc;;;UAID;EACb;EACA;EACA;;EAEA;EACA;EACA;EACA,eAAe;EACf,gBAAgB;EAChB;;;;;;;;;;;;KCtJQ;;UAGK;;EAEb;;EAEA;;EAEA,WAAW;;;;;UCPE;EACb;EACA;EACA;;;UAIa,oBAAoB;EACjC;EACA;;;UAIa,8BAA8B;EAC3C;EACA;;EAEA;EACA;EACA;EACA;EACA,SAAS;EACT;EACA;EACA,QAAQ;EACR,YAAY;;;UAIC,gCAAgC;EAC7C;EACA;;EAEA;EACA;EACA;EACA,SAAS;EACT;EACA;EACA,QAAQ;;EAER;;;KAIQ,mBAAmB,wBAAwB;;;;UC9CtC;EACb;EACA;GACC;;;UAIY,+BAA+B;EAC5C;EACA;EACA;;;UAIa,+BAA+B;EAC5C;EACA;;EAEA;EACA,QAAQ;;;KAIA,gBAAgB,yBAAyB;;;;UCvBpC;EACb;EACA;EACA;EACA;;;UAIa;EACb;EACA;EACA;;;UAIa;EACb;EACA;EACA;;;UAIa,mCAAmC;EAChD;EACA;EACA;EACA;EACA,MAAM;;;UAIO,kCAAkC;EAC/C;EACA;EACA;EACA;EACA;;;UAIa,qCAAqC;EAClD;EACA;EACA;EACA;EACA;EACA;;;UAIa,qCAAqC;EAClD;EACA;EACA;EACA;EACA;EACA;;;UAIa,gCAAgC;EAC7C;EACA;EACA;EACA;EACA;EACA;;EAEA;;;UAIa,iCAAiC;EAC9C;EACA;EACA;;;UAIa,mCAAmC;EAChD;EACA;EACA;EACA;EACA;EACA;;;UAIa,oCAAoC;EACjD;EACA;EACA;EACA;;;UAIa,iCAAiC;EAC9C;EACA;EACA;EACA;EACA;EACA;;;UAIa,oCAAoC;EACjD;EACA;EACA;EACA;EACA;EACA;EACA;;;UAIa,8BAA8B;EAC3C;EACA;EACA;EACA;EACA;EACA;;EAEA;;;UAIa,mCAAmC;EAChD;EACA;EACA;EACA,MAAM;;;UAIO,iCAAiC;EAC9C;EACA;EACA;EACA;;;UAIa,oCAAoC;EACjD;EACA;EACA;EACA;EACA;EACA,OAAO;;;UAIM,kCAAkC;EAC/C;EACA;EACA;EACA;EACA;;;KAIQ,kBACN,6BACA,4BACA,+BACA,+BACA,0BACA,2BACA,6BACA,8BACA,2BACA,8BACA,wBACA,6BACA,2BACA,8BACA;;;;UCpLW,+BAA+B;EAC5C;EACA;EACA;;EAEA;;EAEA;;;UAIa,8BAA8B;EAC3C;EACA;;EAEA;EACA;EACA;EACA;EACA;;;KAIQ,mBAAmB,yBAAyB;;;;KCiB5C,YAAY,mBAAoB,kBAAmB,mBAAoB;;;;UCyDlE;;EAEb,KAAK;;;iBAIO,yBAAyB,MAAM,iBAAiB;;;;;;;;;;;;;;UC9E/C;EACb;EACA,QAAQ;;;iBAII,aAAa;;iBAKb,cAAc;;iBAKd,eAAe;;iBASf,aACZ,cACA,QAAQ;;iBAeI,eAAe,eAAe,eAAe;;iBAkB7C,iBAAiB,OAAO,eAAe;;;;iBCsHvC,oBAAoB,UAAU;;;;cCxJjC,kBAAgB,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuB3B,EAAA,KAAA;;KAGU,aAAa,EAAE,aAAa;;;;iBC/DxB,oBAAoB,UAAU,qBAAqB;;iBAYnD,oBAAoB,UAAU,uBAAuB;;iBAoIrD,oBAAoB,eAAe;;iBAkBnC,qBAAqB,UAAU;;iBAK/B,qBAAqB,eAAe;;;;UCvInC;EACb,KAAK,cAAc;EACnB,KAAK,cAAc;;;UAIN,+BAA+B;;EAE5C,QAAQ,eAAe;;EAEvB,aAAa;;EAEb,YAAY;;EAEZ,eAAe;;EAEf,gBAAgB;;EAEhB,mBAAmB;;EAEnB,SAAS;;;cAIA,iCAAiC,oBAAoB;WACrD;mBAEQ;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;;WAER,UAAU;UACX;UACA;UACA;UACA;UACA;;UAEA;;UAEA;EAER,YAAY,MAAM;;;;;UAwBJ;;UAYA;;UAyCN;;UAiBM;;UAaN;;;;;;EAoIF,iBAAiB;;EAUvB;;;;;;UAUc;;UA2BA;;UAiBA;;UA4BA;;UAiBN;;;;;EAWF,cAAc,cAAc,UAAU,wBAAwB;;;;;UC9YvD;;EAEb,SAAS;;EAET,YAAY;;EAEZ,aAAa;;;UAIA;;EAEb,QAAQ;;EAER,aAAa;;EAEb,gBAAgB,cAAc,UAAU;;EAExC;;;iBAiBY,uBAAuB,MAAM,gCAAgC"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/onebot11/helper/message-unique.ts","../../src/onebot11/api/one-bot-api.ts","../../src/onebot11/action/error-map.ts","../../src/onebot11/action/group/get-group-at-all-remain.ts","../../src/onebot11/types/index.ts","../../src/onebot11/event/base.ts","../../src/onebot11/event/message.ts","../../src/onebot11/event/meta.ts","../../src/onebot11/event/notice.ts","../../src/onebot11/event/request.ts","../../src/onebot11/event/index.ts","../../src/onebot11/action/index.ts","../../src/onebot11/helper/codec/cqcode.ts","../../src/onebot11/helper/codec/segment.ts","../../src/onebot11/helper/config.ts","../../src/onebot11/helper/data.ts","../../src/onebot11/adapter.ts","../../src/onebot11/transport.ts"],"mappings":";;;;;;cAkBa;;mBAEQ;;mBAEA;;mBAEA;;UAET;;mBAES;;;;;EAMjB,MAAM,eAAe,OAAO;;EAmB5B,SAAS;;EAKT,aAAa;;EAKb,QAAQ,gBAAgB;;EAKxB,QAAQ;;UAYA;;;;;UCvDK;;EAEb;;EAEA,mBAAmB;;EAEnB;;EAEA;;EAEA,aAAa;;EAEb,gBAAgB;;;UAIH;EACb,QAAQ;EACR,UAAU;EACV,gBAAgB;EAChB,WAAW;EACX,WAAW;EACX,cAAc;EACd,YAAY;EACZ,gBAAgB;EAChB,QAAQ;;EAER;IAAQ;IAAa;;;EAErB,QAAQ;;EAER,aAAa;;;;;;cAOJ;;WAEA,QAAQ;;WAER,UAAU;;WAEV,gBAAgB;;WAEhB,WAAW;;WAEX,WAAW;;WAEX,cAAc;;WAEd,YAAY;;WAEZ,gBAAgB;;WAEhB,QAAQ;;WAER,YAAY;;WAEZ,eAAe;;WAEf;IAAQ;IAAa;;;WAErB;;WAEA;;WAEA,mBAAmB;;WAEnB;;WAEA;;WAEA,aAAa;;WAEb,gBAAgB;EAEzB,YAAY,MAAM;;EAuBlB,SAAS,iBAAiB,QAAQ;;EAKlC,SAAS,iBAAiB,QAAQ;;;;;cCzHzB,kBAAkB;;;;UCMd;EACb;EACA;EACA;;;;;;;;;UCba,WAAW;EACxB;EACA;EACA,MAAM;EACN;EACA;;;KAIQ;EACJ;EAAc;IAAQ;;;EACtB;EAAY;IAAQ;IAAY;;;EAChC;EAAc;IAAQ;;;EACtB;EAAe;IAAQ;IAAc;;;EACrC;EAAgB;IAAQ;IAAc;;;EACtC;EAAe;IAAQ;IAAc;;;EACrC;EAAc;IAAQ;;;EACtB;EAAe;IAAQ;;;EACvB;EAAiB;IAAQ;;;EACzB;EAAc;IAAQ;;;EACtB;EAAa;IAAQ;;;EACrB;EAAgB;IAAQ;;;;KAGpB,uBAAuB;;UAGlB;EACb;EACA;EACA;EACA;;;UAIa;EACb;EACA;EACA;EACA;;;UAIa;EACb;EACA;;;UAIa;EACb;EACA;EACA;EACA;IACI;IACA;IACA;IACA;;EAEJ;EACA,SAAS;EACT;EACA;EACA;;;KAIQ;;UAGK;EACb;EACA;EACA;EACA;EACA,MAAM;EACN;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;EAEA;EACA;EACA;EACA;EACA;EACA;;;UAIa;EACb;EACA;EACA;;;UAIa;EACb;EACA;EACA,MAAM;EACN;;EAEA;EACA;EACA;EACA;;;UAIa;EACb;EACA;EACA;EACA;EACA;;;UAIa;EACb;EACA;EACA;;;UAIa;EACb;EACA,oBAAoB;EACpB,gBAAgB;EAChB,gBAAgB;EAChB,aAAa;EACb,oBAAoB;EACpB,cAAc;;;UAID;EACb;EACA;EACA;;EAEA;EACA;EACA;EACA,eAAe;EACf,gBAAgB;EAChB;;;;;;;;;;;;KCtJQ;;UAGK;;EAEb;;EAEA;;EAEA,WAAW;;;;;UCPE;EACb;EACA;EACA;;;UAIa,oBAAoB;EACjC;EACA;;;UAIa,8BAA8B;EAC3C;EACA;;EAEA;EACA;EACA;EACA;EACA,SAAS;EACT;EACA;EACA,QAAQ;EACR,YAAY;;;UAIC,gCAAgC;EAC7C;EACA;;EAEA;EACA;EACA;EACA,SAAS;EACT;EACA;EACA,QAAQ;;EAER;;;KAIQ,mBAAmB,wBAAwB;;;;UC9CtC;EACb;EACA;GACC;;;UAIY,+BAA+B;EAC5C;EACA;EACA;;;UAIa,+BAA+B;EAC5C;EACA;;EAEA;EACA,QAAQ;;;KAIA,gBAAgB,yBAAyB;;;;UCvBpC;EACb;EACA;EACA;EACA;;;UAIa;EACb;EACA;EACA;;;UAIa;EACb;EACA;EACA;;;UAIa,mCAAmC;EAChD;EACA;EACA;EACA;EACA,MAAM;;;UAIO,kCAAkC;EAC/C;EACA;EACA;EACA;EACA;;;UAIa,qCAAqC;EAClD;EACA;EACA;EACA;EACA;EACA;;;UAIa,qCAAqC;EAClD;EACA;EACA;EACA;EACA;EACA;;;UAIa,gCAAgC;EAC7C;EACA;EACA;EACA;EACA;EACA;;EAEA;;;UAIa,iCAAiC;EAC9C;EACA;EACA;;;UAIa,mCAAmC;EAChD;EACA;EACA;EACA;EACA;EACA;;;UAIa,oCAAoC;EACjD;EACA;EACA;EACA;;;UAIa,iCAAiC;EAC9C;EACA;EACA;EACA;EACA;EACA;;;UAIa,oCAAoC;EACjD;EACA;EACA;EACA;EACA;EACA;EACA;;;UAIa,8BAA8B;EAC3C;EACA;EACA;EACA;EACA;EACA;;EAEA;;;UAIa,mCAAmC;EAChD;EACA;EACA;EACA,MAAM;;;UAIO,iCAAiC;EAC9C;EACA;EACA;EACA;;;UAIa,oCAAoC;EACjD;EACA;EACA;EACA;EACA;EACA,OAAO;;;UAIM,kCAAkC;EAC/C;EACA;EACA;EACA;EACA;;;KAIQ,kBACN,6BACA,4BACA,+BACA,+BACA,0BACA,2BACA,6BACA,8BACA,2BACA,8BACA,wBACA,6BACA,2BACA,8BACA;;;;UCpLW,+BAA+B;EAC5C;EACA;EACA;;EAEA;;EAEA;;;UAIa,8BAA8B;EAC3C;EACA;;EAEA;EACA;EACA;EACA;EACA;;;KAIQ,mBAAmB,yBAAyB;;;;KCiB5C,YAAY,mBAAoB,kBAAmB,mBAAoB;;;;UCyDlE;;EAEb,KAAK;;;iBAIO,yBAAyB,MAAM,iBAAiB;;;;;;;;;;;;;;UCjF/C;EACb;EACA,QAAQ;;;iBAII,aAAa;;iBAKb,cAAc;;iBAKd,eAAe;;iBASf,aACZ,cACA,QAAQ;;;;;;;;iBAqBI,eAAe,eAAe,eAAe;;iBAuB7C,iBAAiB,OAAO,eAAe;;;;iBC8GvC,oBAAoB,UAAU;;;;cCxJjC,kBAAgB,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuB3B,EAAA,KAAA;;KAGU,aAAa,EAAE,aAAa;;;;iBC/DxB,oBAAoB,UAAU,qBAAqB;;iBAYnD,oBAAoB,UAAU,uBAAuB;;iBAoIrD,oBAAoB,eAAe;;iBAkBnC,qBAAqB,UAAU;;iBAK/B,qBAAqB,eAAe;;;;UChInC;EACb,KAAK,cAAc;EACnB,KAAK,cAAc;;;UAIN,+BAA+B;;EAE5C,QAAQ,eAAe;;EAEvB,aAAa;;EAEb,YAAY;;EAEZ,eAAe;;EAEf,gBAAgB;;EAEhB,mBAAmB;;EAEnB,SAAS;;;cAIA,iCAAiC,oBAAoB;WACrD;mBAEQ;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;;WAER,UAAU;UACX;UACA;UACA;UACA;UACA;;UAEA;;UAEA;EAER,YAAY,MAAM;;;;;UAwBJ;;UAYA;;UAyCN;;UAiBM;;UAaN;;;;;;EAmJF,iBAAiB;;EAUvB;;;;;UASQ;;;;;;UAyCM;;UA2BA;;UAiBA;;UA4BA;;UAiBN;;;;;EAWF,cAAc,cAAc,UAAU,wBAAwB;;;;;UC5cvD;;EAEb,SAAS;;EAET,YAAY;;EAEZ,aAAa;;;UAIA;;EAEb,QAAQ;;EAER,aAAa;;EAEb,gBAAgB,cAAc,UAAU;;EAExC;;;iBAiBY,uBAAuB,MAAM,gCAAgC"}

package/dist/onebot11/index.mjs

@@ -1416,8 +1416,6 @@ var ForwardFriendSingleMsgAction = class extends ForwardSingleMsgBase {
 * - 纯文本：& → &，[ → [，] → ]
 * - 参数值：额外 , → ,
 */
-/** CQ 码片段正则（[CQ:xxx] 或 [CQ:xxx,k=v,...]）。 */
-const CQ_CODE_REGEX = /\[CQ:[^\]]*\]/g;
 /** 解析单个 CQ 码文本 → 结构化 CqCode。 */
 function parseCqCode(raw) {
 	const body = raw.slice(4, -1);
@@ -1453,15 +1451,24 @@ function encodeCqCode(type, params) {
 	if (pairs.length === 0) return `[CQ:${type}]`;
 	return `[CQ:${type},${pairs.join(",")}]`;
 }
-/** 解析一条消息文本 → 文本片段与 CQ 码片段的混合数组（文本已反转义）。 */
+/**
+* 解析一条消息文本 → 文本片段与 CQ 码片段的混合数组（文本已反转义）。
+*
+* 手工 indexOf 扫描而非全局正则（/\[CQ:[^\]]*\]/g）：消息文本不可信，正则在
+* 「大量 [CQ: 前缀且无闭合 ]」的输入下每个起点都全量回扫，复杂度 O(n²)
+* （CodeQL polynomial-redos）。indexOf 语义等价：从 [CQ: 起到其后第一个 ]。
+*/
 function parseCqMessage(text) {
 	const parts = [];
 	let lastIndex = 0;
-	for (const match of text.matchAll(CQ_CODE_REGEX)) {
-		const index = match.index ?? 0;
-		if (index > lastIndex) parts.push(unescapeCqText(text.slice(lastIndex, index)));
-		parts.push(parseCqCode(match[0] ?? ""));
-		lastIndex = index + match[0].length;
+	let start = text.indexOf("[CQ:");
+	while (start !== -1) {
+		const end = text.indexOf("]", start);
+		if (end === -1) break;
+		if (start > lastIndex) parts.push(unescapeCqText(text.slice(lastIndex, start)));
+		parts.push(parseCqCode(text.slice(start, end + 1)));
+		lastIndex = end + 1;
+		start = text.indexOf("[CQ:", lastIndex);
 	}
 	if (lastIndex < text.length) parts.push(unescapeCqText(text.slice(lastIndex)));
 	return parts;
@@ -3694,6 +3701,251 @@ function toOfflineFileNotice(item, selfUin) {
 	};
 }
 //#endregion
+//#region src/onebot11/helper/sysmsg.ts
+/** 递归深度上限（防御：恶意/畸形字节防栈溢出）。 */
+const MAX_DEPTH = 16;
+/** 单层字段数上限。 */
+const MAX_FIELDS = 256;
+/** 单个 varint 最大字节数（64 位 + 1 冗余）。 */
+const MAX_VARINT_BYTES = 10;
+/** 读 varint：成功返回 [值, 下一偏移]，越界/超长返回 null。 */
+function readVarint(data, start) {
+	let value = 0n;
+	let shift = 0n;
+	let i = start;
+	while (true) {
+		if (i >= data.length || i - start >= MAX_VARINT_BYTES) return null;
+		const byte = data[i];
+		if (byte === void 0) return null;
+		i += 1;
+		value |= BigInt(byte & 127) << shift;
+		if ((byte & 128) === 0) return [value, i];
+		shift += 7n;
+	}
+}
+/** wire 2：length-delimited 字段（递归 try-parse 子树，失败 → 不透明字节）。 */
+function decodeLengthDelimited(data, afterTag, no, depth) {
+	const len = readVarint(data, afterTag);
+	if (len === null) return null;
+	const payloadStart = len[1];
+	const end = payloadStart + Number(len[0]);
+	if (end > data.length) return null;
+	const slice = data.slice(payloadStart, end);
+	return {
+		field: {
+			no,
+			kind: "bytes",
+			value: slice,
+			children: decodeProtoTree(slice, depth + 1)
+		},
+		next: end
+	};
+}
+/** 解码单个带 tag 字段；畸形（field 0 / group / 截断 / 越界）返回 null。 */
+function decodeTaggedField(data, start, depth) {
+	const tag = readVarint(data, start);
+	if (tag === null) return null;
+	const [tagValue, afterTag] = tag;
+	const no = Number(tagValue >> 3n);
+	const wireType = Number(tagValue & 7n);
+	if (no === 0) return null;
+	if (wireType === 0) {
+		const v = readVarint(data, afterTag);
+		if (v === null) return null;
+		return {
+			field: {
+				no,
+				kind: "varint",
+				value: v[0]
+			},
+			next: v[1]
+		};
+	}
+	if (wireType === 2) return decodeLengthDelimited(data, afterTag, no, depth);
+	if (wireType === 1 || wireType === 5) {
+		const next = afterTag + (wireType === 1 ? 8 : 4);
+		return next > data.length ? null : {
+			field: void 0,
+			next
+		};
+	}
+	return null;
+}
+/**
+* 解码 protobuf wire-format 为递归字段树（不维护字段重复/顺序语义以外的信息）。
+*
+* - wire 0 varint / wire 2 length-delimited：支持；wire 2 递归 try-parse，
+*   子解析失败按不透明字节挂树（ASCII 串偶发误判嵌套无实害——树仅用于观测）。
+* - wire 1/5（fixed64/32）：跳过（QQ NT blob 未观测到，防御性兼容）。
+* - wire 3/4（group）、截断、field 0、超限：判失败返回 null。
+*/
+function decodeProtoTree(data, depth = 0) {
+	if (depth > MAX_DEPTH) return null;
+	const fields = [];
+	let i = 0;
+	while (i < data.length) {
+		if (fields.length >= MAX_FIELDS) return null;
+		const decoded = decodeTaggedField(data, i, depth);
+		if (decoded === null) return null;
+		if (decoded.field !== void 0) fields.push(decoded.field);
+		i = decoded.next;
+	}
+	return fields;
+}
+/** 取字段号首个命中的节点。 */
+function firstField(tree, no) {
+	return tree.find((f) => f.no === no);
+}
+/** varint → number（超安全整数返回 null，调用方按缺字段处理）。 */
+function varintToNumber(value) {
+	return value <= BigInt(Number.MAX_SAFE_INTEGER) ? Number(value) : null;
+}
+/** UTF-8 严格解码 + 可打印检查（含控制字符判不可解码，返回 null）。 */
+function decodeText(bytes) {
+	try {
+		const text = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+		for (const ch of text) {
+			const code = ch.codePointAt(0) ?? 0;
+			if (code < 32 && code !== 9) return null;
+		}
+		return text;
+	} catch {
+		return null;
+	}
+}
+/** 递归收集树内全部可打印字符串（校准观测用；先序遍历，空字节段跳过）。 */
+function collectStrings(tree) {
+	const out = [];
+	for (const f of tree) {
+		if (f.kind === "varint") continue;
+		const text = decodeText(f.value);
+		if (text !== null && text.length > 0) out.push(text);
+		if (f.children !== null) out.push(...collectStrings(f.children));
+	}
+	return out;
+}
+/** 单个候选块 → Uint8Array（number[] -128..255 / TypedArray；其余 null）。 */
+function toBlob(item) {
+	if (item instanceof Uint8Array) return new Uint8Array(item);
+	if (item instanceof Int8Array) return Uint8Array.from(item, (b) => b & 255);
+	if (Array.isArray(item) && item.length > 0) {
+		const out = new Uint8Array(item.length);
+		for (let i = 0; i < item.length; i += 1) {
+			const b = item[i];
+			if (typeof b !== "number" || !Number.isInteger(b) || b < -128 || b > 255) return null;
+			out[i] = b & 255;
+		}
+		return out;
+	}
+	return null;
+}
+/**
+* onRecvSysMsg 参数 → sysmsg 字节块列表（防御性收窄）。
+* 接受批数组（实测形状）/ 单块裸数组 / TypedArray；零有效块返回 null
+* （调用方打 raw 日志，与 narrowOfflineFiles 同模式）。
+*/
+function narrowSysMsgBlobs(arg) {
+	if (Array.isArray(arg)) {
+		const blobs = arg.map(toBlob).filter((b) => b !== null);
+		if (blobs.length > 0) return blobs;
+		const single = toBlob(arg);
+		return single === null ? null : [single];
+	}
+	const single = toBlob(arg);
+	return single === null ? null : [single];
+}
+/** 顶层 f1 块的字段（uin/uid 对）。 */
+function extractActorBlock(block) {
+	const empty = {
+		uin: null,
+		uid: null,
+		uin2: null,
+		uid2: null
+	};
+	if (block === null) return empty;
+	const f1 = firstField(block, 1);
+	const f2 = firstField(block, 2);
+	const f5 = firstField(block, 5);
+	const f6 = firstField(block, 6);
+	return {
+		uin: f1?.kind === "varint" ? varintToNumber(f1.value) : null,
+		uid: f2?.kind === "bytes" ? decodeText(f2.value) : null,
+		uin2: f5?.kind === "varint" ? varintToNumber(f5.value) : null,
+		uid2: f6?.kind === "bytes" ? decodeText(f6.value) : null
+	};
+}
+/** 顶层 f2 块 → 信封数值字段。 */
+function extractEnvelopeBlock(block) {
+	const empty = {
+		msgType: null,
+		subType: null,
+		subTypeAlt: null,
+		groupCodes: null,
+		time: null
+	};
+	if (block === null) return empty;
+	const num = (no) => {
+		const f = firstField(block, no);
+		return f?.kind === "varint" ? varintToNumber(f.value) : null;
+	};
+	const code4 = num(4);
+	const code5 = num(5);
+	return {
+		msgType: num(1),
+		subType: num(2),
+		subTypeAlt: num(3),
+		groupCodes: code4 !== null && code5 !== null ? [code4, code5] : null,
+		time: num(6)
+	};
+}
+/** 字段树 → 信封（design.md §7.3；任何字段缺失/非法 = null，不抛错）。 */
+function extractSysMsgEnvelope(tree) {
+	const actor = extractActorBlock(getChildren(firstField(tree, 1)));
+	return {
+		actorUin: actor.uin,
+		actorUid: actor.uid,
+		targetUin: actor.uin2,
+		targetUid: actor.uid2,
+		...extractEnvelopeBlock(getChildren(firstField(tree, 2))),
+		strings: collectStrings(tree)
+	};
+}
+/** bytes 节点的子树（非 bytes/不透明 → null）。 */
+function getChildren(field) {
+	return field?.kind === "bytes" ? field.children : null;
+}
+/**
+* (msgType, subType) → 规则表，主键 `"${msgType}:${subType}"`（原生分发键，
+* design.md §7.1）。
+*
+* ⚠️ 当前为空：c3 以来的全部真实样本（2 条）均为 528/382 未命名类型，
+* card/title/sign 的判别值没有样本支撑——在此登记规则前不会广播任何 sysmsg
+* notice。拿到真实样本后登记 extract 规则即可（规则实现参考
+* notice-extra.ts 防御性收窄风格）。
+*/
+const KIND_TABLE = /* @__PURE__ */ new Map();
+/** 已观测但未命名的 (msgType, subType)：c3 双样本 528/382（语义未知）。 */
+const OBSERVED_UNNAMED = /* @__PURE__ */ new Set(["528:382"]);
+/**
+* (msgType, subType) → 识别结果。table 参数供单测注入合成规则（生产走
+* KIND_TABLE）。
+*/
+function recognizeSysMsg(msgType, subType, table = KIND_TABLE) {
+	if (msgType === null || subType === null) return { kind: "unknown" };
+	const rule = table.get(`${msgType}:${subType}`);
+	if (rule !== void 0) return {
+		kind: "notice",
+		rule
+	};
+	return OBSERVED_UNNAMED.has(`${msgType}:${subType}`) ? { kind: "observed_unnamed" } : { kind: "unknown" };
+}
+/** 字节块 → 小写 hex（校准日志用；超长由调用方截断）。 */
+function toHex(bytes) {
+	let out = "";
+	for (const b of bytes) out += b.toString(16).padStart(2, "0");
+	return out;
+}
+//#endregion
 //#region src/onebot11/transport.ts
 /**
 * OB11 传输装配（P2-5，2026-08-05）
@@ -3991,8 +4243,16 @@ var NapukettoOneBot11Adapter = class extends BaseProtocolAdapter {
 			}
 			for (const item of items) this.broadcastEvent(toOfflineFileNotice(item, this.selfUin));
 		}));
-		for (const evt of ["Msg/onRecvSysMsg", "Msg/onRecvOnlineFileMsg"]) this.unsubscribes.push(this.msgChannel.on(evt, (arg) => {
-			this.calibLogger?.info({ raw: JSON.stringify(arg)?.slice(0, 2e3) }, `ob11: ${evt} raw（sys msg 校准数据）`);
+		this.unsubscribes.push(this.msgChannel.on("Msg/onRecvSysMsg", (arg) => {
+			const blobs = narrowSysMsgBlobs(arg);
+			if (blobs === null) {
+				this.calibLogger?.warn({ raw: JSON.stringify(arg)?.slice(0, 2e3) }, "ob11: onRecvSysMsg 未知参数形状");
+				return;
+			}
+			for (const blob of blobs) this.handleSysMsgBlob(blob);
+		}));
+		this.unsubscribes.push(this.msgChannel.on("Msg/onRecvOnlineFileMsg", (arg) => {
+			this.calibLogger?.info({ raw: JSON.stringify(arg)?.slice(0, 2e3) }, "ob11: onRecvOnlineFileMsg raw（校准数据）");
 		}));
 		if (this.groupChannel !== void 0) {
 			this.unsubscribes.push(this.groupChannel.on("Group/onGroupNotifiesUpdated", (doubt, notifies) => {
@@ -4039,6 +4299,38 @@ var NapukettoOneBot11Adapter = class extends BaseProtocolAdapter {
 		this.unsubscribeAll();
 	}
 	/**
+	* 单条 sysmsg 字节块：解码 → 识别 → 命中才广播，未识别打结构化校准日志
+	* （识别表为空时全部走日志路径，design.md §7.5）。
+	*/
+	handleSysMsgBlob(blob) {
+		const tree = decodeProtoTree(blob);
+		if (tree === null) {
+			this.calibLogger?.warn({ raw: toHex(blob).slice(0, 1024) }, "ob11: onRecvSysMsg protobuf 解码失败");
+			return;
+		}
+		const env = extractSysMsgEnvelope(tree);
+		const rec = recognizeSysMsg(env.msgType, env.subType);
+		if (rec.kind === "notice") {
+			const event = rec.rule.extract(tree, env);
+			if (event !== null) {
+				this.broadcastEvent(event);
+				return;
+			}
+		}
+		this.calibLogger?.info({
+			verdict: rec.kind,
+			msgType: env.msgType,
+			subType: env.subType,
+			subTypeAlt: env.subTypeAlt,
+			groupCodes: env.groupCodes,
+			time: env.time,
+			actorUin: env.actorUin,
+			actorUid: env.actorUid,
+			strings: env.strings,
+			raw: toHex(blob).slice(0, 1024)
+		}, "ob11: onRecvSysMsg 校准数据（未识别，不广播）");
+	}
+	/**
 	* 广播消息事件（P2-19：接收方向 ID 转换）。
 	* 收集 at uid → 一次批量 uidToUin → 构造上下文 → 翻译广播。
 	* 翻译失败退化为原样（不阻塞上报）。