@sunjuntao/dsh-qqbot 0.1.7 → 0.1.10

package/lib/client.js

@@ -608,6 +608,7 @@ var cn = Object.freeze({
   "update.noNewVersion": "暂无新版本（当前 v{0} 已是最新）",
   "update.found": "发现新版本 v{0}，正在自动更新…",
   "update.updatedTo": "已自动更新到 v{0}（备份于安装目录 .update-backup/），重启 DSH 后生效",
+  "update.keepOpen": "更新尚未执行完，请勿关闭本面板",
   // ── replyLocale ──
   "replyLocale.label": "回复语言（replyLocale）",
   "replyLocale.labelShort": "回复语言",
@@ -754,7 +755,7 @@ var cn = Object.freeze({
   "panel.archiveAllHint": "所有机器人模式仅显示聚合条数；选择单个机器人可展开预览记录",
   "panel.tabId": "面板",
   "ui.panelSwitchTitle": "右侧面板「QQ 定时消息」入口",
-  "ui.panelSwitchDesc": "开启后，编辑器右侧栏显示 QQ 定时消息管理入口；关闭即隐藏（仍要求至少一个机器人已连接，且改动即时生效）",
+  "ui.panelSwitchDesc": "默认关闭。开启后，编辑器右侧栏显示 QQ 定时消息管理入口并记住该选择：刷新页面、重启 DSH、QQ 掉线都不会让它消失；关闭即隐藏（改动即时生效）",
   "sched.view": "查看",
   "sched.back": "返回",
   "sched.detailTitle": "执行逻辑详情",
@@ -1344,6 +1345,7 @@ var en = Object.freeze({
   "update.noNewVersion": "No new version (v{0} is the latest)",
   "update.found": "New version v{0} found; updating automatically…",
   "update.updatedTo": "Updated to v{0} (old files backed up in .update-backup/ inside the install directory). Restart DSH to take effect.",
+  "update.keepOpen": "Update still running — do not close this panel",
   // ── replyLocale ──
   "replyLocale.label": "Reply language (replyLocale)",
   "replyLocale.labelShort": "Reply language",
@@ -1490,7 +1492,7 @@ var en = Object.freeze({
   "panel.archiveAllHint": "All-bots mode shows aggregated counts only; pick a single bot to expand and preview records",
   "panel.tabId": "Tab",
   "ui.panelSwitchTitle": 'Right panel "QQ Scheduled Messages" entry',
-  "ui.panelSwitchDesc": "When on, the QQ scheduled-messages manager appears in the right sidebar; off hides it (still requires at least one connected bot, and takes effect immediately)",
+  "ui.panelSwitchDesc": "Off by default. When on, the QQ scheduled-messages manager appears in the right sidebar and the choice is remembered: reloading, restarting DSH, or losing the QQ connection will not hide it; off hides it (takes effect immediately)",
   "sched.view": "View",
   "sched.back": "Back",
   "sched.detailTitle": "Execution details",
@@ -1745,6 +1747,53 @@ function QqBotGuideIcon(props) {
   return h(QqBotGlyph, { uid: props.uid ?? "guide", className: props.className, size: props.size });
 }
 
+// src/client/settings-nav-icon.ts
+var QBOT_SETTINGS_NAV_MARKER = "data-qbot-settings-nav";
+var NAV_ICON_MASK = "data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='24' height='24' viewBox='0 0 24 24' fill='none' stroke='black' stroke-width='1.6' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpath d='M12 3.5v2.5'/%3E%3Ccircle cx='12' cy='2.5' r='.9' fill='black' stroke='none'/%3E%3Crect x='5' y='6' width='14' height='12' rx='3.5'/%3E%3Ccircle cx='9.4' cy='11.5' r='.9' fill='black' stroke='none'/%3E%3Ccircle cx='14.6' cy='11.5' r='.9' fill='black' stroke='none'/%3E%3Cpath d='M9.5 14.8q2.5 1.8 5 0'/%3E%3C/svg%3E";
+var QBOT_SETTINGS_NAV_CSS = `
+[${QBOT_SETTINGS_NAV_MARKER}] > svg:first-child {
+  display: none;
+}
+[${QBOT_SETTINGS_NAV_MARKER}]::before {
+  content: '';
+  flex: none;
+  width: 16px;
+  height: 16px;
+  background: currentColor;
+  -webkit-mask: url("${NAV_ICON_MASK}") center / contain no-repeat;
+  mask: url("${NAV_ICON_MASK}") center / contain no-repeat;
+}
+`;
+function registerQbotSettingsNavIcon(label) {
+  let disposed = false;
+  const sync = () => {
+    if (disposed) return;
+    const currentLabel = label().trim();
+    const buttons = document.querySelectorAll(
+      '[role="dialog"] nav button'
+    );
+    for (const button of Array.from(buttons)) {
+      const matches2 = currentLabel.length > 0 && button.textContent?.trim() === currentLabel;
+      if (matches2) button.setAttribute(QBOT_SETTINGS_NAV_MARKER, "");
+      else button.removeAttribute(QBOT_SETTINGS_NAV_MARKER);
+    }
+  };
+  sync();
+  const observer = new MutationObserver(sync);
+  observer.observe(document.body, {
+    childList: true,
+    subtree: true,
+    characterData: true
+  });
+  return () => {
+    disposed = true;
+    observer.disconnect();
+    document.querySelectorAll(`[${QBOT_SETTINGS_NAV_MARKER}]`).forEach((element) => {
+      element.removeAttribute(QBOT_SETTINGS_NAV_MARKER);
+    });
+  };
+}
+
 // src/client/ui.tsx
 var React2 = __toESM(require("react"), 1);
 
@@ -1999,6 +2048,10 @@ var CSS_TEXT = `
 .qbot-noticeCount { margin-left: auto; flex: none; align-self: flex-start; font-variant-numeric: tabular-nums; font-weight: 600; font-size: 12px; line-height: 1.4; padding: 1px 9px; border-radius: 999px; white-space: nowrap; background: color-mix(in srgb, var(--qbot-business) 14%, var(--dsw-alias-bg-layer-1, #fff)); border: 1px solid color-mix(in srgb, var(--qbot-business) 28%, var(--dsw-alias-border-l2, #dfe1e5)); }
 /* 页面级更新提示（qbot-page 是普通块布局，无 channelPage 的 flex gap，需自带下边距与面板隔开） */
 .qbot-updateNotice { margin: 0 0 18px; }
+/* 进行中：不吃 8s 淡出动画（更新可能耗时较久），并改为竖排以突出「请勿关闭」警示行。 */
+.qbot-updateNotice.is-busy { flex-direction: column; align-items: stretch; gap: 6px; animation: none; }
+.qbot-updateMsg { min-width: 0; overflow-wrap: anywhere; }
+.qbot-updateKeepOpen { color: var(--dsw-alias-state-error-primary, #d54941); font-size: 13px; font-weight: 650; line-height: 1.5; }
 
 /* ── 机器人卡片（dim-botCard）─────────────────────────────────────────── */
 .qbot-botList { min-width: 0; width: 100%; max-width: 100%; display: grid; grid-template-columns: minmax(0, 1fr); gap: 8px; }
@@ -5193,9 +5246,9 @@ function notifyBotsChanged() {
 var PANEL_VISIBLE_KEY = "dsh-qqbot.panel.visible";
 function getPanelVisible() {
   try {
-    return localStorage.getItem(PANEL_VISIBLE_KEY) !== "0";
+    return localStorage.getItem(PANEL_VISIBLE_KEY) === "1";
   } catch {
-    return true;
+    return false;
   }
 }
 function setPanelVisible(v) {
@@ -5320,9 +5373,41 @@ function TitleView() {
 var name = "qqbot-settings";
 var inject = ["slots", "connection", "locale", "sidebarRightTabs", "sidebarRight"];
 var RPC_CHANNEL = "/qqbot-settings";
+function eventsWsUrl() {
+  const scheme = typeof location !== "undefined" && location.protocol === "https:" ? "wss:" : "ws:";
+  return `${scheme}//${location.host}${RPC_CHANNEL}/events`;
+}
 var QQBOT_PANEL_ID = "@sunjuntao/dsh-qqbot";
 var QQBOT_PANEL_KIND = "qqbot-sched";
 var NOTICE_TTL_SECONDS = 8;
+var UPDATE_IDLE = { busy: false, message: "", done: false };
+var updateStore = /* @__PURE__ */ (() => {
+  let current = UPDATE_IDLE;
+  const listeners2 = /* @__PURE__ */ new Set();
+  return {
+    snapshot() {
+      return current;
+    },
+    publish(next) {
+      current = next.busy ? next : UPDATE_IDLE;
+      for (const listener of [...listeners2]) {
+        try {
+          listener(next);
+        } catch {
+        }
+      }
+    },
+    subscribe(listener) {
+      listeners2.add(listener);
+      return () => {
+        listeners2.delete(listener);
+      };
+    }
+  };
+})();
+function publishUpdate(next) {
+  updateStore.publish(next);
+}
 function QqbotSettingsTab({ rpcCall }) {
   const [status, setStatus] = React10.useState(null);
   const [bots, setBots] = React10.useState(null);
@@ -5339,11 +5424,9 @@ function QqbotSettingsTab({ rpcCall }) {
   const [refreshing, setRefreshing] = React10.useState(false);
   const [reconnecting, setReconnecting] = React10.useState(false);
   const [panelVisible, setPanelVisibleState] = React10.useState(() => getPanelVisible());
-  const [update, setUpdate] = React10.useState({
-    busy: false,
-    message: "",
-    done: false
-  });
+  const [update, setLocalUpdate] = React10.useState(() => updateStore.snapshot());
+  const setUpdate = publishUpdate;
+  React10.useEffect(() => updateStore.subscribe(setLocalUpdate), []);
   const refresh = React10.useCallback(async (appId) => {
     try {
       const [s, c, b, cat] = await Promise.all([
@@ -5488,9 +5571,9 @@ function QqbotSettingsTab({ rpcCall }) {
   };
   React10.useEffect(() => {
     if (!update.message || update.busy) return void 0;
-    const timer = setTimeout(() => setUpdate((u) => ({ ...u, message: "" })), 8e3);
+    const timer = setTimeout(() => publishUpdate({ ...update, message: "" }), NOTICE_TTL_SECONDS * 1e3);
     return () => clearTimeout(timer);
-  }, [update.message, update.busy]);
+  }, [update]);
   const groupOverrides = form.groupOverrides && typeof form.groupOverrides === "object" && !Array.isArray(form.groupOverrides) ? form.groupOverrides : {};
   const overrideSummary = (ov) => {
     const parts = [];
@@ -6179,7 +6262,7 @@ function QqbotSettingsTab({ rpcCall }) {
             "div",
             { className: "qbot-brandHeading" },
             h("strong", { className: "qbot-brandName" }, t("app.title")),
-            h("span", { className: "qbot-brandVersion" }, `v${true ? "0.1.7" : "0.0.2"}`),
+            h("span", { className: "qbot-brandVersion" }, `v${true ? "0.1.10" : "0.0.2"}`),
             h("button", {
               className: `qbot-btn qbot-updateBtn${update.done ? " is-done" : ""}`,
               type: "button",
@@ -6193,7 +6276,19 @@ function QqbotSettingsTab({ rpcCall }) {
       ),
       h("div", { className: "qbot-titleActions" }, globalBadge)
     ),
-    update.message ? h("div", { className: "qbot-infoNotice qbot-updateNotice", role: "status" }, update.message) : null,
+    // 更新期间（busy）的提示条不自动淡出，并额外给出「请勿关闭」警示：
+    // update.apply 会下载并覆盖安装目录，中途切走 / 关闭面板不影响宿主执行，
+    // 但用户看不到结果、也容易误以为卡死，所以显式告知。
+    update.message ? h(
+      "div",
+      {
+        className: `qbot-infoNotice qbot-updateNotice${update.busy ? " is-busy" : ""}`,
+        role: "status",
+        "aria-busy": update.busy ? "true" : "false"
+      },
+      h("span", { className: "qbot-updateMsg" }, update.message),
+      update.busy ? h("strong", { className: "qbot-updateKeepOpen" }, t("update.keepOpen")) : null
+    ) : null,
     h(
       "div",
       { className: "qbot-panel", id: "qbot-panel" },
@@ -6270,17 +6365,31 @@ function apply(ctx) {
   };
   setRpcCall(rpcCall);
   ctx.effect(() => installStyles(), "qqbot-settings: styles");
+  ctx.effect(
+    () => {
+      let style = document.getElementById("qbot-settings-nav-style");
+      if (!style) {
+        style = document.createElement("style");
+        style.id = "qbot-settings-nav-style";
+        style.textContent = QBOT_SETTINGS_NAV_CSS;
+        document.head.appendChild(style);
+      }
+      const disposeMarker = registerQbotSettingsNavIcon(() => t("app.title"));
+      return () => {
+        disposeMarker();
+        style?.remove();
+      };
+    },
+    "qqbot-settings: settings navigation icon"
+  );
   ctx.slots.inject("settings.section", () => ctx.slots.register(
     {
       name: "settings.section",
       id: "dsh-qqbot",
       order: 31,
-      label: () => h(
-        "span",
-        { className: "qbot-navLabel" },
-        h(QqBotGlyph, { className: "qbot-navGlyph", uid: "nav" }),
-        h("span", { className: "qbot-navText" }, t("app.title"))
-      ),
+      // 宿主新版导航行自带系统图标（navIcon），label 契约是纯文本；
+      // 这里不再内嵌 QqBotGlyph，否则会和宿主图标重复。
+      label: () => t("app.title"),
       inject: () => ({ rpcCall })
     },
     QqbotSettingsTab
@@ -6311,22 +6420,77 @@ function apply(ctx) {
     }
     disposePanelTab = null;
   };
-  const syncPanelTab = async () => {
-    try {
-      const res = await rpcCall("bots.list");
-      const bots = res.ok ? val(res)?.bots : void 0;
-      const anyConnected = Array.isArray(bots) && bots.some((b) => b?.ws?.state === "connected");
-      if (anyConnected && getPanelVisible()) registerPanelTab();
-      else unregisterPanelTab();
-    } catch {
-    }
+  const syncPanelTab = () => {
+    if (getPanelVisible()) registerPanelTab();
+    else unregisterPanelTab();
   };
-  void syncPanelTab();
+  syncPanelTab();
   const offBotsChanged = onBotsChanged(() => void syncPanelTab());
-  const panelTabTimer = setInterval(() => void syncPanelTab(), 15e3);
+  const onStorage = (event) => {
+    if (event.storageArea === localStorage && (event.key === null || event.key === PANEL_VISIBLE_KEY)) {
+      syncPanelTab();
+    }
+  };
+  window.addEventListener("storage", onStorage);
+  let wsSocket = null;
+  let wsRetry = 0;
+  let wsTimer = null;
+  let wsDisposed = false;
+  const scheduleWsReconnect = () => {
+    if (wsDisposed || wsTimer !== null) return;
+    const delay = Math.min(1e3 * 2 ** wsRetry, 1e4);
+    wsRetry = Math.min(wsRetry + 1, 10);
+    wsTimer = setTimeout(() => {
+      wsTimer = null;
+      connectWs();
+    }, delay);
+  };
+  function connectWs() {
+    if (wsDisposed || typeof WebSocket === "undefined") return;
+    let socket;
+    try {
+      socket = new WebSocket(eventsWsUrl());
+    } catch (error) {
+      console?.debug?.("[dsh-qqbot] WebSocket 订阅失败，面板显隐依赖设置页动作触发:", error);
+      scheduleWsReconnect();
+      return;
+    }
+    wsSocket = socket;
+    socket.onopen = () => {
+      wsRetry = 0;
+      syncPanelTab();
+    };
+    socket.onmessage = (event) => {
+      if (typeof event.data !== "string") return;
+      try {
+        const message = JSON.parse(event.data);
+        if (message.event === "bots-changed") notifyBotsChanged();
+      } catch {
+      }
+    };
+    socket.onerror = () => {
+    };
+    socket.onclose = () => {
+      if (wsSocket === socket) wsSocket = null;
+      scheduleWsReconnect();
+    };
+  }
+  connectWs();
   ctx.effect(
     () => () => {
-      clearInterval(panelTabTimer);
+      wsDisposed = true;
+      if (wsTimer !== null) clearTimeout(wsTimer);
+      wsTimer = null;
+      try {
+        const socket = wsSocket;
+        wsSocket = null;
+        if (socket) {
+          socket.onclose = null;
+          socket.close();
+        }
+      } catch {
+      }
+      window.removeEventListener("storage", onStorage);
       offBotsChanged();
       unregisterPanelTab();
     },

package/lib/index.js

@@ -6722,7 +6722,7 @@ async function readRawBody(req) {
   }
   return Buffer.concat(chunks, size);
 }
-function registerRpcChannel({ ctx, fence, dispatch }) {
+function registerRpcChannel({ ctx, fence, dispatch, onWsUpgrade }) {
   ctx.inject(["webServer"], (webCtxUnknown) => {
     const webCtx = webCtxUnknown;
     const route = {
@@ -6741,7 +6741,8 @@ function registerRpcChannel({ ctx, fence, dispatch }) {
           }
         }
         const endpoint = endpointFromPath(RPC_CHANNEL, new URL(req.url ?? "/", "http://localhost").pathname);
-        if ((req.method ?? "GET").toUpperCase() !== "POST" || endpoint === void 0) {
+        const method = (req.method ?? "GET").toUpperCase();
+        if (method !== "POST" || endpoint === void 0) {
           res.writeHead(404);
           res.end("not found");
           return;
@@ -6780,8 +6781,46 @@ function registerRpcChannel({ ctx, fence, dispatch }) {
       }
     };
     webCtx.effect(() => webCtx.webServer.register(route), `dsh-qqbot: ${RPC_CHANNEL} rpc channel`);
+    if (!onWsUpgrade) return;
+    const upgradeRoute = {
+      path: `${RPC_CHANNEL}/events`,
+      handler: (req, socket, head) => {
+        if (fence) {
+          try {
+            const rejection = fence.requestRejection({ headers: req.headers });
+            if (rejection !== void 0) {
+              rejectUpgrade(socket, rejection);
+              return;
+            }
+          } catch {
+          }
+        }
+        onWsUpgrade(req, socket, head);
+      }
+    };
+    webCtx.effect(() => {
+      try {
+        return webCtx.webServer.registerUpgrade(upgradeRoute);
+      } catch (error) {
+        console?.warn?.(`[dsh-qqbot] WebSocket 端点注册失败，面板显隐仅依赖设置页动作: ${String(error)}`);
+        return () => {
+        };
+      }
+    }, `dsh-qqbot: ${RPC_CHANNEL} events websocket`);
   });
 }
+function rejectUpgrade(socket, status) {
+  const text = status === 401 ? "Unauthorized" : "Forbidden";
+  try {
+    socket.write(`HTTP/1.1 ${status} ${text}\r
+Connection: close\r
+Content-Length: 0\r
+\r
+`);
+  } catch {
+  }
+  socket.destroy();
+}
 async function writeJson2(res, response) {
   const buffer = Buffer.from(await response.arrayBuffer());
   const headers = {};
@@ -6792,6 +6831,235 @@ async function writeJson2(res, response) {
   res.end(buffer);
 }
 
+// src/host/admin/ws-hub.ts
+import { createHash as createHash2 } from "node:crypto";
+var OPCODE_CONTINUATION = 0;
+var OPCODE_TEXT = 1;
+var OPCODE_CLOSE = 8;
+var OPCODE_PING = 9;
+var OPCODE_PONG = 10;
+var WS_GUID = "258EAFA5-E914-47DA-95CA-C5AB0DC85B11";
+var HEARTBEAT_INTERVAL_MS = 25e3;
+var MAX_PAYLOAD_BYTES = 1024 * 1024;
+var WS_EVENT_BOTS_CHANGED = "bots-changed";
+function acceptKey(key) {
+  return createHash2("sha1").update(`${key}${WS_GUID}`).digest("base64");
+}
+function encodeFrame(opcode, payload) {
+  const length = payload.length;
+  let header;
+  if (length < 126) {
+    header = Buffer.alloc(2);
+    header[1] = length;
+  } else if (length <= 65535) {
+    header = Buffer.alloc(4);
+    header[1] = 126;
+    header.writeUInt16BE(length, 2);
+  } else {
+    header = Buffer.alloc(10);
+    header[1] = 127;
+    header.writeBigUInt64BE(BigInt(length), 2);
+  }
+  header[0] = 128 | opcode;
+  return Buffer.concat([header, payload]);
+}
+function parseFrame(buf) {
+  if (buf.length < 2) return { kind: "incomplete", rest: buf };
+  const first = buf[0];
+  const second = buf[1];
+  const fin = (first & 128) !== 0;
+  const opcode = first & 15;
+  const masked = (second & 128) !== 0;
+  let length = second & 127;
+  let offset = 2;
+  if (length === 126) {
+    if (buf.length < offset + 2) return { kind: "incomplete", rest: buf };
+    length = buf.readUInt16BE(offset);
+    offset += 2;
+  } else if (length === 127) {
+    if (buf.length < offset + 8) return { kind: "incomplete", rest: buf };
+    const declared = buf.readBigUInt64BE(offset);
+    offset += 8;
+    if (declared > BigInt(MAX_PAYLOAD_BYTES)) return { kind: "fatal" };
+    length = Number(declared);
+  }
+  if (length > MAX_PAYLOAD_BYTES) return { kind: "fatal" };
+  let mask;
+  if (masked) {
+    if (buf.length < offset + 4) return { kind: "incomplete", rest: buf };
+    mask = buf.subarray(offset, offset + 4);
+    offset += 4;
+  }
+  if (buf.length < offset + length) return { kind: "incomplete", rest: buf };
+  const payload = Buffer.from(buf.subarray(offset, offset + length));
+  if (mask) {
+    for (let i = 0; i < payload.length; i += 1) payload[i] = payload[i] ^ mask[i & 3];
+  }
+  return { kind: "frame", frame: { fin, opcode, payload }, rest: buf.subarray(offset + length) };
+}
+function isReservedOpcode(opcode) {
+  return opcode >= 3 && opcode <= 7 || opcode >= 11;
+}
+function createWsHub({ logger }) {
+  const clients = /* @__PURE__ */ new Set();
+  const drop = (client) => {
+    clients.delete(client);
+  };
+  const send = (client, opcode, payload) => {
+    if (client.socket.destroyed) {
+      drop(client);
+      return;
+    }
+    try {
+      client.socket.write(encodeFrame(opcode, payload), (error) => {
+        if (error) drop(client);
+      });
+    } catch (error) {
+      drop(client);
+      logger.warn("[dsh-qqbot] WebSocket 写入失败，已摘除该客户端:", error);
+    }
+  };
+  const close = (client, code = 1001) => {
+    if (!client.socket.destroyed) {
+      const body = Buffer.alloc(2);
+      body.writeUInt16BE(code, 0);
+      send(client, OPCODE_CLOSE, body);
+    }
+    drop(client);
+    try {
+      client.socket.end();
+    } catch {
+    }
+  };
+  const attach = (client, onText, head) => {
+    let buffer = Buffer.alloc(0);
+    const fragments = [];
+    let fragmentOpcode = OPCODE_CONTINUATION;
+    const feed = (chunk) => {
+      buffer = buffer.length === 0 ? chunk : Buffer.concat([buffer, chunk]);
+      if (buffer.length > MAX_PAYLOAD_BYTES + 16) {
+        client.socket.destroy();
+        return;
+      }
+      for (; ; ) {
+        const result = parseFrame(buffer);
+        if (result.kind === "incomplete") {
+          buffer = result.rest;
+          return;
+        }
+        if (result.kind === "fatal") {
+          client.socket.destroy();
+          return;
+        }
+        buffer = result.rest;
+        const { fin, opcode, payload } = result.frame;
+        if (opcode === OPCODE_CONTINUATION) {
+          fragments.push(payload);
+          if (!fin) continue;
+          const full = Buffer.concat(fragments);
+          fragments.length = 0;
+          if (fragmentOpcode === OPCODE_TEXT) onText(full.toString("utf8"));
+          fragmentOpcode = OPCODE_CONTINUATION;
+          continue;
+        }
+        if (isReservedOpcode(opcode)) {
+          client.socket.destroy();
+          return;
+        }
+        if (opcode === OPCODE_TEXT) {
+          if (!fin) {
+            fragmentOpcode = OPCODE_TEXT;
+            fragments.length = 0;
+            fragments.push(payload);
+            continue;
+          }
+          onText(payload.toString("utf8"));
+          continue;
+        }
+        if (opcode === OPCODE_PING) {
+          send(client, OPCODE_PONG, payload);
+          continue;
+        }
+        if (opcode === OPCODE_PONG) {
+          client.alive = true;
+          continue;
+        }
+        if (opcode === OPCODE_CLOSE) {
+          close(client, 1e3);
+          return;
+        }
+      }
+    };
+    client.socket.on("data", (chunk) => {
+      feed(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk, "utf8"));
+    });
+    client.socket.on("error", () => drop(client));
+    client.socket.on("close", () => drop(client));
+    if (head.length > 0) feed(head);
+  };
+  const timer = setInterval(() => {
+    for (const client of [...clients]) {
+      if (!client.alive) {
+        drop(client);
+        try {
+          client.socket.destroy();
+        } catch {
+        }
+        continue;
+      }
+      client.alive = false;
+      send(client, OPCODE_PING, Buffer.alloc(0));
+    }
+  }, HEARTBEAT_INTERVAL_MS);
+  timer.unref?.();
+  return {
+    handleUpgrade(req, socket, head) {
+      const upgrade = String(req.headers.upgrade ?? "").toLowerCase();
+      const key = req.headers["sec-websocket-key"];
+      const versions = String(req.headers["sec-websocket-version"] ?? "").split(",").map((v) => v.trim());
+      if (upgrade !== "websocket" || typeof key !== "string" || key === "" || !versions.includes("13")) {
+        try {
+          socket.write("HTTP/1.1 400 Bad Request\r\nConnection: close\r\nContent-Length: 0\r\n\r\n");
+        } catch {
+        }
+        socket.destroy();
+        return;
+      }
+      try {
+        socket.write(
+          `HTTP/1.1 101 Switching Protocols\r
+Upgrade: websocket\r
+Connection: Upgrade\r
+Sec-WebSocket-Accept: ${acceptKey(key)}\r
+\r
+`
+        );
+      } catch (error) {
+        logger.warn("[dsh-qqbot] WebSocket 握手响应失败:", error);
+        socket.destroy();
+        return;
+      }
+      const client = { socket, alive: true };
+      clients.add(client);
+      attach(client, () => {
+      }, head ?? Buffer.alloc(0));
+    },
+    broadcast(event, data) {
+      if (clients.size === 0) return;
+      const payload = Buffer.from(JSON.stringify({ event, data: data ?? null, at: Date.now() }), "utf8");
+      for (const client of [...clients]) send(client, OPCODE_TEXT, payload);
+    },
+    clientCount() {
+      return clients.size;
+    },
+    dispose() {
+      clearInterval(timer);
+      for (const client of [...clients]) close(client);
+      clients.clear();
+    }
+  };
+}
+
 // src/host/messaging/self-id.ts
 init_store_file();
 import { mkdir as mkdir7, readFile as readFile7, writeFile as writeFile7 } from "node:fs/promises";
@@ -6997,6 +7265,7 @@ var QqWsSource = class {
   #onEvent;
   #onRawEvent;
   #onInteraction;
+  #onStatusChange;
   #bot = null;
   #abort = null;
   #starting = null;
@@ -7006,10 +7275,25 @@ var QqWsSource = class {
     this.#onEvent = options.onEvent;
     this.#onRawEvent = options.onRawEvent;
     this.#onInteraction = options.onInteraction;
+    this.#onStatusChange = options.onStatusChange;
   }
   get status() {
     return { ...this.#status };
   }
+  /**
+   * 统一的状态赋值入口：实际发生 state / lastError 变化时触发 onStatusChange。
+   * events 计数递增走裸赋值（#accept），不经过这里。
+   */
+  #setStatus(status) {
+    const prev = this.#status;
+    this.#status = status;
+    if (prev.state !== status.state || prev.lastError !== status.lastError) {
+      try {
+        this.#onStatusChange?.(status.appId, { ...status });
+      } catch {
+      }
+    }
+  }
   /** 底层 SDK 实例（已连接后可用），供媒体上传 / 撤回 / 原生 API 调用。 */
   get sdk() {
     return this.#bot;
@@ -7018,13 +7302,13 @@ var QqWsSource = class {
   async start(config) {
     await this.stop();
     if (!config.appId || !config.appSecret) {
-      this.#status = { ...this.#status, state: "idle", appId: config.appId, lastError: null };
+      this.#setStatus({ ...this.#status, state: "idle", appId: config.appId, lastError: null });
       this.#logger.warn("[dsh-qqbot] WebSocket 未启动：凭据不完整（请扫码登录或填写 AppID/AppSecret）");
       return;
     }
     const run = this.#start(config).catch((error) => {
       const message = error instanceof Error ? error.message : String(error);
-      this.#status = { ...this.#status, state: "failed", lastError: message };
+      this.#setStatus({ ...this.#status, state: "failed", lastError: message });
       this.#logger.error("[dsh-qqbot] WebSocket 连接失败:", error);
     });
     this.#starting = run;
@@ -7044,7 +7328,7 @@ var QqWsSource = class {
       bot?.stop();
     } catch {
     }
-    this.#status = { ...this.#status, state: "idle" };
+    this.#setStatus({ ...this.#status, state: "idle" });
   }
   async #start(config) {
     const options = {
@@ -7064,18 +7348,18 @@ var QqWsSource = class {
     const abort = new AbortController();
     this.#bot = bot;
     this.#abort = abort;
-    this.#status = { state: "connecting", appId: config.appId, lastConnectedAt: null, lastError: null, events: 0 };
+    this.#setStatus({ state: "connecting", appId: config.appId, lastConnectedAt: null, lastError: null, events: 0 });
     bot.on("ready", () => {
-      this.#status = { ...this.#status, state: "connected", lastConnectedAt: Date.now(), lastError: null };
+      this.#setStatus({ ...this.#status, state: "connected", lastConnectedAt: Date.now(), lastError: null });
       this.#logger.info(`[dsh-qqbot] QQ WebSocket 已连接（AppID ${config.appId}），开始接收消息`);
     });
     bot.on("resumed", () => {
-      this.#status = { ...this.#status, state: "connected", lastError: null };
+      this.#setStatus({ ...this.#status, state: "connected", lastError: null });
       this.#logger.info("[dsh-qqbot] QQ WebSocket 会话已恢复（RESUME）");
     });
     bot.on("error", (error) => {
       const message = error instanceof Error ? error.message : String(error);
-      this.#status = { ...this.#status, lastError: message };
+      this.#setStatus({ ...this.#status, lastError: message });
       if (this.#status.state === "connected") {
         this.#logger.warn("[dsh-qqbot] QQ WebSocket 连接错误（SDK 将自动重连）:", error);
       }
@@ -7122,7 +7406,7 @@ var QqWsSource = class {
     const runTask = Promise.resolve().then(() => bot.start(abort.signal));
     runTask.catch((error) => {
       if (abort.signal.aborted) return;
-      this.#status = { ...this.#status, state: "failed", lastError: error instanceof Error ? error.message : String(error) };
+      this.#setStatus({ ...this.#status, state: "failed", lastError: error instanceof Error ? error.message : String(error) });
       this.#logger.error("[dsh-qqbot] QQ WebSocket 连接停止:", error);
     });
     let timer;
@@ -7218,6 +7502,8 @@ var BotRuntimeManager = class {
   #statsTimer = null;
   #syncing = null;
   #primaryAppId = "";
+  /** onBotsChanged 去抖定时器：窗口内的多次状态变化合并成一次通知。 */
+  #notifyTimer = null;
   constructor(options) {
     this.#options = options;
     this.#stats = new StatsStore(options.logger);
@@ -7277,6 +7563,19 @@ var BotRuntimeManager = class {
       map.delete(key);
     }
   }
+  // ── 变更通知（WebSocket 推送等订阅方） ─────────────────────────────────────
+  /** 去抖通知：300ms 窗口内的多次变化（sync 收尾 + 各 ws 状态迁移）合并为一次。 */
+  #notifyChanged() {
+    if (this.#notifyTimer) return;
+    this.#notifyTimer = setTimeout(() => {
+      this.#notifyTimer = null;
+      try {
+        this.#options.onBotsChanged?.();
+      } catch {
+      }
+    }, 300);
+    this.#notifyTimer.unref?.();
+  }
   // ── 同步：把 bots.json 应用到运行时 ────────────────────────────────────────
   /**
    * 按存储层重建/更新/停止各机器人连接。
@@ -7340,6 +7639,7 @@ var BotRuntimeManager = class {
       this.#bots.delete(appId);
       this.#options.logger.info(`[dsh-qqbot] 机器人 ${appId} 已移除，连接已断开`);
     }
+    this.#notifyChanged();
   }
   #buildConfig(stored, secret) {
     return resolveConfig({
@@ -7402,6 +7702,9 @@ var BotRuntimeManager = class {
       },
       onInteraction: (event) => {
         this.#options.onInteraction?.(bot, event);
+      },
+      onStatusChange: () => {
+        this.#notifyChanged();
       }
     });
     return bot;
@@ -7466,7 +7769,7 @@ init_store_file();
 
 // src/host/schedule/schedule.ts
 init_store_file();
-import { createHash as createHash2, randomUUID as randomUUID3 } from "node:crypto";
+import { createHash as createHash3, randomUUID as randomUUID3 } from "node:crypto";
 
 // src/shared/cron.ts
 var MONTH_NAMES = {
@@ -8404,7 +8707,7 @@ var ScheduleStore = class {
   }
 };
 function contentDigest(text) {
-  return createHash2("sha1").update((text ?? "").replace(/\s+/g, " ").trim()).digest("hex").slice(0, 16);
+  return createHash3("sha1").update((text ?? "").replace(/\s+/g, " ").trim()).digest("hex").slice(0, 16);
 }
 function gateSkipReason(entry, text) {
   const gate = entry.gate ?? "always";
@@ -10299,12 +10602,14 @@ async function apply(ctx, entryConfig) {
   }, 6e4);
   outboxTimer.unref?.();
   let runtime = null;
+  const wsHub = createWsHub({ logger });
   const bots = new BotRuntimeManager({
     logger,
     entryConfig,
     adminToken,
     resolveSecret,
     resolvePresets,
+    onBotsChanged: () => wsHub.broadcast(WS_EVENT_BOTS_CHANGED),
     onEvent: (bot, eventType, payload, deliveryId) => {
       if (!runtime) {
         logger.warn("[dsh-qqbot] webhook 运行时不可用，事件已丢弃");
@@ -10471,7 +10776,8 @@ async function apply(ctx, entryConfig) {
     registerRpcChannel({
       ctx,
       fence: connection,
-      dispatch: (endpoint, payload) => admin.handle(endpoint, payload)
+      dispatch: (endpoint, payload) => admin.handle(endpoint, payload),
+      onWsUpgrade: (req, socket, head) => wsHub.handleUpgrade(req, socket, head)
     });
   } catch (error) {
     logger.warn("[dsh-qqbot] RPC 通道注册失败，设置界面将无法连接（HTTP 管理端点仍可用）:", error);
@@ -10498,6 +10804,7 @@ async function apply(ctx, entryConfig) {
     disposeTools();
     scheduler.stop();
     qr.dispose();
+    wsHub.dispose();
     await bots.stopAll();
     if (disposeRule) {
       try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sunjuntao/dsh-qqbot",
-  "version": "0.1.7",
+  "version": "0.1.10",
   "description": "把 QQ 官方机器人（Webhook 回调）接入本机 DeepSeek Harness：QQ 群/单聊消息（含群全量消息上下文）→ DSH 会话 → 回复发回 QQ，支持被动回复与群主动消息。Connect the official QQ bot (webhook callback) to a local DeepSeek Harness.",
   "type": "module",
   "main": "./lib/index.js",
@@ -82,9 +82,9 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1-rc.1",
-    "@deepseek-ai/dsh-credentials": "0.0.1-rc.1 || >=0.1.0-rc.1 <0.2.0-0",
-    "@deepseek-ai/dsh-host-webserver": "0.0.1-rc.1 || >=0.1.0-rc.1 <0.2.0-0",
-    "@deepseek-ai/dsh-webhook": "0.1.2-alpha.2 || >=0.1.2-rc.1 <0.2.0-0",
+    "@deepseek-ai/dsh-credentials": ">=0.1.6-alpha.1 <0.2.0",
+    "@deepseek-ai/dsh-host-webserver": ">=0.1.6-alpha.1 <0.2.0",
+    "@deepseek-ai/dsh-webhook": ">=0.1.6-alpha.1 <0.2.0",
     "@deepseek-ai/schemastery": "^3.18.0"
   },
   "peerDependenciesMeta": {