@tencent-connect/dsh-qqbot 0.5.0 → 0.5.2

package/dist/setup/index.js

@@ -0,0 +1,98 @@
+import { BindingService } from "./binding-service.js";
+import { registerBindRoutes } from "./bind-routes.js";
+import { createBrowserPresenter, createTerminalPresenter, isDesktopHost } from "./presenters.js";
+import { persistCredentialsToProfile } from "./persist.js";
+import { getProfileDir } from "../shared/index.js";
+export { persistCredentialsToProfile } from "./persist.js";
+export { isDesktopHost } from "./presenters.js";
+/** 进程内活动绑定服务（HMR 接管用） */
+let activeService = null;
+/**
+ * 执行扫码绑定编排，返回凭据就绪的 Promise；失败/取消 resolve null。
+ *
+ * 【同步契约】函数体必须保持无 await——绑定编排（服务接管、路由注册、
+ * 呈现策略、ctx 生命周期挂载）在调用后的同步阶段全部完成，随后返回
+ * `service.start()` 的挂起 Promise。调用方（插件 apply）因此可以不等待
+ * 扫码结果直接完成加载：boot 的 `loader.await()` 会等所有插件 fiber
+ * settle，若 apply 无限期等待用户扫码，Host ready 会被阻塞
+ * （Desktop 界面无法进入、Web URL 延迟输出）。
+ *
+ * 凭据持久化由调用方在 Promise 的 then 链中执行——成功写入
+ * cordis.patch.yml 会触发 HMR 热重载，新 fiber 以凭据启动网关。
+ */
+export async function ensureCredentials(ctx, options) {
+    const logger = options.logger;
+    const source = options.source ?? 'dsh-qqbot';
+    // 单例接管：HMR 双 fiber 窗口下，新实例终止旧实例的轮询
+    const service = new BindingService({ source, logger });
+    if (activeService !== null && activeService !== service) {
+        activeService.dispose();
+    }
+    activeService = service;
+    // 生命周期：fiber dispose 时 abort 轮询
+    ctx.effect(() => () => {
+        service.dispose();
+        if (activeService === service)
+            activeService = null;
+    }, 'im-qqbot.binding');
+    // 呈现策略：
+    // - 终端通道（CLI / dsh web 运营者）；Desktop 无可见终端，跳过
+    // - 浏览器降级通道（QQBOT_BIND_OPEN_BROWSER=1 显式启用）
+    if (!isDesktopHost()) {
+        service.attach(createTerminalPresenter());
+    }
+    if (process.env.QQBOT_BIND_OPEN_BROWSER === '1') {
+        service.attach(createBrowserPresenter(logger));
+    }
+    // 端内绑定页路由：webServer 可选注入。
+    // cordis 访问守卫要求服务经 inject 声明后方可访问；deps 未就绪时
+    // 回调不运行但插件照常加载（CLI profile），服务就绪/替换时回调
+    // 重跑（自动清理旧路由、注册新路由），与 webserver 的注入生命周期对齐。
+    ctx.inject(['webServer'], (scoped) => {
+        const webServer = scoped.webServer;
+        if (webServer === undefined || typeof webServer.register !== 'function')
+            return;
+        const disposeRoutes = registerBindRoutes(webServer, service, logger, {
+            // 未绑定流程中的手动提交：终止扫码轮询，走同一持久化路径
+            onManualCredentials: (credentials) => {
+                service.dispose();
+                return persistCredentials(credentials, logger);
+            },
+            currentConfig: () => options.config,
+        });
+        // 回调作用域（服务卸载/替换、插件卸载）连带注销路由
+        scoped.effect(() => {
+            return disposeRoutes;
+        }, 'im-qqbot.bind-routes');
+    });
+    return service.start();
+}
+/**
+ * 凭据已配置的 fiber 注册常驻路由（状态回显 + 手动编辑/更换）。
+ *
+ * 在 apply 的 bootstrapGateway 之前调用；写入经同一 persist 路径，
+ * 保存后触发 HMR 重载、新 fiber 以新凭据重启网关。
+ */
+export function registerBoundCredentialRoutes(ctx, logger, appId, config) {
+    ctx.inject(['webServer'], (scoped) => {
+        const webServer = scoped.webServer;
+        if (webServer === undefined || typeof webServer.register !== 'function')
+            return;
+        const disposeRoutes = registerBindRoutes(webServer, null, logger, {
+            boundAppId: () => appId,
+            onManualCredentials: (credentials) => persistCredentials(credentials, logger),
+            currentConfig: () => config,
+        });
+        scoped.effect(() => {
+            return disposeRoutes;
+        }, 'im-qqbot.bind-routes');
+    });
+}
+/** 手动凭据持久化（失败时返回可展示的错误） */
+function persistCredentials(credentials, logger) {
+    const persisted = persistCredentialsToProfile(credentials, getProfileDir() ?? undefined, logger);
+    return persisted
+        ? { persisted: true }
+        : { persisted: false, error: '无法定位 profile 目录或写入失败，请改用环境变量配置' };
+}
+//# sourceMappingURL=index.js.map

package/dist/setup/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/setup/index.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAsB,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACjG,OAAO,EAAE,2BAA2B,EAAyB,MAAM,cAAc,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,yBAAyB;AACzB,IAAI,aAAa,GAA0B,IAAI,CAAC;AAWhD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAY,EACZ,OAAiC;IAEjC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC;IAE7C,mCAAmC;IACnC,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACvD,IAAI,aAAa,KAAK,IAAI,IAAI,aAAa,KAAK,OAAO,EAAE,CAAC;QACxD,aAAa,CAAC,OAAO,EAAE,CAAC;IAC1B,CAAC;IACD,aAAa,GAAG,OAAO,CAAC;IAExB,gCAAgC;IAC/B,GAAwE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE;QAC1F,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,IAAI,aAAa,KAAK,OAAO;YAAE,aAAa,GAAG,IAAI,CAAC;IACtD,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAEvB,QAAQ;IACR,6CAA6C;IAC7C,4CAA4C;IAC5C,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,GAAG,EAAE,CAAC;QAChD,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,0BAA0B;IAC1B,4CAA4C;IAC5C,uCAAuC;IACvC,2CAA2C;IAC1C,GAEC,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE;QAClC,MAAM,SAAS,GAAI,MAA6C,CAAC,SAAsC,CAAC;QACxG,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,UAAU;YAAE,OAAO;QAChF,MAAM,aAAa,GAAG,kBAAkB,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE;YACnE,8BAA8B;YAC9B,mBAAmB,EAAE,CAAC,WAAW,EAAE,EAAE;gBACnC,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YACjD,CAAC;YACD,aAAa,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM;SACpC,CAAC,CAAC;QACH,4BAA4B;QAC3B,MAA2E,CAAC,MAAM,CAAC,GAAG,EAAE;YACvF,OAAO,aAAa,CAAC;QACvB,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAAC,GAAY,EAAE,MAAc,EAAE,KAAa,EAAE,MAA+B;IACvH,GAEC,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE;QAClC,MAAM,SAAS,GAAI,MAA6C,CAAC,SAAsC,CAAC;QACxG,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,UAAU;YAAE,OAAO;QAChF,MAAM,aAAa,GAAG,kBAAkB,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE;YAChE,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK;YACvB,mBAAmB,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC;YAC7E,aAAa,EAAE,GAAG,EAAE,CAAC,MAAM;SAC5B,CAAC,CAAC;QACF,MAA2E,CAAC,MAAM,CAAC,GAAG,EAAE;YACvF,OAAO,aAAa,CAAC;QACvB,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2BAA2B;AAC3B,SAAS,kBAAkB,CAAC,WAA6B,EAAE,MAAc;IACvE,MAAM,SAAS,GAAG,2BAA2B,CAAC,WAAW,EAAE,aAAa,EAAE,IAAI,SAAS,EAAE,MAAM,CAAC,CAAC;IACjG,OAAO,SAAS;QACd,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE;QACrB,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;AACpE,CAAC"}

package/dist/setup/persist.d.ts

@@ -0,0 +1,41 @@
+/** 凭据结果 */
+export interface SetupCredentials {
+    appId: string;
+    appSecret: string;
+}
+/**
+ * 将凭据写入 dsh profile 的 cordis.patch.yml
+ *
+ * 用 js-yaml 解析现有文件后更新/追加 im-qqbot 条目，再 dump 写回，
+ * 保证输出始终是合法 YAML。文件不存在或为空时安全重建；
+ * 解析失败或结构异常时拒绝写入、保留原文件（避免覆盖用户其他配置）。
+ */
+export declare function persistCredentialsToProfile(credentials: SetupCredentials, profileDir?: string, logger?: {
+    info(msg: string, ...args: unknown[]): void;
+    warn(msg: string, ...args: unknown[]): void;
+}): boolean;
+/**
+ * 从 dsh profile 的 cordis.patch.yml 中移除已保存的凭据（解绑）。
+ *
+ * 保留 im-qqbot 条目的其余 config（requireMention 等用户配置），
+ * 仅删除 appId/appSecret 字段；条目或字段不存在时幂等成功。
+ * 移除后写入触发 HMR 重载，插件回到未绑定态（绑定流程重新可用）。
+ */
+export declare function removeCredentialsFromProfile(profileDir?: string, logger?: {
+    info(msg: string, ...args: unknown[]): void;
+    warn(msg: string, ...args: unknown[]): void;
+}): boolean;
+/**
+ * 将配置更新合并进 dsh profile 的 cordis.patch.yml（im-qqbot 条目）。
+ *
+ * 最小写入原则：只把「本次提交的顶层键」合并进条目 config——
+ * 不固化 bundle patch 的默认值（保持其版本演进的覆盖能力），
+ * 不触碰已保存的凭据字段（appId/appSecret 由绑定/更换/解绑流程管理）。
+ * 嵌套对象（如 access）按顶层键整体替换，避免部分合并出混合态。
+ * 写入触发 HMR 重载，新 fiber 以新配置启动。
+ */
+export declare function updateProfileConfig(configPatch: Record<string, unknown>, profileDir?: string, logger?: {
+    info(msg: string, ...args: unknown[]): void;
+    warn(msg: string, ...args: unknown[]): void;
+}): boolean;
+//# sourceMappingURL=persist.d.ts.map

package/dist/setup/persist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"persist.d.ts","sourceRoot":"","sources":["../../src/setup/persist.ts"],"names":[],"mappings":"AAWA,WAAW;AACX,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AASD;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,gBAAgB,EAC7B,UAAU,CAAC,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE;IAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;CAAE,GACpG,OAAO,CAoDT;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,UAAU,CAAC,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE;IAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;CAAE,GACpG,OAAO,CA8BT;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,UAAU,CAAC,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE;IAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;CAAE,GACpG,OAAO,CAuCT"}

package/dist/setup/persist.js

@@ -0,0 +1,201 @@
+/**
+ * QQ Bot 凭据持久化 — 写入 dsh profile 的 cordis.patch.yml
+ *
+ * 用 js-yaml 解析现有文件后更新/追加 im-qqbot 条目，再 dump 写回，
+ * 保证输出始终是合法 YAML。文件不存在或为空时安全重建；
+ * 解析失败或结构异常时拒绝写入、保留原文件（避免覆盖用户其他配置）。
+ */
+import { resolve } from 'node:path';
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from 'node:fs';
+import yaml from 'js-yaml';
+/**
+ * 将凭据写入 dsh profile 的 cordis.patch.yml
+ *
+ * 用 js-yaml 解析现有文件后更新/追加 im-qqbot 条目，再 dump 写回，
+ * 保证输出始终是合法 YAML。文件不存在或为空时安全重建；
+ * 解析失败或结构异常时拒绝写入、保留原文件（避免覆盖用户其他配置）。
+ */
+export function persistCredentialsToProfile(credentials, profileDir, logger) {
+    const log = logger ?? console;
+    const dir = profileDir;
+    if (!dir) {
+        // 开发模式：插件从源码加载、不在 node_modules 下，无法定位 profile 目录
+        printEnvInstructions(credentials);
+        return false;
+    }
+    const patchPath = resolve(dir, 'cordis.patch.yml');
+    try {
+        // 1. 解析现有条目（文件不存在/为空才重建；解析失败会抛错，保留原文件）
+        let entries = [];
+        if (existsSync(patchPath)) {
+            entries = parsePatchEntries(readFileSync(patchPath, 'utf8'));
+        }
+        // 2. 查找已有 im-qqbot 条目
+        const existing = entries.find((e) => e.id === 'im-qqbot');
+        if (existing) {
+            // 更新已有条目的 config
+            existing.config = {
+                ...(existing.config ?? {}),
+                appId: credentials.appId,
+                appSecret: credentials.appSecret,
+            };
+        }
+        else {
+            // 追加新条目
+            entries.push({
+                id: 'im-qqbot',
+                config: {
+                    appId: credentials.appId,
+                    appSecret: credentials.appSecret,
+                },
+            });
+        }
+        // 3. dump 写回（保证合法 YAML）
+        //    先确保 profile 目录存在（文件不存在时也能正常创建，而非误入 ENOENT）
+        const output = `# QQ 机器人凭据（扫码绑定自动生成）\n${yaml.dump(entries)}`;
+        mkdirSync(dir, { recursive: true });
+        writeFileSync(patchPath, output, 'utf8');
+        log.info(`✔ 凭据已写入: ${patchPath}`);
+        log.info(`  下次启动将自动使用保存的凭据`);
+        return true;
+    }
+    catch (err) {
+        log.warn(`写入配置失败: ${err instanceof Error ? err.message : String(err)}`);
+        printYamlInstructions(credentials, patchPath);
+        return false;
+    }
+}
+/**
+ * 从 dsh profile 的 cordis.patch.yml 中移除已保存的凭据（解绑）。
+ *
+ * 保留 im-qqbot 条目的其余 config（requireMention 等用户配置），
+ * 仅删除 appId/appSecret 字段；条目或字段不存在时幂等成功。
+ * 移除后写入触发 HMR 重载，插件回到未绑定态（绑定流程重新可用）。
+ */
+export function removeCredentialsFromProfile(profileDir, logger) {
+    const log = logger ?? console;
+    if (!profileDir) {
+        return false;
+    }
+    const patchPath = resolve(profileDir, 'cordis.patch.yml');
+    try {
+        if (!existsSync(patchPath))
+            return true; // 无 patch 文件 = 无凭据，幂等成功
+        const entries = parsePatchEntries(readFileSync(patchPath, 'utf8'));
+        const entry = entries.find((e) => e.id === 'im-qqbot');
+        if (entry?.config !== undefined) {
+            delete entry.config.appId;
+            delete entry.config.appSecret;
+        }
+        // 无条件写回：幂等场景（凭据字段已不存在）也更新 mtime——
+        // 宿主 HMR 靠文件变化触发重载，不写则 bound fiber 永不卸载，
+        // 解绑后状态会一直停留在 bound
+        mkdirSync(profileDir, { recursive: true });
+        writeFileSync(patchPath, yaml.dump(entries), 'utf8');
+        log.info(`✔ 凭据已移除: ${patchPath}`);
+        log.info(`  插件将重新进入绑定流程`);
+        return true;
+    }
+    catch (err) {
+        log.warn(`移除凭据失败: ${err instanceof Error ? err.message : String(err)}`);
+        return false;
+    }
+}
+/**
+ * 将配置更新合并进 dsh profile 的 cordis.patch.yml（im-qqbot 条目）。
+ *
+ * 最小写入原则：只把「本次提交的顶层键」合并进条目 config——
+ * 不固化 bundle patch 的默认值（保持其版本演进的覆盖能力），
+ * 不触碰已保存的凭据字段（appId/appSecret 由绑定/更换/解绑流程管理）。
+ * 嵌套对象（如 access）按顶层键整体替换，避免部分合并出混合态。
+ * 写入触发 HMR 重载，新 fiber 以新配置启动。
+ */
+export function updateProfileConfig(configPatch, profileDir, logger) {
+    const log = logger ?? console;
+    if (!profileDir) {
+        log.warn('未定位到 profile 目录，配置无法持久化');
+        return false;
+    }
+    const patchPath = resolve(profileDir, 'cordis.patch.yml');
+    try {
+        let entries = [];
+        if (existsSync(patchPath)) {
+            entries = parsePatchEntries(readFileSync(patchPath, 'utf8'));
+        }
+        const entry = entries.find((e) => e.id === 'im-qqbot');
+        if (entry !== undefined) {
+            const existing = (entry.config ?? {});
+            // 只覆盖提交键；appId/appSecret 由绑定流程管理，防御性保留
+            const next = { ...existing };
+            for (const [key, value] of Object.entries(configPatch)) {
+                if (key === 'appId' || key === 'appSecret')
+                    continue;
+                next[key] = value;
+            }
+            entry.config = next;
+        }
+        else {
+            const { appId: _a, appSecret: _s, ...rest } = configPatch;
+            entries.push({ id: 'im-qqbot', config: rest });
+        }
+        mkdirSync(profileDir, { recursive: true });
+        writeFileSync(patchPath, yaml.dump(entries), 'utf8');
+        log.info(`✔ 配置已保存: ${patchPath}`);
+        log.info(`  插件将自动重载`);
+        return true;
+    }
+    catch (err) {
+        log.warn(`保存配置失败: ${err instanceof Error ? err.message : String(err)}`);
+        return false;
+    }
+}
+/**
+ * 解析 cordis.patch.yml 为条目数组
+ *
+ * - 空内容 / 仅注释（yaml.load 返回 null/undefined）→ 空数组（允许安全重建）
+ * - 空数组 `[]` / 条目列表 → 过滤出含 id 的对象
+ * - 非空但过滤后无任何可识别条目（如 bundle patch 的 `- insert: [...]`
+ *   结构）→ 抛错（由调用方保留原文件——此类文件不是 profile 用户 patch，
+ *   整体重写会破坏其原有内容）
+ * - 非数组结构 / YAML 语法错误 → 抛错（由调用方保留原文件，避免覆盖用户其他配置）
+ */
+function parsePatchEntries(content) {
+    if (!content.trim())
+        return [];
+    const parsed = yaml.load(content);
+    // 仅注释/空白 → null/undefined，等价于空文件，允许重建
+    if (parsed === null || parsed === undefined)
+        return [];
+    if (!Array.isArray(parsed)) {
+        throw new Error('cordis.patch.yml 顶层必须是 YAML 数组');
+    }
+    const entries = parsed.filter((e) => typeof e === 'object' && e !== null && typeof e.id === 'string');
+    if (parsed.length > 0 && entries.length === 0) {
+        throw new Error('cordis.patch.yml 含条目但无带 id 的 patch 行（可能是 bundle patch，拒绝写入以保留原文件）');
+    }
+    return entries;
+}
+/** 开发模式引导：未定位到 profile 目录，引导用环境变量配置（console.log 确保可见） */
+function printEnvInstructions(credentials) {
+    console.log('未检测到 profile 目录（开发模式），请通过环境变量配置凭据:');
+    if (process.platform === 'win32') {
+        // Windows CMD 语法（PowerShell 请用 $env:QQBOT_APPID="xxx"）
+        console.log(`  set QQBOT_APPID=${credentials.appId}`);
+        console.log(`  set QQBOT_SECRET=${credentials.appSecret}`);
+    }
+    else {
+        console.log(`  export QQBOT_APPID="${credentials.appId}"`);
+        console.log(`  export QQBOT_SECRET="${credentials.appSecret}"`);
+    }
+}
+/** 正式安装引导：自动写入失败，引导手动在 cordis.patch.yml 配置（console.log 确保可见） */
+function printYamlInstructions(credentials, patchPath) {
+    console.log('无法自动保存凭据，请手动打开以下文件添加配置:');
+    console.log(`  ${patchPath}`);
+    console.log('');
+    console.log('  - id: im-qqbot');
+    console.log('    config:');
+    console.log(`      appId: "${credentials.appId}"`);
+    console.log(`      appSecret: "${credentials.appSecret}"`);
+}
+//# sourceMappingURL=persist.js.map

package/dist/setup/persist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persist.js","sourceRoot":"","sources":["../../src/setup/persist.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,IAAI,MAAM,SAAS,CAAC;AAe3B;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,WAA6B,EAC7B,UAAmB,EACnB,MAAqG;IAErG,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC;IAC9B,MAAM,GAAG,GAAG,UAAU,CAAC;IACvB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,iDAAiD;QACjD,oBAAoB,CAAC,WAAW,CAAC,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,uCAAuC;QACvC,IAAI,OAAO,GAAiB,EAAE,CAAC;QAC/B,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,OAAO,GAAG,iBAAiB,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,CAAC;QAED,sBAAsB;QACtB,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;QAE1D,IAAI,QAAQ,EAAE,CAAC;YACb,iBAAiB;YACjB,QAAQ,CAAC,MAAM,GAAG;gBAChB,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;gBAC1B,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,SAAS,EAAE,WAAW,CAAC,SAAS;aACjC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,QAAQ;YACR,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,UAAU;gBACd,MAAM,EAAE;oBACN,KAAK,EAAE,WAAW,CAAC,KAAK;oBACxB,SAAS,EAAE,WAAW,CAAC,SAAS;iBACjC;aACF,CAAC,CAAC;QACL,CAAC;QAED,wBAAwB;QACxB,gDAAgD;QAChD,MAAM,MAAM,GAAG,yBAAyB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,YAAY,SAAS,EAAE,CAAC,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,WAAW,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxE,qBAAqB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAC1C,UAAmB,EACnB,MAAqG;IAErG,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC;IAC9B,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAE1D,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,wBAAwB;QAEjE,MAAM,OAAO,GAAG,iBAAiB,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;QACvD,IAAI,KAAK,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;YAC1B,OAAO,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC;QAChC,CAAC;QAED,kCAAkC;QAClC,yCAAyC;QACzC,oBAAoB;QACpB,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QACrD,GAAG,CAAC,IAAI,CAAC,YAAY,SAAS,EAAE,CAAC,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,WAAW,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,WAAoC,EACpC,UAAmB,EACnB,MAAqG;IAErG,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC;IAC9B,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAE1D,IAAI,CAAC;QACH,IAAI,OAAO,GAAiB,EAAE,CAAC;QAC/B,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,OAAO,GAAG,iBAAiB,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;QACvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;YACjE,uCAAuC;YACvC,MAAM,IAAI,GAA4B,EAAE,GAAG,QAAQ,EAAE,CAAC;YACtD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBACvD,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,WAAW;oBAAE,SAAS;gBACrD,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACpB,CAAC;YACD,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,WAAW,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QACrD,GAAG,CAAC,IAAI,CAAC,YAAY,SAAS,EAAE,CAAC,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,WAAW,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,iBAAiB,CAAC,OAAe;IACxC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAE/B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClC,sCAAsC;IACtC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAC3B,CAAC,CAAC,EAAmB,EAAE,CACrB,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,OAAQ,CAA6B,CAAC,EAAE,KAAK,QAAQ,CAC/F,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,yDAAyD;AACzD,SAAS,oBAAoB,CAAC,WAA6B;IACzD,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,uDAAuD;QACvD,OAAO,CAAC,GAAG,CAAC,qBAAqB,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,sBAAsB,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,yBAAyB,WAAW,CAAC,KAAK,GAAG,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,0BAA0B,WAAW,CAAC,SAAS,GAAG,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,SAAS,qBAAqB,CAAC,WAA6B,EAAE,SAAiB;IAC7E,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC,CAAC;IAC9B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3B,OAAO,CAAC,GAAG,CAAC,iBAAiB,WAAW,CAAC,KAAK,GAAG,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,qBAAqB,WAAW,CAAC,SAAS,GAAG,CAAC,CAAC;AAC7D,CAAC"}

package/dist/setup/presenters.d.ts

@@ -0,0 +1,40 @@
+import type { Logger } from '../types.ts';
+/** 呈现策略接口：二维码事件的通知接收方 */
+export interface QrPresenter {
+    /** 实现标识（诊断用） */
+    readonly id: string;
+    /** 是否让 connector 在控制台打印 ASCII 二维码（仅终端可见的宿主开启） */
+    readonly printQrToConsole: boolean;
+    /** 二维码 URL 就绪（首次与过期刷新均会触发） */
+    onQrDisplayed(url: string): void;
+    /** 二维码过期，即将刷新 */
+    onQrExpired?(): void;
+}
+/**
+ * 是否运行在 DSH Desktop 宿主中。
+ *
+ * Desktop 的 Host 以 ELECTRON_RUN_AS_NODE=1 的 Electron 子进程运行
+ * （Desktop 宿主的启动约定），stdout 对用户不可见，终端呈现无意义。
+ */
+export declare function isDesktopHost(): boolean;
+/** 终端可点击的 OSC 8 超链接（不支持 OSC 8 的终端会忽略控制序列，退化为纯 URL 文本） */
+export declare function clickableLink(url: string): string;
+/**
+ * 终端呈现（CLI / `dsh web` 运营者通道）
+ *
+ * ASCII 二维码由 connector 打印（printQrToConsole=true），
+ * 本呈现只补打可点击链接与过期提示。
+ *
+ * 绑定引导是用户直接交互内容，必须用普通 console.log 输出：
+ * 不带时间戳/级别前缀（避免打断二维码块），不受日志级别配置影响。
+ */
+export declare function createTerminalPresenter(): QrPresenter;
+/**
+ * 系统浏览器呈现（降级通道）
+ *
+ * Desktop 端内绑定页不可用时的自救入口：每次绑定会话只自动拉起一次
+ * 浏览器（二维码过期刷新不重复弹窗）。默认关闭，通过环境变量
+ * QQBOT_BIND_OPEN_BROWSER=1 显式启用。
+ */
+export declare function createBrowserPresenter(logger: Logger): QrPresenter;
+//# sourceMappingURL=presenters.d.ts.map

package/dist/setup/presenters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presenters.d.ts","sourceRoot":"","sources":["../../src/setup/presenters.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,yBAAyB;AACzB,MAAM,WAAW,WAAW;IAC1B,gBAAgB;IAChB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,iDAAiD;IACjD,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,8BAA8B;IAC9B,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,iBAAiB;IACjB,WAAW,CAAC,IAAI,IAAI,CAAC;CACtB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAEvC;AAED,yDAAyD;AACzD,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,IAAI,WAAW,CAYrD;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAelE"}

package/dist/setup/presenters.js

@@ -0,0 +1,84 @@
+/**
+ * 扫码呈现策略（QrPresenter）
+ *
+ * 绑定协议（qqbot-connector 轮询）与呈现解耦：BindingService 只依赖
+ * 本接口，具体实现由宿主形态决定——终端宿主打印 ASCII 二维码与可点击
+ * 链接；Desktop 宿主无可见终端，改由端内绑定页（bind-routes）承载。
+ */
+import { spawn } from 'node:child_process';
+/**
+ * 是否运行在 DSH Desktop 宿主中。
+ *
+ * Desktop 的 Host 以 ELECTRON_RUN_AS_NODE=1 的 Electron 子进程运行
+ * （Desktop 宿主的启动约定），stdout 对用户不可见，终端呈现无意义。
+ */
+export function isDesktopHost() {
+    return process.env.ELECTRON_RUN_AS_NODE === '1' && typeof process.versions?.electron === 'string';
+}
+/** 终端可点击的 OSC 8 超链接（不支持 OSC 8 的终端会忽略控制序列，退化为纯 URL 文本） */
+export function clickableLink(url) {
+    return `\u001b]8;;${url}\u001b\\${url}\u001b]8;;\u001b\\`;
+}
+/**
+ * 终端呈现（CLI / `dsh web` 运营者通道）
+ *
+ * ASCII 二维码由 connector 打印（printQrToConsole=true），
+ * 本呈现只补打可点击链接与过期提示。
+ *
+ * 绑定引导是用户直接交互内容，必须用普通 console.log 输出：
+ * 不带时间戳/级别前缀（避免打断二维码块），不受日志级别配置影响。
+ */
+export function createTerminalPresenter() {
+    return {
+        id: 'terminal',
+        printQrToConsole: true,
+        onQrDisplayed(url) {
+            console.log('二维码显示异常？点击下方链接，用浏览器打开即可完成扫码:');
+            console.log(`  ${clickableLink(url)}\n`);
+        },
+        onQrExpired() {
+            console.log('二维码已过期，正在刷新…\n');
+        },
+    };
+}
+/**
+ * 系统浏览器呈现（降级通道）
+ *
+ * Desktop 端内绑定页不可用时的自救入口：每次绑定会话只自动拉起一次
+ * 浏览器（二维码过期刷新不重复弹窗）。默认关闭，通过环境变量
+ * QQBOT_BIND_OPEN_BROWSER=1 显式启用。
+ */
+export function createBrowserPresenter(logger) {
+    let opened = false;
+    return {
+        id: 'browser',
+        printQrToConsole: false,
+        onQrDisplayed(url) {
+            console.log(`扫码绑定链接: ${url}`);
+            if (opened)
+                return;
+            opened = true;
+            openInBrowser(url, logger);
+        },
+        onQrExpired() {
+            console.log('二维码已过期，正在刷新…（如浏览器中页面失效，请点击「刷新二维码」）');
+        },
+    };
+}
+/** 跨平台拉起系统浏览器打开 URL（失败静默降级为日志输出） */
+function openInBrowser(url, logger) {
+    const platform = process.platform;
+    const command = platform === 'darwin' ? 'open' : platform === 'win32' ? 'cmd' : 'xdg-open';
+    const args = platform === 'win32' ? ['/c', 'start', '', url] : [url];
+    try {
+        const child = spawn(command, args, { detached: true, stdio: 'ignore', windowsHide: true });
+        child.on('error', (err) => {
+            logger.warn(`拉起浏览器失败: ${err.message}`);
+        });
+        child.unref();
+    }
+    catch (err) {
+        logger.warn(`拉起浏览器失败: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+//# sourceMappingURL=presenters.js.map

package/dist/setup/presenters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presenters.js","sourceRoot":"","sources":["../../src/setup/presenters.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAe3C;;;;;GAKG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,GAAG,IAAI,OAAO,OAAO,CAAC,QAAQ,EAAE,QAAQ,KAAK,QAAQ,CAAC;AACpG,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,OAAO,aAAa,GAAG,WAAW,GAAG,oBAAoB,CAAC;AAC5D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,EAAE,EAAE,UAAU;QACd,gBAAgB,EAAE,IAAI;QACtB,aAAa,CAAC,GAAW;YACvB,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QACD,WAAW;YACT,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,OAAO;QACL,EAAE,EAAE,SAAS;QACb,gBAAgB,EAAE,KAAK;QACvB,aAAa,CAAC,GAAW;YACvB,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;YAC9B,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7B,CAAC;QACD,WAAW;YACT,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QACpD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,oCAAoC;AACpC,SAAS,aAAa,CAAC,GAAW,EAAE,MAAc;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,OAAO,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;IAC3F,MAAM,IAAI,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAC/B,MAAM,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC"}

package/dist/setup/qr-svg.d.ts

@@ -0,0 +1,8 @@
+/**
+ * 将绑定 URL 渲染为 SVG data URL，供端内绑定页 <img> 直接使用。
+ *
+ * @param url - 二维码内容（q.qq.com 的 connect.html 链接）
+ * @returns `data:image/svg+xml;base64,...` 形式的 data URL
+ */
+export declare function renderQrSvgDataUrl(url: string): Promise<string>;
+//# sourceMappingURL=qr-svg.d.ts.map

package/dist/setup/qr-svg.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qr-svg.d.ts","sourceRoot":"","sources":["../../src/setup/qr-svg.ts"],"names":[],"mappings":"AAWA;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGrE"}

package/dist/setup/qr-svg.js

@@ -0,0 +1,20 @@
+/**
+ * 扫码 URL → SVG data URL（宿主侧渲染）
+ *
+ * 二维码图像在宿主生成而非浏览器：客户端 bundle 保持零第三方依赖
+ * （externals 仅平台种子表），且二维码由可信源编码，页面无伪造面。
+ */
+import QRCode from 'qrcode';
+/** 二维码渲染参数（输出 SVG，含 1 单位留白，240px 宽度适合侧栏展示） */
+const QR_OPTIONS = { type: 'svg', margin: 1, width: 240 };
+/**
+ * 将绑定 URL 渲染为 SVG data URL，供端内绑定页 <img> 直接使用。
+ *
+ * @param url - 二维码内容（q.qq.com 的 connect.html 链接）
+ * @returns `data:image/svg+xml;base64,...` 形式的 data URL
+ */
+export async function renderQrSvgDataUrl(url) {
+    const svg = await QRCode.toString(url, QR_OPTIONS);
+    return `data:image/svg+xml;base64,${Buffer.from(svg, 'utf8').toString('base64')}`;
+}
+//# sourceMappingURL=qr-svg.js.map

package/dist/setup/qr-svg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qr-svg.js","sourceRoot":"","sources":["../../src/setup/qr-svg.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,8CAA8C;AAC9C,MAAM,UAAU,GAAG,EAAE,IAAI,EAAE,KAAc,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAEnE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAClD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACnD,OAAO,6BAA6B,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AACpF,CAAC"}

package/dist/shared/bind-protocol.d.ts

@@ -0,0 +1,42 @@
+/**
+ * 端内绑定协议 —— 宿主路由与客户端面板的共享契约
+ *
+ * 类型与路径常量的唯一事实源：宿主（setup/bind-routes.ts）与浏览器
+ * （client/bind-page.ts）各自 import，杜绝两端协议漂移。
+ * 本模块必须保持纯类型 + 纯常量（零 node 依赖、零副作用）：
+ * 客户端 tsdown 构建会将其内联进 bundle。
+ */
+/** 状态查询（绑定页轮询） */
+export declare const BIND_STATE_PATH = "/qqbot/im-qqbot/bind";
+/** 刷新二维码（绑定页按钮） */
+export declare const BIND_REFRESH_PATH = "/qqbot/im-qqbot/bind/refresh";
+/** 手动填写/编辑凭据（绑定页表单） */
+export declare const BIND_MANUAL_PATH = "/qqbot/im-qqbot/bind/manual";
+/** 解绑：移除已保存凭据，回到绑定流程 */
+export declare const BIND_UNBIND_PATH = "/qqbot/im-qqbot/bind/unbind";
+/** 配置读写（设置面板表单） */
+export declare const BIND_CONFIG_PATH = "/qqbot/im-qqbot/config";
+/** 线上协议（HTTP 路由序列化形态） */
+export type BindStateWire = {
+    phase: 'starting';
+} | {
+    phase: 'waiting';
+    url: string;
+    qrSvg?: string;
+    issuedAt: number;
+} | {
+    phase: 'saving';
+} | {
+    phase: 'failed';
+    reason: string;
+} | {
+    phase: 'bound';
+    appId: string;
+};
+/** manual / unbind 操作的统一响应 */
+export interface BindActionResponse {
+    ok: boolean;
+    message?: string;
+    error?: string;
+}
+//# sourceMappingURL=bind-protocol.d.ts.map

package/dist/shared/bind-protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bind-protocol.d.ts","sourceRoot":"","sources":["../../src/shared/bind-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,kBAAkB;AAClB,eAAO,MAAM,eAAe,yBAAyB,CAAC;AAEtD,mBAAmB;AACnB,eAAO,MAAM,iBAAiB,iCAAiC,CAAC;AAEhE,uBAAuB;AACvB,eAAO,MAAM,gBAAgB,gCAAgC,CAAC;AAE9D,wBAAwB;AACxB,eAAO,MAAM,gBAAgB,gCAAgC,CAAC;AAE9D,mBAAmB;AACnB,eAAO,MAAM,gBAAgB,2BAA2B,CAAC;AAEzD,yBAAyB;AACzB,MAAM,MAAM,aAAa,GACrB;IAAE,KAAK,EAAE,UAAU,CAAA;CAAE,GACrB;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACnE;IAAE,KAAK,EAAE,QAAQ,CAAA;CAAE,GACnB;IAAE,KAAK,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,8BAA8B;AAC9B,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/shared/bind-protocol.js

@@ -0,0 +1,19 @@
+/**
+ * 端内绑定协议 —— 宿主路由与客户端面板的共享契约
+ *
+ * 类型与路径常量的唯一事实源：宿主（setup/bind-routes.ts）与浏览器
+ * （client/bind-page.ts）各自 import，杜绝两端协议漂移。
+ * 本模块必须保持纯类型 + 纯常量（零 node 依赖、零副作用）：
+ * 客户端 tsdown 构建会将其内联进 bundle。
+ */
+/** 状态查询（绑定页轮询） */
+export const BIND_STATE_PATH = '/qqbot/im-qqbot/bind';
+/** 刷新二维码（绑定页按钮） */
+export const BIND_REFRESH_PATH = '/qqbot/im-qqbot/bind/refresh';
+/** 手动填写/编辑凭据（绑定页表单） */
+export const BIND_MANUAL_PATH = '/qqbot/im-qqbot/bind/manual';
+/** 解绑：移除已保存凭据，回到绑定流程 */
+export const BIND_UNBIND_PATH = '/qqbot/im-qqbot/bind/unbind';
+/** 配置读写（设置面板表单） */
+export const BIND_CONFIG_PATH = '/qqbot/im-qqbot/config';
+//# sourceMappingURL=bind-protocol.js.map

package/dist/shared/bind-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bind-protocol.js","sourceRoot":"","sources":["../../src/shared/bind-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,kBAAkB;AAClB,MAAM,CAAC,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAEtD,mBAAmB;AACnB,MAAM,CAAC,MAAM,iBAAiB,GAAG,8BAA8B,CAAC;AAEhE,uBAAuB;AACvB,MAAM,CAAC,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AAE9D,wBAAwB;AACxB,MAAM,CAAC,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AAE9D,mBAAmB;AACnB,MAAM,CAAC,MAAM,gBAAgB,GAAG,wBAAwB,CAAC"}

package/dist/shared/utils.d.ts

@@ -7,10 +7,15 @@ export declare const PLUGIN_VERSION: string;
  */
 export declare function buildUserAgent(): string;
 /**
- * 从插件安装路径推导 profile 目录（node_modules 的父目录）
+ * 从插件安装路径推导 profile 目录
  *
- * 逐级向上查找名为 node_modules 的目录并返回其父目录。
- * 用 basename/dirname 而非字符串分隔符匹配，兼容 Windows（\）与 pnpm 嵌套结构。
+ * 主策略：逐级向上探测 profile 标志文件（cordis.patch.yml / pnpm-workspace.yaml）。
+ * Desktop profile 使用 pnpm workspace 布局（profiles/desktop/dependencies/
+ * node_modules/.pnpm/<pkg>/node_modules/...），插件嵌套于多级 node_modules，
+ * 仅按 node_modules 匹配会命中内层目录而返回错误位置。
+ *
+ * 兜底：无标志文件时沿用旧启发式（名为 node_modules 的目录的父目录），
+ * 覆盖 CLI profile 的浅层 npm 布局与未写入过 patch 的全新 profile。
  *
  * @param baseDir - 起始目录，缺省为插件根（可注入便于测试）
  */

package/dist/shared/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/shared/utils.ts"],"names":[],"mappings":"AAcA,sDAAsD;AACtD,eAAO,MAAM,cAAc,QAAsB,CAAC;AAYlD;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,OAAO,GAAE,MAAoB,GAAG,MAAM,GAAG,IAAI,CAS1E;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAKtE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAOtD"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/shared/utils.ts"],"names":[],"mappings":"AAcA,sDAAsD;AACtD,eAAO,MAAM,cAAc,QAAsB,CAAC;AAYlD;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,OAAO,GAAE,MAAoB,GAAG,MAAM,GAAG,IAAI,CAwB1E;AAuBD;;GAEG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAKtE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAOtD"}