@wenbin_wb/dsh-bridge 2.5.0 → 2.5.2

package/lib/bridge-rpc.js

@@ -11,13 +11,14 @@ function ok(value) {
 }
 
 function fail(code, message, details = {}) {
-  if (code === 'cancelled') {
-    return { ok: false, error: { code: 'cancelled', message, details: {} } };
-  }
+  const allowedCodes = new Set([
+    'bad-request', 'cancelled', 'internal', 'settings-rejected', 'command-error'
+  ]);
+  const safeCode = allowedCodes.has(code) ? code : 'bad-request';
   return {
     ok: false,
     error: {
-      code: 'bad-request',
+      code: safeCode,
       message,
       details: { issues: [{ message }], ...details },
     },
@@ -54,6 +55,21 @@ async function wechatStatusValue(wechatService, logger) {
   return { ...status, login: { ...status.login, qr, qrPayload: undefined, qrKind: undefined } };
 }
 
+function checkAdminAuth(authManager, payload) {
+  if (!authManager) return null;
+  if (authManager.adminPolicy === 'open') return null;
+  // 若系统尚未设置任何管理密码或访客密码，允许免密管理
+  const hasAnyPassword = authManager.hasAdminPassword || authManager.hasPassword;
+  if (!hasAnyPassword) {
+    return null;
+  }
+  // 已设置密码时，必须提供经服务端校验有效的 adminToken（绝不依赖客户端自称的 isLocalhost）
+  if (payload?.adminToken && authManager.validateAdminSession(payload.adminToken)) {
+    return null;
+  }
+  return fail('bad-request', '操作已被拦截：需要管理员权限，请先在控制台输入管理密码解锁');
+}
+
 export function installBridgeRpc(ctx, { service, authManager, wechat, platformManager, logger, saveCustomTunnelConfig }) {
   if (!ctx?.connection?.rpc?.handle) {
     logger.warn('dsh-bridge: Connection RPC unavailable — UI will not work');
@@ -67,7 +83,8 @@ export function installBridgeRpc(ctx, { service, authManager, wechat, platformMa
 
       try {
         if (endpoint === BRIDGE_ENDPOINTS.getStatus) {
-          const status = await service.getStatus();
+          const isAdmin = checkAdminAuth(authManager, payload) === null;
+          const status = await service.getStatus({ adminAuthValid: isAdmin });
           return ok(status);
         }
 
@@ -75,11 +92,15 @@ export function installBridgeRpc(ctx, { service, authManager, wechat, platformMa
 
         if (endpoint === BRIDGE_ENDPOINTS.authGetStatus) {
           if (!authManager) return fail('bad-request', 'AuthManager 未初始化');
-          return ok(authManager.getStatus());
+          const isAdmin = checkAdminAuth(authManager, payload) === null;
+          return ok(authManager.getStatus({ masked: !isAdmin }));
         }
 
         if (endpoint === BRIDGE_ENDPOINTS.authUpdateConfig) {
           if (!authManager) return fail('bad-request', 'AuthManager 未初始化');
+          const adminErr = checkAdminAuth(authManager, payload);
+          if (adminErr) return adminErr;
+
           const { enabled, mode, scope, adminPolicy, password, adminPassword } = payload;
           if (enabled != null) await authManager.setEnabled(enabled);
           if (mode != null) await authManager.setMode(mode);
@@ -87,13 +108,16 @@ export function installBridgeRpc(ctx, { service, authManager, wechat, platformMa
           if (adminPolicy != null) await authManager.setAdminPolicy(adminPolicy);
           if (password !== undefined) await authManager.setPassword(password);
           if (adminPassword !== undefined) await authManager.setAdminPassword(adminPassword);
-          return ok(authManager.getStatus());
+          return ok(authManager.getStatus({ masked: false }));
         }
 
         if (endpoint === BRIDGE_ENDPOINTS.authRegenerateToken) {
           if (!authManager) return fail('bad-request', 'AuthManager 未初始化');
+          const adminErr = checkAdminAuth(authManager, payload);
+          if (adminErr) return adminErr;
+
           await authManager.regenerateSecretToken();
-          return ok(authManager.getStatus());
+          return ok(authManager.getStatus({ masked: false }));
         }
 
         if (endpoint === BRIDGE_ENDPOINTS.authAdminUnlock) {
@@ -104,7 +128,16 @@ export function installBridgeRpc(ctx, { service, authManager, wechat, platformMa
           return fail('bad-request', res.error || '管理员密码错误');
         }
 
+        if (endpoint === BRIDGE_ENDPOINTS.authAdminLock) {
+          if (!authManager) return fail('bad-request', 'AuthManager 未初始化');
+          if (payload?.adminToken) authManager.revokeAdminSession(payload.adminToken);
+          return ok({ locked: true });
+        }
+
         if (endpoint === BRIDGE_ENDPOINTS.saveCustomTunnelConfig) {
+          const adminErr = checkAdminAuth(authManager, payload);
+          if (adminErr) return adminErr;
+
           const { serverUrl = '', accessToken = '' } = payload;
           await saveCustomTunnelConfig(serverUrl.trim(), accessToken.trim());
           const status = await service.getStatus();
@@ -112,6 +145,9 @@ export function installBridgeRpc(ctx, { service, authManager, wechat, platformMa
         }
 
         if (endpoint === BRIDGE_ENDPOINTS.startCustomTunnel) {
+          const adminErr = checkAdminAuth(authManager, payload);
+          if (adminErr) return adminErr;
+
           try {
             await service.startCustomTunnel();
             const status = await service.getStatus();
@@ -123,12 +159,18 @@ export function installBridgeRpc(ctx, { service, authManager, wechat, platformMa
         }
 
         if (endpoint === BRIDGE_ENDPOINTS.stopCustomTunnel) {
+          const adminErr = checkAdminAuth(authManager, payload);
+          if (adminErr) return adminErr;
+
           service.stopCustomTunnel();
           const status = await service.getStatus();
           return ok(status);
         }
 
         if (endpoint === BRIDGE_ENDPOINTS.startCloudflared) {
+          const adminErr = checkAdminAuth(authManager, payload);
+          if (adminErr) return adminErr;
+
           try {
             await service.startCloudflared();
             const status = await service.getStatus();
@@ -140,12 +182,18 @@ export function installBridgeRpc(ctx, { service, authManager, wechat, platformMa
         }
 
         if (endpoint === BRIDGE_ENDPOINTS.stopCloudflared) {
+          const adminErr = checkAdminAuth(authManager, payload);
+          if (adminErr) return adminErr;
+
           service.stopCloudflared();
           const status = await service.getStatus();
           return ok(status);
         }
 
         if (endpoint === BRIDGE_ENDPOINTS.resetCloudflared) {
+          const adminErr = checkAdminAuth(authManager, payload);
+          if (adminErr) return adminErr;
+
           await service.resetCloudflared();
           const status = await service.getStatus();
           return ok(status);
@@ -157,6 +205,9 @@ export function installBridgeRpc(ctx, { service, authManager, wechat, platformMa
         }
 
         if (endpoint === BRIDGE_ENDPOINTS.upgradePlugin) {
+          const adminErr = checkAdminAuth(authManager, payload);
+          if (adminErr) return adminErr;
+
           const result = await service.upgradePlugin(payload);
           return ok(result);
         }
@@ -180,6 +231,9 @@ export function installBridgeRpc(ctx, { service, authManager, wechat, platformMa
 
         if (endpoint === BRIDGE_ENDPOINTS.platformLogin) {
           if (!platformManager) return fail('bad-request', 'PlatformManager 未初始化');
+          const adminErr = checkAdminAuth(authManager, payload);
+          if (adminErr) return adminErr;
+
           const { platformId, qrType } = payload;
           if (!platformId) return fail('bad-request', '缺少 platformId 参数');
           const platform = platformManager.get(platformId);
@@ -193,6 +247,9 @@ export function installBridgeRpc(ctx, { service, authManager, wechat, platformMa
 
         if (endpoint === BRIDGE_ENDPOINTS.platformSetAllowFrom) {
           if (!platformManager) return fail('bad-request', 'PlatformManager 未初始化');
+          const adminErr = checkAdminAuth(authManager, payload);
+          if (adminErr) return adminErr;
+
           const { platformId, allowFrom } = payload;
           if (!platformId) return fail('bad-request', '缺少 platformId 参数');
           const platform = platformManager.get(platformId);
@@ -205,6 +262,9 @@ export function installBridgeRpc(ctx, { service, authManager, wechat, platformMa
 
         if (endpoint === BRIDGE_ENDPOINTS.platformSetConfig) {
           if (!platformManager) return fail('bad-request', 'PlatformManager 未初始化');
+          const adminErr = checkAdminAuth(authManager, payload);
+          if (adminErr) return adminErr;
+
           const { platformId, ...config } = payload;
           if (!platformId) return fail('bad-request', '缺少 platformId 参数');
           const platform = platformManager.get(platformId);
@@ -217,6 +277,9 @@ export function installBridgeRpc(ctx, { service, authManager, wechat, platformMa
 
         if (endpoint === BRIDGE_ENDPOINTS.platformStop) {
           if (!platformManager) return fail('bad-request', 'PlatformManager 未初始化');
+          const adminErr = checkAdminAuth(authManager, payload);
+          if (adminErr) return adminErr;
+
           const { platformId } = payload;
           if (!platformId) return fail('bad-request', '缺少 platformId 参数');
           const platform = platformManager.get(platformId);
@@ -229,6 +292,9 @@ export function installBridgeRpc(ctx, { service, authManager, wechat, platformMa
 
         if (endpoint === BRIDGE_ENDPOINTS.platformStart) {
           if (!platformManager) return fail('bad-request', 'PlatformManager 未初始化');
+          const adminErr = checkAdminAuth(authManager, payload);
+          if (adminErr) return adminErr;
+
           const { platformId } = payload;
           if (!platformId) return fail('bad-request', '缺少 platformId 参数');
           const platform = platformManager.get(platformId);
@@ -241,6 +307,9 @@ export function installBridgeRpc(ctx, { service, authManager, wechat, platformMa
 
         if (endpoint === BRIDGE_ENDPOINTS.platformUnbind) {
           if (!platformManager) return fail('bad-request', 'PlatformManager 未初始化');
+          const adminErr = checkAdminAuth(authManager, payload);
+          if (adminErr) return adminErr;
+
           const { platformId } = payload;
           if (!platformId) return fail('bad-request', '缺少 platformId 参数');
           const platform = platformManager.get(platformId);
@@ -261,6 +330,9 @@ export function installBridgeRpc(ctx, { service, authManager, wechat, platformMa
 
         if (endpoint === BRIDGE_ENDPOINTS.wechatLogin) {
           if (!wechat) return fail('bad-request', '微信 Bot 未初始化');
+          const adminErr = checkAdminAuth(authManager, payload);
+          if (adminErr) return adminErr;
+
           const { qrType } = payload;
           const result = await wechat.login({ qrType });
           if (!result.ok) return fail('bad-request', result.error ?? '登录启动失败');
@@ -270,6 +342,9 @@ export function installBridgeRpc(ctx, { service, authManager, wechat, platformMa
 
         if (endpoint === BRIDGE_ENDPOINTS.wechatSetAllowFrom) {
           if (!wechat) return fail('bad-request', '微信 Bot 未初始化');
+          const adminErr = checkAdminAuth(authManager, payload);
+          if (adminErr) return adminErr;
+
           await wechat.setAllowFrom(payload.allowFrom);
           const value = await wechatStatusValue(wechat, logger);
           return ok(value);
@@ -277,6 +352,9 @@ export function installBridgeRpc(ctx, { service, authManager, wechat, platformMa
 
         if (endpoint === BRIDGE_ENDPOINTS.wechatSetConfig) {
           if (!wechat) return fail('bad-request', '微信 Bot 未初始化');
+          const adminErr = checkAdminAuth(authManager, payload);
+          if (adminErr) return adminErr;
+
           await wechat.setConfig(payload);
           const value = await wechatStatusValue(wechat, logger);
           return ok(value);
@@ -284,6 +362,9 @@ export function installBridgeRpc(ctx, { service, authManager, wechat, platformMa
 
         if (endpoint === BRIDGE_ENDPOINTS.wechatStop) {
           if (!wechat) return fail('bad-request', '微信 Bot 未初始化');
+          const adminErr = checkAdminAuth(authManager, payload);
+          if (adminErr) return adminErr;
+
           await wechat.stop();
           const value = await wechatStatusValue(wechat, logger);
           return ok(value);
@@ -291,6 +372,9 @@ export function installBridgeRpc(ctx, { service, authManager, wechat, platformMa
 
         if (endpoint === BRIDGE_ENDPOINTS.wechatStart) {
           if (!wechat) return fail('bad-request', '微信 Bot 未初始化');
+          const adminErr = checkAdminAuth(authManager, payload);
+          if (adminErr) return adminErr;
+
           await wechat.gateway.start().catch((err) => {
             logger.error('wechat start enabled: %s', err?.message ?? err);
           });
@@ -300,6 +384,9 @@ export function installBridgeRpc(ctx, { service, authManager, wechat, platformMa
 
         if (endpoint === BRIDGE_ENDPOINTS.wechatUnbind) {
           if (!wechat) return fail('bad-request', '微信 Bot 未初始化');
+          const adminErr = checkAdminAuth(authManager, payload);
+          if (adminErr) return adminErr;
+
           await wechat.unbind();
           const value = await wechatStatusValue(wechat, logger);
           return ok(value);

package/lib/feishu/node.js

@@ -75,13 +75,13 @@ export class FeishuConversationNode extends ConversationBridge {
     this._inTurn = false
 
     // 订阅网关入站消息事件
-    this.ctx.on('feishu/message', (event) => this._handleInbound(event))
+    this.disposers.push(this.ctx.on('feishu/message', (event) => this._handleInbound(event)))
 
     // 订阅卡片交互事件（审批按钮点击）
-    this.ctx.on('feishu/action', (event) => this._handleAction(event))
+    this.disposers.push(this.ctx.on('feishu/action', (event) => this._handleAction(event)))
 
     // 监听轮次事件：turn/start 开启流式会话，turn/end 最终刷新并重置
-    this.ctx.on('session/event', (session, event) => {
+    this.disposers.push(this.ctx.on('session/event', (session, event) => {
       if (session.id !== this.activeSessionId) return
       if (event.type === 'turn/start') {
         this._inTurn = true
@@ -103,7 +103,7 @@ export class FeishuConversationNode extends ConversationBridge {
         this._streamCardId = null
         this._streamContent = ''
       }
-    })
+    }))
   }
 
   async _handleInbound(event) {

package/lib/index.js

@@ -12,7 +12,7 @@ import { join, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { readFileSync } from 'node:fs';
 import { readFile, writeFile, mkdir, unlink } from 'node:fs/promises';
-import { exec } from 'node:child_process';
+import { spawn } from 'node:child_process';
 import QRCode from 'qrcode';
 import { installBridgeRpc } from './bridge-rpc.js';
 import { CustomTunnelClient } from './tunnel-client.mjs';
@@ -186,10 +186,42 @@ class ProxyServer {
         return;
       }
 
-      // 3. 处理鉴权状态 API: GET /__dsh_bridge__/auth-status
+      // 3. 处理鉴权状态 API: GET /__dsh_bridge__/auth-status (严格脱敏，不暴露 secretToken)
       if (req.url === '/__dsh_bridge__/auth-status' && req.method === 'GET') {
         res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
-        res.end(JSON.stringify(this.authManager?.getStatus() ?? { enabled: false }));
+        res.end(JSON.stringify(this.authManager?.getPublicStatus() ?? { enabled: false }));
+        return;
+      }
+
+      // 3.1 本机特权 Token 签发：仅限真正物理回环连接（127.0.0.1 / ::1，严禁隧道转发流量伪造）
+      if (req.url === '/__dsh_bridge__/loopback-token') {
+        const corsHeaders = {
+          'Access-Control-Allow-Origin': '*',
+          'Access-Control-Allow-Methods': 'GET, POST, OPTIONS',
+          'Access-Control-Allow-Headers': 'Content-Type',
+        };
+        if (req.method === 'OPTIONS') {
+          res.writeHead(204, corsHeaders);
+          res.end();
+          return;
+        }
+
+        const remote = req.socket?.remoteAddress || '';
+        const isLoopback = (remote === '127.0.0.1' || remote === '::1' || remote === '::ffff:127.0.0.1');
+        const internalTunnelHeader = req.headers?.['x-dsh-internal-tunnel'];
+        const isCustomTunnel = Boolean(isLoopback && internalTunnelHeader && internalTunnelHeader === this.authManager?.internalTunnelSecret);
+        const isCloudflare = Boolean(isLoopback && (req.headers?.['cf-ray'] || req.headers?.['cf-connecting-ip']));
+        const isPublicTunnel = isCustomTunnel || isCloudflare;
+
+        if (isLoopback && !isPublicTunnel && this.authManager) {
+          const adminToken = this.authManager.createAdminSession();
+          res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8', ...corsHeaders });
+          res.end(JSON.stringify({ ok: true, adminToken }));
+          return;
+        }
+
+        res.writeHead(403, { 'Content-Type': 'application/json; charset=utf-8', ...corsHeaders });
+        res.end(JSON.stringify({ ok: false, error: 'Forbidden: loopback only' }));
         return;
       }
 
@@ -396,9 +428,9 @@ class BridgeService {
     return this.proxy;
   }
 
-  async getStatus() {
+  async getStatus({ adminAuthValid = false } = {}) {
     const lanIp = selectLanIPv4();
-    const token = this.authManager?.secretToken;
+    const token = adminAuthValid ? this.authManager?.secretToken : null;
     const isAuthEnabled = Boolean(this.authManager?.enabled && this.authManager?.mode !== 'password_only' && token);
 
     const isLanProtected = isAuthEnabled && this.authManager?.scope !== 'public_only';
@@ -428,7 +460,7 @@ class BridgeService {
     return {
       version: VERSION,
 
-      auth: this.authManager?.getStatus() ?? { enabled: false },
+      auth: this.authManager?.getStatus({ masked: !adminAuthValid }) ?? { enabled: false },
 
       proxy: {
         running: !!this.proxy,
@@ -486,6 +518,7 @@ class BridgeService {
       serverUrl,
       accessToken,
       localPort: this.proxyPort,
+      internalTunnelSecret: this.authManager?.internalTunnelSecret,
       onStateChange: (state) => {
         this.customTunnelState = state;
       },
@@ -575,29 +608,57 @@ class BridgeService {
     }
   }
 
-  // 一键直接升级插件（执行 dsh plugin / pnpm / npm 自动升级）
+  // 一键直接升级插件（执行 dsh / npx / npm 自动升级，使用安全的参数数组彻底杜绝 shell 注入）
   async upgradePlugin({ version } = {}) {
     const targetVersion = version ? String(version).trim() : 'latest';
+    // 严格 SemVer 白名单正则校验
+    if (!/^(latest|\d+\.\d+\.\d+(-[a-zA-Z0-9.]+)?)$/.test(targetVersion)) {
+      return { ok: false, error: `非法的版本号格式: ${targetVersion}`, version: targetVersion };
+    }
     const pkgSpec = `@wenbin_wb/dsh-bridge@${targetVersion}`;
-    const commands = [
-      `dsh plugin --profile web add ${pkgSpec}`,
-      `npx --yes @deepseek-ai/dsh plugin --profile web add ${pkgSpec}`,
-      `npm install ${pkgSpec}`,
+    const isWin = process.platform === 'win32';
+
+    const tasks = [
+      { cmd: isWin ? 'dsh.cmd' : 'dsh', fallbackCmd: 'dsh', args: ['plugin', '--profile', 'web', 'add', pkgSpec] },
+      { cmd: isWin ? 'npx.cmd' : 'npx', fallbackCmd: 'npx', args: ['--yes', '@deepseek-ai/dsh', 'plugin', '--profile', 'web', 'add', pkgSpec] },
+      { cmd: isWin ? 'npm.cmd' : 'npm', fallbackCmd: 'npm', args: ['install', pkgSpec] },
     ];
 
     let lastError = null;
-    let output = '';
 
-    for (const cmd of commands) {
+    for (const task of tasks) {
       try {
         const res = await new Promise((resolve, reject) => {
-          exec(cmd, { timeout: 90000, windowsHide: true }, (err, stdout, stderr) => {
-            if (err) return reject(new Error(stderr || err.message));
-            resolve({ stdout, stderr });
-          });
+          const runExecutable = (executable) => {
+            const cp = spawn(executable, task.args, {
+              windowsHide: true,
+              shell: false,
+              timeout: 90000,
+            });
+            let stdout = '';
+            let stderr = '';
+            cp.stdout?.on('data', (d) => { stdout += d.toString(); });
+            cp.stderr?.on('data', (d) => { stderr += d.toString(); });
+            cp.on('error', (err) => {
+              if (executable !== task.fallbackCmd) {
+                runExecutable(task.fallbackCmd);
+              } else {
+                reject(err);
+              }
+            });
+            cp.on('close', (code) => {
+              if (code === 0) {
+                resolve({ stdout, stderr });
+              } else {
+                reject(new Error(stderr || stdout || `进程退出码 ${code}`));
+              }
+            });
+          };
+          runExecutable(task.cmd);
         });
-        output = res.stdout || res.stderr || '升级成功';
-        return { ok: true, command: cmd, output, version: targetVersion };
+
+        const output = res.stdout || res.stderr || '升级成功';
+        return { ok: true, command: `${task.cmd} ${task.args.join(' ')}`, output, version: targetVersion };
       } catch (err) {
         lastError = err;
       }
@@ -634,6 +695,9 @@ function apply(ctx, config = {}) {
   const configFile = join(dshHome, 'dsh-bridge', 'config.json');
   const emergencyResetFile = join(dshHome, 'dsh-bridge', 'reset-auth');
 
+  // 配置写入互斥锁队列，杜绝多平台并发写入造成文件覆盖损坏
+  let configWriteQueue = Promise.resolve();
+
   // 从 JSON 文件读取持久化配置
   async function loadConfig() {
     try {
@@ -644,10 +708,15 @@ function apply(ctx, config = {}) {
     }
   }
 
-  // 持久化配置到 JSON 文件
+  // 持久化配置到 JSON 文件（排队原子写入）
   async function saveConfig(data) {
-    await mkdir(join(dshHome, 'dsh-bridge'), { recursive: true });
-    await writeFile(configFile, JSON.stringify(data, null, 2), 'utf8');
+    configWriteQueue = configWriteQueue.then(async () => {
+      await mkdir(join(dshHome, 'dsh-bridge'), { recursive: true });
+      await writeFile(configFile, JSON.stringify(data, null, 2), 'utf8');
+    }).catch((err) => {
+      logger.error('saveConfig failed: %s', err.message);
+    });
+    return configWriteQueue;
   }
 
   // 访问安全认证管理器

package/lib/qq/node.js

@@ -147,8 +147,8 @@ export class QqConversationNode extends ConversationBridge {
     this._replyMsgId = null // 被动回复用的用户消息 ID（事件 d.id）
 
     // 订阅网关入站事件
-    this.ctx.on('qq/message', (event) => this._handleInbound(event))
-    this.ctx.on('qq/interaction', (event) => this._handleInteraction(event))
+    this.disposers.push(this.ctx.on('qq/message', (event) => this._handleInbound(event)))
+    this.disposers.push(this.ctx.on('qq/interaction', (event) => this._handleInteraction(event)))
   }
 
   // ---- 出站：覆盖 sendText / sendTyping，正确处理 scope 与被动回复 ----
@@ -350,6 +350,13 @@ export class QqConversationNode extends ConversationBridge {
     })
   }
 
+  /** 发送多媒体附件，正确传递 c2c 或 group 范围 */
+  async sendMediaFile(filePath, opts = {}) {
+    const peerInfo = this._currentPeer()
+    if (!peerInfo) return
+    return this.gateway.sendMediaFile(peerInfo.peerId, filePath, { scope: peerInfo.scope, ...opts })
+  }
+
   // ---- 入站 ----
 
   async _handleInbound(event) {

package/lib/telegram/node.js

@@ -68,13 +68,13 @@ export class TelegramConversationNode extends ConversationBridge {
     this._inTurn = false
 
     // 订阅网关入站消息事件
-    this.ctx.on('telegram/message', (event) => this._handleInbound(event))
+    this.disposers.push(this.ctx.on('telegram/message', (event) => this._handleInbound(event)))
 
     // 订阅 Inline 按钮点击交互事件（审批确认）
-    this.ctx.on('telegram/action', (event) => this._handleAction(event))
+    this.disposers.push(this.ctx.on('telegram/action', (event) => this._handleAction(event)))
 
     // 监听轮次事件：turn/start 开启流式打字机，turn/end 最终刷新并重置
-    this.ctx.on('session/event', (session, event) => {
+    this.disposers.push(this.ctx.on('session/event', (session, event) => {
       if (session.id !== this.activeSessionId) return
       if (event.type === 'turn/start') {
         this._inTurn = true
@@ -91,7 +91,7 @@ export class TelegramConversationNode extends ConversationBridge {
         this._streamMsgId = null
         this._streamContent = ''
       }
-    })
+    }))
   }
 
   async _handleInbound(event) {

package/lib/tunnel-client.mjs

@@ -8,10 +8,11 @@ const RECONNECT_DELAY = 5000;
 const MAX_RECONNECT_ATTEMPTS = 5;
 
 export class CustomTunnelClient {
-  constructor({ serverUrl, accessToken, localPort, signal, onStateChange, logger }) {
+  constructor({ serverUrl, accessToken, localPort, internalTunnelSecret, signal, onStateChange, logger }) {
     this.serverUrl = serverUrl;
     this.accessToken = accessToken;
     this.localPort = localPort;
+    this.internalTunnelSecret = internalTunnelSecret;
     this.signal = signal;
     this.onStateChange = onStateChange;
     this.logger = logger;
@@ -126,10 +127,15 @@ export class CustomTunnelClient {
       Object.entries(headers ?? {}).filter(([k]) => !SKIP.has(k.toLowerCase()))
     );
 
+    const reqHeaders = { ...safeHeaders, host: `127.0.0.1:${this.localPort}` };
+    if (this.internalTunnelSecret) {
+      reqHeaders['x-dsh-internal-tunnel'] = this.internalTunnelSecret;
+    }
+
     const req = httpRequest({
       host: '127.0.0.1', port: this.localPort,
       method, path: path || '/',
-      headers: { ...safeHeaders, host: `127.0.0.1:${this.localPort}` },
+      headers: reqHeaders,
     }, (res) => {
       const chunks = [];
       res.on('data', c => chunks.push(c));
@@ -168,6 +174,9 @@ export class CustomTunnelClient {
     const reqHeaders = { ...headers, host: `127.0.0.1:${this.localPort}` };
     delete reqHeaders['proxy-connection'];
     delete reqHeaders['proxy-authorization'];
+    if (this.internalTunnelSecret) {
+      reqHeaders['x-dsh-internal-tunnel'] = this.internalTunnelSecret;
+    }
 
     const lines = [`GET ${path || '/'} HTTP/1.1`];
     for (const [k, v] of Object.entries(reqHeaders)) lines.push(`${k}: ${v}`);

package/lib/wechat/media.js

@@ -187,9 +187,15 @@ export async function downloadMedia({
   const controller = new AbortController()
   const timer = setTimeout(() => controller.abort(), timeoutMs)
   try {
-    const response = await fetch(url, { signal: controller.signal })
-    if (!response.ok) throw new Error(`media download HTTP ${response.status}`)
+    const MAX_DOWNLOAD_BYTES = 25 * 1024 * 1024; // 25MB
+    const contentLength = Number(response.headers.get('content-length') || 0);
+    if (contentLength > MAX_DOWNLOAD_BYTES) {
+      throw new Error(`Media file exceeds maximum allowed size (${contentLength} > 25MB)`);
+    }
     const raw = Buffer.from(await response.arrayBuffer())
+    if (raw.length > MAX_DOWNLOAD_BYTES) {
+      throw new Error(`Media file exceeds maximum allowed size (${raw.length} > 25MB)`);
+    }
     if (aesKeyBase64) {
       const key = parseAesKey(aesKeyBase64)
       return aes128EcbDecrypt(raw, key)

package/lib/wechat/node.js

@@ -59,9 +59,9 @@ export class WechatConversationNode extends ConversationBridge {
       onActiveSessionChange,
     })
 
-    this.ctx.on('wechat/message', (message) => {
+    this.disposers.push(this.ctx.on('wechat/message', (message) => {
       void this._handleInbound(message)
-    })
+    }))
   }
 
   // ---- 入站 ----

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wenbin_wb/dsh-bridge",
-  "version": "2.5.0",
+  "version": "2.5.2",
   "description": "手机扫码即可在移动端/公网继续用 DeepSeek Harness，人不在电脑前也能接着干。一键局域网二维码、Cloudflare 公网隧道、自建隧道与微信 / QQ / 飞书 / Telegram Bot（多工作区/会话持久化/媒体/卡片审批/流式输出），无需自己搭公网服务器。",
   "type": "module",
   "main": "lib/index.js",
@@ -18,31 +18,29 @@
     "README.md",
     "README.en.md",
     "LICENSE",
-    "docs/banner.jpg",
-    "docs/custom-tunnel.md",
-    "docs/wechat-usage.md",
-    "docs/qq-usage.md",
-    "docs/feishu-usage.md",
-    "docs/telegram-usage.md"
+    "docs"
   ],
   "scripts": {
     "build:client": "node client/build.mjs",
+    "build:banner": "node scripts/generate-banner.mjs",
+    "prepack": "npm run build:client",
     "test": "node --test test/*.test.mjs"
   },
   "dependencies": {
+    "@deepseek-ai/dsh-llm": "0.1.0-rc.6",
     "@larksuiteoapi/node-sdk": "^1.73.0",
     "qrcode": "^1.5.3",
-    "ws": "^8.18.0",
-    "@deepseek-ai/dsh-llm": "0.1.0-rc.6"
+    "ws": "^8.18.0"
   },
   "devDependencies": {
-    "esbuild": "^0.25.9"
+    "esbuild": "^0.25.9",
+    "puppeteer-core": "^25.8.0"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1"
   },
   "engines": {
-    "node": ">=22"
+    "node": "^22.19.0 || >=24.0.0"
   },
   "license": "MIT",
   "keywords": [
@@ -62,7 +60,8 @@
     "bot",
     "wechat",
     "qq",
-    "feishu"
+    "feishu",
+    "telegram"
   ],
   "dsh": {
     "bundle": {