@wenbin_wb/dsh-bridge 2.8.0 → 2.8.3

package/CHANGELOG.md

@@ -4,6 +4,43 @@
 
 ---
 
+## [v2.8.3] - 2026-08-26
+
+### 📱 微信与全平台 IM 文件收发链路全面修复与深度兼容
+- **📱 微信 iLink 官方媒体传输协议完全对齐**：
+  - 修复 `getuploadurl` 媒体类型映射，确保文件上传请求采用标准 `UploadMediaType.FILE = 3`，微信服务端正确识别文件类型与大小；
+  - 严格采用官方规范对 `CDNMedia.aes_key` 进行 `base64(hex_string)` 编码，彻底解决微信移动端/电脑端解密失败报「文件已过期/下载失败/0B」的深层问题；
+  - 精简规范 `file_item` 结构并对齐 `encrypt_type: 1`。
+- **🤖 QQ 机器人富媒体文件直传与显示修复**：
+  - 支持 `file_type: 4` 通用文件传输，适配 QQ OpenAPI v2 文件格式校验（解决此前类型不符导致的 850019 拦截）；
+  - 显式传递 `file_name`，彻底消除 QQ 聊天界面将文档显示为「未命名」的问题；
+  - 自动识别群聊与单聊端点路由（`/v2/users/{openid}/files` 与 `/v2/groups/{group_openid}/files`）。
+- **🌐 微信会话凭证（context_token）持久化机制**：
+  - 捕获微信入站消息时自动将实时安全会话凭证持久化落盘（`wechat-context-tokens.json`），并在服务启动与重启时自动载入，彻底避免凭证在重启后丢失；
+  - 完善 `ret: -2` / `prepare failed` 过期感知，当用户重新发消息时自动刷新续期。
+- **📢 多平台多端共享会话广播**：
+  - 优化同一工作区多端共享会话的广播逻辑，当任一客户端（飞书/QQ/Telegram/Web）触发生成文件时，各平台桥接器自动回退至已授权用户，实现产物文件多端同步直传。
+
+---
+
+## [v2.8.2] - 2026-08-26
+
+### 🚀 微信/IM 本地生成文件全域探测与直接推送
+- **📁 全域文件智能探测与提取**：全面支持从 PowerShell/Bash 终端脚本（`New-Item`、`Set-Content`、`Out-File`、`>`）、工具调用参数及回复文本中自动探测提取生成的文件，并结合会话工作区目录自动解析为绝对路径；
+- **🌐 微信官方 CDN 媒体上传链路修复**：严格对齐腾讯 iLink 官方 CDN `/upload` 路由子路径与 `encrypted_query_param` / `filekey` 鉴权参数，彻底解决此前上传失败的问题；
+- **💬 微信与各 IM 原生文件气泡推送**：任务结束自动将 txt/pdf/docx/xlsx/zip/png 等产物推送到聊天界面，支持直接下载查看与转发。
+
+---
+
+## [v2.8.1] - 2026-08-26
+
+### 🛡️ 微信/IM 消息分块保护与流式体验修复
+- **🛡️ 修复消息被切成 20 字符碎片的问题**：排查并修复历史配置中 `maxMessageChars` 异常写入 `20` 导致的聊天框逐句高频切块分发问题；
+- **⚙️ 全链路字符数下限安全防御**：在会话桥基类、各平台 Service 配置接口及启动加载链路中增加强制安全下限（`< 200` 自动回退为平台标准默认容量），彻底杜绝异常分块；
+- **💬 微信与各 IM 平台体验恢复**：恢复完整 Markdown 回复、段落与代码块的原生一次性聚合推送。
+
+---
+
 ## [v2.8.0] - 2026-08-25
 
 ### 📱 移动端体验革新、远程工作区管理与全面安全加固

package/client/client.js

@@ -1173,7 +1173,7 @@ function PlatformCard({ platformId, platformName, platformDesc, rpcCall, onStatu
       setCfgDraft({
         digestIntervalSec: String(platform.config.digestIntervalSec ?? 300),
         approvalTimeoutSec: String(platform.config.approvalTimeoutSec ?? 600),
-        maxMessageChars: String(platform.config.maxMessageChars ?? (platformId === "telegram" ? 4096 : 2e3)),
+        maxMessageChars: String((platform.config.maxMessageChars >= 500 ? platform.config.maxMessageChars : null) ?? (platformId === "telegram" ? 4096 : 2e3)),
         sendChunkDelayMs: String(platform.config.sendChunkDelayMs ?? 1500),
         appId: platform.config.appId ?? "",
         // Secret 不由后端回传；空值表示沿用已保存密钥

package/client/index.js

@@ -1001,7 +1001,7 @@ function PlatformCard({ platformId, platformName, platformDesc, rpcCall, onStatu
       setCfgDraft({
         digestIntervalSec:  String(platform.config.digestIntervalSec  ?? 300),
         approvalTimeoutSec: String(platform.config.approvalTimeoutSec ?? 600),
-        maxMessageChars:    String(platform.config.maxMessageChars    ?? (platformId === 'telegram' ? 4096 : 2000)),
+        maxMessageChars:    String((platform.config.maxMessageChars >= 500 ? platform.config.maxMessageChars : null) ?? (platformId === 'telegram' ? 4096 : 2000)),
         sendChunkDelayMs:   String(platform.config.sendChunkDelayMs   ?? 1500),
         appId: platform.config.appId ?? '',
         // Secret 不由后端回传；空值表示沿用已保存密钥

package/lib/feishu/index.js

@@ -181,7 +181,10 @@ export class FeishuService extends Platform {
   async setConfig({ digestIntervalSec, approvalTimeoutSec, maxMessageChars, sendChunkDelayMs, appId, appSecret, domain } = {}) {
     if (digestIntervalSec != null)   this.node.config.digestIntervalSec   = Number(digestIntervalSec)
     if (approvalTimeoutSec != null)  this.node.config.approvalTimeoutSec  = Number(approvalTimeoutSec)
-    if (maxMessageChars != null)     this.node.config.maxMessageChars     = Number(maxMessageChars)
+    if (maxMessageChars != null) {
+      const val = Number(maxMessageChars)
+      this.node.config.maxMessageChars = (val >= 200) ? val : 2000
+    }
     if (sendChunkDelayMs != null)    this.node.config.sendChunkDelayMs    = Number(sendChunkDelayMs)
     if (appId !== undefined || appSecret !== undefined || domain !== undefined) {
       this.gateway.updateConfig({

package/lib/index.js

@@ -1440,7 +1440,10 @@ function apply(ctx, config = {}) {
       wechat.node.config.allowFrom = Array.isArray(cfg.allowFrom) ? cfg.allowFrom : [];
       if (cfg.digestIntervalSec != null) wechat.node.config.digestIntervalSec = Number(cfg.digestIntervalSec);
       if (cfg.approvalTimeoutSec != null) wechat.node.config.approvalTimeoutSec = Number(cfg.approvalTimeoutSec);
-      if (cfg.maxMessageChars != null) wechat.node.config.maxMessageChars = Number(cfg.maxMessageChars);
+      if (cfg.maxMessageChars != null) {
+        const val = Number(cfg.maxMessageChars);
+        wechat.node.config.maxMessageChars = (val >= 200) ? val : 2000;
+      }
       if (cfg.sendChunkDelayMs != null) wechat.node.config.sendChunkDelayMs = Number(cfg.sendChunkDelayMs);
 
       wechat.node._restoringConfig = (async () => {
@@ -1552,7 +1555,10 @@ function apply(ctx, config = {}) {
       telegram.node.config.allowFrom = Array.isArray(cfg.allowFrom) ? cfg.allowFrom : [];
       if (cfg.digestIntervalSec != null) telegram.node.config.digestIntervalSec = Number(cfg.digestIntervalSec);
       if (cfg.approvalTimeoutSec != null) telegram.node.config.approvalTimeoutSec = Number(cfg.approvalTimeoutSec);
-      if (cfg.maxMessageChars != null) telegram.node.config.maxMessageChars = Number(cfg.maxMessageChars);
+      if (cfg.maxMessageChars != null) {
+        const val = Number(cfg.maxMessageChars);
+        telegram.node.config.maxMessageChars = (val >= 200) ? val : 4096;
+      }
       if (cfg.sendChunkDelayMs != null) telegram.node.config.sendChunkDelayMs = Number(cfg.sendChunkDelayMs);
 
       telegram.node._restoringConfig = (async () => {

package/lib/platform/conversation-bridge.js

@@ -21,7 +21,7 @@ import { createUserMessage } from '@deepseek-ai/dsh-llm'
 import { randomUUID } from 'node:crypto'
 import { statSync } from 'node:fs'
 import { stat } from 'node:fs/promises'
-import { resolve, normalize, basename } from 'node:path'
+import { resolve, normalize, basename, isAbsolute } from 'node:path'
 import { isSafeWorkspacePath } from '../security/path-validator.js'
 
 // 纯文本标记（用户偏好不用 emoji）
@@ -155,6 +155,73 @@ export function textOfAssistantMessage(message) {
     .join('\n')
 }
 
+/**
+ * 尝试将任意路径（绝对或相对当前工作区）解析为真实存在的本地文件绝对路径
+ */
+export function resolveFilePath(rawPath, cwd = process.cwd()) {
+  if (typeof rawPath !== 'string') return null
+  let p = rawPath.trim()
+    .replace(/^["'`]|["'`]$/g, '')
+    .replace(/^file:\/\/\/?/, '')
+    .replace(/^[📁📄📦\s]+/, '')
+  if (!p) return null
+  // 排除 HTTP/HTTPS 网址
+  if (/^https?:\/\//i.test(p)) return null
+  const resolved = isAbsolute(p) ? normalize(p) : resolve(cwd, p)
+  try {
+    if (statSync(resolved).isFile()) {
+      return resolved
+    }
+  } catch {}
+  return null
+}
+
+/**
+ * 从模型助手回复正文或工具命令中提取所有真实存在于本地磁盘的文件绝对路径
+ */
+export function extractFilePathsFromText(text, cwd = process.cwd()) {
+  if (typeof text !== 'string' || !text.trim()) return []
+  const found = new Set()
+
+  // 1. Windows 绝对路径：C:\Users\...\file.ext 或 C:/Users/.../file.ext（支持中文、空格、特殊符号）
+  const winAbsRegex = /[A-Za-z]:[\\/][^\s"'`<>|*?()]+?\.[A-Za-z0-9_.-]+/g
+  let m
+  while ((m = winAbsRegex.exec(text)) !== null) {
+    const r = resolveFilePath(m[0], cwd)
+    if (r) found.add(r)
+  }
+
+  // 2. POSIX 绝对路径：/home/.../file.ext 或 /tmp/.../file.ext
+  const posixAbsRegex = /\/(?:[^\s"'`<>|*?()\/]+\/)+[^\s"'`<>|*?()\/]+\.[A-Za-z0-9_.-]+/g
+  while ((m = posixAbsRegex.exec(text)) !== null) {
+    const r = resolveFilePath(m[0], cwd)
+    if (r) found.add(r)
+  }
+
+  // 3. Markdown 文件链接：[name](file:///path/to/file) 或 [name](path/to/file)
+  const mdLinkRegex = /\[(?:[^\]]*)\]\((?:file:\/\/\/?)?([^)]+)\)/g
+  while ((m = mdLinkRegex.exec(text)) !== null) {
+    const r = resolveFilePath(m[1], cwd)
+    if (r) found.add(r)
+  }
+
+  // 4. 关键词或 Emoji 引用的文件路径：📁 file.txt, 保存到：file.txt, 产物文件: ...
+  const keywordRegex = /(?:📁|📄|📦|保存到[：:\s]*|生成文件[：:\s]*|文件路径[：:\s]*|产物[：:\s]*|输出文件[：:\s]*|写入文件[：:\s]*)[`"']?([^\r\n`"'\t<>|*?]+?\.[A-Za-z0-9_.-]+)[`"']?/g
+  while ((m = keywordRegex.exec(text)) !== null) {
+    const r = resolveFilePath(m[1], cwd)
+    if (r) found.add(r)
+  }
+
+  // 5. Shell 终端常用输出命令参数：-Path "...", > "...", Out-File "...", Set-Content "..."
+  const cmdRegex = /(?:-Path\s+|>\s*|Out-File\s+|Set-Content\s+|TargetFile["':\s]+|targetFile["':\s]+)[`"']?([^\r\n`"'\t<>|*?]+?\.[A-Za-z0-9_.-]+)[`"']?/gi
+  while ((m = cmdRegex.exec(text)) !== null) {
+    const r = resolveFilePath(m[1], cwd)
+    if (r) found.add(r)
+  }
+
+  return Array.from(found)
+}
+
 // ---------------------------------------------------------------------------
 // digest 摘要
 // ---------------------------------------------------------------------------
@@ -220,11 +287,13 @@ export class ConversationBridge {
     this.onActiveSessionChange = onActiveSessionChange
 
     const maxChars = platform.capabilities?.maxMessageChars ?? 2000
+    const rawMax = Number(config.maxMessageChars)
+    const safeMaxChars = (Number.isFinite(rawMax) && rawMax > 0) ? rawMax : maxChars
     this.config = {
       allowFrom: Array.isArray(config.allowFrom) ? config.allowFrom : [],
       digestIntervalSec: config.digestIntervalSec ?? 300,
       approvalTimeoutSec: config.approvalTimeoutSec ?? 600,
-      maxMessageChars: config.maxMessageChars ?? maxChars,
+      maxMessageChars: safeMaxChars,
       sendChunkDelayMs: config.sendChunkDelayMs ?? 1500,
       cwd: config.cwd,
       agentPreset: config.agentPreset,
@@ -557,8 +626,11 @@ export class ConversationBridge {
       return 'routed'
     }
 
+    // 针对微信/IM客户端用户，注入上下文提示，指导 Agent 生成文件后输出明确完整路径以触发自动上传直发
+    const promptWithContext = `${fullText}\n\n<!-- [dsh-bridge 提示] 当前用户正通过【${this.platform.name}】与你对话。若用户要求生成、导出或发送文件，请将文件保存在本地磁盘并在回复中明确写出文件的完整路径（如 📁 <路径>），网关会自动把该文件上传并直接发送到用户的 ${this.platform.name} 聊天窗口。 -->`
+
     const messageValue = createUserMessage({
-      content: [{ type: 'text', text: fullText }],
+      content: [{ type: 'text', text: promptWithContext }],
       source: { kind: 'user' },
     })
     agent.followup(messageValue)
@@ -570,7 +642,7 @@ export class ConversationBridge {
 
   /** 向当前 peer 发送文本（自动分块 + typing 指示）。 */
   async sendText(text) {
-    const peer = this.peerId
+    const peer = this.peerId || this.config.allowFrom?.[0]
     if (!peer) return
     const chunks = splitForIM(text, this.config.maxMessageChars)
     if (chunks.length === 0) return
@@ -593,8 +665,9 @@ export class ConversationBridge {
 
   /** 发送 typing 状态（1=开始，2=停止）。子类可覆盖。 */
   async sendTyping(state) {
-    if (!this.platform?.sendTyping || this.peerId == null) return
-    return this.platform.sendTyping(this.peerId, state)
+    const peer = this.peerId || this.config.allowFrom?.[0]
+    if (!this.platform?.sendTyping || peer == null) return
+    return this.platform.sendTyping(peer, state)
   }
 
   // ---- 出站事件绑定 ----
@@ -628,7 +701,7 @@ export class ConversationBridge {
       }, this.config.digestIntervalSec * 1000)
       if (typeof state.heartbeat.unref === 'function') state.heartbeat.unref()
     }
-    const onEvent = (session, event) => {
+    const onEvent = async (session, event) => {
       const state = this._digestState.get(session.id) ?? { startedTurns: new Set(), createdFiles: new Set() }
       this._digestState.set(session.id, state)
 
@@ -649,17 +722,40 @@ export class ConversationBridge {
         startHeartbeat(session, state)
         return
       }
+      const getSessionCwd = (sess) => sess?.cwd || this.config.cwd || process.cwd()
+
       if (event.type === 'tool/call') {
-        const args = event.data?.parameters || event.data?.args || {}
-        const target = args.TargetFile || args.targetFile || args.target_file || args.path || args.filePath
-        if (target && typeof target === 'string') {
-          state.createdFiles.add(target)
+        const cwd = getSessionCwd(session)
+        let args = event.data?.parameters || event.data?.args || event.data?.arguments || {}
+        if (typeof args === 'string') {
+          try { args = JSON.parse(args) } catch {}
         }
+        if (typeof args === 'object' && args !== null) {
+          const possibleKeys = [
+            'TargetFile', 'targetFile', 'target_file', 'path', 'filePath', 'file',
+            'destination', 'out_file', 'output', 'ImageName', 'fileName', 'filename'
+          ]
+          for (const k of possibleKeys) {
+            const val = args[k]
+            if (val && typeof val === 'string') {
+              const clean = val.trim().replace(/^["'`]|["'`]$/g, '').replace(/^file:\/\/\/?/, '')
+              if (clean) state.createdFiles.add(clean)
+            }
+          }
+        }
+        const rawStr = JSON.stringify(event.data || {})
+        const fromRaw = extractFilePathsFromText(rawStr, cwd)
+        for (const f of fromRaw) state.createdFiles.add(f)
         return
       }
       if (event.type === 'assistant/message') {
         const text = textOfAssistantMessage(event.data.message)
-        if (text.trim()) void this.sendText(text)
+        if (text.trim()) {
+          const cwd = getSessionCwd(session)
+          const fromText = extractFilePathsFromText(text, cwd)
+          for (const f of fromText) state.createdFiles.add(f)
+          void this.sendText(text)
+        }
         return
       }
       if (event.type === 'turn/end') {
@@ -673,29 +769,40 @@ export class ConversationBridge {
         } else if (reason.kind === 'max-tokens') {
           void this.sendText(`⚠️ **达到模型单轮输出上限，本轮内容已截断**`)
         }
-        // 如果本轮生成/修改了产物文件，下发产物清单通知并尝试直接上传文件至聊天窗口
+
+        // 如果本轮生成/记录了产物文件，下发清单通知并尝试直接上传文件至聊天窗口
         if (state.createdFiles && state.createdFiles.size > 0) {
-          const files = Array.from(state.createdFiles)
-          const fileLines = files.map((f) => `- \`${f}\``).join('\n')
+          const rawFiles = Array.from(state.createdFiles)
+          const cwd = getSessionCwd(session)
+          const fileLines = rawFiles.map((f) => `- \`${f}\``).join('\n')
           void this.sendText(`📦 **本轮已生成产物文件**：\n${fileLines}`)
 
-          // 如果平台支持 sendMediaFile，自动尝试直接发送文件/图片到聊天窗口
-          if (typeof this.platform?.sendMediaFile === 'function' && this.peerId) {
-            for (const f of files) {
+          // 如果平台支持 sendMediaFile，自动尝试直接发送真实存在的文件/图片到聊天窗口（严格按绝对路径去重）
+          const targetPeer = this.peerId || this.config.allowFrom?.[0]
+          if (typeof this.platform?.sendMediaFile === 'function' && targetPeer) {
+            const uniqueFilesToSend = new Set()
+            for (const f of rawFiles) {
+              const resolved = resolveFilePath(f, cwd)
+              if (resolved) uniqueFilesToSend.add(resolved)
+            }
+            for (const resolved of uniqueFilesToSend) {
               try {
-                if (statSync(f).isFile()) {
-                  void this.platform.sendMediaFile(this.peerId, f)
+                this.logger?.info?.(`[dsh-bridge ${this.platform.id}] auto sendMediaFile to peer: ${resolved}`)
+                const res = await this.platform.sendMediaFile(targetPeer, resolved)
+                if (res && res.success === false) {
+                  this.logger?.warn?.(`[dsh-bridge ${this.platform.id}] auto sendMediaFile ${resolved} failed: %s`, res.error)
                 }
-              } catch {}
+              } catch (err) {
+                this.logger?.warn?.(`[dsh-bridge ${this.platform.id}] auto sendMediaFile ${resolved} failed: %s`, err?.message ?? err)
+              }
             }
           }
-
           state.createdFiles.clear()
         }
         return
       }
     }
-    const listener = (session, event) => onEvent(session, event)
+    const listener = (session, event) => { void onEvent(session, event) }
     const disposer = this.ctx.on('session/event', listener)
     this.disposers.push(() => {
       for (const state of digestState.values()) stopHeartbeat(state)
@@ -1232,6 +1339,8 @@ export const conversationBridgeHelpers = {
   splitForIM,
   digestLine,
   textOfAssistantMessage,
+  resolveFilePath,
+  extractFilePathsFromText,
   sessionsInDisplayOrder,
   listSessions,
   listWorkspaces,

package/lib/qq/gateway.js

@@ -548,18 +548,31 @@ export class QqGateway extends Service {
     if (!fs.existsSync(filePath)) return null
     const ext = path.extname(filePath).toLowerCase()
     const isImage = ['.png', '.jpg', '.jpeg', '.gif', '.webp', '.bmp'].includes(ext)
-    const fileType = isImage ? 1 : 1
+    const isVideo = ['.mp4', '.mov', '.webm', '.avi'].includes(ext)
+    const isVoice = ['.silk', '.amr', '.wav', '.mp3'].includes(ext)
+    let fileType = 4 // 默认文件类型（txt, pdf, zip, docx, etc.）
+    if (isImage) fileType = 1
+    else if (isVideo) fileType = 2
+    else if (isVoice) fileType = 3
+
+    const scope = opts.scope || (peerId.startsWith('g_') || peerId.startsWith('group_') ? 'group' : 'user')
     try {
+      const fileName = path.basename(filePath)
       const buf = await fs.promises.readFile(filePath)
       const base64Data = buf.toString('base64')
-      const ep = this.endpoint(peerId, opts.scope, 'files')
+      const ep = this.endpoint(peerId, scope, 'files')
+      const body = {
+        file_type: fileType,
+        file_data: base64Data,
+        file_name: fileName,
+        srv_send_msg: true,
+      }
+      if (opts.msgId !== undefined) body.msg_id = opts.msgId
+      if (opts.eventId !== undefined) body.event_id = opts.eventId
+      if (opts.msgSeq !== undefined) body.msg_seq = opts.msgSeq
       const res = await this.api(ep, {
         method: 'POST',
-        body: {
-          file_type: fileType,
-          file_data: base64Data,
-          srv_send_msg: true,
-        },
+        body,
       })
       return res
     } catch (err) {

package/lib/qq/index.js

@@ -268,7 +268,10 @@ export class QqService extends Platform {
   async setConfig({ digestIntervalSec, approvalTimeoutSec, maxMessageChars, sendChunkDelayMs, appId, clientSecret } = {}) {
     if (digestIntervalSec != null)   this.node.config.digestIntervalSec   = Number(digestIntervalSec)
     if (approvalTimeoutSec != null)  this.node.config.approvalTimeoutSec  = Number(approvalTimeoutSec)
-    if (maxMessageChars != null)     this.node.config.maxMessageChars     = Number(maxMessageChars)
+    if (maxMessageChars != null) {
+      const val = Number(maxMessageChars)
+      this.node.config.maxMessageChars = (val >= 200) ? val : 2000
+    }
     if (sendChunkDelayMs != null)    this.node.config.sendChunkDelayMs    = Number(sendChunkDelayMs)
     if (appId !== undefined || clientSecret !== undefined) {
       this.gateway.setCredentials({

package/lib/telegram/index.js

@@ -175,7 +175,10 @@ export class TelegramService extends Platform {
   async setConfig({ digestIntervalSec, approvalTimeoutSec, maxMessageChars, sendChunkDelayMs, botToken, proxy } = {}) {
     if (digestIntervalSec != null)   this.node.config.digestIntervalSec   = Number(digestIntervalSec)
     if (approvalTimeoutSec != null)  this.node.config.approvalTimeoutSec  = Number(approvalTimeoutSec)
-    if (maxMessageChars != null)     this.node.config.maxMessageChars     = Number(maxMessageChars)
+    if (maxMessageChars != null) {
+      const val = Number(maxMessageChars)
+      this.node.config.maxMessageChars = (val >= 200) ? val : 4096
+    }
     if (sendChunkDelayMs != null)    this.node.config.sendChunkDelayMs    = Number(sendChunkDelayMs)
 
     if (botToken !== undefined || proxy !== undefined) {

package/lib/wechat/gateway.js

@@ -57,10 +57,11 @@ const MESSAGE_DEDUP_TTL_SECONDS = 300
 /** 默认 CDN 白名单（SSRF 防护）。v0.2 媒体用到，先保留常量。 */
 const DEFAULT_CDN_ALLOWLIST = ['novac2c.cdn.weixin.qq.com']
 
-/** ret/errcode=-2 + "unknown error" 表示会话过期（而非限流）。 */
+/** ret/errcode=-2 + "unknown error" 或 "prepare failed" 表示会话/凭证过期（而非限流）。 */
 function isStaleSessionRet(ret, errcode, errmsg) {
   if (ret !== RATE_LIMIT_ERRCODE && errcode !== RATE_LIMIT_ERRCODE) return false
-  return String(errmsg ?? '').toLowerCase() === 'unknown error'
+  const msg = String(errmsg ?? '').toLowerCase()
+  return msg === 'unknown error' || msg === 'prepare failed' || msg.includes('expired') || msg.includes('token')
 }
 
 // ---------------------------------------------------------------------------
@@ -323,6 +324,15 @@ export class WechatGateway extends Service {
     this.stopPollingLocal = false
     this.statusValue = 'idle'
     this.contextTokens = new Map()
+    try {
+      const tokenFile = path.join(process.env.DSH_HOME || path.join(process.env.USERPROFILE || process.env.HOME || '.', '.dsh'), 'dsh-bridge', 'wechat-context-tokens.json')
+      if (fs.existsSync(tokenFile)) {
+        const data = JSON.parse(fs.readFileSync(tokenFile, 'utf8'))
+        for (const [k, v] of Object.entries(data)) {
+          if (v) this.contextTokens.set(k, String(v))
+        }
+      }
+    } catch {}
     this.dedup = new Map()
     this.typingTickets = new Map()
     this.rateLimitHits = []
@@ -507,13 +517,20 @@ export class WechatGateway extends Service {
    */
   async getUploadUrl({ to, mediaType, filekey, rawSize, rawFileMd5, fileSize, aesKeyHex }) {
     if (!this.configured) throw new Error('not configured')
+    // 映射 MessageItemType 到 UploadMediaType (IMAGE:1, VIDEO:2, FILE:3, VOICE:4)
+    let uploadMediaType = mediaType
+    if (mediaType === 2) uploadMediaType = 1 // IMAGE
+    else if (mediaType === 4) uploadMediaType = 3 // FILE
+    else if (mediaType === 3) uploadMediaType = 4 // VOICE
+    else if (mediaType === 5) uploadMediaType = 2 // VIDEO
+
     const resp = await postJson({
       baseUrl: this.c.baseUrl,
       endpoint: 'ilink/bot/getuploadurl',
       token: this.c.token,
       payload: {
         filekey,
-        media_type: mediaType,
+        media_type: uploadMediaType,
         to_user_id: to,
         rawsize: rawSize,
         rawfilemd5: rawFileMd5,
@@ -548,6 +565,7 @@ export class WechatGateway extends Service {
     mediaType,
     encryptedQueryParam,
     aesKeyBase64,
+    aesKeyHex,
     ciphertextSize,
     plaintextSize,
     filename,
@@ -557,15 +575,22 @@ export class WechatGateway extends Service {
     if (!this.configured) return { success: false, error: 'not configured' }
     const contextToken = this.contextTokens.get(to)
     const id = clientId ?? `dsh-bridge-wechat-${randomId()}`
-    
-    // 构建媒体项（根据类型不同字段略有差异）
+    const hexKey = aesKeyHex || (aesKeyBase64 ? Buffer.from(aesKeyBase64, 'base64').toString('hex') : '')
+
+    // 构建媒体项（全字段兼容各端微信客户端解析）
     let item
     if (mediaType === 2) { // 图片
       item = {
         type: 2,
         image_item: {
-          encrypt_query_param: encryptedQueryParam,
-          aeskey: aesKeyBase64,
+          media: {
+            encrypt_query_param: encryptedQueryParam,
+            aes_key: aesKeyBase64,
+            aeskey: hexKey,
+            encrypt_type: 1,
+          },
+          aeskey: hexKey,
+          aes_key: aesKeyBase64,
           filesize: ciphertextSize,
           rawsize: plaintextSize,
           rawfilemd5: rawFileMd5,
@@ -575,23 +600,27 @@ export class WechatGateway extends Service {
       item = {
         type: 4,
         file_item: {
-          encrypt_query_param: encryptedQueryParam,
-          aes_key: aesKeyBase64,
-          filesize: ciphertextSize,
-          rawsize: plaintextSize,
-          filename,
-          rawfilemd5: rawFileMd5,
+          file_name: filename,
+          len: String(plaintextSize),
+          media: {
+            encrypt_query_param: encryptedQueryParam,
+            aes_key: aesKeyBase64,
+            encrypt_type: 1,
+          },
         },
       }
     } else if (mediaType === 3) { // 语音
       item = {
         type: 3,
         voice_item: {
-          encrypt_query_param: encryptedQueryParam,
+          media: {
+            encrypt_query_param: encryptedQueryParam,
+            aes_key: aesKeyBase64,
+            aeskey: hexKey,
+            encrypt_type: 0,
+          },
+          aeskey: hexKey,
           aes_key: aesKeyBase64,
-          filesize: ciphertextSize,
-          rawsize: plaintextSize,
-          rawfilemd5: rawFileMd5,
           encode_type: 6, // silk
           sample_rate: 24000,
           bits_per_sample: 16,
@@ -601,7 +630,13 @@ export class WechatGateway extends Service {
       item = {
         type: 5,
         video_item: {
-          encrypt_query_param: encryptedQueryParam,
+          media: {
+            encrypt_query_param: encryptedQueryParam,
+            aes_key: aesKeyBase64,
+            aeskey: hexKey,
+            encrypt_type: 1,
+          },
+          aeskey: hexKey,
           aes_key: aesKeyBase64,
           filesize: ciphertextSize,
           rawsize: plaintextSize,
@@ -668,9 +703,11 @@ export class WechatGateway extends Service {
         aesKeyHex,
       })
 
+      const uploadUrl = uploadInfo.uploadFullUrl || `${this.c.cdnBaseUrl.replace(/\/+$/, '')}/upload?encrypted_query_param=${encodeURIComponent(uploadInfo.uploadParam)}&filekey=${encodeURIComponent(filekey)}`
+
       const encryptedParam = await uploadMedia({
         plaintext: buf,
-        uploadUrl: uploadInfo.uploadFullUrl || `${WEIXIN_CDN_BASE_URL}?upload_param=${encodeURIComponent(uploadInfo.uploadParam)}`,
+        uploadUrl,
         aesKey,
       })
 
@@ -679,6 +716,7 @@ export class WechatGateway extends Service {
         mediaType,
         encryptedQueryParam: encryptedParam,
         aesKeyBase64,
+        aesKeyHex,
         ciphertextSize: fileSize,
         plaintextSize: rawSize,
         filename,
@@ -848,7 +886,16 @@ export class WechatGateway extends Service {
     if (messageId) this.remember(messageId)
 
     const contextToken = String(message.context_token ?? '')
-    if (contextToken) this.contextTokens.set(sender, contextToken)
+    if (contextToken) {
+      this.contextTokens.set(sender, contextToken)
+      try {
+        const tokenFile = path.join(process.env.DSH_HOME || path.join(process.env.USERPROFILE || process.env.HOME || '.', '.dsh'), 'dsh-bridge', 'wechat-context-tokens.json')
+        let data = {}
+        try { if (fs.existsSync(tokenFile)) data = JSON.parse(fs.readFileSync(tokenFile, 'utf8')) } catch {}
+        data[sender] = contextToken
+        fs.writeFileSync(tokenFile, JSON.stringify(data, null, 2), 'utf8')
+      } catch {}
+    }
 
     try {
       this.ctx.emit('wechat/message', message)

package/lib/wechat/index.js

@@ -85,6 +85,10 @@ export class WechatService extends Platform {
     return this.gateway.sendMedia({ ...media, to: peerId, ...opts })
   }
 
+  async sendMediaFile(peerId, filePath, opts = {}) {
+    return this.gateway.sendMediaFile(peerId, filePath)
+  }
+
   /** 合并展示状态给浏览器 UI（保持 v1.x 字段结构，新增 id/name/capabilities）。 */
   getStatus() {
     const allowFrom = [...(this.node.config.allowFrom ?? [])]
@@ -222,7 +226,10 @@ export class WechatService extends Platform {
   async setConfig({ digestIntervalSec, approvalTimeoutSec, maxMessageChars, sendChunkDelayMs } = {}) {
     if (digestIntervalSec != null)   this.node.config.digestIntervalSec   = Number(digestIntervalSec)
     if (approvalTimeoutSec != null)  this.node.config.approvalTimeoutSec  = Number(approvalTimeoutSec)
-    if (maxMessageChars != null)     this.node.config.maxMessageChars     = Number(maxMessageChars)
+    if (maxMessageChars != null) {
+      const val = Number(maxMessageChars)
+      this.node.config.maxMessageChars = (val >= 200) ? val : gatewayConstants.MAX_MESSAGE_CHARS
+    }
     if (sendChunkDelayMs != null)    this.node.config.sendChunkDelayMs    = Number(sendChunkDelayMs)
     await this.persist({
       digestIntervalSec:  this.node.config.digestIntervalSec,

package/lib/wechat/media.js

@@ -114,11 +114,11 @@ export function normalizeAesKey(input) {
 }
 
 /**
- * 生成用于 iLink API 的 aes_key 字段（上传时用）。
- * iLink 期望 base64(hex_string)，不是 base64(raw_bytes)。
+ * 生成用于 iLink API CDNMedia 的 aes_key 字段（上传时用）。
+ * iLink 协议规范：aes_key 必须先转 hex 字符串，再 base64 编码（base64(hex_string)）。
  */
 export function encodeAesKeyForApi(keyBytes) {
-  const hexStr = keyBytes.toString('hex')
+  const hexStr = Buffer.isBuffer(keyBytes) ? keyBytes.toString('hex') : Buffer.from(keyBytes).toString('hex')
   return Buffer.from(hexStr, 'ascii').toString('base64')
 }
 

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@wenbin_wb/dsh-bridge",
-  "version": "2.8.0",
+  "version": "2.8.3",
   "description": "手机扫码即可在移动端/公网继续用 DeepSeek Harness，人不在电脑前也能接着干。一键局域网二维码、Cloudflare 公网隧道、自建隧道与微信 / QQ / 飞书 / Telegram Bot（多工作区/会话持久化/媒体/卡片审批/流式输出），无需自己搭公网服务器。",
-  "releaseNotes": "【v2.8.0 移动端体验革新、远程工作区管理与全面安全加固】\n• 🗂️ 远程工作区网页选择器：移动端/远程点击添加工作区自动呼出网页端目录浏览器，本机电脑智能无感分流原生系统选择器\n• 📱 移动端视觉与布局体验深度优化：顶部导航栏居中动态标题、第二行徽标与极简下载图标两端排布、底部工具栏防重叠自适应\n• 🔐 全方位安全加固：RPC 端点鉴权、路径穿越与系统核心目录防御、滑动窗口限流与 IM 权限拦截",
+  "releaseNotes": "【v2.8.3 微信与全平台 IM 文件收发链路全面修复与深度兼容】\n• 📱 微信 iLink 官方媒体传输协议完全对齐：修复 getuploadurl 文件媒体类型枚举（media_type=3）与 AES 密钥规范编码（base64(hex)），彻底解决手机端「文件已过期/下载失败/0B」问题\n• 🤖 QQ 机器人富媒体文件直传修复：支持 file_type=4 通用文件传输并显式传递 file_name，彻底消除「未命名」卡片显示\n• 🌐 微信会话凭证（context_token）持久化机制：自动捕获并持久化落盘实时安全凭证，重启服务永不丢失会话上下文\n• 📢 多平台多端共享会话广播：同一会话在任一端（飞书/QQ/TG/Web）生成产物文件时，自动同步广播推送到所有已绑定的 IM 客户端",
   "type": "module",
   "main": "lib/index.js",
   "exports": {