@wenbin_wb/dsh-bridge 2.8.6 → 2.9.0

package/package.json

@@ -1,102 +1,106 @@
-{
-  "name": "@wenbin_wb/dsh-bridge",
-  "version": "2.8.6",
-  "description": "手机扫码即可在移动端/公网继续用 DeepSeek Harness，人不在电脑前也能接着干。一键局域网二维码、Cloudflare 公网隧道、自建隧道与微信 / QQ / 飞书 / Telegram Bot（多工作区/会话持久化/媒体/卡片审批/流式输出），无需自己搭公网服务器。",
-  "releaseNotes": "【v2.8.6 移动端交互适配重构 & 隧道保活与传输优化】\n• 📱 修复移动端工作区面板遮挡对话与白屏问题：重构工作区显隐状态机，新增常驻「✕ 返回对话」胶囊与多途径秒级回切机制，收起时彻底离场\n• 🗂️ 移动端侧边栏抽屉顶部集成收起图标：完整适配复用 DSH 原生自带收起图标（`[|`），支持双向顺畅开合与点击背景收起\n• 🖥️ 移动端样式与 PC 桌面端严格隔离：采用媒体查询与运行期断点隔离，PC 桌面端 100% 保持官方原生多列分栏与纯净体验\n• 🛡️ 修复 Cloudflared 守护进程异常退出问题：增加子进程退出监听与指数退避自动重启机制，确保长时间公网访问不断连\n• ⚡ 优化自建隧道 SSE 稳定性与传输效率：修复弱网下 SSE 断线重连，精简 Session 列表大数据负载，显著降低移动端带宽与卡顿\n• 🤖 优化 IM 机器人会话管理与推送：会话列表按工作区分组对齐官方账本排序，产物文件采用 AI 显式驱动直传",
-  "type": "module",
-  "main": "lib/index.js",
-  "exports": {
-    ".": {
-      "default": "./lib/index.js"
-    },
-    "./client": "./client/client.js",
-    "./package.json": "./package.json"
-  },
-  "files": [
-    "lib",
-    "client",
-    "cordis.patch.yml",
-    "README.md",
-    "README.en.md",
-    "CHANGELOG.md",
-    "LICENSE",
-    "docs"
-  ],
-  "scripts": {
-    "build:client": "node client/build.mjs",
-    "build:lark": "node scripts/bundle-lark.mjs",
-    "build:banner": "node scripts/generate-banner.mjs",
-    "prepack": "npm run build:lark && npm run build:client",
-    "release:github": "node scripts/create-github-release.mjs",
-    "test": "node --test test/*.test.mjs"
-  },
-  "dependencies": {
-    "qrcode": "^1.5.3",
-    "ws": "^8.18.0"
-  },
-  "devDependencies": {
-    "@deepseek-ai/dsh-llm": "0.1.0-rc.6",
-    "@larksuiteoapi/node-sdk": "^1.73.0",
-    "esbuild": "^0.25.9",
-    "puppeteer-core": "^25.8.0"
-  },
-  "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-llm": ">=0.1.0-rc.6"
-  },
-  "peerDependenciesMeta": {
-    "@deepseek-ai/dsh-llm": {
-      "optional": true
-    }
-  },
-  "engines": {
-    "node": "^22.19.0 || >=24.0.0"
-  },
-  "license": "MIT",
-  "keywords": [
-    "deepseek-harness",
-    "dsh",
-    "dsh-plugin",
-    "remote",
-    "remote-access",
-    "tunnel",
-    "cloudflare",
-    "mobile",
-    "smartphone",
-    "tablet",
-    "qr-code",
-    "qrcode",
-    "websocket",
-    "bot",
-    "wechat",
-    "qq",
-    "feishu",
-    "telegram"
-  ],
-  "dsh": {
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    },
-    "client": {
-      "inject": [
-        "@deepseek-ai/dsh-client-connection",
-        "@deepseek-ai/dsh-client-ui-slots",
-        "@deepseek-ai/dsh-client-ui-layout",
-        "@deepseek-ai/dsh-client-locale"
-      ],
-      "platform": "web"
-    }
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/wenbin-wb/dsh-bridge.git"
-  },
-  "bugs": {
-    "url": "https://github.com/wenbin-wb/dsh-bridge/issues"
-  },
-  "homepage": "https://github.com/wenbin-wb/dsh-bridge",
-  "publishConfig": {
-    "access": "public",
-    "registry": "https://registry.npmjs.org/"
-  }
-}
+{
+  "name": "@wenbin_wb/dsh-bridge",
+  "version": "2.9.0",
+  "description": "手机扫码即可在移动端/公网继续用 DeepSeek Harness，人不在电脑前也能接着干。一键局域网二维码、Cloudflare 公网隧道、自建隧道与微信 / QQ / 飞书 / Telegram Bot（多工作区/会话持久化/媒体/卡片审批/流式输出），无需自己搭公网服务器。",
+  "releaseNotes": "⚠️ 本次更新量较大，可能存在未知问题，建议升级前备份配置并阅读完整说明：https://github.com/wenbin-wb/dsh-bridge/blob/main/CHANGELOG.md\n\n【v2.9.0 全面安全加固与代码质量大修】\n• 🔐 密码哈希 PBKDF2 升级至 600,000 次迭代（存量旧哈希登录时透明升级，无需重设密码）；管理密码解锁防爆破；未设密码时高危操作强制先设密码；loopback-token CORS 收敛；隧道令牌掩码不再覆盖真实值\n• 🐞 修复十余个稳定性问题：低版本 Node / iOS 16 浏览器发送消息报 AbortSignal 错误（自动兼容垫片）、微信收图必崩、QQ 流式兜底崩溃、面板升级命令渲染崩溃、IM 端收不到审批卡片（approval 瀑布归属模型重建，飞书按钮卡片同步修复）、/list 报 without inject 错误、卸载监听器泄漏、工具调用协议标记泄漏到聊天等\n• 🚦 出站消息串行队列消除乱序与 QQ msgSeq 竞态；审批发起者校验（群成员不可代批）；群聊授权改显式配置（默认关闭）；配置持久化事务化防丢失更新；解锁后自动续办被拦截操作；断开后重连不再强制扫码\n• 🧹 引入 eslint + CI 全矩阵测试（Node 22/24 × Linux/Windows）；conversation-bridge 按职责拆分四模块；平台装配工厂化；清理废弃端点与死代码；提交 package-lock.json",
+  "type": "module",
+  "main": "lib/index.js",
+  "exports": {
+    ".": {
+      "default": "./lib/index.js"
+    },
+    "./client": "./client/client.js",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib",
+    "client",
+    "cordis.patch.yml",
+    "README.md",
+    "README.en.md",
+    "CHANGELOG.md",
+    "LICENSE",
+    "docs"
+  ],
+  "scripts": {
+    "build:client": "node client/build.mjs",
+    "build:lark": "node scripts/bundle-lark.mjs",
+    "build:banner": "node scripts/generate-banner.mjs",
+    "prepack": "npm run build:lark && npm run build:client",
+    "release:github": "node scripts/create-github-release.mjs",
+    "lint": "eslint .",
+    "test": "node --test test/*.test.mjs"
+  },
+  "dependencies": {
+    "qrcode": "^1.5.3",
+    "ws": "^8.18.0"
+  },
+  "devDependencies": {
+    "@deepseek-ai/dsh-llm": "0.1.0-rc.6",
+    "@eslint/js": "^10.0.1",
+    "@larksuiteoapi/node-sdk": "^1.73.0",
+    "esbuild": "^0.25.9",
+    "eslint": "^10.9.1",
+    "globals": "^17.11.0",
+    "puppeteer-core": "^25.8.0"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/dsh-llm": ">=0.1.0-rc.6"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/dsh-llm": {
+      "optional": true
+    }
+  },
+  "engines": {
+    "node": "^22.19.0 || >=24.0.0"
+  },
+  "license": "MIT",
+  "keywords": [
+    "deepseek-harness",
+    "dsh",
+    "dsh-plugin",
+    "remote",
+    "remote-access",
+    "tunnel",
+    "cloudflare",
+    "mobile",
+    "smartphone",
+    "tablet",
+    "qr-code",
+    "qrcode",
+    "websocket",
+    "bot",
+    "wechat",
+    "qq",
+    "feishu",
+    "telegram"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-client-ui-slots",
+        "@deepseek-ai/dsh-client-ui-layout",
+        "@deepseek-ai/dsh-client-locale"
+      ],
+      "platform": "web"
+    }
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/wenbin-wb/dsh-bridge.git"
+  },
+  "bugs": {
+    "url": "https://github.com/wenbin-wb/dsh-bridge/issues"
+  },
+  "homepage": "https://github.com/wenbin-wb/dsh-bridge",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  }
+}