@wenbin_wb/dsh-bridge 2.8.7 → 2.9.0

package/package.json

@@ -1,102 +1,106 @@
-{
-  "name": "@wenbin_wb/dsh-bridge",
-  "version": "2.8.7",
-  "description": "手机扫码即可在移动端/公网继续用 DeepSeek Harness，人不在电脑前也能接着干。一键局域网二维码、Cloudflare 公网隧道、自建隧道与微信 / QQ / 飞书 / Telegram Bot（多工作区/会话持久化/媒体/卡片审批/流式输出），无需自己搭公网服务器。",
-  "releaseNotes": "【v2.8.7 多网卡智能切换与 macOS 升级与隧道自愈加固】\n• 🛜 支持局域网多网卡可视化切换与持久化 (Issue #5)：自动探测并列出物理网卡与虚拟网卡（Wi-Fi、以太网、WSL、VMware、Docker 等），支持在面板一键切换局域网 IP 并记忆持久化，彻底解决多网卡/WSL 下移动端无法访问的问题\n• 🍏 加固 macOS 一键平滑升级：`upgradePlugin` 自动补全 macOS 环境下的全量 PATH 环境变量（自动兼容 Homebrew、NVM 等），并自动优先绑定当前 Node 配对的同级 `npm`/`npx` 绝对路径，杜绝 `spawn ENOENT` 升级失败\n• 🛡️ 优化 macOS Cloudflared 二进制探测与隔离自愈：优先复用系统全局/Homebrew 已安装的 `cloudflared`，网络下载解压后自动移除 Gatekeeper 隔离标记（`xattr -d com.apple.quarantine`）并加入 `--version` 运行期校验自愈",
-  "type": "module",
-  "main": "lib/index.js",
-  "exports": {
-    ".": {
-      "default": "./lib/index.js"
-    },
-    "./client": "./client/client.js",
-    "./package.json": "./package.json"
-  },
-  "files": [
-    "lib",
-    "client",
-    "cordis.patch.yml",
-    "README.md",
-    "README.en.md",
-    "CHANGELOG.md",
-    "LICENSE",
-    "docs"
-  ],
-  "scripts": {
-    "build:client": "node client/build.mjs",
-    "build:lark": "node scripts/bundle-lark.mjs",
-    "build:banner": "node scripts/generate-banner.mjs",
-    "prepack": "npm run build:lark && npm run build:client",
-    "release:github": "node scripts/create-github-release.mjs",
-    "test": "node --test test/*.test.mjs"
-  },
-  "dependencies": {
-    "qrcode": "^1.5.3",
-    "ws": "^8.18.0"
-  },
-  "devDependencies": {
-    "@deepseek-ai/dsh-llm": "0.1.0-rc.6",
-    "@larksuiteoapi/node-sdk": "^1.73.0",
-    "esbuild": "^0.25.9",
-    "puppeteer-core": "^25.8.0"
-  },
-  "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-llm": ">=0.1.0-rc.6"
-  },
-  "peerDependenciesMeta": {
-    "@deepseek-ai/dsh-llm": {
-      "optional": true
-    }
-  },
-  "engines": {
-    "node": "^22.19.0 || >=24.0.0"
-  },
-  "license": "MIT",
-  "keywords": [
-    "deepseek-harness",
-    "dsh",
-    "dsh-plugin",
-    "remote",
-    "remote-access",
-    "tunnel",
-    "cloudflare",
-    "mobile",
-    "smartphone",
-    "tablet",
-    "qr-code",
-    "qrcode",
-    "websocket",
-    "bot",
-    "wechat",
-    "qq",
-    "feishu",
-    "telegram"
-  ],
-  "dsh": {
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    },
-    "client": {
-      "inject": [
-        "@deepseek-ai/dsh-client-connection",
-        "@deepseek-ai/dsh-client-ui-slots",
-        "@deepseek-ai/dsh-client-ui-layout",
-        "@deepseek-ai/dsh-client-locale"
-      ],
-      "platform": "web"
-    }
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/wenbin-wb/dsh-bridge.git"
-  },
-  "bugs": {
-    "url": "https://github.com/wenbin-wb/dsh-bridge/issues"
-  },
-  "homepage": "https://github.com/wenbin-wb/dsh-bridge",
-  "publishConfig": {
-    "access": "public",
-    "registry": "https://registry.npmjs.org/"
-  }
-}
+{
+  "name": "@wenbin_wb/dsh-bridge",
+  "version": "2.9.0",
+  "description": "手机扫码即可在移动端/公网继续用 DeepSeek Harness，人不在电脑前也能接着干。一键局域网二维码、Cloudflare 公网隧道、自建隧道与微信 / QQ / 飞书 / Telegram Bot（多工作区/会话持久化/媒体/卡片审批/流式输出），无需自己搭公网服务器。",
+  "releaseNotes": "⚠️ 本次更新量较大，可能存在未知问题，建议升级前备份配置并阅读完整说明：https://github.com/wenbin-wb/dsh-bridge/blob/main/CHANGELOG.md\n\n【v2.9.0 全面安全加固与代码质量大修】\n• 🔐 密码哈希 PBKDF2 升级至 600,000 次迭代（存量旧哈希登录时透明升级，无需重设密码）；管理密码解锁防爆破；未设密码时高危操作强制先设密码；loopback-token CORS 收敛；隧道令牌掩码不再覆盖真实值\n• 🐞 修复十余个稳定性问题：低版本 Node / iOS 16 浏览器发送消息报 AbortSignal 错误（自动兼容垫片）、微信收图必崩、QQ 流式兜底崩溃、面板升级命令渲染崩溃、IM 端收不到审批卡片（approval 瀑布归属模型重建，飞书按钮卡片同步修复）、/list 报 without inject 错误、卸载监听器泄漏、工具调用协议标记泄漏到聊天等\n• 🚦 出站消息串行队列消除乱序与 QQ msgSeq 竞态；审批发起者校验（群成员不可代批）；群聊授权改显式配置（默认关闭）；配置持久化事务化防丢失更新；解锁后自动续办被拦截操作；断开后重连不再强制扫码\n• 🧹 引入 eslint + CI 全矩阵测试（Node 22/24 × Linux/Windows）；conversation-bridge 按职责拆分四模块；平台装配工厂化；清理废弃端点与死代码；提交 package-lock.json",
+  "type": "module",
+  "main": "lib/index.js",
+  "exports": {
+    ".": {
+      "default": "./lib/index.js"
+    },
+    "./client": "./client/client.js",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib",
+    "client",
+    "cordis.patch.yml",
+    "README.md",
+    "README.en.md",
+    "CHANGELOG.md",
+    "LICENSE",
+    "docs"
+  ],
+  "scripts": {
+    "build:client": "node client/build.mjs",
+    "build:lark": "node scripts/bundle-lark.mjs",
+    "build:banner": "node scripts/generate-banner.mjs",
+    "prepack": "npm run build:lark && npm run build:client",
+    "release:github": "node scripts/create-github-release.mjs",
+    "lint": "eslint .",
+    "test": "node --test test/*.test.mjs"
+  },
+  "dependencies": {
+    "qrcode": "^1.5.3",
+    "ws": "^8.18.0"
+  },
+  "devDependencies": {
+    "@deepseek-ai/dsh-llm": "0.1.0-rc.6",
+    "@eslint/js": "^10.0.1",
+    "@larksuiteoapi/node-sdk": "^1.73.0",
+    "esbuild": "^0.25.9",
+    "eslint": "^10.9.1",
+    "globals": "^17.11.0",
+    "puppeteer-core": "^25.8.0"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/dsh-llm": ">=0.1.0-rc.6"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/dsh-llm": {
+      "optional": true
+    }
+  },
+  "engines": {
+    "node": "^22.19.0 || >=24.0.0"
+  },
+  "license": "MIT",
+  "keywords": [
+    "deepseek-harness",
+    "dsh",
+    "dsh-plugin",
+    "remote",
+    "remote-access",
+    "tunnel",
+    "cloudflare",
+    "mobile",
+    "smartphone",
+    "tablet",
+    "qr-code",
+    "qrcode",
+    "websocket",
+    "bot",
+    "wechat",
+    "qq",
+    "feishu",
+    "telegram"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-client-ui-slots",
+        "@deepseek-ai/dsh-client-ui-layout",
+        "@deepseek-ai/dsh-client-locale"
+      ],
+      "platform": "web"
+    }
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/wenbin-wb/dsh-bridge.git"
+  },
+  "bugs": {
+    "url": "https://github.com/wenbin-wb/dsh-bridge/issues"
+  },
+  "homepage": "https://github.com/wenbin-wb/dsh-bridge",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  }
+}