@xmanrui/dsh-im 0.1.0 → 0.1.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xmanrui/dsh-im",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "通过扫码或机器人凭据把IM机器人接入DeepSeek Harness（支持飞书、微信、钉钉、企业微信、QQ、Telegram和Discord）。",
   "license": "MIT",
   "type": "module",
@@ -14,7 +14,7 @@
     "access": "public"
   },
   "bin": {
-    "dsh-im": "./bin/dsh-im.mjs"
+    "dsh-im": "bin/dsh-im.mjs"
   },
   "main": "./lib/index.js",
   "exports": {
@@ -57,7 +57,6 @@
     "node": ">=22.19"
   },
   "dependencies": {
-    "@larksuiteoapi/node-sdk": "1.73.0",
     "@tencent-connect/qqbot-connector": "1.2.0",
     "@tencent-connect/qqbot-nodejs": "1.0.4",
     "@wecom/aibot-node-sdk": "1.0.7",
@@ -65,6 +64,7 @@
     "qrcode": "1.5.4"
   },
   "devDependencies": {
+    "@larksuiteoapi/node-sdk": "1.73.0",
     "esbuild": "0.25.9",
     "react": "18.3.1",
     "react-dom": "18.3.1",

package/plugin-src/host/build.mjs

@@ -7,6 +7,14 @@ import { build } from 'esbuild';
 const sourceDirectory = dirname(fileURLToPath(import.meta.url));
 const packageRoot = resolve(sourceDirectory, '../..');
 const outputPath = resolve(packageRoot, 'lib/index.js');
+const externalRuntimePackages = [
+  '@tencent-connect/qqbot-connector',
+  '@tencent-connect/qqbot-nodejs',
+  '@wecom/aibot-node-sdk',
+  'dingtalk-stream',
+  'qrcode',
+];
+const external = externalRuntimePackages.flatMap((name) => [name, `${name}/*`]);
 
 await mkdir(dirname(outputPath), { recursive: true });
 await build({
@@ -15,10 +23,22 @@ await build({
   format: 'esm',
   platform: 'node',
   target: ['node22'],
-  packages: 'external',
+  mainFields: ['module', 'main'],
+  external,
   outfile: outputPath,
+  banner: {
+    js: [
+      "import { createRequire as __dshCreateRequire } from 'node:module';",
+      "import { dirname as __dshDirname } from 'node:path';",
+      "import { fileURLToPath as __dshFileURLToPath } from 'node:url';",
+      'const require = __dshCreateRequire(import.meta.url);',
+      'const __filename = __dshFileURLToPath(import.meta.url);',
+      'const __dirname = __dshDirname(__filename);',
+    ].join('\n'),
+  },
   sourcemap: false,
-  legalComments: 'none',
+  minify: true,
+  legalComments: 'eof',
 });
 
 console.log(`Wrote ${outputPath}`);

package/scripts/verify-package.mjs

@@ -1,5 +1,6 @@
 import { access, readFile, stat } from 'node:fs/promises';
 import { resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
 
 const root = resolve(import.meta.dirname, '..');
 const required = [
@@ -38,6 +39,7 @@ const [client, host, patch, manifestText, lockText, hostSource, clientSource, ex
   stat(resolve(root, 'bin/dsh-im.mjs')),
 ]);
 const manifest = JSON.parse(manifestText);
+const lock = JSON.parse(lockText);
 
 if (!client.includes('id: "@xmanrui/dsh-im"')) {
   throw new Error('client bundle does not register the dsh-im loader id');
@@ -77,7 +79,6 @@ for (const name of ['@xmanrui/dsh-feishu', '@xmanrui/dsh-weixin', '@xmanrui/dsh-
   }
 }
 const directDependencies = {
-  '@larksuiteoapi/node-sdk': '1.73.0',
   'dingtalk-stream': '2.1.4',
   '@tencent-connect/qqbot-connector': '1.2.0',
   '@tencent-connect/qqbot-nodejs': '1.0.4',
@@ -89,9 +90,30 @@ for (const [name, version] of Object.entries(directDependencies)) {
     throw new Error(`${name} must be a pinned direct dependency at ${version}`);
   }
 }
+const bundledBuildDependencies = {
+  '@larksuiteoapi/node-sdk': '1.73.0',
+};
+for (const [name, version] of Object.entries(bundledBuildDependencies)) {
+  if (manifest.dependencies?.[name] !== undefined) {
+    throw new Error(`${name} must not remain a runtime dependency`);
+  }
+  if (manifest.devDependencies?.[name] !== version) {
+    throw new Error(`${name} must be a pinned build dependency at ${version}`);
+  }
+}
+if (lock.packages?.['node_modules/protobufjs']?.dev !== true) {
+  throw new Error('protobufjs must remain build-only in the package lock');
+}
+if (manifest.bin?.['dsh-im'] !== 'bin/dsh-im.mjs') {
+  throw new Error('package manifest must publish the dsh-im executable');
+}
+if (/(?:from\s*|import\s*\(|require\s*\()\s*["'](?:@larksuiteoapi\/node-sdk|protobufjs)(?:\/[^"']*)?["']/.test(host)) {
+  throw new Error('host bundle must not import the Feishu SDK or protobufjs at runtime');
+}
 if ((executable.mode & 0o111) === 0) throw new Error('dsh-im CLI is not executable');
 if (/private-bot-token|must-be-rolled-back|DEEPSEEK_API_KEY=/.test(client + host)) {
   throw new Error('built artifacts contain a test or environment secret marker');
 }
+await import(pathToFileURL(resolve(root, 'lib/index.js')).href);
 
 console.log('Verified dsh-im package artifacts.');

package/src/channels/discord/discord-api.mjs

@@ -108,7 +108,7 @@ export class DiscordApi {
         headers: {
           authorization: `Bot ${this.#token}`,
           'content-type': 'application/json',
-          'user-agent': 'DeepSeek-Harness-dsh-im (https://github.com/xmanrui/dsh-im, 0.1.0)',
+          'user-agent': 'DeepSeek-Harness-dsh-im (https://github.com/xmanrui/dsh-im, 0.1.1)',
         },
         ...(body === undefined ? {} : { body: JSON.stringify(body) }),
         signal: requestSignal(signal, timeoutMs),

package/src/channels/weixin/weixin-api.mjs

@@ -92,7 +92,7 @@ function authenticatedHeaders(token) {
 function baseInfo() {
   return {
     channel_version: WEIXIN_PROTOCOL_VERSION,
-    bot_agent: 'DeepSeekHarness/0.1.0',
+    bot_agent: 'DeepSeekHarness/0.1.1',
   };
 }