@xmanrui/dsh-im 0.12.0 → 0.14.0

package/src/channels/telegram/telegram-controller.mjs

@@ -1,9 +1,15 @@
 import { TokenBotController } from '../shared/token-bot-controller.mjs';
-import { deriveTelegramBotIdentity, maskTelegramBotId } from './config-store.mjs';
+import {
+  deriveTelegramBotIdentity,
+  maskTelegramBotId,
+  normalizeTelegramAccessPolicy,
+} from './config-store.mjs';
 import { inspectTelegramToken } from './telegram-api.mjs';
 import { TELEGRAM_DESCRIPTOR } from './telegram-bridge.mjs';
 
 export class TelegramController extends TokenBotController {
+  #configStore;
+
   constructor(options) {
     super({
       ...options,
@@ -12,5 +18,23 @@ export class TelegramController extends TokenBotController {
       deriveIdentity: deriveTelegramBotIdentity,
       maskPlatformId: maskTelegramBotId,
     });
+    this.#configStore = options.configStore;
+  }
+
+  status() {
+    const snapshot = super.status();
+    return {
+      ...snapshot,
+      bots: snapshot.bots.map((bot) => {
+        const config = this.#configStore.get(bot.botId);
+        const accessPolicy = normalizeTelegramAccessPolicy(config ?? {});
+        return { ...bot, accessPolicy };
+      }),
+    };
+  }
+
+  async setAccessPolicy(botId, value) {
+    const accessPolicy = normalizeTelegramAccessPolicy(value);
+    return this.updateBotConfig(botId, (config) => ({ ...config, ...accessPolicy }));
   }
 }

package/src/channels/telegram/telegram-runtime.mjs

@@ -1,6 +1,10 @@
 import { createEditableMessageStream, splitMessageText } from '../shared/editable-message-stream.mjs';
 import { TelegramApi } from './telegram-api.mjs';
 import { createTelegramBridgeStatus, TelegramHarnessBridge } from './telegram-bridge.mjs';
+import {
+  TELEGRAM_ACCESS_MODES,
+  normalizeTelegramAccessPolicy,
+} from './config-store.mjs';
 
 function escaped(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
@@ -115,6 +119,16 @@ export function normalizeTelegramUpdate(update, { botId, username, loadFile = as
   };
 }
 
+export function telegramInboundAllowed(message, {
+  accessMode = TELEGRAM_ACCESS_MODES.compatible,
+  allowedPrivateUserIds = new Set(),
+} = {}) {
+  if (accessMode !== TELEGRAM_ACCESS_MODES.privateAllowlist) return true;
+  return message?.kind === 'direct'
+    && allowedPrivateUserIds instanceof Set
+    && allowedPrivateUserIds.has(String(message.senderId));
+}
+
 class TelegramBotClient {
   #api;
   #signal;
@@ -198,6 +212,8 @@ export class TelegramRuntime {
   #logger;
   #replyTimeoutMs;
   #createApi;
+  #accessMode;
+  #allowedPrivateUserIds;
   #status = createTelegramRuntimeStatus();
   #api = null;
   #bridge = null;
@@ -224,6 +240,9 @@ export class TelegramRuntime {
     this.#logger = logger;
     this.#replyTimeoutMs = replyTimeoutMs;
     this.#createApi = createApi;
+    const accessPolicy = normalizeTelegramAccessPolicy(config);
+    this.#accessMode = accessPolicy.accessMode;
+    this.#allowedPrivateUserIds = new Set(accessPolicy.allowedUsers);
   }
 
   get status() {
@@ -323,7 +342,10 @@ export class TelegramRuntime {
           username: this.#config.username,
           loadFile: (fileId, options) => this.#api.downloadFile({ fileId, ...options }),
         });
-        if (message) {
+        if (message && telegramInboundAllowed(message, {
+          accessMode: this.#accessMode,
+          allowedPrivateUserIds: this.#allowedPrivateUserIds,
+        })) {
           void this.#bridge.accept(message).catch((error) => {
             if (signal.aborted) return;
             this.#logger.error?.(
@@ -331,6 +353,9 @@ export class TelegramRuntime {
               error,
             );
           });
+        } else if (message) {
+          this.#status.messagesRejected += 1;
+          this.#status.lastRejectedAt = new Date().toISOString();
         }
         cursor = update.update_id + 1;
         await this.#state.setCursor(cursor);

package/src/channels/wecom/wecom-bridge.mjs

@@ -34,8 +34,9 @@ const HELP_TEXT = [
   '/workspacelist  列出工作区绝对路径',
   '/sessionlist [工作区序号或绝对路径]  列出会话 ID 和标题',
   '/session Session ID 或当前工作区序号  将当前聊天绑定到指定会话',
-  '/models  列出所有可用模型',
-  '/model [模型ID]  查看或切换当前会话模型',
+  '/models  按序号列出所有可用模型',
+  '/model [序号或完整模型ID]  查看或切换当前会话模型',
+  '示例：先发 /models，再发 /model 2',
   '/stop  停止当前任务',
   '/steer 补充指令  纠偏当前任务',
   '/status  检查连接状态',

package/src/channels/weixin/weixin-api.mjs

@@ -184,7 +184,7 @@ function authenticatedHeaders(token) {
 function baseInfo() {
   return {
     channel_version: WEIXIN_PROTOCOL_VERSION,
-    bot_agent: 'DeepSeekHarness/0.12.0',
+    bot_agent: 'DeepSeekHarness/0.14.0',
   };
 }
 

package/src/channels/weixin/weixin-bridge.mjs

@@ -40,8 +40,9 @@ const HELP_TEXT = [
   '/workspacelist  列出工作区绝对路径',
   '/sessionlist [工作区序号或绝对路径]  列出会话 ID 和标题',
   '/session Session ID 或当前工作区序号  将当前聊天绑定到指定会话',
-  '/models  列出所有可用模型',
-  '/model [模型ID]  查看或切换当前会话模型',
+  '/models  按序号列出所有可用模型',
+  '/model [序号或完整模型ID]  查看或切换当前会话模型',
+  '示例：先发 /models，再发 /model 2',
   '/stop  停止当前任务',
   '/steer 补充指令  纠偏当前任务',
   '/status  检查连接状态',