@xmanrui/dsh-im 4.17.0 → 4.17.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xmanrui/dsh-im",
-  "version": "4.17.0",
+  "version": "4.17.1",
   "description": "把十种 IM 机器人和公网 AI Office 接入本机 DeepSeek Harness。 Connect ten IM channels and a public AI Office to a local DeepSeek Harness.",
   "keywords": [
     "deepseek-harness",
@@ -97,12 +97,13 @@
       "platform": "web"
     },
     "compatibility": {
-      "dsh": "0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.1",
+      "dsh": "0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.1 || 0.1.5-alpha.1",
       "dshReleases": {
         "0.1.2-alpha.4": "compatible",
         "0.1.2-alpha.5": "compatible",
         "0.1.2-rc.1": "compatible",
-        "0.1.3-alpha.1": "compatible"
+        "0.1.3-alpha.1": "compatible",
+        "0.1.5-alpha.1": "compatible"
       },
       "profiles": [
         "web"

package/plugin-src/client/index.js

@@ -1,3 +1,4 @@
+import { callManagementRpc } from '../management-rpc.mjs';
 import * as React from 'react';
 import manifest from '../../package.json' with { type: 'json' };
 
@@ -403,33 +404,33 @@ export function apply(ctx) {
   }, 'im-settings: install combined channel styles');
 
   const feishuRpcCall = (endpoint, payload, signal) =>
-    ctx.connection.rpc.call(FEISHU_RPC_CHANNEL, endpoint, payload, signal);
+    callManagementRpc(ctx.connection, FEISHU_RPC_CHANNEL, endpoint, payload, signal);
   const weixinRpcCall = (endpoint, payload, signal) =>
-    ctx.connection.rpc.call(WEIXIN_RPC_CHANNEL, endpoint, payload, signal);
+    callManagementRpc(ctx.connection, WEIXIN_RPC_CHANNEL, endpoint, payload, signal);
   const dingtalkRpcCall = (endpoint, payload, signal) =>
-    ctx.connection.rpc.call(DINGTALK_RPC_CHANNEL, endpoint, payload, signal);
+    callManagementRpc(ctx.connection, DINGTALK_RPC_CHANNEL, endpoint, payload, signal);
   const qqRpcCall = (endpoint, payload, signal) =>
-    ctx.connection.rpc.call(QQ_RPC_CHANNEL, endpoint, payload, signal);
+    callManagementRpc(ctx.connection, QQ_RPC_CHANNEL, endpoint, payload, signal);
   const wecomRpcCall = (endpoint, payload, signal) =>
-    ctx.connection.rpc.call(WECOM_RPC_CHANNEL, endpoint, payload, signal);
+    callManagementRpc(ctx.connection, WECOM_RPC_CHANNEL, endpoint, payload, signal);
   const wecomAppRpcCall = (endpoint, payload, signal) =>
-    ctx.connection.rpc.call(WECOM_APP_RPC_CHANNEL, endpoint, payload, signal);
+    callManagementRpc(ctx.connection, WECOM_APP_RPC_CHANNEL, endpoint, payload, signal);
   const telegramRpcCall = (endpoint, payload, signal) =>
-    ctx.connection.rpc.call(TELEGRAM_RPC_CHANNEL, endpoint, payload, signal);
+    callManagementRpc(ctx.connection, TELEGRAM_RPC_CHANNEL, endpoint, payload, signal);
   const discordRpcCall = (endpoint, payload, signal) =>
-    ctx.connection.rpc.call(DISCORD_RPC_CHANNEL, endpoint, payload, signal);
+    callManagementRpc(ctx.connection, DISCORD_RPC_CHANNEL, endpoint, payload, signal);
   const whatsappRpcCall = (endpoint, payload, signal) =>
-    ctx.connection.rpc.call(WHATSAPP_RPC_CHANNEL, endpoint, payload, signal);
+    callManagementRpc(ctx.connection, WHATSAPP_RPC_CHANNEL, endpoint, payload, signal);
   const slackRpcCall = (endpoint, payload, signal) =>
-    ctx.connection.rpc.call(SLACK_RPC_CHANNEL, endpoint, payload, signal);
+    callManagementRpc(ctx.connection, SLACK_RPC_CHANNEL, endpoint, payload, signal);
   const officeRpcCall = (endpoint, payload, signal) =>
-    ctx.connection.rpc.call(OFFICE_RPC_CHANNEL, endpoint, payload, signal);
+    callManagementRpc(ctx.connection, OFFICE_RPC_CHANNEL, endpoint, payload, signal);
   const updateRpcCall = (endpoint, payload, signal) =>
-    ctx.connection.rpc.call(UPDATE_RPC_CHANNEL, endpoint, payload, signal);
+    callManagementRpc(ctx.connection, UPDATE_RPC_CHANNEL, endpoint, payload, signal);
   const deliveryRpcCall = (endpoint, payload, signal) =>
-    ctx.connection.rpc.call(DELIVERY_RPC_CHANNEL, endpoint, payload, signal);
+    callManagementRpc(ctx.connection, DELIVERY_RPC_CHANNEL, endpoint, payload, signal);
   const globalSettingsRpcCall = (endpoint, payload, signal) =>
-    ctx.connection.rpc.call(GLOBAL_SETTINGS_RPC_CHANNEL, endpoint, payload, signal);
+    callManagementRpc(ctx.connection, GLOBAL_SETTINGS_RPC_CHANNEL, endpoint, payload, signal);
   const workspaceDirectoryPicker = Object.freeze({
     listDirectory: (path, signal) =>
       callWorkspaceDirectoryApi(ctx, 'listDirectory', path, signal),

package/plugin-src/host/channels/dingtalk/rpc.mjs

@@ -1,3 +1,4 @@
+import { registerManagementRpc } from '../../../management-rpc.mjs';
 import QRCode from 'qrcode';
 import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from '../shared/context-enhancement-rpc.mjs';
 import { SET_ACCESS_POLICY_ENDPOINT, validAccessPolicyPayload } from '../shared/access-policy-rpc.mjs';
@@ -336,10 +337,7 @@ export function createDingtalkRpcHandler(controller, { encodeQr = qrDataUrl } =
 }
 
 export function installDingtalkRpc(ctx, controller, options, authority) {
-  if (!ctx?.connection?.rpc || typeof ctx.connection.rpc.handle !== 'function') {
-    throw new TypeError('DSH Host Connection RPC is required');
-  }
-  return ctx.connection.rpc.handle(
+  return registerManagementRpc(ctx,
     DINGTALK_RPC_CHANNEL,
     createDingtalkRpcHandler(controller, options),
     { authority: resolveRpcAuthority(authority) },

package/plugin-src/host/channels/feishu/rpc.mjs

@@ -1,3 +1,4 @@
+import { registerManagementRpc } from '../../../management-rpc.mjs';
 import QRCode from 'qrcode';
 import {
   normalizeAgentPresetCatalog,
@@ -795,10 +796,7 @@ export function createFeishuRpcHandler(controller, { encodeQr = qrCodeDataUrl }
 
 /** Register the `/feishu` logical channel with its configured browser authority. */
 export function installFeishuRpc(ctx, controller, options, authority) {
-  if (!ctx?.connection?.rpc || typeof ctx.connection.rpc.handle !== 'function') {
-    throw new TypeError('DSH Host Connection RPC is required');
-  }
-  return ctx.connection.rpc.handle(
+  return registerManagementRpc(ctx,
     FEISHU_RPC_CHANNEL,
     createFeishuRpcHandler(controller, options),
     { authority: resolveRpcAuthority(authority) },

package/plugin-src/host/channels/office/rpc.mjs

@@ -1,3 +1,4 @@
+import { registerManagementRpc } from '../../../management-rpc.mjs';
 import { resolveRpcAuthority } from '../../rpc-authority.mjs';
 import { OFFICE_RPC_CHANNEL, OFFICE_RPC_ENDPOINTS } from '../../../../src/channels/office/protocol.mjs';
 
@@ -40,7 +41,7 @@ export function createOfficeRpcHandler(controller) {
 }
 
 export function installOfficeRpc(ctx, controller, authority) {
-  return ctx.connection.rpc.handle(
+  return registerManagementRpc(ctx,
     OFFICE_RPC_CHANNEL,
     createOfficeRpcHandler(controller),
     { authority: resolveRpcAuthority(authority) },

package/plugin-src/host/channels/qq/rpc.mjs

@@ -1,3 +1,4 @@
+import { registerManagementRpc } from '../../../management-rpc.mjs';
 import QRCode from 'qrcode';
 import {
   connectionTestTargetUnavailable,
@@ -227,10 +228,7 @@ export function createQqRpcHandler(controller, { encodeQr = qrDataUrl } = {}) {
 }
 
 export function installQqRpc(ctx, controller, options, authority) {
-  if (!ctx?.connection?.rpc || typeof ctx.connection.rpc.handle !== 'function') {
-    throw new TypeError('DSH Host Connection RPC is required');
-  }
-  return ctx.connection.rpc.handle(
+  return registerManagementRpc(ctx,
     QQ_RPC_CHANNEL,
     createQqRpcHandler(controller, options),
     { authority: resolveRpcAuthority(authority) },

package/plugin-src/host/channels/shared/rpc.mjs

@@ -1,3 +1,4 @@
+import { registerManagementRpc } from '../../../management-rpc.mjs';
 import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from './context-enhancement-rpc.mjs';
 import { SET_ACCESS_POLICY_ENDPOINT, validAccessPolicyPayload } from './access-policy-rpc.mjs';
 import { resolveRpcAuthority } from '../../rpc-authority.mjs';
@@ -197,10 +198,7 @@ export function createTokenBotRpcHandler(controller, { channel }) {
 }
 
 export function installTokenBotRpc(ctx, controller, { channel, rpcChannel, authority }) {
-  if (!ctx?.connection?.rpc || typeof ctx.connection.rpc.handle !== 'function') {
-    throw new TypeError('DSH Host Connection RPC is required');
-  }
-  return ctx.connection.rpc.handle(
+  return registerManagementRpc(ctx,
     rpcChannel,
     createTokenBotRpcHandler(controller, { channel }),
     { authority: resolveRpcAuthority(authority) },

package/plugin-src/host/channels/shared/startup.mjs

@@ -1,3 +1,4 @@
+import { registerManagementRpc } from '../../../management-rpc.mjs';
 import { resolveRpcAuthority } from '../../rpc-authority.mjs';
 import { publicChannelInitializing, publicChannelStartupError } from './startup-error.mjs';
 
@@ -5,12 +6,9 @@ import { publicChannelInitializing, publicChannelStartupError } from './startup-
 export async function installProductionChannel(ctx, config, {
   channel, rpcChannel, createProduction, createHandler,
 }) {
-  if (!ctx?.connection?.rpc || typeof ctx.connection.rpc.handle !== 'function') {
-    throw new TypeError('DSH Host Connection RPC is required');
-  }
   let startupError = publicChannelInitializing(channel);
   let handler = async () => ({ ok: false, error: startupError });
-  const disposeRpc = ctx.connection.rpc.handle(rpcChannel, (endpoint, payload, signal) => {
+  const disposeRpc = registerManagementRpc(ctx, rpcChannel, (endpoint, payload, signal) => {
     if (signal?.aborted) {
       return { ok: false, error: { code: 'cancelled', message: 'The request was cancelled.', details: {} } };
     }

package/plugin-src/host/channels/slack/rpc.mjs

@@ -1,3 +1,4 @@
+import { registerManagementRpc } from '../../../management-rpc.mjs';
 import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from '../shared/context-enhancement-rpc.mjs';
 import { SET_ACCESS_POLICY_ENDPOINT, validAccessPolicyPayload } from '../shared/access-policy-rpc.mjs';
 import { resolveRpcAuthority } from '../../rpc-authority.mjs';
@@ -200,10 +201,7 @@ export function createSlackRpcHandler(controller) {
 }
 
 export function installSlackRpc(ctx, controller, authority) {
-  if (!ctx?.connection?.rpc || typeof ctx.connection.rpc.handle !== 'function') {
-    throw new TypeError('DSH Host Connection RPC is required');
-  }
-  return ctx.connection.rpc.handle(
+  return registerManagementRpc(ctx,
     SLACK_RPC_CHANNEL,
     createSlackRpcHandler(controller),
     { authority: resolveRpcAuthority(authority) },

package/plugin-src/host/channels/telegram/rpc.mjs

@@ -1,3 +1,4 @@
+import { registerManagementRpc } from '../../../management-rpc.mjs';
 import {
   TOKEN_BOT_ENDPOINTS,
   createTokenBotRpcHandler,
@@ -13,10 +14,7 @@ export function createTelegramRpcHandler(controller) {
 }
 
 export function installTelegramRpc(ctx, controller, authority) {
-  if (!ctx?.connection?.rpc || typeof ctx.connection.rpc.handle !== 'function') {
-    throw new TypeError('DSH Host Connection RPC is required');
-  }
-  return ctx.connection.rpc.handle(
+  return registerManagementRpc(ctx,
     TELEGRAM_RPC_CHANNEL,
     createTelegramRpcHandler(controller),
     { authority: resolveRpcAuthority(authority) },

package/plugin-src/host/channels/wecom/rpc.mjs

@@ -1,3 +1,4 @@
+import { registerManagementRpc } from '../../../management-rpc.mjs';
 import QRCode from 'qrcode';
 import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from '../shared/context-enhancement-rpc.mjs';
 import { SET_ACCESS_POLICY_ENDPOINT, validAccessPolicyPayload } from '../shared/access-policy-rpc.mjs';
@@ -233,10 +234,7 @@ export function installWecomRpc(ctx, controller, options, authority) {
 
 /** Mount the existing Connection transport before the production controller is ready. */
 export function installWecomRpcHandler(ctx, handler, authority) {
-  if (!ctx?.connection?.rpc || typeof ctx.connection.rpc.handle !== 'function') {
-    throw new TypeError('DSH Host Connection RPC is required');
-  }
-  return ctx.connection.rpc.handle(
+  return registerManagementRpc(ctx,
     WECOM_RPC_CHANNEL,
     handler,
     { authority: resolveRpcAuthority(authority) },

package/plugin-src/host/channels/wecom-app/rpc.mjs

@@ -1,3 +1,4 @@
+import { registerManagementRpc } from '../../../management-rpc.mjs';
 import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from '../shared/context-enhancement-rpc.mjs';
 import { SET_ACCESS_POLICY_ENDPOINT, validAccessPolicyPayload } from '../shared/access-policy-rpc.mjs';
 import { resolveRpcAuthority } from '../../rpc-authority.mjs';
@@ -214,10 +215,7 @@ export function createWecomAppRpcHandler(controller) {
 }
 
 export function installWecomAppRpc(ctx, controller, options, authority) {
-  if (!ctx?.connection?.rpc || typeof ctx.connection.rpc.handle !== 'function') {
-    throw new TypeError('DSH Host Connection RPC is required');
-  }
-  return ctx.connection.rpc.handle(
+  return registerManagementRpc(ctx,
     WECOM_APP_RPC_CHANNEL,
     createWecomAppRpcHandler(controller, options),
     { authority: resolveRpcAuthority(authority) },

package/plugin-src/host/channels/weixin/rpc.mjs

@@ -1,3 +1,4 @@
+import { registerManagementRpc } from '../../../management-rpc.mjs';
 import QRCode from 'qrcode';
 import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from '../shared/context-enhancement-rpc.mjs';
 import { SET_ACCESS_POLICY_ENDPOINT, validAccessPolicyPayload } from '../shared/access-policy-rpc.mjs';
@@ -260,10 +261,7 @@ export function createWeixinRpcHandler(controller, { encodeQr = qrDataUrl } = {}
 }
 
 export function installWeixinRpc(ctx, controller, options, authority) {
-  if (!ctx?.connection?.rpc || typeof ctx.connection.rpc.handle !== 'function') {
-    throw new TypeError('DSH Host Connection RPC is required');
-  }
-  return ctx.connection.rpc.handle(
+  return registerManagementRpc(ctx,
     WEIXIN_RPC_CHANNEL,
     createWeixinRpcHandler(controller, options),
     { authority: resolveRpcAuthority(authority) },

package/plugin-src/host/channels/whatsapp/rpc.mjs

@@ -1,3 +1,4 @@
+import { registerManagementRpc } from '../../../management-rpc.mjs';
 import QRCode from 'qrcode';
 
 import { publicConnectionTestResult } from '../../../../src/channels/shared/connection-test.mjs';
@@ -218,10 +219,7 @@ export function createWhatsappRpcHandler(controller, { encodeQr = qrDataUrl } =
 }
 
 export function installWhatsappRpc(ctx, controller, options, authority) {
-  if (!ctx?.connection?.rpc || typeof ctx.connection.rpc.handle !== 'function') {
-    throw new TypeError('DSH Host Connection RPC is required');
-  }
-  return ctx.connection.rpc.handle(
+  return registerManagementRpc(ctx,
     WHATSAPP_RPC_CHANNEL,
     createWhatsappRpcHandler(controller, options),
     { authority: resolveRpcAuthority(authority) },

package/plugin-src/host/delivery-rpc.mjs

@@ -1,3 +1,4 @@
+import { registerManagementRpc } from '../management-rpc.mjs';
 import { resolveRpcAuthority } from './rpc-authority.mjs';
 
 export const DELIVERY_RPC_CHANNEL = '/dsh-im-delivery';
@@ -159,10 +160,7 @@ export function createDeliveryRpcHandler(service) {
 }
 
 export function installDeliveryRpc(ctx, service, { authority } = {}) {
-  if (!ctx?.connection?.rpc || typeof ctx.connection.rpc.handle !== 'function') {
-    throw new TypeError('DSH Host Connection RPC is required');
-  }
-  return ctx.connection.rpc.handle(
+  return registerManagementRpc(ctx,
     DELIVERY_RPC_CHANNEL,
     createDeliveryRpcHandler(service),
     { authority: resolveRpcAuthority(authority) },

package/plugin-src/host/inbound-ttl-rpc.mjs

@@ -1,3 +1,4 @@
+import { registerManagementRpc } from '../management-rpc.mjs';
 import { normalizeInboundTtlHours } from '../../src/channels/shared/inbound-ttl.mjs';
 import { getInboundTtlRuntime } from './inbound-ttl-runtime.mjs';
 
@@ -69,13 +70,10 @@ export function createInboundTtlRpcHandler({ store, service, logger = null } = {
 }
 
 export function installInboundTtlRpc(ctx, options = {}) {
-  if (!ctx?.connection?.rpc || typeof ctx.connection.rpc.handle !== 'function') {
-    throw new TypeError('DSH Host Connection RPC is required');
-  }
   const runtime = options.runtime ?? getInboundTtlRuntime(ctx, options.config);
   const logger = typeof ctx?.logger === 'function'
     ? ctx.logger('dsh-im:inbound-ttl') : (ctx?.logger ?? null);
-  return ctx.connection.rpc.handle(
+  return registerManagementRpc(ctx,
     INBOUND_TTL_RPC_CHANNEL,
     createInboundTtlRpcHandler({ ...runtime, logger }),
     { authority: 'loopback' },

package/plugin-src/host/index.mjs

@@ -130,7 +130,7 @@ export function createImHostPlugin(internals = {}) {
     const logger = typeof ctx?.logger === 'function'
       ? ctx.logger(name)
       : (ctx?.logger ?? console);
-    if (ctx?.connection?.rpc) {
+    if (ctx?.connection?.fetch) {
       try {
         startUpdate(ctx);
       } catch (error) {

package/plugin-src/host/update-rpc.mjs

@@ -1,3 +1,4 @@
+import { registerManagementRpc } from '../management-rpc.mjs';
 import { createUpdateRuntime } from './update-runtime.mjs';
 import { createUpdateService } from './update-service.mjs';
 
@@ -42,7 +43,7 @@ export function createUpdateRpcHandler(service) {
 export function installUpdateRpc(ctx, options = {}) {
   const runtime = options.runtime ?? createUpdateRuntime({ ctx, moduleUrl: import.meta.url });
   const service = options.service ?? createUpdateService({ runtime });
-  const dispose = ctx.connection.rpc.handle(UPDATE_RPC_CHANNEL, createUpdateRpcHandler(service), {
+  const dispose = registerManagementRpc(ctx, UPDATE_RPC_CHANNEL, createUpdateRpcHandler(service), {
     authority: 'loopback',
   });
   ctx.effect(() => () => service.close(), 'dsh-im: close update installer');

package/plugin-src/management-rpc.mjs

@@ -0,0 +1,77 @@
+import { resolveRpcAuthority } from './host/rpc-authority.mjs';
+
+function rpcEndpoint(channel) {
+  if (!/^\/[A-Za-z0-9._~-]+$/.test(channel)) throw new TypeError('Invalid IM RPC channel');
+  return `dsh-im${channel}`;
+}
+
+function isRecord(value) {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function isLoopbackAuthority(authority) {
+  if (!authority) return false;
+  try {
+    const url = new URL(`http://${authority}`);
+    if (url.username || url.password || url.pathname !== '/' || url.search || url.hash) return false;
+    const hostname = url.hostname.replace(/\.$/, '');
+    return hostname === 'localhost' || hostname === '[::1]'
+      || /^127\.\d+\.\d+\.\d+$/.test(hostname);
+  } catch { return false; }
+}
+
+function isLoopbackRequest(request) {
+  if (!isLoopbackAuthority(request.headers.get('host'))) return false;
+  const origin = request.headers.get('origin');
+  if (origin === null) return true;
+  try {
+    const url = new URL(origin);
+    return ['http:', 'https:'].includes(url.protocol) && isLoopbackAuthority(url.host);
+  } catch { return false; }
+}
+
+function reply(rpcId, result) {
+  // Older endpoint handlers omit details; Connection's client requires the field.
+  const value = result.ok === false
+    ? { ...result, error: { ...result.error, details: result.error.details ?? {} } } : result;
+  return Response.json({ type: 'server-response', rpcId, result: value });
+}
+
+/** Register an IM channel through the public /api carrier shared by supported DSH releases. */
+export function registerManagementRpc(ctx, channel, handler, { authority } = {}) {
+  const policy = resolveRpcAuthority(authority);
+  const endpoint = rpcEndpoint(channel);
+  if (typeof ctx?.connection?.fetch?.register !== 'function') {
+    throw new TypeError('DSH Host Connection Fetch registry is required');
+  }
+  return ctx.connection.fetch.register({
+    path: `/api/${endpoint}`,
+    methods: ['POST'],
+    requestBody: 'buffered',
+    async fetch(request) {
+      // DSH applies browser authentication and Host/Origin trust before this handler.
+      if (policy === 'loopback' && !isLoopbackRequest(request)) return new Response('forbidden', { status: 403 });
+      if (request.method !== 'POST') return new Response('method not allowed', { status: 405 });
+      if (request.headers.get('content-type')?.split(';', 1)[0].trim().toLowerCase() !== 'application/json') {
+        return new Response('content type must be application/json', { status: 415 });
+      }
+      let message;
+      try { message = await request.json(); }
+      catch { return new Response('body is not JSON', { status: 400 }); }
+      const rpcId = typeof message?.rpcId === 'string' ? message.rpcId : 'invalid-request';
+      const call = message?.payload;
+      if (!isRecord(message) || message.type !== 'client-request' || typeof message.rpcId !== 'string'
+        || message.method !== endpoint || !isRecord(call) || typeof call.method !== 'string'
+        || !Object.hasOwn(call, 'payload')) {
+        return reply(rpcId, { ok: false, error: { code: 'gateway/bad-request', message: 'Invalid IM management request.' } });
+      }
+      try { return reply(rpcId, await handler(call.method, call.payload, request.signal)); }
+      catch { return new Response('IM management handler failed', { status: 500 }); }
+    },
+  });
+}
+
+/** Keep channel UI callers unchanged while using DSH's native correlation and response validation. */
+export function callManagementRpc(connection, channel, method, payload, signal) {
+  return connection.rpc.call('/api', rpcEndpoint(channel), { method, payload }, signal);
+}