@xmanrui/dsh-im 4.18.0 → 4.19.0

package/plugin-src/host/channels/dingtalk/rpc.mjs

@@ -1,3 +1,4 @@
+import { SET_ALIAS_ENDPOINT, validAliasPayload } from '../shared/bot-alias-rpc.mjs';
 import { registerManagementRpc } from '../../../management-rpc.mjs';
 import QRCode from 'qrcode';
 import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from '../shared/context-enhancement-rpc.mjs';
@@ -25,6 +26,7 @@ export const DINGTALK_ENDPOINTS = Object.freeze({
   setAgentPreset: SET_AGENT_PRESET_ENDPOINT,
   setContextEnhancement: SET_CONTEXT_ENHANCEMENT_ENDPOINT,
   setAccessPolicy: SET_ACCESS_POLICY_ENDPOINT,
+  setAlias: SET_ALIAS_ENDPOINT,
   approveSender: 'bot.sender.approve',
   revokeSender: 'bot.sender.revoke',
 });
@@ -112,6 +114,10 @@ function payloadFailure(endpoint, payload) {
     return validAccessPolicyPayload(payload)
       ? null : '请提交有效的访问设置。';
   }
+  if (endpoint === DINGTALK_ENDPOINTS.setAlias) {
+    return validAliasPayload(payload)
+      ? null : '请输入有效的别名（最多 80 个字符）。';
+  }
   if (endpoint === DINGTALK_ENDPOINTS.approveSender) {
     return exactKeys(payload, ['botId', 'requestId', 'confirm'])
       && validId(payload.botId)
@@ -301,6 +307,11 @@ export function createDingtalkRpcHandler(controller, { encodeQr = qrDataUrl } =
         value = await controller.updateContextEnhancement(
           payload.botId, payload.config, (status) => publicStatus(status, cachedEncode),
         );
+      } else if (endpoint === DINGTALK_ENDPOINTS.setAlias) {
+        if (typeof controller.updateAlias !== 'function') throw new Error('Alias update is unavailable');
+        value = await controller.updateAlias(
+          payload.botId, payload.alias, (status) => publicStatus(status, cachedEncode),
+        );
       } else if (endpoint === DINGTALK_ENDPOINTS.setAccessPolicy) {
         if (typeof controller.updateAccessPolicy !== 'function') throw new Error('Access policy update is unavailable');
         value = await controller.updateAccessPolicy(

package/plugin-src/host/channels/feishu/production.mjs

@@ -162,6 +162,27 @@ export async function createProductionController(ctx, config = {}, internals = {
     if (!botConfig) throw new Error('Unknown Feishu bot');
     return stateFor(botConfig);
   };
+  // Session-sync mirror targets: which synced DMs (openId) belong to a
+  // Session. Resolved lazily per turn start so rebinding a delivery target
+  // takes effect without a restart.
+  const sessionSyncTargetsFor = async (sessionId) => {
+    if (typeof workspaces.listSessionSyncTargets !== 'function') return [];
+    const matches = [];
+    for (const entry of workspaces.listSessionSyncTargets()) {
+      let state;
+      try {
+        state = await stateForBotId(entry.botId);
+      } catch {
+        continue;
+      }
+      const bound = state?.snapshot?.().sessions?.[entry.conversationKey];
+      if (bound !== sessionId) continue;
+      const target = workspaces.deliveryTargetFor(entry.botId, entry.targetId);
+      const openId = target?.route?.openId;
+      if (openId) matches.push({ openId, botId: entry.botId, targetId: entry.targetId });
+    }
+    return matches;
+  };
   const commandExecutor = createHarnessCommandExecutor(ctx, internals.commandExecutor);
   const inboundTtl = internals.inboundTtl ?? getInboundTtlRuntime(ctx, config);
   const inboundTtlService = inboundTtl?.service ?? inboundTtl;
@@ -220,6 +241,7 @@ export async function createProductionController(ctx, config = {}, internals = {
         groupTopicReply: botConfig.groupTopicReply,
         stepPush: botConfig.stepPush,
         stepPushMode: botConfig.stepPushMode,
+        sessionSyncTargetsFor: sessionSyncTargetsFor,
         ownerOpenIds: botConfig.ownerOpenIds ?? [botConfig.ownerOpenId],
         harness: workspaceScope.harness,
         state: workspaceScope.state,

package/plugin-src/host/channels/feishu/rpc.mjs

@@ -1,3 +1,5 @@
+import { normalizeBotAlias } from '../../../../src/channels/shared/bot-alias.mjs';
+import { SET_ALIAS_ENDPOINT, validAliasPayload } from '../shared/bot-alias-rpc.mjs';
 import { registerManagementRpc } from '../../../management-rpc.mjs';
 import QRCode from 'qrcode';
 import {
@@ -34,6 +36,7 @@ import {
 export const FEISHU_ENDPOINTS = Object.freeze({
   ...FEISHU_CLIENT_ENDPOINTS,
   setAccessPolicy: SET_ACCESS_POLICY_ENDPOINT,
+  setAlias: SET_ALIAS_ENDPOINT,
 });
 export { FEISHU_RPC_CHANNEL };
 export const FEISHU_MULTI_ENDPOINTS = Object.freeze({
@@ -214,6 +217,7 @@ function connectionFacts(connection) {
 function publicBot(bot) {
   const source = bot && typeof bot === 'object' ? bot : {};
   const result = {
+    ...normalizeBotAlias(source),
     name: typeof source.name === 'string' && source.name.length > 0 ? source.name : '飞书机器人',
   };
   if (typeof source.avatarUrl === 'string') result.avatarUrl = source.avatarUrl;
@@ -451,6 +455,10 @@ function validPayload(endpoint, payload) {
     return validAccessPolicyPayload(payload)
       ? null : '请提交有效的访问设置。';
   }
+  if (endpoint === FEISHU_ENDPOINTS.setAlias) {
+    return validAliasPayload(payload)
+      ? null : '请输入有效的别名（最多 80 个字符）。';
+  }
   if (endpoint === FEISHU_ENDPOINTS.setGroupResponseMode) {
     return hasOnlyKeys(payload, new Set(['botId', 'groupResponseMode']))
       && safeOpaqueId(payload.botId)
@@ -735,6 +743,12 @@ export function createFeishuRpcHandler(controller, { encodeQr = qrCodeDataUrl }
           payload.botId, payload.config,
           (status) => toPublicFeishuStatus(status, { encodeQr: cachedEncodeQr }),
         );
+      } else if (endpoint === FEISHU_ENDPOINTS.setAlias) {
+        if (typeof controller.updateAlias !== 'function') throw new Error('Alias update is unavailable');
+        value = await controller.updateAlias(
+          payload.botId, payload.alias,
+          (status) => toPublicFeishuStatus(status, { encodeQr: cachedEncodeQr }),
+        );
       } else if (endpoint === FEISHU_ENDPOINTS.setAccessPolicy) {
         if (typeof controller.updateAccessPolicy !== 'function') throw new Error('Access policy update is unavailable');
         value = await controller.updateAccessPolicy(

package/plugin-src/host/channels/imessage/rpc.mjs

@@ -15,6 +15,7 @@ export const IMESSAGE_ENDPOINTS = Object.freeze({
   setAgentPreset: 'bot.agent-preset.set',
   setContextEnhancement: 'bot.context-enhancement.set',
   setAccessPolicy: 'bot.access-policy.set',
+  setAlias: 'bot.alias.set',
 });
 export const IMESSAGE_RPC_ENDPOINTS = Object.freeze(Object.values(IMESSAGE_ENDPOINTS));
 

package/plugin-src/host/channels/qq/rpc.mjs

@@ -1,3 +1,4 @@
+import { SET_ALIAS_ENDPOINT, validAliasPayload } from '../shared/bot-alias-rpc.mjs';
 import { registerManagementRpc } from '../../../management-rpc.mjs';
 import QRCode from 'qrcode';
 import {
@@ -25,6 +26,7 @@ export const QQ_ENDPOINTS = Object.freeze({
   setAgentPreset: SET_AGENT_PRESET_ENDPOINT,
   setContextEnhancement: SET_CONTEXT_ENHANCEMENT_ENDPOINT,
   setAccessPolicy: SET_ACCESS_POLICY_ENDPOINT,
+  setAlias: SET_ALIAS_ENDPOINT,
 });
 export const QQ_RPC_ENDPOINTS = Object.freeze(Object.values(QQ_ENDPOINTS));
 
@@ -94,6 +96,10 @@ function payloadFailure(endpoint, payload) {
     return validAccessPolicyPayload(payload)
       ? null : '请提交有效的访问设置。';
   }
+  if (endpoint === QQ_ENDPOINTS.setAlias) {
+    return validAliasPayload(payload)
+      ? null : '请输入有效的别名（最多 80 个字符）。';
+  }
   return 'Unknown QQ endpoint.';
 }
 
@@ -200,6 +206,11 @@ export function createQqRpcHandler(controller, { encodeQr = qrDataUrl } = {}) {
         value = await controller.updateContextEnhancement(
           payload.botId, payload.config, (status) => publicStatus(status, cachedEncode),
         );
+      } else if (endpoint === QQ_ENDPOINTS.setAlias) {
+        if (typeof controller.updateAlias !== 'function') throw new Error('Alias update is unavailable');
+        value = await controller.updateAlias(
+          payload.botId, payload.alias, (status) => publicStatus(status, cachedEncode),
+        );
       } else if (endpoint === QQ_ENDPOINTS.setAccessPolicy) {
         if (typeof controller.updateAccessPolicy !== 'function') throw new Error('Access policy update is unavailable');
         value = await controller.updateAccessPolicy(

package/plugin-src/host/channels/shared/bot-alias-rpc.mjs

@@ -0,0 +1,15 @@
+import { validateBotAlias } from '../../../../src/channels/shared/bot-alias.mjs';
+export { SET_ALIAS_ENDPOINT } from '../../../../src/channels/shared/bot-alias.mjs';
+
+export function validAliasPayload(payload) {
+  try {
+    if (!payload || typeof payload !== 'object' || Array.isArray(payload)
+      || Object.keys(payload).length !== 2
+      || typeof payload.botId !== 'string'
+      || !/^[A-Za-z0-9_-]{1,128}$/.test(payload.botId)) return false;
+    validateBotAlias(payload.alias);
+    return true;
+  } catch {
+    return false;
+  }
+}

package/plugin-src/host/channels/shared/rpc.mjs

@@ -1,3 +1,4 @@
+import { SET_ALIAS_ENDPOINT, validAliasPayload } from './bot-alias-rpc.mjs';
 import { registerManagementRpc } from '../../../management-rpc.mjs';
 import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from './context-enhancement-rpc.mjs';
 import { SET_ACCESS_POLICY_ENDPOINT, validAccessPolicyPayload } from './access-policy-rpc.mjs';
@@ -24,6 +25,7 @@ export const TOKEN_BOT_ENDPOINTS = Object.freeze({
   setAgentPreset: SET_AGENT_PRESET_ENDPOINT,
   setContextEnhancement: SET_CONTEXT_ENHANCEMENT_ENDPOINT,
   setAccessPolicy: SET_ACCESS_POLICY_ENDPOINT,
+  setAlias: SET_ALIAS_ENDPOINT,
 });
 
 const ENDPOINTS = Object.freeze(Object.values(TOKEN_BOT_ENDPOINTS));
@@ -90,6 +92,10 @@ function payloadFailure(endpoint, payload) {
     return validAccessPolicyPayload(payload)
       ? null : '请提交有效的访问设置。';
   }
+  if (endpoint === TOKEN_BOT_ENDPOINTS.setAlias) {
+    return validAliasPayload(payload)
+      ? null : '请输入有效的别名（最多 80 个字符）。';
+  }
   return 'Unknown bot endpoint.';
 }
 
@@ -177,6 +183,9 @@ export function createTokenBotRpcHandler(controller, { channel }) {
       } else if (endpoint === TOKEN_BOT_ENDPOINTS.setContextEnhancement) {
         if (typeof controller.updateContextEnhancement !== 'function') throw new Error('Context enhancement update is unavailable');
         value = await controller.updateContextEnhancement(payload.botId, payload.config);
+      } else if (endpoint === TOKEN_BOT_ENDPOINTS.setAlias) {
+        if (typeof controller.updateAlias !== 'function') throw new Error('Alias update is unavailable');
+        value = await controller.updateAlias(payload.botId, payload.alias);
       } else if (endpoint === TOKEN_BOT_ENDPOINTS.setAccessPolicy) {
         if (typeof controller.updateAccessPolicy !== 'function') throw new Error('Access policy update is unavailable');
         value = await controller.updateAccessPolicy(payload.botId, payload.policy);

package/plugin-src/host/channels/slack/rpc.mjs

@@ -1,3 +1,4 @@
+import { SET_ALIAS_ENDPOINT, validAliasPayload } from '../shared/bot-alias-rpc.mjs';
 import { registerManagementRpc } from '../../../management-rpc.mjs';
 import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from '../shared/context-enhancement-rpc.mjs';
 import { SET_ACCESS_POLICY_ENDPOINT, validAccessPolicyPayload } from '../shared/access-policy-rpc.mjs';
@@ -25,6 +26,7 @@ export const SLACK_ENDPOINTS = Object.freeze({
   setAgentPreset: SET_AGENT_PRESET_ENDPOINT,
   setContextEnhancement: SET_CONTEXT_ENHANCEMENT_ENDPOINT,
   setAccessPolicy: SET_ACCESS_POLICY_ENDPOINT,
+  setAlias: SET_ALIAS_ENDPOINT,
 });
 export const SLACK_RPC_ENDPOINTS = Object.freeze(Object.values(SLACK_ENDPOINTS));
 
@@ -93,6 +95,10 @@ function payloadFailure(endpoint, payload) {
     return validAccessPolicyPayload(payload)
       ? null : '请提交有效的访问设置。';
   }
+  if (endpoint === SLACK_ENDPOINTS.setAlias) {
+    return validAliasPayload(payload)
+      ? null : '请输入有效的别名（最多 80 个字符）。';
+  }
   return 'Unknown Slack endpoint.';
 }
 
@@ -180,6 +186,10 @@ export function createSlackRpcHandler(controller) {
         if (typeof controller.updateContextEnhancement !== 'function') throw new Error('Context enhancement update is unavailable');
         value = await controller.updateContextEnhancement(payload.botId, payload.config);
       }
+      else if (endpoint === SLACK_ENDPOINTS.setAlias) {
+        if (typeof controller.updateAlias !== 'function') throw new Error('Alias update is unavailable');
+        value = await controller.updateAlias(payload.botId, payload.alias);
+      }
       else if (endpoint === SLACK_ENDPOINTS.setAccessPolicy) {
         if (typeof controller.updateAccessPolicy !== 'function') throw new Error('Access policy update is unavailable');
         value = await controller.updateAccessPolicy(payload.botId, payload.policy);

package/plugin-src/host/channels/wecom/rpc.mjs

@@ -1,3 +1,4 @@
+import { SET_ALIAS_ENDPOINT, validAliasPayload } from '../shared/bot-alias-rpc.mjs';
 import { registerManagementRpc } from '../../../management-rpc.mjs';
 import QRCode from 'qrcode';
 import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from '../shared/context-enhancement-rpc.mjs';
@@ -25,6 +26,7 @@ export const WECOM_ENDPOINTS = Object.freeze({
   setAgentPreset: SET_AGENT_PRESET_ENDPOINT,
   setContextEnhancement: SET_CONTEXT_ENHANCEMENT_ENDPOINT,
   setAccessPolicy: SET_ACCESS_POLICY_ENDPOINT,
+  setAlias: SET_ALIAS_ENDPOINT,
 });
 export const WECOM_RPC_ENDPOINTS = Object.freeze(Object.values(WECOM_ENDPOINTS));
 
@@ -94,6 +96,10 @@ function payloadFailure(endpoint, payload) {
     return validAccessPolicyPayload(payload)
       ? null : '请提交有效的访问设置。';
   }
+  if (endpoint === WECOM_ENDPOINTS.setAlias) {
+    return validAliasPayload(payload)
+      ? null : '请输入有效的别名（最多 80 个字符）。';
+  }
   return 'Unknown Enterprise WeChat endpoint.';
 }
 
@@ -201,6 +207,11 @@ export function createWecomRpcHandler(controller, { encodeQr = qrDataUrl } = {})
         value = await controller.updateContextEnhancement(
           payload.botId, payload.config, (status) => publicStatus(status, cachedEncode),
         );
+      } else if (endpoint === WECOM_ENDPOINTS.setAlias) {
+        if (typeof controller.updateAlias !== 'function') throw new Error('Alias update is unavailable');
+        value = await controller.updateAlias(
+          payload.botId, payload.alias, (status) => publicStatus(status, cachedEncode),
+        );
       } else if (endpoint === WECOM_ENDPOINTS.setAccessPolicy) {
         if (typeof controller.updateAccessPolicy !== 'function') throw new Error('Access policy update is unavailable');
         value = await controller.updateAccessPolicy(

package/plugin-src/host/channels/wecom-app/rpc.mjs

@@ -1,3 +1,4 @@
+import { SET_ALIAS_ENDPOINT, validAliasPayload } from '../shared/bot-alias-rpc.mjs';
 import { registerManagementRpc } from '../../../management-rpc.mjs';
 import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from '../shared/context-enhancement-rpc.mjs';
 import { SET_ACCESS_POLICY_ENDPOINT, validAccessPolicyPayload } from '../shared/access-policy-rpc.mjs';
@@ -23,6 +24,7 @@ export const WECOM_APP_ENDPOINTS = Object.freeze({
   setAgentPreset: SET_AGENT_PRESET_ENDPOINT,
   setContextEnhancement: SET_CONTEXT_ENHANCEMENT_ENDPOINT,
   setAccessPolicy: SET_ACCESS_POLICY_ENDPOINT,
+  setAlias: SET_ALIAS_ENDPOINT,
 });
 export const WECOM_APP_RPC_ENDPOINTS = Object.freeze(Object.values(WECOM_APP_ENDPOINTS));
 
@@ -113,6 +115,9 @@ function payloadFailure(endpoint, payload) {
   if (endpoint === WECOM_APP_ENDPOINTS.setAccessPolicy) {
     return validAccessPolicyPayload(payload) ? null : '请提交有效的访问设置。';
   }
+  if (endpoint === WECOM_APP_ENDPOINTS.setAlias) {
+    return validAliasPayload(payload) ? null : '请输入有效的别名（最多 80 个字符）。';
+  }
   return 'Unknown Enterprise WeChat app endpoint.';
 }
 
@@ -189,6 +194,11 @@ export function createWecomAppRpcHandler(controller) {
         value = await controller.updateContextEnhancement(
           payload.botId, payload.config, (status) => publicStatus(status),
         );
+      } else if (endpoint === WECOM_APP_ENDPOINTS.setAlias) {
+        if (typeof controller.updateAlias !== 'function') throw new Error('Alias update is unavailable');
+        value = await controller.updateAlias(
+          payload.botId, payload.alias, (status) => publicStatus(status),
+        );
       } else if (endpoint === WECOM_APP_ENDPOINTS.setAccessPolicy) {
         if (typeof controller.updateAccessPolicy !== 'function') throw new Error('Access policy update is unavailable');
         value = await controller.updateAccessPolicy(

package/plugin-src/host/channels/weixin/rpc.mjs

@@ -1,3 +1,4 @@
+import { SET_ALIAS_ENDPOINT, validAliasPayload } from '../shared/bot-alias-rpc.mjs';
 import { registerManagementRpc } from '../../../management-rpc.mjs';
 import QRCode from 'qrcode';
 import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from '../shared/context-enhancement-rpc.mjs';
@@ -32,6 +33,7 @@ export const WEIXIN_ENDPOINTS = Object.freeze({
   setAgentPreset: SET_AGENT_PRESET_ENDPOINT,
   setContextEnhancement: SET_CONTEXT_ENHANCEMENT_ENDPOINT,
   setAccessPolicy: SET_ACCESS_POLICY_ENDPOINT,
+  setAlias: SET_ALIAS_ENDPOINT,
 });
 export const WEIXIN_RPC_ENDPOINTS = Object.freeze(Object.values(WEIXIN_ENDPOINTS));
 
@@ -101,6 +103,10 @@ function payloadFailure(endpoint, payload) {
     return validAccessPolicyPayload(payload)
       ? null : '请提交有效的访问设置。';
   }
+  if (endpoint === WEIXIN_ENDPOINTS.setAlias) {
+    return validAliasPayload(payload)
+      ? null : '请输入有效的别名（最多 80 个字符）。';
+  }
   return 'Unknown Weixin endpoint.';
 }
 
@@ -236,6 +242,11 @@ export function createWeixinRpcHandler(controller, { encodeQr = qrDataUrl } = {}
         value = await controller.updateContextEnhancement(
           payload.botId, payload.config, (status) => publicStatus(status, cachedEncode),
         );
+      } else if (endpoint === WEIXIN_ENDPOINTS.setAlias) {
+        if (typeof controller.updateAlias !== 'function') throw new Error('Alias update is unavailable');
+        value = await controller.updateAlias(
+          payload.botId, payload.alias, (status) => publicStatus(status, cachedEncode),
+        );
       } else if (endpoint === WEIXIN_ENDPOINTS.setAccessPolicy) {
         if (typeof controller.updateAccessPolicy !== 'function') throw new Error('Access policy update is unavailable');
         value = await controller.updateAccessPolicy(

package/plugin-src/host/channels/whatsapp/rpc.mjs

@@ -1,3 +1,4 @@
+import { SET_ALIAS_ENDPOINT, validAliasPayload } from '../shared/bot-alias-rpc.mjs';
 import { registerManagementRpc } from '../../../management-rpc.mjs';
 import QRCode from 'qrcode';
 
@@ -18,6 +19,7 @@ export const WHATSAPP_ENDPOINTS = Object.freeze({
   reconnectBot: 'bot.reconnect',
   deleteBot: 'bot.delete',
   setAccessPolicy: SET_ACCESS_POLICY_ENDPOINT,
+  setAlias: SET_ALIAS_ENDPOINT,
   setWorkspace: SET_WORKSPACE_ENDPOINT,
   setModel: SET_MODEL_ENDPOINT,
   setAgentPreset: SET_AGENT_PRESET_ENDPOINT,
@@ -61,6 +63,10 @@ function payloadFailure(endpoint, payload) {
     return validAccessPolicyPayload(payload)
       ? null : '请提交有效的访问设置。';
   }
+  if (endpoint === WHATSAPP_ENDPOINTS.setAlias) {
+    return validAliasPayload(payload)
+      ? null : '请输入有效的别名（最多 80 个字符）。';
+  }
   if (endpoint === WHATSAPP_ENDPOINTS.setWorkspace) {
     return validWorkspacePayload(payload)
       ? null : '请输入工作区绝对路径。';
@@ -195,6 +201,13 @@ export function createWhatsappRpcHandler(controller, { encodeQr = qrDataUrl } =
           await controller.updateAgentPreset(payload.botId, payload.agentPreset),
           cachedEncode,
         );
+      } else if (endpoint === WHATSAPP_ENDPOINTS.setAlias) {
+        if (typeof controller.updateAlias !== 'function') throw new Error('Alias update is unavailable');
+        value = await controller.updateAlias(
+          payload.botId,
+          payload.alias,
+          (status) => publicStatus(status, cachedEncode),
+        );
       } else if (endpoint === WHATSAPP_ENDPOINTS.setAccessPolicy) {
         if (typeof controller.updateAccessPolicy !== 'function') throw new Error('Access policy update is unavailable');
         value = await controller.updateAccessPolicy(

package/plugin-src/host/rpc-authority.mjs

@@ -2,10 +2,11 @@ const RPC_AUTHORITIES = new Set(['loopback', 'trusted-host']);
 
 /**
  * Resolve the browser authority accepted by an IM management RPC channel.
- * The default keeps credential and bot-management operations on loopback.
+ * By default, use the browser authentication and Host/Origin trust checks
+ * already enforced by Harness before it dispatches a management Fetch route.
  */
 export function resolveRpcAuthority(value) {
-  if (value === undefined) return 'loopback';
+  if (value === undefined) return 'trusted-host';
   if (RPC_AUTHORITIES.has(value)) return value;
   throw new TypeError('dsh-im rpcAuthority must be "loopback" or "trusted-host"');
 }

package/plugin-src/host/session-sync-coordinator.mjs

@@ -3,6 +3,10 @@ import {
   consumeDshImInputOrigin,
   textFromHarnessContent,
 } from '../../src/channels/shared/harness-client.mjs';
+import {
+  isSessionSyncMirrored,
+  releaseSessionSyncMirror,
+} from '../../src/channels/shared/session-sync-registry.mjs';
 
 const DSH_USER_PREFIX = '[来自 DSH]\n';
 const DSH_ASSISTANT_PREFIX = '[DSH 助手]\n';
@@ -111,6 +115,10 @@ export function createSessionSyncCoordinator({ deliveryService, logger = console
       if (event.surfaceOp !== 'append') return;
       if (state.origin === 'unknown') state.origin = origin;
       if (state.origin !== 'dsh' || origin !== 'dsh') return;
+      // The user echo stays as plain text even when the mirror owns the
+      // turn: the card also quotes the question, but keeping the echo here
+      // guarantees recipients are established so a failed mirror can still
+      // fall back to the final-answer text delivery.
       const text = textFromHarnessContent(event.data?.content);
       if (!text) return;
 
@@ -151,9 +159,19 @@ export function createSessionSyncCoordinator({ deliveryService, logger = console
     turns.delete(sessionId);
     if (state.origin !== 'dsh' || !completedTurn(event.data?.reason)
       || !state.recipients?.size || !state.assistant.text) return;
+    // Per-target suppression: targets whose process-card mirror delivered
+    // the answer are skipped; every other synced target still gets the text.
+    const mirrored = [];
+    const plain = [];
+    for (const target of state.recipients.values()) {
+      if (isSessionSyncMirrored(sessionId, target.targetId, state.turn)) mirrored.push(target);
+      else plain.push(target);
+    }
+    for (const target of mirrored) releaseSessionSyncMirror(sessionId, target.targetId);
+    if (plain.length === 0) return;
     await deliver(
       sessionId,
-      state.recipients.values(),
+      plain,
       `${DSH_ASSISTANT_PREFIX}${state.assistant.text}`,
       'assistant delivery',
     );

package/scripts/verify-lan-management.mjs

@@ -0,0 +1,176 @@
+/** Run the built plugin through an original DSH CLI with an isolated, empty home. */
+import assert from 'node:assert/strict';
+import { spawn } from 'node:child_process';
+import { access, mkdir, mkdtemp, rm, symlink, writeFile } from 'node:fs/promises';
+import { request as httpRequest } from 'node:http';
+import { tmpdir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+
+const harnessRoot = process.argv[2];
+if (!harnessRoot || process.argv.includes('--help')) {
+  console.log('Usage: node scripts/verify-lan-management.mjs /path/to/built/deepseek-harness');
+  process.exit(harnessRoot ? 0 : 1);
+}
+const pluginRoot = resolve(import.meta.dirname, '..');
+const cli = resolve(harnessRoot, 'apps/cli/lib/bin.js');
+await access(cli);
+await access(join(pluginRoot, 'lib/index.js'));
+// DSH 0.1.5 CLI intentionally permits only loopback listening. Exercise its
+// real HTTP carrier with a trusted LAN authority, while keeping TCP local.
+const lanIp = '192.168.1.100';
+
+const directory = await mkdtemp(join(tmpdir(), 'dsh-im-lan-test-'));
+const home = join(directory, 'home');
+const profile = join(home, 'profiles/web');
+const results = [];
+let child;
+
+function request(url, { method = 'GET', headers = {}, body } = {}) {
+  return new Promise((resolveRequest, reject) => {
+    const req = httpRequest({
+      hostname: '127.0.0.1', port: url.port, path: `${url.pathname}${url.search}`,
+      method, headers: { host: url.host, ...headers },
+    }, res => {
+      let text = '';
+      res.setEncoding('utf8');
+      res.on('data', chunk => { text += chunk; });
+      res.on('error', reject);
+      res.on('end', () => resolveRequest({ status: res.statusCode, headers: res.headers, body: text }));
+    });
+    req.on('error', reject);
+    req.setTimeout(10_000, () => req.destroy(new Error('HTTP request timed out')));
+    req.end(body);
+  });
+}
+
+function start() {
+  const env = Object.fromEntries(Object.entries(process.env).filter(([key]) => (
+    !/^DSH_/i.test(key) && !/(?:KEY|SECRET|TOKEN|PASSWORD|PROXY)/i.test(key)
+  )));
+  child = spawn(process.execPath, [cli, 'web', '--no-open', '--host', '127.0.0.1',
+    '--port', '0', '--trusted-host', lanIp], {
+    cwd: directory,
+    env: { ...env, DSH_HOME: home, DSH_AGENTS_HOME: join(directory, '.agents'),
+      DSH_TELEMETRY_DISABLED: '1', SSH_CONNECTION: '', SSH_TTY: '' },
+    stdio: ['ignore', 'pipe', 'pipe'],
+  });
+  return new Promise((resolveStart, reject) => {
+    let output = '';
+    const timer = setTimeout(() => finish(new Error('DSH startup timed out')), 45_000);
+    let settled = false;
+    function finish(error, url) {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      if (error) {
+        const safeOutput = output.replace(/([?&]token=)[^\s)]+/g, '$1<redacted>');
+        reject(new Error(`${error.message}\n${safeOutput}`));
+      } else resolveStart(new URL(url));
+    }
+    function append(chunk) {
+      output = `${output}${chunk}`.slice(-100_000);
+      const match = /dsh web: (http:\/\/[^\s]+)/.exec(output);
+      if (match) finish(null, match[1]);
+    }
+    child.stdout.on('data', append);
+    child.stderr.on('data', append);
+    child.once('error', error => finish(error));
+    child.once('exit', code => finish(new Error(`DSH exited before readiness: ${code}`)));
+  });
+}
+
+async function stop() {
+  if (!child || child.exitCode !== null || child.signalCode !== null) return;
+  const stopped = new Promise(resolveStop => child.once('exit', resolveStop));
+  child.kill('SIGTERM');
+  const timer = setTimeout(() => child.kill('SIGKILL'), 10_000);
+  try { await stopped; } finally { clearTimeout(timer); }
+}
+
+async function login(launchUrl, hostname) {
+  const url = new URL(launchUrl);
+  url.hostname = hostname;
+  const response = await request(url);
+  assert.equal(response.status, 303, 'Harness must exchange its launch token for a browser cookie');
+  const cookie = response.headers['set-cookie']?.map(value => value.split(';', 1)[0]).join('; ');
+  assert.ok(cookie, 'Harness did not issue a browser cookie');
+  return { origin: url.origin, cookie };
+}
+
+function rpc(browser, channel = 'feishu', method = 'connection.status', headers = {}, payload = {}) {
+  return request(new URL(`/api/dsh-im/${channel}`, browser.origin), {
+    method: 'POST',
+    headers: { 'content-type': 'application/json', origin: browser.origin,
+      ...(browser.cookie ? { cookie: browser.cookie } : {}), ...headers },
+    body: JSON.stringify({ type: 'client-request', rpcId: 'lan-test',
+      method: `dsh-im/${channel}`, payload: { method, payload } }),
+  });
+}
+
+function expectStatus(name, response, expected, businessOk = false) {
+  assert.equal(response.status, expected, `${name}: ${response.body.slice(0, 300)}`);
+  if (businessOk) {
+    const envelope = JSON.parse(response.body);
+    assert.equal(envelope.type, 'server-response', name);
+    assert.equal(envelope.rpcId, 'lan-test', name);
+    assert.equal(envelope.result.ok, true, `${name}: ${response.body.slice(0, 300)}`);
+  }
+  results.push({ check: name, status: response.status, result: 'PASS' });
+}
+
+try {
+  await mkdir(profile, { recursive: true });
+  const packages = {
+    '@deepseek-ai/dsh-base': resolve(harnessRoot, 'packages/bundle/base'),
+    '@deepseek-ai/dsh-web-app': resolve(harnessRoot, 'packages/bundle/web-app'),
+    '@xmanrui/dsh-im': pluginRoot,
+  };
+  for (const [name, path] of Object.entries(packages)) {
+    const target = join(profile, 'node_modules', name);
+    await mkdir(dirname(target), { recursive: true });
+    await symlink(path, target, 'dir');
+  }
+  await writeFile(join(profile, 'cordis.yml'), '[]\n');
+  await writeFile(join(profile, 'package.json'), JSON.stringify({
+    name: 'dsh-im-lan-test', private: true,
+    dependencies: Object.fromEntries(Object.entries(packages).map(([name, path]) => [name, `link:${path}`])),
+    dsh: { profile: { bundles: Object.keys(packages) } },
+  }));
+
+  const launchUrl = await start();
+  const lanUrl = new URL(launchUrl);
+  lanUrl.hostname = lanIp;
+  const anonymous = { origin: lanUrl.origin };
+  expectStatus('LAN without login', await rpc(anonymous), 401);
+  const lan = await login(launchUrl, lanIp);
+  expectStatus('LAN authenticated web page', await request(new URL('/', lan.origin), {
+    headers: { cookie: lan.cookie },
+  }), 200);
+  for (const channel of ['feishu', 'weixin', 'dingtalk', 'wecom', 'wecom-app', 'qq',
+    'slack', 'telegram', 'discord', 'whatsapp', 'imessage', 'office']) {
+    expectStatus(`LAN default: ${channel}`, await rpc(lan, channel), 200, true);
+  }
+  const delivery = await rpc(lan, 'dsh-im-delivery', 'target.list', {}, { botId: 'bot_missing' });
+  expectStatus('LAN delivery reaches business handler', delivery, 200);
+  assert.equal(JSON.parse(delivery.body).result.error.code, 'unknown-bot');
+  expectStatus('LAN forged cookie', await rpc({ ...lan, cookie: 'invalid=invalid' }), 401);
+  expectStatus('Untrusted Host', await rpc(lan, 'feishu', 'connection.status', { host: 'untrusted.invalid' }), 403);
+  expectStatus('Cross-origin request', await rpc(lan, 'feishu', 'connection.status', { origin: 'https://untrusted.invalid' }), 403);
+  expectStatus('LAN update remains local-only', await rpc(lan, 'dsh-im', 'update.status'), 403);
+  expectStatus('LAN TTL remains local-only', await rpc(lan, 'dsh-im-settings', 'settings.inbound-ttl.get'), 403);
+  const local = await login(launchUrl, '127.0.0.1');
+  expectStatus('Loopback default: feishu', await rpc(local), 200, true);
+
+  await stop();
+  await writeFile(join(profile, 'cordis.patch.yml'), '- id: xmanrui-dsh-im\n  config:\n    rpcAuthority: loopback\n');
+  const restrictedUrl = await start();
+  expectStatus('Explicit loopback rejects LAN', await rpc(await login(restrictedUrl, lanIp)), 403);
+  expectStatus('Explicit loopback accepts localhost', await rpc(await login(restrictedUrl, '127.0.0.1')), 200, true);
+  console.table(results);
+  console.log(`Passed ${results.length} real HTTP checks using LAN Host/Origin ${lanIp}.`);
+  console.log('TCP connections stayed on loopback. This checks the original CLI, authentication and built plugin, not a second-device browser.');
+  console.log('The temporary profile contains no bot credentials and is removed after the server stops.');
+} finally {
+  await stop();
+  await rm(directory, { recursive: true, force: true });
+}