@xmanrui/dsh-im 4.3.0 → 4.4.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xmanrui/dsh-im",
-  "version": "4.3.0",
+  "version": "4.4.0",
   "description": "把九种 IM 机器人和公网 AI Office 接入本机 DeepSeek Harness。 Connect nine IM channels and a public AI Office to a local DeepSeek Harness.",
   "keywords": [
     "deepseek-harness",

package/plugin-src/client/access-policy-settings.js

@@ -0,0 +1,351 @@
+import * as React from 'react';
+
+import {
+  DEFAULT_ACCESS_POLICY,
+  normalizeAccessPolicy,
+  validateAccessPolicy,
+} from '../../src/channels/shared/access-policy.mjs';
+import { h, localizeText } from './i18n.js';
+
+export const ACCESS_POLICY_ENDPOINT = 'bot.access-policy.set';
+
+export const ACCESS_CHANNEL_DEFINITIONS = Object.freeze({
+  weixin: Object.freeze({
+    directUserLabel: '微信用户 ID',
+    directPlaceholder: '填写微信用户 ID',
+    groupSupported: false,
+  }),
+  feishu: Object.freeze({
+    directUserLabel: '飞书 Open ID',
+    directPlaceholder: 'ou_xxx',
+    groupUserLabel: '群成员 Open ID',
+    groupPlaceholder: 'ou_xxx',
+  }),
+  dingtalk: Object.freeze({
+    directUserLabel: '钉钉用户 ID',
+    directPlaceholder: '填写 senderStaffId 或 senderId',
+    groupUserLabel: '群成员用户 ID',
+    groupPlaceholder: '填写 senderStaffId 或 senderId',
+  }),
+  wecom: Object.freeze({
+    directUserLabel: '企业微信用户 ID',
+    directPlaceholder: '填写 userid',
+    groupUserLabel: '群成员用户 ID',
+    groupPlaceholder: '填写 userid',
+  }),
+  qq: Object.freeze({
+    directUserLabel: 'QQ User Open ID',
+    directPlaceholder: '填写 user_openid',
+    groupUserLabel: '群成员 Open ID',
+    groupPlaceholder: '填写 member_openid',
+  }),
+  slack: Object.freeze({
+    directUserLabel: 'Slack User ID',
+    directPlaceholder: 'U0123456789',
+    groupUserLabel: '群成员 User ID',
+    groupPlaceholder: 'U0123456789',
+  }),
+  telegram: Object.freeze({
+    directUserLabel: 'Telegram User ID',
+    directPlaceholder: '填写数字 User ID',
+    groupUserLabel: '群成员 User ID',
+    groupPlaceholder: '填写数字 User ID',
+  }),
+  discord: Object.freeze({
+    directUserLabel: 'Discord User ID',
+    directPlaceholder: '填写数字 User ID',
+    groupUserLabel: '群成员 User ID',
+    groupPlaceholder: '填写数字 User ID',
+  }),
+  whatsapp: Object.freeze({
+    directUserLabel: 'WhatsApp 电话号码或 JID',
+    directPlaceholder: '8613800000000 或完整 JID',
+    groupUserLabel: '群成员电话号码或 JID',
+    groupPlaceholder: '8613800000000 或完整 JID',
+  }),
+});
+
+function clonePolicy(policy) {
+  const cloneScope = (scope) => ({
+    mode: scope.mode,
+    open: {
+      defaultCanExecuteCommands: scope.open.defaultCanExecuteCommands,
+      commandPermissionOverrides: scope.open.commandPermissionOverrides.map((user) => ({
+        ...user,
+      })),
+    },
+    allowlist: {
+      users: scope.allowlist.users.map((user) => ({ ...user })),
+    },
+  });
+  return {
+    direct: cloneScope(policy.direct),
+    group: cloneScope(policy.group),
+  };
+}
+
+function unwrapRpcResult(result) {
+  if (result?.ok === true) return result.value;
+  if (result?.ok === false) {
+    const error = new Error(result.error?.message || '访问设置保存失败，请稍后重试。');
+    error.code = result.error?.code;
+    throw error;
+  }
+  return result;
+}
+
+function policyFromSnapshot(value, botId) {
+  const source = value?.snapshot ?? value;
+  const bot = Array.isArray(source?.bots)
+    ? source.bots.find((entry) => entry?.botId === botId)
+    : null;
+  return normalizeAccessPolicy(bot?.accessPolicy ?? source?.accessPolicy ?? source?.policy);
+}
+
+function commandValue(value) {
+  return value === 'allow';
+}
+
+function ScenePolicyEditor({
+  scene,
+  title,
+  policy,
+  userLabel,
+  placeholder,
+  disabled = false,
+  unsupported = false,
+  onChange,
+}) {
+  const ownerHelpId = React.useId();
+  const emptyAllowlistHelpId = React.useId();
+  const allowlist = policy.mode === 'allowlist';
+  const collectionKey = allowlist ? 'users' : 'commandPermissionOverrides';
+  const branchKey = allowlist ? 'allowlist' : 'open';
+  const users = policy[branchKey][collectionKey];
+  const emptyAllowlist = allowlist && users.length === 0;
+  const updateUsers = (nextUsers) => onChange({
+    ...policy,
+    [branchKey]: {
+      ...policy[branchKey],
+      [collectionKey]: nextUsers,
+    },
+  });
+  const updateUser = (index, patch) => updateUsers(users.map((user, userIndex) => (
+      userIndex === index ? { ...user, ...patch } : user
+    )));
+
+  return h('fieldset', {
+    className: 'dim-accessScene',
+    disabled,
+    'data-scene': scene,
+    'aria-label': localizeText(title),
+  },
+  h('legend', null,
+    h('span', { className: 'dim-accessLegendContent' },
+      h('span', null, title),
+      h('span', { className: 'dim-channelHelp dim-accessLegendHelp' },
+        h('button', {
+          type: 'button',
+          className: 'dim-channelHelpButton',
+          'aria-label': [localizeText(title), localizeText('查看访问权限说明')].join(' '),
+          'aria-describedby': ownerHelpId,
+        }, h('span', { 'aria-hidden': true }, '?')),
+        h('span', {
+          id: ownerHelpId,
+          className: 'dim-channelTooltip dim-accessHelpTooltip',
+          role: 'tooltip',
+        }, '原所有者或扫码接入者始终可以访问并执行命令；以下设置仅约束其他用户。')))),
+  unsupported
+    ? h('div', { className: 'dim-accessUnsupported', role: 'note' },
+        h('strong', null, '当前渠道不支持群聊'),
+        h('p', null, '此区域无需配置，保存私聊设置时会保留现有群聊策略。'))
+    : h(React.Fragment, null,
+        h('div', { className: 'dim-accessControls', 'data-mode': policy.mode },
+          h('label', { className: 'dim-accessField' },
+            h('span', null, '访问模式'),
+            h('select', {
+              value: policy.mode,
+              'aria-label': [localizeText(title), localizeText('访问模式')].join(' '),
+              onChange: (event) => onChange({ ...policy, mode: event.target.value }),
+            },
+            h('option', { value: 'open' }, '允许所有用户'),
+            h('option', { value: 'allowlist' }, '仅白名单用户'))),
+          allowlist ? null : h('label', { className: 'dim-accessField' },
+              h('span', null, '默认命令权限'),
+              h('select', {
+                value: policy.open.defaultCanExecuteCommands ? 'allow' : 'deny',
+                'aria-label': [localizeText(title), localizeText('默认命令权限')].join(' '),
+                onChange: (event) => onChange({
+                  ...policy,
+                  open: {
+                    ...policy.open,
+                    defaultCanExecuteCommands: commandValue(event.target.value),
+                  },
+                }),
+              },
+              h('option', { value: 'allow' }, '可以执行命令'),
+              h('option', { value: 'deny' }, '不可以执行命令')))),
+        h('div', { className: 'dim-accessUsers' },
+          h('div', { className: 'dim-accessUsersHeading' },
+            h('div', { className: 'dim-accessUsersTitle' },
+              h('strong', null, allowlist ? '白名单用户' : '命令权限例外'),
+              emptyAllowlist
+                ? h('span', { className: 'dim-channelHelp dim-accessUsersHelp' },
+                    h('button', {
+                      type: 'button',
+                      className: 'dim-channelHelpButton',
+                      'aria-label': [localizeText(title), localizeText('查看白名单说明')].join(' '),
+                      'aria-describedby': emptyAllowlistHelpId,
+                    }, h('span', { 'aria-hidden': true }, '?')),
+                    h('span', {
+                      id: emptyAllowlistHelpId,
+                      className: 'dim-channelTooltip dim-accessEmptyAllowlistTooltip',
+                      role: 'tooltip',
+                    }, '当前没有白名单用户，保存后普通用户将无法使用机器人。'))
+                : null),
+            h('button', {
+              type: 'button',
+              className: 'dim-deliveryButton dim-accessAddUser',
+              'aria-label': [localizeText(title), localizeText('新增用户')].join(' '),
+              title: localizeText('新增用户'),
+              onClick: () => updateUsers([...users, {
+                id: '',
+                canExecuteCommands: allowlist
+                  ? false
+                  : !policy.open.defaultCanExecuteCommands,
+              }]),
+            }, h('span', { 'aria-hidden': true }, '+'))),
+          users.length === 0
+            ? h('div', { className: 'dim-accessUsersEmpty' }, '尚未添加用户')
+            : h('ul', { className: 'dim-accessUserList' }, users.map((user, index) =>
+                h('li', { key: `${scene}-${policy.mode}-${index}`, className: 'dim-accessUserRow' },
+                  h('label', { className: 'dim-accessField dim-accessUserId' },
+                    h('span', null, userLabel),
+                    h('input', {
+                      value: user.id,
+                      maxLength: 256,
+                      required: true,
+                      autoCapitalize: 'none',
+                      autoCorrect: 'off',
+                      spellCheck: false,
+                      placeholder,
+                      'aria-label': [localizeText(title), localizeText(userLabel), index + 1].join(' '),
+                      onChange: (event) => updateUser(index, { id: event.target.value }),
+                    })),
+                  h('label', { className: 'dim-accessField dim-accessUserCommand' },
+                    h('span', null, '命令权限'),
+                    h('select', {
+                      value: user.canExecuteCommands ? 'allow' : 'deny',
+                      'aria-label': [
+                        localizeText(title), localizeText('用户'), index + 1,
+                        localizeText('命令权限'),
+                      ].join(' '),
+                      onChange: (event) => updateUser(index, {
+                        canExecuteCommands: commandValue(event.target.value),
+                      }),
+                    },
+                    h('option', { value: 'allow' }, '可以执行命令'),
+                    h('option', { value: 'deny' }, '不可以执行命令'))),
+                  h('button', {
+                    type: 'button',
+                    className: 'dim-deliveryButton dim-accessDeleteUser',
+                    'data-kind': 'danger',
+                    'aria-label': [
+                      localizeText(title), localizeText('删除'),
+                      localizeText('用户'), index + 1,
+                    ].join(' '),
+                    onClick: () => updateUsers(users.filter((_, userIndex) => userIndex !== index)),
+                  }, '删除')))))));
+}
+
+export function AccessPolicySettingsPage({ channel, account, rpcCall, onSaved }) {
+  const definition = ACCESS_CHANNEL_DEFINITIONS[channel];
+  const initialPolicy = normalizeAccessPolicy(account?.accessPolicy);
+  const initialKey = JSON.stringify(initialPolicy);
+  const [draft, setDraft] = React.useState(() => clonePolicy(
+    initialPolicy ?? DEFAULT_ACCESS_POLICY,
+  ));
+  const [saving, setSaving] = React.useState(false);
+  const [feedback, setFeedback] = React.useState(null);
+
+  React.useEffect(() => {
+    const next = normalizeAccessPolicy(account?.accessPolicy);
+    setDraft(clonePolicy(next ?? DEFAULT_ACCESS_POLICY));
+  }, [account?.botId, initialKey]);
+
+  React.useEffect(() => {
+    setFeedback(null);
+  }, [account?.botId]);
+
+  if (!definition) {
+    return h('div', { className: 'dim-accessState', role: 'alert' },
+      '当前渠道暂不支持访问设置。');
+  }
+
+  const save = async (event) => {
+    event.preventDefault();
+    setFeedback(null);
+    setSaving(true);
+    try {
+      const policy = validateAccessPolicy(draft);
+      if (typeof rpcCall !== 'function') throw new Error('访问设置暂不可用。');
+      const value = unwrapRpcResult(await rpcCall(ACCESS_POLICY_ENDPOINT, {
+        botId: account.botId,
+        policy,
+      }));
+      const saved = policyFromSnapshot(value, account.botId);
+      if (!saved) throw new Error('服务没有返回已保存的访问策略，请刷新后重试。');
+      setDraft(clonePolicy(saved));
+      onSaved?.(saved);
+      setFeedback({ tone: 'success', message: '访问设置已保存。' });
+    } catch (error) {
+      setFeedback({
+        tone: 'error',
+        message: error?.message || '访问设置保存失败，请稍后重试。',
+      });
+    } finally {
+      setSaving(false);
+    }
+  };
+
+  return h('form', {
+    className: 'dim-accessPage',
+    onSubmit: (event) => void save(event),
+  },
+  initialPolicy
+    ? null
+    : h('div', { className: 'dim-accessState', role: 'alert' },
+        '访问策略尚未就绪，请返回机器人列表刷新后重试。'),
+  h(ScenePolicyEditor, {
+    scene: 'direct',
+    title: '私聊',
+    policy: draft.direct,
+    userLabel: definition.directUserLabel,
+    placeholder: definition.directPlaceholder,
+    disabled: saving,
+    onChange: (direct) => { setDraft((current) => ({ ...current, direct })); setFeedback(null); },
+  }),
+  h(ScenePolicyEditor, {
+    scene: 'group',
+    title: '群聊',
+    policy: draft.group,
+    userLabel: definition.groupUserLabel ?? definition.directUserLabel,
+    placeholder: definition.groupPlaceholder ?? definition.directPlaceholder,
+    disabled: saving || definition.groupSupported === false,
+    unsupported: definition.groupSupported === false,
+    onChange: (group) => { setDraft((current) => ({ ...current, group })); setFeedback(null); },
+  }),
+  feedback ? h('p', {
+    className: 'dim-accessFeedback',
+    'data-tone': feedback.tone,
+    role: feedback.tone === 'error' ? 'alert' : 'status',
+    'aria-live': 'polite',
+  }, feedback.message) : null,
+  h('div', { className: 'dim-accessActions' },
+    h('button', {
+      type: 'submit',
+      className: 'dim-deliveryButton',
+      'data-kind': 'primary',
+      disabled: saving || !initialPolicy,
+    }, saving ? '正在保存…' : '保存访问设置')));
+}

package/plugin-src/client/channel-card-meta.js

@@ -22,7 +22,7 @@ function SettingsGlyph() {
   h('path', { d: 'M19.4 15a1.7 1.7 0 0 0 .34 1.88l.06.06-2.83 2.83-.06-.06a1.7 1.7 0 0 0-1.88-.34 1.7 1.7 0 0 0-1.03 1.55V21h-4v-.08A1.7 1.7 0 0 0 8.97 19.4a1.7 1.7 0 0 0-1.88.34l-.06.06-2.83-2.83.06-.06A1.7 1.7 0 0 0 4.6 15a1.7 1.7 0 0 0-1.52-1.03H3v-4h.08A1.7 1.7 0 0 0 4.6 8.97a1.7 1.7 0 0 0-.34-1.88l-.06-.06L7.03 4.2l.06.06a1.7 1.7 0 0 0 1.88.34A1.7 1.7 0 0 0 10 3.08V3h4v.08a1.7 1.7 0 0 0 1.03 1.52 1.7 1.7 0 0 0 1.88-.34l.06-.06 2.83 2.83-.06.06a1.7 1.7 0 0 0-.34 1.88A1.7 1.7 0 0 0 20.92 10H21v4h-.08A1.7 1.7 0 0 0 19.4 15Z' }));
 }
 
-export function BotSettingsButton({ channel, botId, botName, connected }) {
+export function BotSettingsButton({ channel, botId, botName, connected, accessPolicy }) {
   const { openBotSettings } = React.useContext(BotSettingsContext);
   const tooltipId = React.useId();
   return h('span', { className: 'dim-botSettingsAction' },
@@ -37,6 +37,7 @@ export function BotSettingsButton({ channel, botId, botName, connected }) {
         botId,
         botName,
         connected: Boolean(connected),
+        accessPolicy,
       }),
     }, h(SettingsGlyph)),
     h('span', {

package/plugin-src/client/channels/dingtalk/api.js

@@ -1,5 +1,6 @@
 import { normalizeAgentPresetCatalog, normalizeAgentPresetId, SET_AGENT_PRESET_ENDPOINT } from '../../agent-preset.js';
 import { normalizeLastMessageError } from '../../last-message-error.js';
+import { normalizeAccessPolicy } from '../../../../src/channels/shared/access-policy.mjs';
 import { normalizeContextEnhancementConfig } from '../../../../src/channels/shared/context-enhancement.mjs';
 
 export const DINGTALK_RPC_CHANNEL = '/dingtalk';
@@ -15,6 +16,7 @@ export const DINGTALK_ENDPOINTS = Object.freeze({
   setWorkspace: 'bot.workspace.set',
   setAgentPreset: SET_AGENT_PRESET_ENDPOINT,
   setContextEnhancement: 'bot.context-enhancement.set',
+  setAccessPolicy: 'bot.access-policy.set',
 });
 
 const ACCOUNT_STATES = new Set(['connected', 'connecting', 'offline', 'error']);
@@ -165,6 +167,9 @@ function normalizeBot(value) {
     workspace: optionalString(value.workspace, 4_096) ?? '',
     agentPreset: normalizeAgentPresetId(value.agentPreset),
     contextEnhancement: normalizeContextEnhancementConfig(value.contextEnhancement),
+    ...(Object.hasOwn(value, 'accessPolicy')
+      ? { accessPolicy: normalizeAccessPolicy(value.accessPolicy) }
+      : {}),
     bot: {
       name: optionalString(bot.name, 100) ?? '钉钉机器人',
       clientIdMasked: optionalString(bot.clientIdMasked, 140) ?? '已安全保存',

package/plugin-src/client/channels/dingtalk/index.js

@@ -253,6 +253,7 @@ export function AccountCard({
             botId: account.botId,
             botName: account.bot.name,
             connected: account.connected,
+            accessPolicy: account.accessPolicy,
           }))),
       h(WorkspaceEditor, {
         workspace: account.workspace,

package/plugin-src/client/channels/feishu/api.js

@@ -8,6 +8,7 @@
 
 import { normalizeAgentPresetCatalog, normalizeAgentPresetId } from "../../agent-preset.js";
 import { normalizeLastMessageError } from "../../last-message-error.js";
+import { normalizeAccessPolicy } from "../../../../src/channels/shared/access-policy.mjs";
 import { normalizeContextEnhancementConfig } from "../../../../src/channels/shared/context-enhancement.mjs";
 
 export const FEISHU_RPC_CHANNEL = "/feishu";
@@ -26,6 +27,7 @@ export const FEISHU_ENDPOINTS = Object.freeze({
   setWorkspace: "bot.workspace.set",
   setAgentPreset: "bot.preset.set",
   setContextEnhancement: "bot.context-enhancement.set",
+  setAccessPolicy: "bot.access-policy.set",
   setGroupResponseMode: "bot.group-response-mode.set",
   // Kept for rolling upgrades. The multi-bot UI never calls these endpoints.
   testConnection: "connection.test",
@@ -206,6 +208,9 @@ export function normalizeBotConnection(value, fallbackBotId) {
     workspace: optionalString(value.workspace)?.slice(0, 4_096) ?? "",
     agentPreset: normalizeAgentPresetId(value.agentPreset),
     contextEnhancement: normalizeContextEnhancementConfig(value.contextEnhancement),
+    ...(Object.hasOwn(value, "accessPolicy")
+      ? { accessPolicy: normalizeAccessPolicy(value.accessPolicy) }
+      : {}),
     groupResponseMode: normalizeGroupResponseMode(value.groupResponseMode),
     groupMessagePermissionGranted: value.groupMessagePermissionGranted === true,
     bot: normalizeBot(value.bot),

package/plugin-src/client/channels/feishu/index.js

@@ -609,6 +609,7 @@ export function BotCard({
             botId: connection.botId,
             botName: bot.name,
             connected,
+            accessPolicy: connection.accessPolicy,
           })),
       ),
       h(WorkspaceEditor, {

package/plugin-src/client/channels/qq/api.js

@@ -1,5 +1,6 @@
 import { normalizeAgentPresetCatalog, normalizeAgentPresetId, SET_AGENT_PRESET_ENDPOINT } from '../../agent-preset.js';
 import { normalizeLastMessageError } from '../../last-message-error.js';
+import { normalizeAccessPolicy } from '../../../../src/channels/shared/access-policy.mjs';
 import { normalizeContextEnhancementConfig } from '../../../../src/channels/shared/context-enhancement.mjs';
 
 export const QQ_RPC_CHANNEL = '/qq';
@@ -15,6 +16,7 @@ export const QQ_ENDPOINTS = Object.freeze({
   setWorkspace: 'bot.workspace.set',
   setAgentPreset: SET_AGENT_PRESET_ENDPOINT,
   setContextEnhancement: 'bot.context-enhancement.set',
+  setAccessPolicy: 'bot.access-policy.set',
 });
 
 const PROVISION_STATES = new Set(['starting', 'pending', 'refreshing', 'connecting', 'connected', 'failed', 'cancelled']);
@@ -90,6 +92,9 @@ function normalizeBot(value) {
     workspace: text(value.workspace, '', 4_096),
     agentPreset: normalizeAgentPresetId(value.agentPreset),
     contextEnhancement: normalizeContextEnhancementConfig(value.contextEnhancement),
+    ...(Object.hasOwn(value, 'accessPolicy')
+      ? { accessPolicy: normalizeAccessPolicy(value.accessPolicy) }
+      : {}),
     bot: {
       name: text(value.bot?.name, 'QQ机器人', 100),
       appIdMasked: text(value.bot?.appIdMasked, '应用标识已安全保存', 140),

package/plugin-src/client/channels/qq/index.js

@@ -197,6 +197,7 @@ export function AccountCard({
             botId: account.botId,
             botName: account.bot.name,
             connected: account.connected,
+            accessPolicy: account.accessPolicy,
           }))),
       h(WorkspaceEditor, {
         workspace: account.workspace,

package/plugin-src/client/channels/shared/token-api.js

@@ -1,5 +1,6 @@
 import { normalizeAgentPresetCatalog, normalizeAgentPresetId, SET_AGENT_PRESET_ENDPOINT } from '../../agent-preset.js';
 import { normalizeLastMessageError } from '../../last-message-error.js';
+import { normalizeAccessPolicy } from '../../../../src/channels/shared/access-policy.mjs';
 import { normalizeContextEnhancementConfig } from '../../../../src/channels/shared/context-enhancement.mjs';
 
 const ACCOUNT_STATES = new Set(['connected', 'connecting', 'offline', 'error']);
@@ -31,6 +32,7 @@ export const TOKEN_BOT_ENDPOINTS = Object.freeze({
   setWorkspace: 'bot.workspace.set',
   setAgentPreset: SET_AGENT_PRESET_ENDPOINT,
   setContextEnhancement: 'bot.context-enhancement.set',
+  setAccessPolicy: 'bot.access-policy.set',
 });
 
 export function createTokenChannelApi(channel, connectionSummary, {
@@ -60,6 +62,9 @@ export function createTokenChannelApi(channel, connectionSummary, {
       workspace: text(value.workspace, '', 4_096),
       agentPreset: normalizeAgentPresetId(value.agentPreset),
       contextEnhancement: normalizeContextEnhancementConfig(value.contextEnhancement),
+      ...(Object.hasOwn(value, 'accessPolicy')
+        ? { accessPolicy: normalizeAccessPolicy(value.accessPolicy) }
+        : {}),
       bot: {
         name: text(value.bot?.name, `${channel}机器人`, 100),
         username: text(value.bot?.username, '', 100),

package/plugin-src/client/channels/shared/token-channel.js

@@ -103,6 +103,7 @@ export function createTokenChannelSettings(definition) {
               botId: account.botId,
               botName: account.bot.name,
               connected: account.connected,
+              accessPolicy: account.accessPolicy,
             }))),
         h(WorkspaceEditor, {
           workspace: account.workspace,

package/plugin-src/client/channels/telegram/api.js

@@ -1,24 +1,9 @@
 import { TOKEN_BOT_ENDPOINTS, createTokenChannelApi } from '../shared/token-api.js';
 
 export const TELEGRAM_RPC_CHANNEL = '/telegram';
-export const TELEGRAM_ENDPOINTS = Object.freeze({
-  ...TOKEN_BOT_ENDPOINTS,
-  setAccessPolicy: 'bot.access-policy.set',
-});
+export const TELEGRAM_ENDPOINTS = TOKEN_BOT_ENDPOINTS;
 
-const api = createTokenChannelApi('Telegram', ' Bot API 长轮询', {
-  normalizeBotExtension: (value) => {
-    const source = value?.accessPolicy;
-    const accessMode = source?.accessMode === 'private-allowlist'
-      ? 'private-allowlist' : 'compatible';
-    const allowedUsers = Array.isArray(source?.allowedUsers)
-      ? [...new Set(source.allowedUsers.filter((entry) => (
-          typeof entry === 'string' && /^[1-9]\d{0,15}$/.test(entry)
-        )))]
-      : [];
-    return { accessPolicy: { accessMode, allowedUsers } };
-  },
-});
+const api = createTokenChannelApi('Telegram', ' Bot API 长轮询');
 
 export const unwrapRpcResult = api.unwrapRpcResult;
 export const normalizeSnapshot = api.normalizeSnapshot;

package/plugin-src/client/channels/telegram/index.js

@@ -1,121 +1,11 @@
-import * as React from 'react';
-
 import { TelegramLogoGlyph } from '../../channel-logos.js';
 import { createTokenChannelSettings } from '../shared/token-channel.js';
-import { h } from '../../i18n.js';
 import {
   TELEGRAM_ENDPOINTS,
   telegramClientApi,
 } from './api.js';
 import { installTelegramStyles } from './styles.js';
 
-function policyFor(account) {
-  return {
-    accessMode: account?.accessPolicy?.accessMode === 'private-allowlist'
-      ? 'private-allowlist' : 'compatible',
-    allowedUsers: Array.isArray(account?.accessPolicy?.allowedUsers)
-      ? account.accessPolicy.allowedUsers : [],
-  };
-}
-
-function allowedUsersFromText(value) {
-  const entries = value.split(/\r?\n/).map((entry) => entry.trim()).filter(Boolean);
-  if (entries.some((entry) => !/^[1-9]\d{0,15}$/.test(entry))) {
-    throw new TypeError('User ID 必须是 1–16 位正整数，每行一个。');
-  }
-  return [...new Set(entries)];
-}
-
-export function TelegramAccessSettings({ account, busy = false, onSave }) {
-  const policy = policyFor(account);
-  const sourceUsers = policy.allowedUsers.join('\n');
-  const accessHelpId = React.useId();
-  const [accessMode, setAccessMode] = React.useState(policy.accessMode);
-  const [allowedUsers, setAllowedUsers] = React.useState(sourceUsers);
-  const [error, setError] = React.useState(null);
-
-  React.useEffect(() => {
-    setAccessMode(policy.accessMode);
-    setAllowedUsers(sourceUsers);
-    setError(null);
-  }, [policy.accessMode, sourceUsers]);
-
-  const save = async (event) => {
-    event.preventDefault();
-    setError(null);
-    try {
-      const normalized = allowedUsersFromText(allowedUsers);
-      if (typeof onSave !== 'function') throw new Error('Telegram 访问设置暂不可用。');
-      await onSave({ accessMode, allowedUsers: normalized });
-    } catch (caught) {
-      setError(caught?.message ?? 'Telegram 访问设置保存失败。');
-    }
-  };
-
-  const privateAllowlist = accessMode === 'private-allowlist';
-  const savedPrivateAllowlist = policy.accessMode === 'private-allowlist';
-  const emptyAllowlist = privateAllowlist && allowedUsers.trim() === '';
-  return h('form', { className: 'dtg-access', onSubmit: save },
-    h('div', { className: 'dtg-accessHeading' },
-      h('strong', null, '访问设置'),
-      h('span', { className: 'dtg-accessStatus' },
-        h('span', { className: 'dtg-accessBadge', 'data-mode': policy.accessMode },
-          savedPrivateAllowlist ? '已生效：安全模式' : '已生效：兼容模式'),
-        h('span', { className: 'dtg-accessHelp' },
-          h('button', {
-            type: 'button',
-            className: 'dtg-accessHelpButton',
-            'aria-label': '查看 Telegram 访问模式说明',
-            'aria-describedby': accessHelpId,
-          }, h('span', { 'aria-hidden': 'true' }, '?')),
-          h('span', {
-            id: accessHelpId,
-            className: 'dtg-accessTooltip',
-            role: 'tooltip',
-          },
-          h('span', { className: 'dtg-accessTooltipItem' },
-            h('strong', null, '兼容模式'),
-            h('span', null, '保持原有行为：私聊直接响应，群聊在被提及或回复时响应。')),
-          h('span', { className: 'dtg-accessTooltipItem' },
-            h('strong', null, '安全模式'),
-            h('span', null, '群聊全部忽略，私聊仅允许白名单用户。')))))),
-    h('label', { className: 'dtg-accessField' },
-      h('span', null, '模式'),
-      h('select', {
-        value: accessMode,
-        disabled: busy,
-        'aria-label': 'Telegram 访问模式',
-        onChange: (event) => { setAccessMode(event.target.value); setError(null); },
-      },
-      h('option', { value: 'compatible' }, '兼容模式（默认）'),
-      h('option', { value: 'private-allowlist' }, '安全模式（私聊白名单）'))),
-    h('label', { className: 'dtg-accessField' },
-      h('span', null, '允许私聊的 Telegram User ID'),
-      h('textarea', {
-        value: allowedUsers,
-        disabled: busy || !privateAllowlist,
-        rows: 3,
-        placeholder: '每行一个数字 User ID',
-        'aria-label': '允许私聊的 Telegram User ID',
-        onChange: (event) => { setAllowedUsers(event.target.value); setError(null); },
-      }),
-      h('small', null, privateAllowlist
-        ? '白名单仅属于当前机器人。'
-        : '兼容模式下暂不使用白名单，切换模式时会保留。')),
-    emptyAllowlist
-      ? h('p', { className: 'dtg-accessWarning', role: 'status' },
-          '白名单为空；保存后该机器人会拒绝所有入站消息。')
-      : null,
-    error ? h('p', { className: 'dtg-accessError', role: 'alert' }, error) : null,
-    h('div', { className: 'dtg-accessActions' },
-      h('button', {
-        type: 'submit',
-        className: 'ddt-button',
-        'data-kind': 'secondary',
-        disabled: busy,
-      }, busy ? '正在保存…' : '保存访问设置')));
-}
-
 const channel = createTokenChannelSettings({
   channel: 'Telegram',
   endpoints: TELEGRAM_ENDPOINTS,
@@ -129,8 +19,6 @@ const channel = createTokenChannelSettings({
   emptyTitle: '接入 Telegram 机器人',
   emptyDescription: '先通过 @BotFather 获取 Bot Token，再在这里完成接入。',
   platformLabel: 'Telegram',
-  AccountSettings: TelegramAccessSettings,
-  accountSettingsEndpoint: TELEGRAM_ENDPOINTS.setAccessPolicy,
 });
 
 export const TelegramSettingsTab = channel.SettingsTab;