@zhin.js/adapter-dingtalk 5.0.0 → 5.0.2

package/CHANGELOG.md

@@ -1,5 +1,58 @@
 # @zhin.js/adapter-dingtalk
 
+## 5.0.2
+
+### Patch Changes
+
+- d5cd4aa: Publish Plugin Runtime entry points and convention modules as JavaScript so
+  installed npm plugins load on Node without TypeScript stripping. Workspace
+  development continues to prefer TypeScript sources for local HMR.
+
+  Remove the unconsumed legacy game hub APIs from game-kit; game navigation and
+  records now use ordinary convention commands owned by the game hub plugin.
+
+- Updated dependencies [d5cd4aa]
+  - @zhin.js/command@1.0.4
+  - zhin.js@5.0.2
+  - @zhin.js/adapter@1.1.2
+  - @zhin.js/core@1.4.2
+  - @zhin.js/agent@1.0.7
+
+## 5.0.1
+
+### Patch Changes
+
+- cdf64e7: 多方向审计修复批（8 面 30+ bug）：
+
+  - **安全**：钉钉 webhook 验签绕过修复（缺 timestamp/sign 一律 403 + ±1h 防重放）；exec-policy fail-closed（换行/`$(`/反引号拒绝、管道逐段过白名单、env dump 复合拆段）；wecom 验签改 timingSafeEqual；config:set 拒绝 `__proto__` 等魔术键、host 键优先防覆写。
+  - **P0 功能**：`zhin packages` scoped 包名解析为空导致 rm -rf 风险；命令数字参数解析失败炸断消息链路（dispatch 捕获 continue）；TaskQueue 监听器首个事件自摘除导致 assistant 队列挂死（+超时后完成不覆盖终态）；DatabaseHost 跨世代共享崩溃（define 幂等 + stop 改进程级）；rss 按不存在 id 列删除改业务键。
+  - **Runtime/HMR**：native watcher 过滤忽略目录（lib/.zhin 不再触发重载风暴）；host 段配置 patch（http.port 等）存在 installResources 时全量重建；capability 目录非 entry 支持文件升级进程重启；documentTransaction 失败回滚。
+  - **CLI 写侧**：config/setup 对 toml 静默假成功改统一 config-file（不支持格式报错）；doctor/onboard 默认配置改新形态 plugins 映射；schedule add 改 --prompt；migrate engines/中文模板误伤/覆盖前备份。
+  - **适配器生命周期**：napcat/milky start 失败竞态与僵尸连接、心跳 close 清理、stop-during-connect settle；slack webhook 二次 writeHead + messageChannelMap LRU。
+  - **Host/向导**：logs/stats 与 inbox 查询改 DB 侧 count/orderBy/limit 下推；save-yaml 写入前校验；zhipu/moonshot baseUrl 必填预填；.env 写入转义 + 幂等合并；setup 数据库密码不再明文落 config；60s fetch 超时与 JSON 守卫。
+
+- 74b035c: endpoint 管理命令扩展至 18/20 适配器：kook / discord / github（private_key 支持内联文件路径）/ icqq（bindFlow 登记式 add + `icqq login` 引导）/ dingtalk / lark / line / satori / wechat-mp / wecom / weixin-ilink 接入 `endpoint list/add/remove`（字段对齐各自 schema，凭据写 `.env`）。email（smtp/imap 嵌套对象）与 sandbox（无凭据）暂不接。
+- Updated dependencies [cdf64e7]
+- Updated dependencies [2d0a159]
+- Updated dependencies [5691aba]
+- Updated dependencies [078e3f7]
+- Updated dependencies [50497a5]
+- Updated dependencies [9c997b2]
+- Updated dependencies [09d4f25]
+- Updated dependencies [43485a9]
+- Updated dependencies [f0ec5ab]
+- Updated dependencies [3e925d0]
+- Updated dependencies [fa66c4c]
+- Updated dependencies [fa66c4c]
+- Updated dependencies [6cb6152]
+  - @zhin.js/command@1.0.3
+  - @zhin.js/agent@1.0.6
+  - @zhin.js/plugin-runtime@1.1.1
+  - @zhin.js/host-http@1.0.3
+  - zhin.js@5.0.1
+  - @zhin.js/adapter@1.1.1
+  - @zhin.js/core@1.4.1
+
 ## 5.0.0
 
 ### Patch Changes

package/adapters/dingtalk.js

@@ -0,0 +1,33 @@
+// Generated by build-plugin-runtime-entries.mjs. Do not edit.
+/**
+ * Convention entry: discover `adapters/dingtalk.ts` → defineAdapter.
+ */
+import { defineAdapter } from '@zhin.js/adapter';
+import { messageGatewayToken } from '@zhin.js/core/runtime';
+import { httpHostToken } from '@zhin.js/host-http';
+import { DingTalkEndpoint } from "../lib/endpoint.js";
+import { resolveDingTalkConfig, } from "../lib/protocol.js";
+import { dingtalkRuntimeStateToken } from "../lib/dingtalk-runtime-state.js";
+export { DingTalkEndpoint } from "../lib/endpoint.js";
+export default defineAdapter({
+    capabilities: ['inbound', 'outbound'],
+    // 钉钉机器人媒体消息仅消费远程 URL；无按钮交互面，交互段降级纯文本。
+    segments: {
+        outboundMedia: ['url'],
+        interactive: 'text',
+    },
+    create(context) {
+        const config = resolveDingTalkConfig(context.config);
+        // 注册到插件运行时状态（dingtalk endpoint list 的"运行中"数据源）
+        context.use(dingtalkRuntimeStateToken).endpoints.set(config.name, {
+            name: config.name,
+            mode: 'webhook',
+        });
+        return new DingTalkEndpoint({
+            id: context.id,
+            gateway: context.use(messageGatewayToken),
+            http: context.use(httpHostToken),
+            config,
+        });
+    },
+});

package/adapters/dingtalk.ts

@@ -9,18 +9,30 @@ import {
   resolveDingTalkConfig,
   type DingTalkAdapterConfig,
 } from '../src/protocol.js';
+import { dingtalkRuntimeStateToken } from '../src/dingtalk-runtime-state.js';
 
 export { DingTalkEndpoint } from '../src/endpoint.js';
 export type { DingTalkEndpointOptions, DingTalkFetch } from '../src/endpoint.js';
 
 export default defineAdapter<DingTalkAdapterConfig>({
   capabilities: ['inbound', 'outbound'],
+  // 钉钉机器人媒体消息仅消费远程 URL；无按钮交互面，交互段降级纯文本。
+  segments: {
+    outboundMedia: ['url'],
+    interactive: 'text',
+  },
   create(context) {
+    const config = resolveDingTalkConfig(context.config);
+    // 注册到插件运行时状态（dingtalk endpoint list 的"运行中"数据源）
+    context.use(dingtalkRuntimeStateToken).endpoints.set(config.name, {
+      name: config.name,
+      mode: 'webhook',
+    });
     return new DingTalkEndpoint({
       id: context.id,
       gateway: context.use(messageGatewayToken),
       http: context.use(httpHostToken),
-      config: resolveDingTalkConfig(context.config),
+      config,
     });
   },
 });

package/commands/endpoint/add/[name:string].js

@@ -0,0 +1,3 @@
+// Generated by build-plugin-runtime-entries.mjs. Do not edit.
+import { dingtalkEndpointCommands } from "../../../lib/dingtalk-endpoint-commands.js";
+export default dingtalkEndpointCommands.add;

package/commands/endpoint/add/[name:string].ts

@@ -0,0 +1,3 @@
+import { dingtalkEndpointCommands } from '../../../src/dingtalk-endpoint-commands.js';
+
+export default dingtalkEndpointCommands.add;

package/commands/endpoint/list.js

@@ -0,0 +1,3 @@
+// Generated by build-plugin-runtime-entries.mjs. Do not edit.
+import { dingtalkEndpointCommands } from "../../lib/dingtalk-endpoint-commands.js";
+export default dingtalkEndpointCommands.list;

package/commands/endpoint/list.ts

@@ -0,0 +1,3 @@
+import { dingtalkEndpointCommands } from '../../src/dingtalk-endpoint-commands.js';
+
+export default dingtalkEndpointCommands.list;

package/commands/endpoint/remove/[name:string].js

@@ -0,0 +1,3 @@
+// Generated by build-plugin-runtime-entries.mjs. Do not edit.
+import { dingtalkEndpointCommands } from "../../../lib/dingtalk-endpoint-commands.js";
+export default dingtalkEndpointCommands.remove;

package/commands/endpoint/remove/[name:string].ts

@@ -0,0 +1,3 @@
+import { dingtalkEndpointCommands } from '../../../src/dingtalk-endpoint-commands.js';
+
+export default dingtalkEndpointCommands.remove;

package/lib/dingtalk-endpoint-commands.d.ts

@@ -0,0 +1 @@
+export declare const dingtalkEndpointCommands: import("@zhin.js/adapter").EndpointCommands<Readonly<import("@zhin.js/command").CommandDefinition<unknown, unknown, import("@zhin.js/command").CommandMessage>>>;

package/lib/dingtalk-endpoint-commands.js

@@ -0,0 +1,18 @@
+/**
+ * `dingtalk endpoint` 命令族：由 @zhin.js/adapter 的 createEndpointCommands 套件生成。
+ * commands/endpoint/ 下的 list / add / remove 直接默认导出这三项。
+ */
+import { createEndpointCommands } from '@zhin.js/adapter';
+import { defineCommand } from '@zhin.js/command';
+import { dingtalkRuntimeStateToken } from './dingtalk-runtime-state.js';
+export const dingtalkEndpointCommands = createEndpointCommands({
+    adapterKey: 'dingtalk',
+    adapterDisplayName: 'DingTalk',
+    fields: [
+        { key: 'appKey', required: true, env: true, description: '钉钉 AppKey' },
+        { key: 'appSecret', required: true, env: true, description: '钉钉 AppSecret' },
+        { key: 'robotCode', required: true, env: true, description: '机器人 Code（出站 senderStaffId）' },
+    ],
+    running: (use) => use(dingtalkRuntimeStateToken).endpoints.values(),
+    describeEntry: (entry) => `appKey: ${String(entry.appKey)}`,
+}, defineCommand);

package/lib/dingtalk-runtime-state.d.ts

@@ -0,0 +1 @@
+export declare const dingtalkRuntimeStateToken: import("@zhin.js/plugin-runtime").Token<import("@zhin.js/adapter").EndpointRuntimeState>;

package/lib/dingtalk-runtime-state.js

@@ -0,0 +1,6 @@
+/**
+ * DingTalk 插件实例的运行时状态：adapter create() 注册的 endpoint 列表。
+ * 由 plugin.ts setup() provide，adapter create 与 `dingtalk endpoint` 命令共享（同一 owner generation）。
+ */
+import { defineEndpointRuntimeStateToken } from '@zhin.js/adapter';
+export const dingtalkRuntimeStateToken = defineEndpointRuntimeStateToken('dingtalk');

package/lib/endpoint.d.ts

@@ -23,6 +23,11 @@ export interface DingTalkEndpointOptions {
     readonly config: ResolvedDingTalkConfig;
     readonly fetch?: DingTalkFetch;
 }
+/**
+ * 钉钉机器人（webhook/stream 模式）无常规群列表 API——机器人不持有
+ * 「我所在的群」枚举面，仅能收发消息；
+ * 因此本 endpoint 不暴露 EndpointManagement（Console 社交面 RPC 对该平台保持未接线）。
+ */
 export declare class DingTalkEndpoint implements EndpointInstance {
     #private;
     constructor(options: DingTalkEndpointOptions);

package/lib/endpoint.js

@@ -4,6 +4,11 @@ import { normalizeDingtalkSenderForPermit } from './platform-permit.js';
 import { formatInboundContent, formatOutboundBody, generateMessageId, isDingtalkBotMentioned, resolveChatType, resolveSender, resolveTarget, } from './protocol.js';
 import { registerDingTalkWebhookRoutes } from './webhook.js';
 const logger = getLogger('dingtalk');
+/**
+ * 钉钉机器人（webhook/stream 模式）无常规群列表 API——机器人不持有
+ * 「我所在的群」枚举面，仅能收发消息；
+ * 因此本 endpoint 不暴露 EndpointManagement（Console 社交面 RPC 对该平台保持未接线）。
+ */
 export class DingTalkEndpoint {
     #options;
     #fetch;

package/lib/protocol.d.ts

@@ -109,6 +109,8 @@ export declare function resolveSender(msg: DingTalkMessage): string;
 export declare function generateMessageId(msg: DingTalkMessage): string;
 /** Build inbound text for MessageGateway.receive. */
 export declare function formatInboundContent(msg: DingTalkMessage): string;
+/** DingTalk timestamps are epoch milliseconds; reject replays outside ±1 hour. */
+export declare const MAX_TIMESTAMP_DRIFT_MS: number;
 export declare function verifySignature(appSecret: string, timestamp: string, sign: string): boolean;
 /**
  * Wire-encode an already-rendered outbound payload into DingTalk robot body.

package/lib/protocol.js

@@ -93,8 +93,14 @@ export function formatInboundContent(msg) {
             return `[${msg.msgtype}]`;
     }
 }
+/** DingTalk timestamps are epoch milliseconds; reject replays outside ±1 hour. */
+export const MAX_TIMESTAMP_DRIFT_MS = 60 * 60 * 1000;
 export function verifySignature(appSecret, timestamp, sign) {
     try {
+        const ts = Number(timestamp);
+        if (!Number.isFinite(ts) || Math.abs(Date.now() - ts) > MAX_TIMESTAMP_DRIFT_MS) {
+            return false;
+        }
         const stringToSign = `${timestamp}\n${appSecret}`;
         const hmac = createHmac('sha256', appSecret);
         hmac.update(stringToSign);

package/lib/webhook.js

@@ -16,13 +16,12 @@ export async function handleDingTalkWebhookRequest(request, response, handler) {
         const query = new URL(request.url ?? '/', 'http://localhost').searchParams;
         const timestamp = query.get('timestamp') || headerValue(request.headers, 'timestamp');
         const sign = query.get('sign') || headerValue(request.headers, 'sign');
-        if (timestamp && sign) {
-            if (!verifySignature(handler.config.appSecret, timestamp, sign)) {
-                logger.warn(formatCompact({ op: 'webhook', ok: false, error: 'invalid signature' }));
-                response.writeHead(403, { 'Content-Type': 'application/json' });
-                response.end(JSON.stringify({ code: -1, msg: 'Forbidden' }));
-                return;
-            }
+        // Missing credentials must never be admitted: verify unconditionally.
+        if (!timestamp || !sign || !verifySignature(handler.config.appSecret, timestamp, sign)) {
+            logger.warn(formatCompact({ op: 'webhook', ok: false, error: 'invalid signature' }));
+            response.writeHead(403, { 'Content-Type': 'application/json' });
+            response.end(JSON.stringify({ code: -1, msg: 'Forbidden' }));
+            return;
         }
         const rawBody = await readTextBody(request);
         let event;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhin.js/adapter-dingtalk",
-  "version": "5.0.0",
+  "version": "5.0.2",
   "description": "Zhin.js DingTalk (钉钉) adapter for Plugin Runtime (HTTP webhook)",
   "type": "module",
   "main": "./lib/index.js",
@@ -33,20 +33,21 @@
     "directory": "plugins/adapters/dingtalk"
   },
   "dependencies": {
-    "@zhin.js/adapter": "1.1.0",
-    "@zhin.js/core": "1.4.0",
-    "@zhin.js/host-http": "1.0.2",
+    "@zhin.js/adapter": "1.1.2",
+    "@zhin.js/command": "1.0.4",
+    "@zhin.js/core": "1.4.2",
+    "@zhin.js/host-http": "1.0.3",
     "@zhin.js/logger": "1.0.75",
-    "@zhin.js/plugin-runtime": "1.1.0"
+    "@zhin.js/plugin-runtime": "1.1.1"
   },
   "peerDependencies": {
     "zod": "^4.0.0",
-    "@zhin.js/adapter": "1.1.0",
-    "@zhin.js/agent": "1.0.5",
-    "@zhin.js/core": "1.4.0",
-    "@zhin.js/host-http": "1.0.2",
-    "@zhin.js/plugin-runtime": "1.1.0",
-    "zhin.js": "5.0.0"
+    "@zhin.js/adapter": "1.1.2",
+    "@zhin.js/agent": "1.0.7",
+    "@zhin.js/core": "1.4.2",
+    "@zhin.js/host-http": "1.0.3",
+    "@zhin.js/plugin-runtime": "1.1.1",
+    "zhin.js": "5.0.2"
   },
   "peerDependenciesMeta": {
     "zhin.js": {
@@ -64,12 +65,13 @@
     "typescript": "^6.0.3",
     "vitest": "^4.1.10",
     "zod": "^4.4.3",
-    "@zhin.js/agent": "1.0.5",
-    "zhin.js": "5.0.0"
+    "@zhin.js/agent": "1.0.7",
+    "zhin.js": "5.0.2"
   },
   "files": [
     "adapters",
-    "plugin.ts",
+    "commands",
+    "plugin.js",
     "schema.json",
     "src",
     "lib",
@@ -87,13 +89,17 @@
   "zhin": {
     "protocol": 1,
     "type": "plugin",
-    "entry": "./plugin.ts",
+    "entry": "./plugin.js",
     "engine": "^1.0.0",
     "runtime": "trusted",
     "features": [
       {
         "package": "@zhin.js/adapter",
         "api": "^1.0.0"
+      },
+      {
+        "package": "@zhin.js/command",
+        "api": "^1.0.0"
       }
     ],
     "plugins": []

package/plugin.js

@@ -0,0 +1,16 @@
+// Generated by build-plugin-runtime-entries.mjs. Do not edit.
+import { createEndpointRuntimeState } from '@zhin.js/adapter';
+import { definePlugin } from '@zhin.js/plugin-runtime';
+import { registerDingtalkPlatformPermitChecker } from "./lib/platform-permit.js";
+import { dingtalkRuntimeStateToken } from "./lib/dingtalk-runtime-state.js";
+export default definePlugin({
+    name: 'dingtalk',
+    metadata: {
+        displayName: 'DingTalk (钉钉) Adapter',
+    },
+    setup(context) {
+        // 运行中 endpoint 注册表（dingtalk endpoint list 的"运行中"数据源）
+        context.resources.provide(dingtalkRuntimeStateToken, createEndpointRuntimeState());
+        return registerDingtalkPlatformPermitChecker();
+    },
+});

package/src/dingtalk-endpoint-commands.ts

@@ -0,0 +1,19 @@
+/**
+ * `dingtalk endpoint` 命令族：由 @zhin.js/adapter 的 createEndpointCommands 套件生成。
+ * commands/endpoint/ 下的 list / add / remove 直接默认导出这三项。
+ */
+import { createEndpointCommands } from '@zhin.js/adapter';
+import { defineCommand } from '@zhin.js/command';
+import { dingtalkRuntimeStateToken } from './dingtalk-runtime-state.js';
+
+export const dingtalkEndpointCommands = createEndpointCommands({
+  adapterKey: 'dingtalk',
+  adapterDisplayName: 'DingTalk',
+  fields: [
+    { key: 'appKey', required: true, env: true, description: '钉钉 AppKey' },
+    { key: 'appSecret', required: true, env: true, description: '钉钉 AppSecret' },
+    { key: 'robotCode', required: true, env: true, description: '机器人 Code（出站 senderStaffId）' },
+  ],
+  running: (use) => use(dingtalkRuntimeStateToken).endpoints.values(),
+  describeEntry: (entry) => `appKey: ${String(entry.appKey)}`,
+}, defineCommand);

package/src/dingtalk-runtime-state.ts

@@ -0,0 +1,7 @@
+/**
+ * DingTalk 插件实例的运行时状态：adapter create() 注册的 endpoint 列表。
+ * 由 plugin.ts setup() provide，adapter create 与 `dingtalk endpoint` 命令共享（同一 owner generation）。
+ */
+import { defineEndpointRuntimeStateToken } from '@zhin.js/adapter';
+
+export const dingtalkRuntimeStateToken = defineEndpointRuntimeStateToken('dingtalk');

package/src/endpoint.ts

@@ -49,6 +49,11 @@ export interface DingTalkEndpointOptions {
   readonly fetch?: DingTalkFetch;
 }
 
+/**
+ * 钉钉机器人（webhook/stream 模式）无常规群列表 API——机器人不持有
+ * 「我所在的群」枚举面，仅能收发消息；
+ * 因此本 endpoint 不暴露 EndpointManagement（Console 社交面 RPC 对该平台保持未接线）。
+ */
 export class DingTalkEndpoint implements EndpointInstance {
   readonly #options: DingTalkEndpointOptions;
   readonly #fetch: DingTalkFetch;

package/src/protocol.ts

@@ -195,12 +195,19 @@ export function formatInboundContent(msg: DingTalkMessage): string {
   }
 }
 
+/** DingTalk timestamps are epoch milliseconds; reject replays outside ±1 hour. */
+export const MAX_TIMESTAMP_DRIFT_MS = 60 * 60 * 1000;
+
 export function verifySignature(
   appSecret: string,
   timestamp: string,
   sign: string,
 ): boolean {
   try {
+    const ts = Number(timestamp);
+    if (!Number.isFinite(ts) || Math.abs(Date.now() - ts) > MAX_TIMESTAMP_DRIFT_MS) {
+      return false;
+    }
     const stringToSign = `${timestamp}\n${appSecret}`;
     const hmac = createHmac('sha256', appSecret);
     hmac.update(stringToSign);

package/src/webhook.ts

@@ -43,13 +43,12 @@ export async function handleDingTalkWebhookRequest(
     const query = new URL(request.url ?? '/', 'http://localhost').searchParams;
     const timestamp = query.get('timestamp') || headerValue(request.headers, 'timestamp');
     const sign = query.get('sign') || headerValue(request.headers, 'sign');
-    if (timestamp && sign) {
-      if (!verifySignature(handler.config.appSecret, timestamp, sign)) {
-        logger.warn(formatCompact({ op: 'webhook', ok: false, error: 'invalid signature' }));
-        response.writeHead(403, { 'Content-Type': 'application/json' });
-        response.end(JSON.stringify({ code: -1, msg: 'Forbidden' }));
-        return;
-      }
+    // Missing credentials must never be admitted: verify unconditionally.
+    if (!timestamp || !sign || !verifySignature(handler.config.appSecret, timestamp, sign)) {
+      logger.warn(formatCompact({ op: 'webhook', ok: false, error: 'invalid signature' }));
+      response.writeHead(403, { 'Content-Type': 'application/json' });
+      response.end(JSON.stringify({ code: -1, msg: 'Forbidden' }));
+      return;
     }
 
     const rawBody = await readTextBody(request);

package/plugin.ts

@@ -1,12 +0,0 @@
-import { definePlugin } from '@zhin.js/plugin-runtime';
-import { registerDingtalkPlatformPermitChecker } from './src/platform-permit.js';
-
-export default definePlugin({
-  name: 'dingtalk',
-  metadata: {
-    displayName: 'DingTalk (钉钉) Adapter',
-  },
-  setup() {
-    return registerDingtalkPlatformPermitChecker();
-  },
-});