@zhin.js/adapter-icqq 1.1.20 → 1.1.22

package/agents/icqq/skills/icqq-group-admin/tools/set_group_admin/index.js

@@ -0,0 +1,43 @@
+// Generated by build-plugin-runtime-entries.mjs. Do not edit.
+import { messages as t } from "../../../../messages.js";
+import { freshMember } from "../../../../members.js";
+import { defineAgentTool } from '@zhin.js/tool';
+import { z } from 'zod';
+export default defineAgentTool({
+    description: '设置或取消 QQ 群管理员（enabled=true 设为管理员，false 取消管理员）；仅你是该群群主时可用，每次人工审批',
+    inputSchema: z.object({
+        group_id: z.number().describe('目标群号'),
+        user_id: z.number().describe('目标成员 QQ号'),
+        enabled: z.boolean().describe('true 设为管理员（目标须为普通成员）；false 取消管理员（目标须为现任管理员）'),
+        reason: z.string().min(1).describe('本次设置或取消管理员的具体原因，随目标群和成员一起供人工确认'),
+    }),
+    adapter: 'icqq',
+    scopes: ['group'],
+    requiresCapabilities: ['actions.setAdmin'],
+    currentConversationBotRoles: ['owner'],
+    permissions: ['role(master,admin,trusted,owner)'],
+    requiresApproval: 'human',
+    async execute({ group_id, user_id, enabled }, context) {
+        const client = context.$client;
+        if (user_id === client.uin)
+            return { success: false, message: t(context.locale, 'adminForbidden') };
+        const [self, member] = await Promise.all([freshMember(client, group_id, client.uin), freshMember(client, group_id, user_id)]);
+        if (self?.role !== 'owner')
+            return { success: false, message: t(context.locale, 'adminForbidden') };
+        if (!member)
+            return { success: false, message: t(context.locale, 'memberMissing') };
+        if (member.role !== (enabled ? 'member' : 'admin'))
+            return { success: false, message: t(context.locale, 'adminTargetInvalid') };
+        context.signal.throwIfAborted();
+        let confirmed = false;
+        try {
+            confirmed = await client.setGroupAdmin(group_id, user_id, enabled);
+        }
+        catch {
+            confirmed = false;
+        }
+        if (!confirmed)
+            return { success: false, message: t(context.locale, 'adminUnconfirmed') };
+        return { success: true, message: t(context.locale, enabled ? 'adminSet' : 'adminUnset', { p0: user_id }) };
+    },
+});

package/agents/icqq/skills/icqq-group-admin/tools/set_group_admin/index.ts

@@ -0,0 +1,36 @@
+import { messages as t } from "../../../../messages.js";
+import { freshMember } from "../../../../members.js";
+import { defineAgentTool } from '@zhin.js/tool';
+import { z } from 'zod';
+export default defineAgentTool<{ group_id: number; user_id: number; enabled: boolean; reason: string }>({
+  description: '设置或取消 QQ 群管理员（enabled=true 设为管理员，false 取消管理员）；仅你是该群群主时可用，每次人工审批',
+  inputSchema: z.object({
+    group_id: z.number().describe('目标群号'),
+    user_id: z.number().describe('目标成员 QQ号'),
+    enabled: z.boolean().describe('true 设为管理员（目标须为普通成员）；false 取消管理员（目标须为现任管理员）'),
+    reason: z.string().min(1).describe('本次设置或取消管理员的具体原因，随目标群和成员一起供人工确认'),
+  }),
+  adapter: 'icqq',
+  scopes: ['group'],
+  requiresCapabilities: ['actions.setAdmin'],
+  currentConversationBotRoles: ['owner'],
+  permissions: ['role(master,admin,trusted,owner)'],
+  requiresApproval: 'human',
+  async execute({ group_id, user_id, enabled }, context) {
+    const client = context.$client;
+    if (user_id === client.uin) return { success: false, message: t(context.locale, 'adminForbidden') };
+    const [self, member] = await Promise.all([freshMember(client, group_id, client.uin), freshMember(client, group_id, user_id)]);
+    if (self?.role !== 'owner') return { success: false, message: t(context.locale, 'adminForbidden') };
+    if (!member) return { success: false, message: t(context.locale, 'memberMissing') };
+    if (member.role !== (enabled ? 'member' : 'admin')) return { success: false, message: t(context.locale, 'adminTargetInvalid') };
+    context.signal.throwIfAborted();
+    let confirmed = false;
+    try {
+      confirmed = await client.setGroupAdmin(group_id, user_id, enabled);
+    } catch {
+      confirmed = false;
+    }
+    if (!confirmed) return { success: false, message: t(context.locale, 'adminUnconfirmed') };
+    return { success: true, message: t(context.locale, enabled ? 'adminSet' : 'adminUnset', { p0: user_id }) };
+  },
+});

package/agents/icqq/skills/icqq-group-admin/tools/set_mute/index.js

@@ -11,6 +11,8 @@ export default defineAgentTool({
         duration: z.number().describe('禁言时间(秒)，0=解除禁言').default(0),
     }),
     adapter: 'icqq',
+    // ADR 0044: offered only while the Bot can actually do this here (e.g. it is a group admin).
+    requiresCapabilities: ['actions.mute'],
     scopes: ['group'],
     requiresApproval: 'always',
     async execute({ group_id, user_id, duration }, context) {

package/agents/icqq/skills/icqq-group-admin/tools/set_mute/index.ts

@@ -10,6 +10,8 @@ export default defineAgentTool<{ group_id: number; user_id: number; duration?: n
     duration: z.number().describe('禁言时间(秒)，0=解除禁言').default(0),
   }),
   adapter: 'icqq',
+  // ADR 0044: offered only while the Bot can actually do this here (e.g. it is a group admin).
+  requiresCapabilities: ['actions.mute'],
   scopes:['group'],
   requiresApproval: 'always',
   async execute({ group_id, user_id, duration }, context) {

package/agents/icqq/skills/icqq-group-admin/tools/set_title/index.js

@@ -12,6 +12,8 @@ export default defineAgentTool({
         duration: z.number().optional().describe('持续时间(秒)，-1永久').default(-1),
     }),
     adapter: 'icqq',
+    // ADR 0044: offered only while the Bot can actually do this here (e.g. it is a group admin).
+    requiresCapabilities: ['actions.setTitle'],
     scopes: ['group'],
     requiresApproval: 'always',
     async execute({ group_id, user_id, title, duration }, context) {

package/agents/icqq/skills/icqq-group-admin/tools/set_title/index.ts

@@ -11,6 +11,8 @@ export default defineAgentTool<{ group_id: number; user_id: number; title: strin
     duration: z.number().optional().describe('持续时间(秒)，-1永久').default(-1),
   }),
   adapter: 'icqq',
+  // ADR 0044: offered only while the Bot can actually do this here (e.g. it is a group admin).
+  requiresCapabilities: ['actions.setTitle'],
   scopes:['group'],
   requiresApproval: 'always',
   async execute({ group_id, user_id, title, duration }, context) {

package/agents/icqq/skills/icqq-messages/SKILL.md

@@ -23,6 +23,6 @@ Only use real message IDs from the current conversation. Do not invent IDs, sour
 
 `quote_reply` sends a text reply quoting one original; `forward_messages` sends a merged forward of the supplied originals. Use `inspect_conversation_reference` to read an incoming quote/forward when available; it does not send messages.
 
-`recall_own_message` needs no management role or per-call approval, including when the bot is an ordinary group member. It verifies the bot authored the message. The platform decides the recall time window; never promise success before receiving confirmation or retry an unconfirmed result automatically. To recall another member's message, load `icqq-group-admin` instead.
+`recall_own_message` needs no management role or per-call approval, including when you are an ordinary group member. It verifies that you authored the message. The platform decides the recall time window; never promise success before receiving confirmation or retry an unconfirmed result automatically. To recall another member's message, load `icqq-group-admin` instead.
 
 These tools currently support QQ private/group conversations, not guild channels. A failed or suppressed outbound receipt is not a delivered message.

package/agents/icqq/skills/icqq-messages/tools/recall_own_message/index.js

@@ -4,7 +4,7 @@ import { z } from 'zod';
 import { recallMessage, resolveMessage } from '../../../../conversation.js';
 import { messages as t } from '../../../../messages.js';
 export default defineAgentTool({
-    description: '撤回机器人在当前 QQ 群或私聊中自己的发言；无需群管角色或逐次审批，时限由平台决定',
+    description: '撤回你在当前 QQ 群或私聊中自己的发言；无需群管角色或逐次审批，时限由平台决定',
     adapter: 'icqq',
     scopes: ['private', 'group'],
     requiresApproval: 'never',

package/agents/icqq/skills/icqq-messages/tools/recall_own_message/index.ts

@@ -4,7 +4,7 @@ import { recallMessage, resolveMessage } from '../../../../conversation.js';
 import { messages as t } from '../../../../messages.js';
 
 export default defineAgentTool({
-  description: '撤回机器人在当前 QQ 群或私聊中自己的发言；无需群管角色或逐次审批，时限由平台决定',
+  description: '撤回你在当前 QQ 群或私聊中自己的发言；无需群管角色或逐次审批，时限由平台决定',
   adapter: 'icqq',
   scopes: ['private', 'group'],
   requiresApproval: 'never',

package/lib/endpoint.js

@@ -2,7 +2,8 @@ import { parseGroupMessageId, } from '@icqqjs/icqq';
 import { inspect } from 'node:util';
 import { AsyncLocalStorage } from 'node:async_hooks';
 import { createEndpointSpecification, endpointSpec, createEndpointOperation, } from 'zhin.js/adapter';
-import { receiveOneBotLikeSideEvent, buildSystem, toCanonicalSegments } from '@zhin.js/core';
+import { receiveOneBotLikeSideEvent } from '@zhin.js/adapter-onebot-events';
+import { buildSystem, toCanonicalSegments } from '@zhin.js/core';
 import { EndpointDeliveryError } from '@zhin.js/im-contract';
 import { formatCompact, getAdapterLogger, truncatePreview } from '@zhin.js/logger';
 import { runIcqqLoginAssistStep } from './icqq-login-assist.js';
@@ -13,8 +14,10 @@ import { IcqqGuildCatalog, normalizeIcqqGuildInboundMessage, } from './icqq-guil
 import { prepareIcqqOutboundMedia, resolveIcqqOutboundMediaMode, } from './outbound-media.js';
 import { formatInboundContent, formatOutboundMessageParts, normalizeIcqqImageMedia, icqqInboundConversation, icqqOutboundTarget, } from './protocol.js';
 import { ManagedIcqqClient } from './managed-client.js';
+import { createIcqqActionPorts } from './group-actions.js';
 import { inspectGroupMember, moderateGroupMember } from './group-moderation.js';
 import { inspectGroupMemberProfile, inspectGroupScene } from './group-scene.js';
+import { createIcqqSelfProfile } from './self-profile.js';
 const BOUND_EVENTS = [
     'message.private',
     'message.group',
@@ -107,6 +110,7 @@ export class IcqqEndpoint extends ManagedIcqqClient {
                 throw new Error('QQ did not confirm the group notice');
             }
         },
+        ...createIcqqActionPorts(() => this),
     });
     #control = Object.freeze({
         recall: async ({ message, signal }) => {
@@ -163,7 +167,7 @@ export class IcqqEndpoint extends ManagedIcqqClient {
             start: signal => this.#startFramework(signal), open: () => this.#openFramework(), close: () => this.#closeFramework(), stop: () => this.#stopFramework(),
             send: request => this.#sendFramework(request), get name() { return name(); },
             get transportState() { return state(); },
-            management: this.#management, control: this.#control,
+            management: this.#management, control: this.#control, profile: createIcqqSelfProfile(this),
             get content() { return content(); },
         });
         this.#contentResolver = new IcqqContentResolver(this);

package/lib/group-actions.d.ts

@@ -0,0 +1,10 @@
+import type { Client } from '@icqqjs/icqq';
+import { type EndpointManagement } from 'zhin.js/adapter';
+type ActionPorts = Pick<EndpointManagement, 'pokeUser' | 'unmuteGroupMember' | 'muteAllGroupMembers' | 'setGroupCard' | 'setGroupTitle' | 'setGroupEssence' | 'inviteGroupMember'>;
+/**
+ * ADR 0044 action ports of the icqq endpoint. Where the bot's role decides the outcome the role is
+ * read fresh from the platform first, so a stale cache can neither allow nor refuse the action.
+ * Each request carries its own lifetime: reads are `prepare`, the native effect is `run`.
+ */
+export declare function createIcqqActionPorts(getClient: () => Client): ActionPorts;
+export {};

package/lib/group-actions.js

@@ -0,0 +1,94 @@
+import { createEndpointOperation } from 'zhin.js/adapter';
+function numericId(value) {
+    const id = Number(value);
+    if (!/^[1-9]\d*$/.test(value) || !Number.isSafeInteger(id))
+        throw new Error('Invalid QQ identifier');
+    return id;
+}
+/** Uncached member lookup; `pickMember` and the cached roster would report stale roles. */
+async function freshMember(operation, client, group, user) {
+    try {
+        const member = await operation.prepare(() => client.getGroupMemberInfo(group, user, true));
+        return member.user_id === user && member.group_id === group ? member : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function requireBotRole(operation, client, group, roles, message) {
+    const self = await freshMember(operation, client, group, client.uin);
+    if (!self || !roles.includes(self.role))
+        throw new Error(message);
+}
+function confirmed(ok, what) {
+    if (ok === false)
+        throw new Error(`QQ did not confirm ${what}`);
+}
+/**
+ * ADR 0044 action ports of the icqq endpoint. Where the bot's role decides the outcome the role is
+ * read fresh from the platform first, so a stale cache can neither allow nor refuse the action.
+ * Each request carries its own lifetime: reads are `prepare`, the native effect is `run`.
+ */
+export function createIcqqActionPorts(getClient) {
+    return {
+        async pokeUser({ userId, groupId, signal }) {
+            const client = getClient();
+            const operation = createEndpointOperation({ signal });
+            const user = numericId(userId);
+            confirmed(groupId === undefined
+                ? await operation.run(() => client.pickFriend(user).poke(false))
+                : await operation.run(() => client.sendGroupPoke(numericId(groupId), user)), 'poke');
+        },
+        async unmuteGroupMember({ groupId, userId, signal }) {
+            const client = getClient();
+            const operation = createEndpointOperation({ signal });
+            const group = numericId(groupId);
+            await requireBotRole(operation, client, group, ['owner', 'admin'], 'Bot is not a group admin');
+            confirmed(await operation.run(() => client.setGroupBan(group, numericId(userId), 0)), 'unmute');
+        },
+        async muteAllGroupMembers({ groupId, enabled, signal }) {
+            const client = getClient();
+            const operation = createEndpointOperation({ signal });
+            const group = numericId(groupId);
+            await requireBotRole(operation, client, group, ['owner', 'admin'], 'Bot is not a group admin');
+            confirmed(await operation.run(() => client.setGroupWholeBan(group, enabled)), 'whole-group mute');
+        },
+        async setGroupCard({ groupId, userId, card, signal }) {
+            const client = getClient();
+            const operation = createEndpointOperation({ signal });
+            const group = numericId(groupId);
+            const user = numericId(userId);
+            if (user !== client.uin)
+                await requireBotRole(operation, client, group, ['owner', 'admin'], 'Bot is not a group admin');
+            confirmed(await operation.run(() => client.setGroupCard(group, user, card)), 'card change');
+        },
+        async setGroupTitle({ groupId, userId, title, durationSeconds, signal }) {
+            const client = getClient();
+            const operation = createEndpointOperation({ signal });
+            const group = numericId(groupId);
+            const user = numericId(userId);
+            await requireBotRole(operation, client, group, ['owner'], 'Only the group owner can set special titles');
+            if (!await freshMember(operation, client, group, user))
+                throw new Error('Target is not a group member');
+            confirmed(await operation.run(() => client.setGroupSpecialTitle(group, user, title, durationSeconds ?? -1)), 'title change');
+        },
+        async setGroupEssence({ groupId, messageId, enabled, signal }) {
+            const client = getClient();
+            const operation = createEndpointOperation({ signal });
+            await requireBotRole(operation, client, numericId(groupId), ['owner', 'admin'], 'Bot is not a group admin');
+            if (enabled)
+                await operation.run(() => client.setEssenceMessage(messageId));
+            else
+                await operation.run(() => client.removeEssenceMessage(messageId));
+        },
+        async inviteGroupMember({ groupId, userId, signal }) {
+            const client = getClient();
+            const operation = createEndpointOperation({ signal });
+            const group = numericId(groupId);
+            const user = numericId(userId);
+            if (await freshMember(operation, client, group, user))
+                throw new Error('Target is already a group member');
+            confirmed(await operation.run(() => client.inviteFriend(group, user)), 'invitation');
+        },
+    };
+}

package/lib/protocol.d.ts

@@ -1,3 +1,4 @@
+import type { EndpointProfileConfiguration } from 'zhin.js/adapter';
 import type { Sendable } from '@icqqjs/icqq';
 import { type ConversationRef } from '@zhin.js/im-contract';
 import { type AdapterNotifyTarget, type ResolvedAdapterNotifyTarget } from 'zhin.js/adapter';
@@ -163,7 +164,7 @@ export declare const Actions: {
     readonly GET_NOTIFY: "get_notify";
 };
 /** One expanded ICQQ endpoint configuration produced by AdapterIndex. */
-export interface IcqqEndpointConfig {
+export interface IcqqEndpointConfig extends EndpointProfileConfiguration {
     readonly id: string;
     readonly autoReconnect?: boolean;
     readonly outboundMedia?: 'file' | 'base64';

package/lib/self-profile.d.ts

@@ -0,0 +1,6 @@
+import type { Client } from '@icqqjs/icqq';
+import { type EndpointProfile } from 'zhin.js/adapter';
+type IcqqProfileClient = Pick<Client, 'uin' | 'nickname' | 'isOnline' | 'getProfile' | 'setNickname' | 'setGender' | 'setSignature' | 'setDescription' | 'setAvatar'>;
+/** ICQQ owns the platform facts; config fallbacks and call leases belong to Adapter. */
+export declare function createIcqqSelfProfile(client: IcqqProfileClient): EndpointProfile;
+export {};

package/lib/self-profile.js

@@ -0,0 +1,56 @@
+import { createEndpointOperation } from 'zhin.js/adapter';
+/** ICQQ owns the platform facts; config fallbacks and call leases belong to Adapter. */
+export function createIcqqSelfProfile(client) {
+    return Object.freeze({
+        writableFields: Object.freeze(['nickname', 'gender', 'signature', 'bio', 'avatar']),
+        get current() { return client.isOnline() ? { nickname: client.nickname } : {}; },
+        async read({ signal }) {
+            const raw = await createEndpointOperation({ signal }).prepare(() => client.getProfile(client.uin));
+            const profile = {
+                ...(typeof raw.nickname === 'string' ? { nickname: raw.nickname } : {}),
+                ...(raw.sex === 'male' || raw.sex === 'female' || raw.sex === 'unknown' ? { gender: raw.sex } : {}),
+                ...(typeof raw.age === 'number' && Number.isFinite(raw.age) ? { age: raw.age } : {}),
+                ...(typeof raw.signature === 'string' ? { signature: raw.signature } : {}),
+                ...(typeof raw.avatar?.url === 'string' ? { avatar: raw.avatar.url } : {}),
+            };
+            return profile;
+        },
+        async write({ change, signal }) {
+            const operation = createEndpointOperation({ signal });
+            let accepted;
+            switch (change.field) {
+                case 'nickname':
+                    accepted = await operation.run(() => client.setNickname(change.value));
+                    break;
+                case 'gender': {
+                    if (change.value === 'other')
+                        return { status: 'rejected', message: 'ICQQ supports male, female or unknown gender' };
+                    const gender = change.value === 'male' ? 1 : change.value === 'female' ? 2 : 0;
+                    accepted = await operation.run(() => client.setGender(gender));
+                    break;
+                }
+                case 'signature':
+                    accepted = await operation.run(() => client.setSignature(change.value));
+                    break;
+                case 'bio':
+                    accepted = await operation.run(() => client.setDescription(change.value));
+                    break;
+                case 'avatar': {
+                    if (change.value.kind === 'file') {
+                        return { status: 'rejected', message: 'ICQQ avatar requires resolved image bytes, URL or local path' };
+                    }
+                    const image = change.value.kind === 'base64' ? Buffer.from(change.value.value, 'base64') : change.value.value;
+                    await operation.run(() => client.setAvatar(image));
+                    // The input is not the platform CDN URL; it must not become an observed avatar.
+                    return { status: 'updated' };
+                }
+                default: return { status: 'rejected', message: `ICQQ cannot safely update ${change.field}` };
+            }
+            if (accepted && change.field === 'nickname')
+                client.nickname = change.value;
+            return accepted
+                ? { status: 'updated', profile: { [change.field]: change.value } }
+                : { status: 'rejected', message: `ICQQ rejected the ${change.field} change` };
+        },
+    });
+}

package/lib/sensitive-commands.d.ts

@@ -0,0 +1,8 @@
+import type { SensitiveExecCommandRule } from '@zhin.js/agent';
+/**
+ * The `icqq` command-line client can kick members, move money and delete files. Under an `allowlist`
+ * exec policy its non-sensitive subcommands run freely, while these need owner approval (ADR 0044:
+ * this knowledge lives with the adapter, the exec policy only reads the registered rule).
+ */
+export declare const ICQQ_SENSITIVE_SUBCOMMAND_REGEXES: readonly RegExp[];
+export declare const icqqSensitiveExecRule: SensitiveExecCommandRule;

package/lib/sensitive-commands.js

@@ -0,0 +1,16 @@
+/**
+ * The `icqq` command-line client can kick members, move money and delete files. Under an `allowlist`
+ * exec policy its non-sensitive subcommands run freely, while these need owner approval (ADR 0044:
+ * this knowledge lives with the adapter, the exec policy only reads the registered rule).
+ */
+export const ICQQ_SENSITIVE_SUBCOMMAND_REGEXES = Object.freeze([
+    /\bicqq\s+friend\s+(?:delete|block|move)\b/i,
+    /\bicqq\s+group\s+(?:kick|mute|set|admin|announce|transfer|quit|dissolve|invite)\b/i,
+    /\bicqq\s+(?:request|wallet|pay|recall)\b/i,
+    /\bicqq\s+file\s+(?:upload|delete)\b/i,
+    /\bicqq\s+gfs\b.*\b(?:rm|delete|del)\b/i,
+]);
+export const icqqSensitiveExecRule = Object.freeze({
+    command: 'icqq',
+    sensitive: ICQQ_SENSITIVE_SUBCOMMAND_REGEXES,
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhin.js/adapter-icqq",
-  "version": "1.1.20",
+  "version": "1.1.22",
   "description": "Zhin.js ICQQ adapter — direct connection to @icqqjs/icqq",
   "type": "module",
   "main": "./lib/index.js",
@@ -33,32 +33,37 @@
     "directory": "plugins/adapters/icqq"
   },
   "dependencies": {
-    "@zhin.js/adapter": "1.1.26",
-    "@zhin.js/agent-feature": "1.1.11",
-    "@zhin.js/client": "1.1.22",
+    "@zhin.js/adapter-onebot-events": "0.0.1",
+    "@zhin.js/adapter": "1.1.28",
+    "@zhin.js/agent-feature": "1.1.13",
+    "@zhin.js/client": "1.1.24",
     "@zhin.js/console-contract": "1.1.3",
-    "@zhin.js/core": "1.1.54",
-    "@zhin.js/feature-kit": "1.1.10",
-    "@zhin.js/im-contract": "1.1.9",
+    "@zhin.js/core": "1.1.56",
+    "@zhin.js/feature-kit": "1.1.12",
+    "@zhin.js/im-contract": "1.1.11",
     "@zhin.js/logger": "1.1.2",
-    "@zhin.js/page": "1.1.12",
-    "@zhin.js/permission": "1.1.10",
-    "@zhin.js/skill": "1.1.11",
-    "@zhin.js/tool": "1.1.13"
+    "@zhin.js/page": "1.1.14",
+    "@zhin.js/permission": "1.1.12",
+    "@zhin.js/skill": "1.1.13",
+    "@zhin.js/tool": "1.1.15"
   },
   "peerDependencies": {
     "@icqqjs/icqq": "^1.12.2",
     "zod": "^4.0.0",
-    "@zhin.js/adapter": "^1.1.26",
-    "@zhin.js/command": "^1.1.12",
-    "@zhin.js/core": "^1.1.54",
-    "@zhin.js/prompt-section": "^1.1.10",
-    "zhin.js": "^1.1.19"
+    "@zhin.js/adapter": "^1.1.28",
+    "@zhin.js/agent": "^1.1.47",
+    "@zhin.js/command": "^1.1.14",
+    "@zhin.js/core": "^1.1.56",
+    "@zhin.js/prompt-section": "^1.1.12",
+    "zhin.js": "^1.1.21"
   },
   "peerDependenciesMeta": {
     "@icqqjs/icqq": {
       "optional": true
     },
+    "@zhin.js/agent": {
+      "optional": true
+    },
     "@zhin.js/command": {
       "optional": true
     },
@@ -78,8 +83,9 @@
     "typescript": "^6.0.3",
     "vitest": "^4.1.10",
     "zod": "^4.4.3",
-    "@zhin.js/prompt-section": "1.1.10",
-    "zhin.js": "1.1.19"
+    "@zhin.js/agent": "1.1.47",
+    "@zhin.js/prompt-section": "1.1.12",
+    "zhin.js": "1.1.21"
   },
   "files": [
     "adapters",
@@ -111,7 +117,7 @@
     "features": [
       {
         "package": "@zhin.js/adapter",
-        "api": "^2.0.0"
+        "api": "^2.1.0"
       },
       {
         "package": "@zhin.js/command",
@@ -119,7 +125,7 @@
       },
       {
         "package": "@zhin.js/tool",
-        "api": "^1.0.0"
+        "api": "^1.1.0"
       },
       {
         "package": "@zhin.js/skill",

package/plugin.js

@@ -1,9 +1,12 @@
 // Generated by build-plugin-runtime-entries.mjs. Do not edit.
 import { definePlugin, pluginConsoleRpcToken } from 'zhin.js';
 import { permissionHostToken, createSceneRolePlatformChecker } from '@zhin.js/permission';
+import { registerSensitiveExecCommand } from '@zhin.js/agent';
 import { createIcqqConsoleRpc } from "./lib/console.js";
+import { icqqSensitiveExecRule } from "./lib/sensitive-commands.js";
 export default definePlugin({
     name: 'icqq',
+    configUpdate: { featurePaths: [['nickname'], ['profile'], ['endpoints']] },
     metadata: {
         displayName: 'ICQQ Adapter',
     },
@@ -12,6 +15,10 @@ export default definePlugin({
         const disposePlatform = context.resources.has(permissionHostToken)
             ? context.resources.use(permissionHostToken).registerPlatform('icqq', createSceneRolePlatformChecker())
             : undefined;
-        return disposePlatform;
+        const disposeExecRule = registerSensitiveExecCommand(icqqSensitiveExecRule);
+        return () => {
+            disposeExecRule();
+            disposePlatform?.();
+        };
     },
 });

package/prompt-sections/platform/index.js

@@ -4,7 +4,7 @@ export default defineAgentPromptSection({
     title: 'ICQQ / QQ',
     content: [
         'Use the current Skill catalog; discover the intent and load the matching Skill before its private Tool.',
-        'The current IM operation selects the bot Client automatically; never guess user_id or group_id.',
+        'The current IM operation selects your current endpoint Client automatically; never guess user_id or group_id.',
     ].join('\n'),
     layer: 'tools',
     order: 70,

package/prompt-sections/platform/index.ts

@@ -4,7 +4,7 @@ export default defineAgentPromptSection({
   title: 'ICQQ / QQ',
   content: [
     'Use the current Skill catalog; discover the intent and load the matching Skill before its private Tool.',
-    'The current IM operation selects the bot Client automatically; never guess user_id or group_id.',
+    'The current IM operation selects your current endpoint Client automatically; never guess user_id or group_id.',
   ].join('\n'),
   layer: 'tools',
   order: 70,