@zhin.js/adapter-icqq 1.1.21 → 1.1.23

package/src/outbound-media.ts

@@ -68,14 +68,19 @@ export function prepareIcqqOutboundMedia(
     if (!data || typeof data !== "object") return seg;
     const d = data as Record<string, unknown>;
     const media = d.media;
-    if (!isMediaRef(media) || media.kind !== "base64") return seg;
-    const b64 = media.value.replace(/^base64:\/\//, "");
+    let b64 = "";
+    let mime = "";
+    if (isMediaRef(media) && media.kind === "base64") {
+      b64 = media.value.replace(/^base64:\/\//, "");
+      mime = media.mime_type ?? "";
+    } else if (typeof d.file === "string" && d.file.startsWith("base64://")) {
+      b64 = d.file.slice("base64://".length);
+    }
     if (!b64) return seg;
     if (type !== "image" && type !== "record" && type !== "audio" && type !== "video") {
       return seg;
     }
 
-    const mime = media.mime_type ?? "";
     const filePath = spoolBase64ToFile(
       b64,
       mime || (type === "image" ? "image/jpeg" : type === "video" ? "video/mp4" : "audio/mpeg"),
@@ -86,6 +91,7 @@ export function prepareIcqqOutboundMedia(
       type,
       data: {
         ...d,
+        ...(typeof d.file === "string" && d.file.startsWith("base64://") ? { file: filePath } : {}),
         media: {
           kind: "path",
           value: filePath,

package/src/sensitive-commands.ts

@@ -0,0 +1,19 @@
+import type { SensitiveExecCommandRule } from '@zhin.js/agent';
+
+/**
+ * The `icqq` command-line client can kick members, move money and delete files. Under an `allowlist`
+ * exec policy its non-sensitive subcommands run freely, while these need owner approval (ADR 0044:
+ * this knowledge lives with the adapter, the exec policy only reads the registered rule).
+ */
+export const ICQQ_SENSITIVE_SUBCOMMAND_REGEXES: readonly RegExp[] = Object.freeze([
+  /\bicqq\s+friend\s+(?:delete|block|move)\b/i,
+  /\bicqq\s+group\s+(?:kick|mute|set|admin|announce|transfer|quit|dissolve|invite)\b/i,
+  /\bicqq\s+(?:request|wallet|pay|recall)\b/i,
+  /\bicqq\s+file\s+(?:upload|delete)\b/i,
+  /\bicqq\s+gfs\b.*\b(?:rm|delete|del)\b/i,
+]);
+
+export const icqqSensitiveExecRule: SensitiveExecCommandRule = Object.freeze({
+  command: 'icqq',
+  sensitive: ICQQ_SENSITIVE_SUBCOMMAND_REGEXES,
+});