@zhin.js/adapter-qq 1.1.21 → 1.1.23

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (10) hide show
  1. package/CHANGELOG.md +70 -0
  2. package/adapters/qq/index.js +27 -5
  3. package/adapters/qq/index.ts +27 -5
  4. package/lib/image-size.d.ts +2 -0
  5. package/lib/image-size.js +44 -0
  6. package/lib/side-event-dispatch.js +1 -1
  7. package/package.json +20 -19
  8. package/plugin.js +1 -0
  9. package/src/image-size.ts +46 -0
  10. package/src/side-event-dispatch.ts +1 -1
package/CHANGELOG.md CHANGED
@@ -1,5 +1,75 @@
1
1
  # @zhin.js/adapter-qq
2
2
 
3
+ ## 1.1.23
4
+
5
+ ### Patch Changes
6
+
7
+ - bc6ccb1: Deep audit bug fixes and 7 architectural improvements:
8
+ - Sink Agent Turn ingress pipeline from `@zhin.js/cli` into `@zhin.js/agent/runtime` (`plugin-runtime/ingress/`) and decompose `ingress-route.ts` into modular pipeline stages.
9
+ - Bind Session State Plane (`JsxButtonRegistry`, `InteractionRuntime`, `RuntimeInteractiveRouter`) to `PluginIncarnationRef` so active buttons and interactions survive unrelated-plugin HMR while expiring when the owning plugin reloads, and support per-conversation fallback numbering (`numberingScope: 'conversation'`).
10
+ - Establish `conversation_events` as the canonical message SSOT and reference `conversation_event_id`, `conversation_key`, `platform_message_id`, and `message_key` in `agent_messages` (`AGENT_MESSAGE_QUERY_VERSION = 2`), threading `conversationSequence` across inbound and outbound delivery receipts.
11
+ - Push down `DatabaseContextRepository` and `DatabaseScheduleJobStorage` full-session/full-table memory scans to indexed SQL queries.
12
+ - Add kernel-level inbound `replyTo` and `mentioned` auto-promotion (`promoteInboundMessagePayload`) plus reusable `InboundDeduper` and `TtlLookupCache` primitives in `@zhin.js/adapter`.
13
+ - Add `MiddlewareContext.dispatch` (`InboundDispatchSummary`) and `onAfterDispatch` hooks for `after-dispatch` middlewares, and support incremental rendering of in-place `envelope.payload` array mutations in `OutboundDeliveryRuntime`.
14
+ - Unify `HistoryWindowTracker` and `AgentCompactionRuntime` token/message budgets (`resolveUnifiedHistoryAndCompactionBudget`).
15
+ - Fix schema validation, database transaction connection cleanup and SQLite WAL mode, schedule timer wheel head-of-line blocking, security policy bash read paths and subagent guard propagation, group merge window permission carrier handoff, micro-compact namespaced tool matching, and WebSocket force-close / inbound segment mapping across adapters.
16
+ - Updated dependencies [3a8504b]
17
+ - Updated dependencies [6163abc]
18
+ - Updated dependencies [fed2c27]
19
+ - Updated dependencies [bc6ccb1]
20
+ - Updated dependencies [72b5a12]
21
+ - Updated dependencies [aa41889]
22
+ - Updated dependencies [4427e72]
23
+ - Updated dependencies [22bd14a]
24
+ - @zhin.js/agent-feature@1.1.14
25
+ - @zhin.js/core@1.1.57
26
+ - @zhin.js/client@1.1.25
27
+ - @zhin.js/page@1.1.15
28
+ - @zhin.js/im-contract@1.1.12
29
+ - @zhin.js/adapter@1.1.29
30
+ - @zhin.js/host-http@1.1.15
31
+ - @zhin.js/feature-kit@1.1.13
32
+ - @zhin.js/tool@1.1.16
33
+ - @zhin.js/adapter-onebot-events@0.0.2
34
+ - @zhin.js/permission@1.1.13
35
+ - @zhin.js/skill@1.1.14
36
+
37
+ ## 1.1.22
38
+
39
+ ### Patch Changes
40
+
41
+ - b249e5e: ADR 0044 C4：事件映射迁出 core。新增 `@zhin.js/adapter-onebot-events`，承载 OneBot v11 / NapCat / icqq 的原始通知与请求 → 标准事件映射（`receiveOneBotLikeSideEvent`、`mapNoticeParts`、`mapRequestParts`、`resolveSideEventDedupeKey` 及 OneBot 映射表，icqq 差异用覆盖表表达）；KOOK、Slack 的映射迁入各自适配器；`@zhin.js/core` 只保留标准事件名、类型与 `buildNotice` / `buildRequest` / `buildSystem` / `senderFromId`，不再含任何平台名。core 不再导出上述映射函数与 `ONEBOT_/KOOK_/SLACK_NOTICE_PARTS_MAP`、`SideEventPlatform`、`OneBotLike*` 类型，适配器改从共享包导入。
42
+ - 41ff1a5: ADR 0044 C5: every official adapter now declares a capability `profile` (its `segments` moved into `profile.default.messaging.segments`). icqq declares the complete profile (per conversation kind: scene, all 14 actions with real limits, events, feedback, delivery) and implements the seven new management ports (`pokeUser`, `unmuteGroupMember`, `muteAllGroupMembers`, `setGroupCard`, `setGroupTitle`, `setGroupEssence`, `inviteGroupMember`) with fresh bot-role reads. qq official declares its passive reply windows; undeclared capabilities stay unsupported.
43
+ - cbd3f14: ADR 0044 integration and C6 guard. `delivery.spool` now reproduces the pre-0044 media rule (icqq `false`, every other official adapter `true`). icqq narrows `actions.recall.others` unless the Bot is admin or owner, and declares recall for groups. Endpoint kind capabilities merge the Endpoint's `operations` (Discord reactions keep working; Discord declares reaction feedback). Adapters in the `@zhin.js/` scope are trusted: their custom prompt text is not labelled `external_content`. Core no longer keeps a telegram/discord interactive-policy table (adapters declare `segments.interactive`). New `pnpm check:no-platform-branches` blocks platform-name branches in runtime code.
44
+ - 4fe49b5: 支持配置按需生效：分离保存与有效版本，独立变更先应用，账号资料更新保留连接，模型按回合使用确定版本；Console 返回结构化应用结果。监听改为仅显式 --watch 启用，开发模板显式选择源码和配置监听。
45
+
46
+ 自变更消费配置应用回执，避免已处理配置被二次重载；持久化本次写入修订和应用结果，未知结果或修订冲突时停止自动续作并保留现场，恢复不会覆盖未经本次变更确认的配置。
47
+
48
+ - Updated dependencies [b249e5e]
49
+ - Updated dependencies [57661f6]
50
+ - Updated dependencies [cbd3f14]
51
+ - Updated dependencies [299863a]
52
+ - Updated dependencies [aaa93d7]
53
+ - Updated dependencies [bd524d1]
54
+ - Updated dependencies [126ae99]
55
+ - Updated dependencies [4fe49b5]
56
+ - Updated dependencies [cce07db]
57
+ - Updated dependencies [b652db3]
58
+ - Updated dependencies [0315ba0]
59
+ - Updated dependencies [00be764]
60
+ - @zhin.js/adapter-onebot-events@0.0.1
61
+ - @zhin.js/core@1.1.56
62
+ - @zhin.js/adapter@1.1.28
63
+ - @zhin.js/im-contract@1.1.11
64
+ - @zhin.js/tool@1.1.15
65
+ - @zhin.js/skill@1.1.13
66
+ - @zhin.js/host-http@1.1.14
67
+ - @zhin.js/feature-kit@1.1.12
68
+ - @zhin.js/client@1.1.24
69
+ - @zhin.js/page@1.1.14
70
+ - @zhin.js/agent-feature@1.1.13
71
+ - @zhin.js/permission@1.1.12
72
+
3
73
  ## 1.1.21
4
74
 
5
75
  ### Patch Changes
package/adapters/qq/index.js CHANGED
@@ -11,11 +11,33 @@ export default defineAdapter({
11
11
  operations: ['recall', 'reaction'],
12
12
  // 媒体 url 直发，base64/path 由 SDK formatMediaData 物化走 /files 上传；
13
13
  // markdown/keyboard 原生按钮承载交互段。
14
- segments: {
15
- supported: ['text', 'mention', 'image', 'audio', 'video', 'file', 'reply', 'markdown', 'keyboard'],
16
- markdown: 'native',
17
- outboundMedia: ['url', 'upload'],
18
- interactive: 'native',
14
+ profile: {
15
+ default: {
16
+ messaging: {
17
+ segments: {
18
+ supported: ['text', 'mention', 'image', 'audio', 'video', 'file', 'reply', 'markdown', 'keyboard'],
19
+ markdown: 'native',
20
+ outboundMedia: ['url', 'upload'],
21
+ interactive: 'native',
22
+ },
23
+ quote: true,
24
+ recall: {},
25
+ },
26
+ actions: {
27
+ recall: { scopes: ['private', 'group', 'channel'] },
28
+ quoteReply: { scopes: ['private', 'group', 'channel'] },
29
+ },
30
+ delivery: { send: true, requiresMessageSeq: true, spool: true },
31
+ },
32
+ private: {
33
+ delivery: { passiveWindow: { seconds: 3600, maxMessages: 4 } },
34
+ },
35
+ group: {
36
+ delivery: { passiveWindow: { seconds: 300, maxMessages: 5 } },
37
+ },
38
+ channel: {
39
+ delivery: { passiveWindow: { seconds: 300, maxMessages: 5 } },
40
+ },
19
41
  },
20
42
  createAdapter: context => new QqAdapter(context),
21
43
  });
package/adapters/qq/index.ts CHANGED
@@ -23,11 +23,33 @@ export default defineAdapter<QqEndpointConfig>({
23
23
  operations: ['recall', 'reaction'],
24
24
  // 媒体 url 直发，base64/path 由 SDK formatMediaData 物化走 /files 上传；
25
25
  // markdown/keyboard 原生按钮承载交互段。
26
- segments: {
27
- supported: ['text', 'mention', 'image', 'audio', 'video', 'file', 'reply', 'markdown', 'keyboard'],
28
- markdown: 'native',
29
- outboundMedia: ['url', 'upload'],
30
- interactive: 'native',
26
+ profile: {
27
+ default: {
28
+ messaging: {
29
+ segments: {
30
+ supported: ['text', 'mention', 'image', 'audio', 'video', 'file', 'reply', 'markdown', 'keyboard'],
31
+ markdown: 'native',
32
+ outboundMedia: ['url', 'upload'],
33
+ interactive: 'native',
34
+ },
35
+ quote: true,
36
+ recall: {},
37
+ },
38
+ actions: {
39
+ recall: { scopes: ['private', 'group', 'channel'] },
40
+ quoteReply: { scopes: ['private', 'group', 'channel'] },
41
+ },
42
+ delivery: { send: true, requiresMessageSeq: true, spool: true },
43
+ },
44
+ private: {
45
+ delivery: { passiveWindow: { seconds: 3600, maxMessages: 4 } },
46
+ },
47
+ group: {
48
+ delivery: { passiveWindow: { seconds: 300, maxMessages: 5 } },
49
+ },
50
+ channel: {
51
+ delivery: { passiveWindow: { seconds: 300, maxMessages: 5 } },
52
+ },
31
53
  },
32
54
  createAdapter: context => new QqAdapter(context),
33
55
  });
package/lib/image-size.d.ts CHANGED
@@ -16,6 +16,8 @@ export type ImageProbeFetch = (url: string, init: {
16
16
  }>;
17
17
  /** 从图片文件头解析尺寸（PNG / GIF / JPEG / WebP）。 */
18
18
  export declare function imageSizeFromBytes(bytes: Uint8Array): QqImageSize | undefined;
19
+ /** 校验公网 HTTP(S) URL，拒绝内网/回环/元数据地址以防 SSRF。 */
20
+ export declare function isSafePublicImageUrl(rawUrl: string): boolean;
19
21
  /** 读取公网图片文件头得到尺寸；网络错误、超时或格式不识别时返回 undefined。 */
20
22
  export interface ImageProbeOptions {
21
23
  readonly fetch?: ImageProbeFetch;
package/lib/image-size.js CHANGED
@@ -82,7 +82,51 @@ async function readHead(response) {
82
82
  }
83
83
  return out;
84
84
  }
85
+ /** 校验公网 HTTP(S) URL，拒绝内网/回环/元数据地址以防 SSRF。 */
86
+ export function isSafePublicImageUrl(rawUrl) {
87
+ let parsed;
88
+ try {
89
+ parsed = new URL(rawUrl);
90
+ }
91
+ catch {
92
+ return false;
93
+ }
94
+ if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:')
95
+ return false;
96
+ const host = parsed.hostname.replace(/^\[|\]$/g, '').toLowerCase();
97
+ if (!host || host === 'localhost' || host.endsWith('.localhost') || host.endsWith('.local') || host.endsWith('.internal')) {
98
+ return false;
99
+ }
100
+ if (host === '::1'
101
+ || host === '0:0:0:0:0:0:0:1'
102
+ || host === '::'
103
+ || host.startsWith('fe80:')
104
+ || host.startsWith('fc')
105
+ || host.startsWith('fd')
106
+ || host.startsWith('::ffff:127.')
107
+ || host.startsWith('::ffff:10.')
108
+ || host.startsWith('::ffff:192.168.')
109
+ || host.startsWith('::ffff:169.254.')) {
110
+ return false;
111
+ }
112
+ const ipv4Match = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(host);
113
+ if (ipv4Match) {
114
+ const [a, b] = [Number(ipv4Match[1]), Number(ipv4Match[2])];
115
+ if (a === 0
116
+ || a === 10
117
+ || a === 127
118
+ || (a === 169 && b === 254)
119
+ || (a === 172 && b >= 16 && b <= 31)
120
+ || (a === 192 && b === 168)
121
+ || (a === 100 && b >= 64 && b <= 127)) {
122
+ return false;
123
+ }
124
+ }
125
+ return true;
126
+ }
85
127
  export async function probeImageSize(url, { fetch: fetchImpl = fetch, timeoutMs = PROBE_TIMEOUT_MS, signal } = {}) {
128
+ if (!isSafePublicImageUrl(url))
129
+ return undefined;
86
130
  try {
87
131
  const response = await fetchImpl(url, {
88
132
  headers: { Range: `bytes=0-${PROBE_BYTES - 1}` },
package/lib/side-event-dispatch.js CHANGED
@@ -1,4 +1,4 @@
1
- import { receiveOneBotLikeSideEvent } from '@zhin.js/core';
1
+ import { receiveOneBotLikeSideEvent } from '@zhin.js/adapter-onebot-events';
2
2
  import { formatCompact } from '@zhin.js/logger';
3
3
  export function bindQqBotSideEvents(bot, dispatch) {
4
4
  // qq-official-bot emits every dotted prefix. Listening at `notice` once avoids
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@zhin.js/adapter-qq",
3
- "version": "1.1.21",
3
+ "version": "1.1.23",
4
4
  "description": "Zhin.js QQ Official adapter for Plugin Runtime (WebSocket gateway)",
5
5
  "type": "module",
6
6
  "main": "./lib/index.js",
@@ -34,27 +34,28 @@
34
34
  },
35
35
  "dependencies": {
36
36
  "qq-official-bot": "^1.3.3",
37
- "@zhin.js/adapter": "1.1.27",
38
- "@zhin.js/agent-feature": "1.1.12",
39
- "@zhin.js/client": "1.1.23",
37
+ "@zhin.js/adapter-onebot-events": "0.0.2",
38
+ "@zhin.js/adapter": "1.1.29",
39
+ "@zhin.js/agent-feature": "1.1.14",
40
+ "@zhin.js/client": "1.1.25",
40
41
  "@zhin.js/console-contract": "1.1.3",
41
- "@zhin.js/core": "1.1.55",
42
- "@zhin.js/feature-kit": "1.1.11",
43
- "@zhin.js/host-http": "1.1.13",
44
- "@zhin.js/im-contract": "1.1.10",
42
+ "@zhin.js/core": "1.1.57",
43
+ "@zhin.js/feature-kit": "1.1.13",
44
+ "@zhin.js/host-http": "1.1.15",
45
+ "@zhin.js/im-contract": "1.1.12",
45
46
  "@zhin.js/logger": "1.1.2",
46
- "@zhin.js/page": "1.1.13",
47
- "@zhin.js/permission": "1.1.11",
48
- "@zhin.js/skill": "1.1.12",
49
- "@zhin.js/tool": "1.1.14"
47
+ "@zhin.js/page": "1.1.15",
48
+ "@zhin.js/permission": "1.1.13",
49
+ "@zhin.js/skill": "1.1.14",
50
+ "@zhin.js/tool": "1.1.16"
50
51
  },
51
52
  "peerDependencies": {
52
53
  "zod": "^4.0.0",
53
- "@zhin.js/adapter": "^1.1.27",
54
- "@zhin.js/command": "^1.1.13",
55
- "@zhin.js/core": "^1.1.55",
56
- "@zhin.js/middleware": "^1.1.12",
57
- "zhin.js": "^1.1.20"
54
+ "@zhin.js/adapter": "^1.1.29",
55
+ "@zhin.js/command": "^1.1.15",
56
+ "@zhin.js/core": "^1.1.57",
57
+ "@zhin.js/middleware": "^1.1.14",
58
+ "zhin.js": "^1.1.22"
58
59
  },
59
60
  "peerDependenciesMeta": {
60
61
  "@zhin.js/command": {
@@ -75,8 +76,8 @@
75
76
  "typescript": "^6.0.3",
76
77
  "vitest": "^4.1.10",
77
78
  "zod": "^4.4.3",
78
- "@zhin.js/host-http": "1.1.13",
79
- "zhin.js": "1.1.20"
79
+ "@zhin.js/host-http": "1.1.15",
80
+ "zhin.js": "1.1.22"
80
81
  },
81
82
  "files": [
82
83
  "adapters",
package/plugin.js CHANGED
@@ -7,6 +7,7 @@ import { createQqConsoleRpc } from "./lib/console.js";
7
7
  import { cancelQqConsoleBind } from "./lib/qq-console.js";
8
8
  export default definePlugin({
9
9
  name: 'qq',
10
+ configUpdate: { featurePaths: [['nickname'], ['profile'], ['endpoints']] },
10
11
  metadata: {
11
12
  displayName: 'QQ Official WebSocket Adapter',
12
13
  },
package/src/image-size.ts CHANGED
@@ -91,6 +91,51 @@ async function readHead(response: Awaited<ReturnType<ImageProbeFetch>>): Promise
91
91
  return out;
92
92
  }
93
93
 
94
+ /** 校验公网 HTTP(S) URL，拒绝内网/回环/元数据地址以防 SSRF。 */
95
+ export function isSafePublicImageUrl(rawUrl: string): boolean {
96
+ let parsed: URL;
97
+ try {
98
+ parsed = new URL(rawUrl);
99
+ } catch {
100
+ return false;
101
+ }
102
+ if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') return false;
103
+ const host = parsed.hostname.replace(/^\[|\]$/g, '').toLowerCase();
104
+ if (!host || host === 'localhost' || host.endsWith('.localhost') || host.endsWith('.local') || host.endsWith('.internal')) {
105
+ return false;
106
+ }
107
+ if (
108
+ host === '::1'
109
+ || host === '0:0:0:0:0:0:0:1'
110
+ || host === '::'
111
+ || host.startsWith('fe80:')
112
+ || host.startsWith('fc')
113
+ || host.startsWith('fd')
114
+ || host.startsWith('::ffff:127.')
115
+ || host.startsWith('::ffff:10.')
116
+ || host.startsWith('::ffff:192.168.')
117
+ || host.startsWith('::ffff:169.254.')
118
+ ) {
119
+ return false;
120
+ }
121
+ const ipv4Match = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(host);
122
+ if (ipv4Match) {
123
+ const [a, b] = [Number(ipv4Match[1]), Number(ipv4Match[2])];
124
+ if (
125
+ a === 0
126
+ || a === 10
127
+ || a === 127
128
+ || (a === 169 && b === 254)
129
+ || (a === 172 && b >= 16 && b <= 31)
130
+ || (a === 192 && b === 168)
131
+ || (a === 100 && b >= 64 && b <= 127)
132
+ ) {
133
+ return false;
134
+ }
135
+ }
136
+ return true;
137
+ }
138
+
94
139
  /** 读取公网图片文件头得到尺寸；网络错误、超时或格式不识别时返回 undefined。 */
95
140
  export interface ImageProbeOptions {
96
141
  readonly fetch?: ImageProbeFetch;
@@ -101,6 +146,7 @@ export async function probeImageSize(
101
146
  url: string,
102
147
  { fetch: fetchImpl = fetch as unknown as ImageProbeFetch, timeoutMs = PROBE_TIMEOUT_MS, signal }: ImageProbeOptions = {},
103
148
  ): Promise<QqImageSize | undefined> {
149
+ if (!isSafePublicImageUrl(url)) return undefined;
104
150
  try {
105
151
  const response = await fetchImpl(url, {
106
152
  headers: { Range: `bytes=0-${PROBE_BYTES - 1}` },
package/src/side-event-dispatch.ts CHANGED
@@ -1,4 +1,4 @@
1
- import { receiveOneBotLikeSideEvent, type OneBotLikeRawEvent } from '@zhin.js/core';
1
+ import { receiveOneBotLikeSideEvent, type OneBotLikeRawEvent } from '@zhin.js/adapter-onebot-events';
2
2
  import type { EndpointEventEmitter } from 'zhin.js/adapter';
3
3
  import { formatCompact, type getAdapterLogger } from '@zhin.js/logger';
4
4
  import type { ApproveJoinRequestOptions } from 'qq-official-bot';