@zhin.js/adapter-qq 1.1.22 → 1.1.23

package/CHANGELOG.md

@@ -1,5 +1,39 @@
 # @zhin.js/adapter-qq
 
+## 1.1.23
+
+### Patch Changes
+
+- bc6ccb1: Deep audit bug fixes and 7 architectural improvements:
+  - Sink Agent Turn ingress pipeline from `@zhin.js/cli` into `@zhin.js/agent/runtime` (`plugin-runtime/ingress/`) and decompose `ingress-route.ts` into modular pipeline stages.
+  - Bind Session State Plane (`JsxButtonRegistry`, `InteractionRuntime`, `RuntimeInteractiveRouter`) to `PluginIncarnationRef` so active buttons and interactions survive unrelated-plugin HMR while expiring when the owning plugin reloads, and support per-conversation fallback numbering (`numberingScope: 'conversation'`).
+  - Establish `conversation_events` as the canonical message SSOT and reference `conversation_event_id`, `conversation_key`, `platform_message_id`, and `message_key` in `agent_messages` (`AGENT_MESSAGE_QUERY_VERSION = 2`), threading `conversationSequence` across inbound and outbound delivery receipts.
+  - Push down `DatabaseContextRepository` and `DatabaseScheduleJobStorage` full-session/full-table memory scans to indexed SQL queries.
+  - Add kernel-level inbound `replyTo` and `mentioned` auto-promotion (`promoteInboundMessagePayload`) plus reusable `InboundDeduper` and `TtlLookupCache` primitives in `@zhin.js/adapter`.
+  - Add `MiddlewareContext.dispatch` (`InboundDispatchSummary`) and `onAfterDispatch` hooks for `after-dispatch` middlewares, and support incremental rendering of in-place `envelope.payload` array mutations in `OutboundDeliveryRuntime`.
+  - Unify `HistoryWindowTracker` and `AgentCompactionRuntime` token/message budgets (`resolveUnifiedHistoryAndCompactionBudget`).
+  - Fix schema validation, database transaction connection cleanup and SQLite WAL mode, schedule timer wheel head-of-line blocking, security policy bash read paths and subagent guard propagation, group merge window permission carrier handoff, micro-compact namespaced tool matching, and WebSocket force-close / inbound segment mapping across adapters.
+- Updated dependencies [3a8504b]
+- Updated dependencies [6163abc]
+- Updated dependencies [fed2c27]
+- Updated dependencies [bc6ccb1]
+- Updated dependencies [72b5a12]
+- Updated dependencies [aa41889]
+- Updated dependencies [4427e72]
+- Updated dependencies [22bd14a]
+  - @zhin.js/agent-feature@1.1.14
+  - @zhin.js/core@1.1.57
+  - @zhin.js/client@1.1.25
+  - @zhin.js/page@1.1.15
+  - @zhin.js/im-contract@1.1.12
+  - @zhin.js/adapter@1.1.29
+  - @zhin.js/host-http@1.1.15
+  - @zhin.js/feature-kit@1.1.13
+  - @zhin.js/tool@1.1.16
+  - @zhin.js/adapter-onebot-events@0.0.2
+  - @zhin.js/permission@1.1.13
+  - @zhin.js/skill@1.1.14
+
 ## 1.1.22
 
 ### Patch Changes

package/lib/image-size.d.ts

@@ -16,6 +16,8 @@ export type ImageProbeFetch = (url: string, init: {
 }>;
 /** 从图片文件头解析尺寸（PNG / GIF / JPEG / WebP）。 */
 export declare function imageSizeFromBytes(bytes: Uint8Array): QqImageSize | undefined;
+/** 校验公网 HTTP(S) URL，拒绝内网/回环/元数据地址以防 SSRF。 */
+export declare function isSafePublicImageUrl(rawUrl: string): boolean;
 /** 读取公网图片文件头得到尺寸；网络错误、超时或格式不识别时返回 undefined。 */
 export interface ImageProbeOptions {
     readonly fetch?: ImageProbeFetch;

package/lib/image-size.js

@@ -82,7 +82,51 @@ async function readHead(response) {
     }
     return out;
 }
+/** 校验公网 HTTP(S) URL，拒绝内网/回环/元数据地址以防 SSRF。 */
+export function isSafePublicImageUrl(rawUrl) {
+    let parsed;
+    try {
+        parsed = new URL(rawUrl);
+    }
+    catch {
+        return false;
+    }
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:')
+        return false;
+    const host = parsed.hostname.replace(/^\[|\]$/g, '').toLowerCase();
+    if (!host || host === 'localhost' || host.endsWith('.localhost') || host.endsWith('.local') || host.endsWith('.internal')) {
+        return false;
+    }
+    if (host === '::1'
+        || host === '0:0:0:0:0:0:0:1'
+        || host === '::'
+        || host.startsWith('fe80:')
+        || host.startsWith('fc')
+        || host.startsWith('fd')
+        || host.startsWith('::ffff:127.')
+        || host.startsWith('::ffff:10.')
+        || host.startsWith('::ffff:192.168.')
+        || host.startsWith('::ffff:169.254.')) {
+        return false;
+    }
+    const ipv4Match = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(host);
+    if (ipv4Match) {
+        const [a, b] = [Number(ipv4Match[1]), Number(ipv4Match[2])];
+        if (a === 0
+            || a === 10
+            || a === 127
+            || (a === 169 && b === 254)
+            || (a === 172 && b >= 16 && b <= 31)
+            || (a === 192 && b === 168)
+            || (a === 100 && b >= 64 && b <= 127)) {
+            return false;
+        }
+    }
+    return true;
+}
 export async function probeImageSize(url, { fetch: fetchImpl = fetch, timeoutMs = PROBE_TIMEOUT_MS, signal } = {}) {
+    if (!isSafePublicImageUrl(url))
+        return undefined;
     try {
         const response = await fetchImpl(url, {
             headers: { Range: `bytes=0-${PROBE_BYTES - 1}` },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhin.js/adapter-qq",
-  "version": "1.1.22",
+  "version": "1.1.23",
   "description": "Zhin.js QQ Official adapter for Plugin Runtime (WebSocket gateway)",
   "type": "module",
   "main": "./lib/index.js",
@@ -34,28 +34,28 @@
   },
   "dependencies": {
     "qq-official-bot": "^1.3.3",
-    "@zhin.js/adapter-onebot-events": "0.0.1",
-    "@zhin.js/adapter": "1.1.28",
-    "@zhin.js/agent-feature": "1.1.13",
-    "@zhin.js/client": "1.1.24",
+    "@zhin.js/adapter-onebot-events": "0.0.2",
+    "@zhin.js/adapter": "1.1.29",
+    "@zhin.js/agent-feature": "1.1.14",
+    "@zhin.js/client": "1.1.25",
     "@zhin.js/console-contract": "1.1.3",
-    "@zhin.js/core": "1.1.56",
-    "@zhin.js/feature-kit": "1.1.12",
-    "@zhin.js/host-http": "1.1.14",
-    "@zhin.js/im-contract": "1.1.11",
+    "@zhin.js/core": "1.1.57",
+    "@zhin.js/feature-kit": "1.1.13",
+    "@zhin.js/host-http": "1.1.15",
+    "@zhin.js/im-contract": "1.1.12",
     "@zhin.js/logger": "1.1.2",
-    "@zhin.js/page": "1.1.14",
-    "@zhin.js/permission": "1.1.12",
-    "@zhin.js/skill": "1.1.13",
-    "@zhin.js/tool": "1.1.15"
+    "@zhin.js/page": "1.1.15",
+    "@zhin.js/permission": "1.1.13",
+    "@zhin.js/skill": "1.1.14",
+    "@zhin.js/tool": "1.1.16"
   },
   "peerDependencies": {
     "zod": "^4.0.0",
-    "@zhin.js/adapter": "^1.1.28",
-    "@zhin.js/command": "^1.1.14",
-    "@zhin.js/core": "^1.1.56",
-    "@zhin.js/middleware": "^1.1.13",
-    "zhin.js": "^1.1.21"
+    "@zhin.js/adapter": "^1.1.29",
+    "@zhin.js/command": "^1.1.15",
+    "@zhin.js/core": "^1.1.57",
+    "@zhin.js/middleware": "^1.1.14",
+    "zhin.js": "^1.1.22"
   },
   "peerDependenciesMeta": {
     "@zhin.js/command": {
@@ -76,8 +76,8 @@
     "typescript": "^6.0.3",
     "vitest": "^4.1.10",
     "zod": "^4.4.3",
-    "@zhin.js/host-http": "1.1.14",
-    "zhin.js": "1.1.21"
+    "@zhin.js/host-http": "1.1.15",
+    "zhin.js": "1.1.22"
   },
   "files": [
     "adapters",

package/src/image-size.ts

@@ -91,6 +91,51 @@ async function readHead(response: Awaited<ReturnType<ImageProbeFetch>>): Promise
   return out;
 }
 
+/** 校验公网 HTTP(S) URL，拒绝内网/回环/元数据地址以防 SSRF。 */
+export function isSafePublicImageUrl(rawUrl: string): boolean {
+  let parsed: URL;
+  try {
+    parsed = new URL(rawUrl);
+  } catch {
+    return false;
+  }
+  if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') return false;
+  const host = parsed.hostname.replace(/^\[|\]$/g, '').toLowerCase();
+  if (!host || host === 'localhost' || host.endsWith('.localhost') || host.endsWith('.local') || host.endsWith('.internal')) {
+    return false;
+  }
+  if (
+    host === '::1'
+    || host === '0:0:0:0:0:0:0:1'
+    || host === '::'
+    || host.startsWith('fe80:')
+    || host.startsWith('fc')
+    || host.startsWith('fd')
+    || host.startsWith('::ffff:127.')
+    || host.startsWith('::ffff:10.')
+    || host.startsWith('::ffff:192.168.')
+    || host.startsWith('::ffff:169.254.')
+  ) {
+    return false;
+  }
+  const ipv4Match = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(host);
+  if (ipv4Match) {
+    const [a, b] = [Number(ipv4Match[1]), Number(ipv4Match[2])];
+    if (
+      a === 0
+      || a === 10
+      || a === 127
+      || (a === 169 && b === 254)
+      || (a === 172 && b >= 16 && b <= 31)
+      || (a === 192 && b === 168)
+      || (a === 100 && b >= 64 && b <= 127)
+    ) {
+      return false;
+    }
+  }
+  return true;
+}
+
 /** 读取公网图片文件头得到尺寸；网络错误、超时或格式不识别时返回 undefined。 */
 export interface ImageProbeOptions {
   readonly fetch?: ImageProbeFetch;
@@ -101,6 +146,7 @@ export async function probeImageSize(
   url: string,
   { fetch: fetchImpl = fetch as unknown as ImageProbeFetch, timeoutMs = PROBE_TIMEOUT_MS, signal }: ImageProbeOptions = {},
 ): Promise<QqImageSize | undefined> {
+  if (!isSafePublicImageUrl(url)) return undefined;
   try {
     const response = await fetchImpl(url, {
       headers: { Range: `bytes=0-${PROBE_BYTES - 1}` },