dlinkclaw-openclaw 2026.10.27 → 2026.10.28

package/dist/package.json

@@ -1,6 +1,6 @@
 {
     "name": "dlinkclaw-openclaw",
-    "version": "2026.10.27",
+    "version": "2026.10.28",
     "description": "DLinkClaw OpenClaw channel plugin — 朵联 OpenClaw 接入通道",
     "keywords": [
         "DLinkClaw",

package/dist/src/client/const.d.ts

@@ -26,6 +26,9 @@ export declare const REPLY_SEND_TIMEOUT_MS = 15000;
 export declare const AUTO_RELAY_API = "/guest/relayBot/sendNotification";
 export declare const AUTO_RELAY_PERSONA = "/guest/relayBot/persona";
 export declare const AUTO_RELAY_APPROVAL_EVENT = "/guest/relayBot/approvalEvent";
+export declare const AUTO_RELAY_PERMISSION_CHECK = "/guest/relayBot/permissionCheck";
+export declare const AUTO_RELAY_MODEL_CATALOG = "/guest/relayBot/modelCatalog";
+export declare const AUTO_RELAY_MODEL_CHECK = "/guest/relayBot/modelCheck";
 export declare const AUTO_RELAY_UPLOAD = "/guest/relayBot/uploadMediaFiles";
 export declare const FILE_LIMITS: {
     image: {

package/dist/src/client/const.js

@@ -27,6 +27,12 @@ export const AUTO_RELAY_API = '/guest/relayBot/sendNotification';
 // 2026-10-26 人设注入：按 sessionKey 拉取 agent 人格与生效约定
 export const AUTO_RELAY_PERSONA = '/guest/relayBot/persona';
 export const AUTO_RELAY_APPROVAL_EVENT = '/guest/relayBot/approvalEvent';
+// 2026-10-31 档位权限：插件在 apply 前回调中继校验
+export const AUTO_RELAY_PERMISSION_CHECK = "/guest/relayBot/permissionCheck";
+// 2026-10-31 模型目录上报
+export const AUTO_RELAY_MODEL_CATALOG = "/guest/relayBot/modelCatalog";
+// 2026-10-31 model authorization pre-check
+export const AUTO_RELAY_MODEL_CHECK = "/guest/relayBot/modelCheck";
 export const AUTO_RELAY_UPLOAD = "/guest/relayBot/uploadMediaFiles";
 // ====== 上传文件配置常量（根据服务器性能调整）=======
 export const FILE_LIMITS = {

package/dist/src/client/dl-client.d.ts

@@ -53,6 +53,20 @@ export declare class DLClient extends EventEmitter {
      * 失败返回 null，调用方降级为不注入，不影响正常对话。
      */
     fetchPersona(sessionKey: string, agentId?: string): Promise<any | null>;
+    /**
+     * 2026-10-31 模型授权二次校验：应用模型覆盖前调用中继。
+     */
+    checkModel(sessionKey: string, provider: string, model: string): Promise<any>;
+    /**
+     * 2026-10-31 模型目录上报：握手后把归一化的 provider/model 列表推给中继，
+     * 供客户端按规则过滤与切换校验使用。
+     */
+    pushModelCatalog(payload: Record<string, unknown>): Promise<any>;
+    /**
+     * 2026-10-31 档位权限：应用 presetId 之前回调中继校验。
+     * 中继按 sessionKey 反查 agent 与操作人，插件不参与鉴权判定。
+     */
+    checkPermission(sessionKey: string, presetId: string): Promise<any>;
     /** 2026-10-27 把审批请求交给中继（由中继扇出给最多三人） */
     pushApprovalEvent(payload: Record<string, unknown>): Promise<any>;
     private fetchConfig;

package/dist/src/client/dl-client.js

@@ -3,7 +3,7 @@ import { buildDLReplyMessage, messagePreviewHandler } from './message.js';
 import mqtt from 'mqtt';
 import { DLHttp } from './dl-http.js';
 import { decryptAesEcbPkcs5 } from './crypto.js';
-import { AUTO_RELAY_API, AUTO_RELAY_PERSONA, AUTO_RELAY_APPROVAL_EVENT, AUTO_RELAY_UPLOAD } from './const.js';
+import { AUTO_RELAY_API, AUTO_RELAY_PERSONA, AUTO_RELAY_APPROVAL_EVENT, AUTO_RELAY_UPLOAD, AUTO_RELAY_PERMISSION_CHECK, AUTO_RELAY_MODEL_CATALOG, AUTO_RELAY_MODEL_CHECK } from './const.js';
 import { createCmdHandler } from '../services/index.js';
 import { uuidStr } from '../utils.js';
 export class DLClient extends EventEmitter {
@@ -66,6 +66,36 @@ export class DLClient extends EventEmitter {
             return null;
         }
     }
+    /**
+     * 2026-10-31 模型授权二次校验：应用模型覆盖前调用中继。
+     */
+    async checkModel(sessionKey, provider, model) {
+        const data = await this.http.post(AUTO_RELAY_MODEL_CHECK, { sessionKey, provider, model });
+        return data ?? null;
+    }
+    /**
+     * 2026-10-31 模型目录上报：握手后把归一化的 provider/model 列表推给中继，
+     * 供客户端按规则过滤与切换校验使用。
+     */
+    async pushModelCatalog(payload) {
+        try {
+            // 2026-10-31 修正：中继 http 客户端签名会对参数做 trim，数组会报 value.trim is not a function；
+            // 这里统一序列化为字符串参数提交，由中继侧反序列化。
+            return await this.http.post(AUTO_RELAY_MODEL_CATALOG, { payload: JSON.stringify(payload) });
+        }
+        catch (e) {
+            this.logger.warn('pushModelCatalog failed: ' + String(e));
+            return null;
+        }
+    }
+    /**
+     * 2026-10-31 档位权限：应用 presetId 之前回调中继校验。
+     * 中继按 sessionKey 反查 agent 与操作人，插件不参与鉴权判定。
+     */
+    async checkPermission(sessionKey, presetId) {
+        const data = await this.http.post(AUTO_RELAY_PERMISSION_CHECK, { sessionKey, presetId });
+        return data ?? null;
+    }
     /** 2026-10-27 把审批请求交给中继（由中继扇出给最多三人） */
     async pushApprovalEvent(payload) {
         try {

package/dist/src/services/index.js

@@ -28,7 +28,7 @@ export class CmdHandler {
         }, (payload) => {
             // 2026-10-29 审批推送：优先走 HTTP（可拿到审批人姓名），失败退回 MQTT 事件
             void announceWaiting(this.dlClient, payload);
-        });
+        }, (sessionKey, presetId) => this.dlClient.checkPermission(sessionKey, presetId), (sessionKey, provider, model) => this.dlClient.checkModel(sessionKey, provider, model));
     }
     log(msg, type) {
         this.services.log(msg, type);
@@ -50,6 +50,18 @@ export class CmdHandler {
             });
             this.services.on('onHandshaked', (payload) => {
                 this.dlClient.publishEventToServer(payload, 'onHandshaked', '0');
+                // 2026-10-31 模型目录上报：握手后推一份给中继（失败不影响连接）
+                void (async () => {
+                    try {
+                        const models = await this.services.exportModelCatalog();
+                        if (models.length > 0) {
+                            await this.dlClient.pushModelCatalog({ models });
+                        }
+                    }
+                    catch {
+                        // 上报失败不影响握手
+                    }
+                })();
             });
             this.services.on('onAgentReply', (payload) => {
                 const message = payload;

package/dist/src/services/services.d.ts

@@ -19,10 +19,16 @@ export declare class ClawServices extends EventEmitter {
     /** 2026-10-22：token 用量上报（中继落库，按同事聚合） */
     private readonly usagePublisher?;
     private readonly approvalPublisher?;
+    /** 2026-10-31 档位权限：应用 preset 前回调中继校验（fail-closed） */
+    private readonly permissionChecker?;
+    /** 2026-10-31 模型授权：应用模型覆盖前回调中继校验 */
+    private readonly modelChecker?;
+    /** 2026-10-31 档位下调兜底：每会话最多 60s 检查一次，避免每条消息都多两次调用 */
+    private readonly permCeilingCheckedAt;
     private approvalTimer;
     private readonly approvalSeen;
     private usageTimer;
-    constructor(options: ClawServiceOptions, logger: PluginLogger, terminalSink?: TerminalDataSink, usagePublisher?: (payload: Record<string, unknown>) => void, approvalPublisher?: (payload: Record<string, unknown>) => void);
+    constructor(options: ClawServiceOptions, logger: PluginLogger, terminalSink?: TerminalDataSink, usagePublisher?: (payload: Record<string, unknown>) => void, approvalPublisher?: (payload: Record<string, unknown>) => void, permissionChecker?: (sessionKey: string, presetId: string) => Promise<any>, modelChecker?: (sessionKey: string, provider: string, model: string) => Promise<any>);
     /** 2026-10-27 每 10 秒本地查一次审批队列，出现新条目才推中继（推模式，非中继拉取） */
     private startApprovalWatcher;
     /** 2026-10-22：每 60 秒把最近一天的 token 用量上报中继（幂等 upsert） */
@@ -41,6 +47,12 @@ export declare class ClawServices extends EventEmitter {
      */
     handleCmdMessage(cmdMessage: CmdMessage): Promise<CmdResponse>;
     private handleAskAgent;
+    /**
+     * 2026-10-31 档位上限下调兜底。
+     * 只处理「会话显式设置过档位」的情况：读当前 permissionMode → 换回 presetId →
+     * 问中继是否仍允许；不允许则 patch 到 maxPresetId。任何异常都只记日志，不阻断。
+     */
+    private enforcePermissionCeiling;
     /**
      * 更新
      * @param agentId
@@ -83,6 +95,10 @@ export declare class ClawServices extends EventEmitter {
     private handleStatusSystem;
     private handleStatusUsage;
     private handleListModels;
+    /**
+     * 2026-10-31 模型目录导出（给中继上报用）：复用 models.list 归一化逻辑。
+     */
+    exportModelCatalog(agentId?: string): Promise<Array<Record<string, unknown>>>;
     private handleSessionList;
     private handleSessionGet;
     private handleSessionsDescribe;

package/dist/src/services/services.js

@@ -35,15 +35,23 @@ export class ClawServices extends EventEmitter {
     usagePublisher;
     // 2026-10-27 审批事件推送（插件 → 中继），本地轮询发现新待审即上报
     approvalPublisher;
+    /** 2026-10-31 档位权限：应用 preset 前回调中继校验（fail-closed） */
+    permissionChecker;
+    /** 2026-10-31 模型授权：应用模型覆盖前回调中继校验 */
+    modelChecker;
+    /** 2026-10-31 档位下调兜底：每会话最多 60s 检查一次，避免每条消息都多两次调用 */
+    permCeilingCheckedAt = new Map();
     approvalTimer = null;
     approvalSeen = new Set();
     usageTimer = null;
-    constructor(options, logger, terminalSink, usagePublisher, approvalPublisher) {
+    constructor(options, logger, terminalSink, usagePublisher, approvalPublisher, permissionChecker, modelChecker) {
         super();
         this.options = options;
         this.logger = logger;
         this.usagePublisher = usagePublisher;
         this.approvalPublisher = approvalPublisher;
+        this.permissionChecker = permissionChecker;
+        this.modelChecker = modelChecker;
         this.terminalManager = new TerminalManager(terminalSink ?? (() => { }), (msg, type) => this.log(msg, type ?? 'info'));
     }
     /** 2026-10-27 每 10 秒本地查一次审批队列，出现新条目才推中继（推模式，非中继拉取） */
@@ -285,6 +293,10 @@ export class ClawServices extends EventEmitter {
                     result = await this.handleStatusUsage();
                     break;
                 // 模型管理
+                case 'models.catalog':
+                    // 2026-10-31 模型目录（给中继按需拉取）：包装成对象，避免 data 为数组导致中继反序列化失败
+                    result = { models: await this.handleListModels(cmdMessage.params) };
+                    break;
                 case 'models.list':
                     // 2026-09-06 适配 openclaw 9.2：models.list 需显式 agentId（多 agent 配置下无 owner 会报 INVALID_REQUEST）
                     result = await this.handleListModels(cmdMessage.params);
@@ -454,8 +466,52 @@ export class ClawServices extends EventEmitter {
         }
     }
     async handleAskAgent(params) {
+        // 2026-10-31 方案A：管理员调低上限后，已有会话在下次提问前自动降级（失败不影响发消息）
+        await this.enforcePermissionCeiling(params?.sessionKey);
         return await this.client?.askAgent(params);
     }
+    /**
+     * 2026-10-31 档位上限下调兜底。
+     * 只处理「会话显式设置过档位」的情况：读当前 permissionMode → 换回 presetId →
+     * 问中继是否仍允许；不允许则 patch 到 maxPresetId。任何异常都只记日志，不阻断。
+     */
+    async enforcePermissionCeiling(sessionKey) {
+        if (!sessionKey || !this.permissionChecker) {
+            return;
+        }
+        const now = Date.now();
+        const last = this.permCeilingCheckedAt.get(sessionKey) ?? 0;
+        if (now - last < 60_000) {
+            return;
+        }
+        this.permCeilingCheckedAt.set(sessionKey, now);
+        try {
+            const row = await this.client?.sessionsDescribe({ key: sessionKey });
+            const mode = row?.permissionMode ?? row?.session?.permissionMode ?? null;
+            if (!mode) {
+                return; // 继承态，没有显式档位
+            }
+            const presetId = Object.entries(ClawServices.PERMISSION_PRESETS).find(([, v]) => v === mode)?.[0];
+            if (!presetId || presetId === 'default') {
+                return;
+            }
+            const chk = await this.permissionChecker(sessionKey, presetId);
+            const payload = chk?.data ?? chk;
+            if (!payload || payload.allowed !== false) {
+                return;
+            }
+            const maxPresetId = String(payload.maxPresetId ?? 'guarded');
+            const maxMode = ClawServices.PERMISSION_PRESETS[maxPresetId];
+            if (!maxMode) {
+                return;
+            }
+            await this.client?.sessionsPatch({ key: sessionKey, patch: { permissionMode: maxMode } });
+            this.log('permission ceiling enforced: session=' + sessionKey + ' ' + presetId + ' -> ' + maxPresetId, 'warn');
+        }
+        catch (e) {
+            this.log('enforcePermissionCeiling failed, ignore: ' + String(e), 'warn');
+        }
+    }
     /**
      * 更新
      * @param agentId
@@ -470,6 +526,23 @@ export class ClawServices extends EventEmitter {
         if ((!provider || provider.length === 0 || !model || model.length === 0) && !thinkingLevel) {
             return null;
         }
+        // 2026-10-31 模型授权：应用覆盖前回调中继校验。
+        // 明确 denied 才拒绝；网络异常放行，避免中继短暂不可用时把人锁死。
+        if (provider && model && this.modelChecker) {
+            try {
+                const chk = await this.modelChecker(sessionKey, provider, model);
+                const payload = chk?.data ?? chk;
+                if (payload && payload.allowed === false) {
+                    throw new Error('model not authorized: ' + provider + '/' + model);
+                }
+            }
+            catch (e) {
+                if (String(e).includes('model not authorized')) {
+                    throw e;
+                }
+                this.log('modelCheck failed, allow: ' + String(e), 'warn');
+            }
+        }
         // 推理强度合法值校验（off/minimal/low/medium/high），非法值直接忽略
         const THINK_LEVELS = ['off', 'minimal', 'low', 'medium', 'high'];
         const thinkOverride = thinkingLevel && THINK_LEVELS.includes(thinkingLevel)
@@ -895,6 +968,19 @@ export class ClawServices extends EventEmitter {
         });
     }
     //#endregion
+    /**
+     * 2026-10-31 模型目录导出（给中继上报用）：复用 models.list 归一化逻辑。
+     */
+    async exportModelCatalog(agentId) {
+        try {
+            const res = await this.handleListModels(agentId ? { agentId } : undefined);
+            return Array.isArray(res) ? res : [];
+        }
+        catch (e) {
+            this.log('exportModelCatalog failed: ' + String(e), 'warn');
+            return [];
+        }
+    }
     //#region ===================== 会话处理器 ======================
     async handleSessionList(params) {
         return await this.client?.sessionsList(params);
@@ -1097,6 +1183,15 @@ export class ClawServices extends EventEmitter {
         if (!(presetId in ClawServices.PERMISSION_PRESETS)) {
             throw new Error('未知档位: ' + presetId);
         }
+        // 2026-10-31 档位权限：以中继判定为准，拒绝即中止（fail-closed）
+        if (this.permissionChecker) {
+            const chk = await this.permissionChecker(sessionKey, presetId);
+            const payload = chk?.data ?? chk;
+            if (payload?.allowed !== true) {
+                const reason = payload?.reason ?? chk?.error ?? 'permission denied';
+                throw new Error(`permissions.set denied: ${reason}`);
+            }
+        }
         const mode = ClawServices.PERMISSION_PRESETS[presetId];
         // 2026-10-27 写入后校验：网关可能返回 success=false 却不抛异常，也可能接受了但没落库
         const res = await this.client?.sessionsPatch({ key: sessionKey, patch: { permissionMode: mode } });

package/dist/src/services/types.d.ts

@@ -306,7 +306,7 @@ export interface CmdResult {
     timestamp: string | number;
     timezone: string;
 }
-export type CmdType = 'agent.ask' | 'agent.list' | 'agent.create' | 'agent.update' | 'agent.delete' | 'agent.get' | 'agent.stop' | 'chat.abort' | 'agent.capabilities' | 'permissions.get' | 'permissions.set' | 'approvals.pending' | 'approvals.resolve' | 'task.list' | 'task.create' | 'task.update' | 'task.delete' | 'task.run' | 'status.health' | 'status.system' | 'status.usage' | 'models.list' | 'sessions.list' | 'sessions.get' | 'sessions.describe' | 'sessions.resolve' | 'sessions.create' | 'sessions.archive' | 'sessions.restore' | 'sessions.delete' | 'sessions.reset' | 'sessions.patch' | 'sessions.currentModel' | 'sessions.abort' | 'terminal.open' | 'terminal.input' | 'terminal.resize' | 'terminal.close' | 'chat.history' | 'chat.trajectory' | 'skills.status' | 'skills.search' | 'skills.detail' | 'skills.install' | 'skills.update' | 'skills.securityVerdicts' | 'cancelMessage' | 'usage.cost' | 'sessions.usage' | 'sessions.usage.logs' | 'pairing.approve' | 'artifacts.list' | 'artifacts.get' | 'artifacts.download' | 'agents.files.list' | 'agents.files.get' | 'extCapabilities.status' | 'extCapabilities.check' | 'extCapabilities.install';
+export type CmdType = 'agent.ask' | 'agent.list' | 'agent.create' | 'agent.update' | 'agent.delete' | 'agent.get' | 'agent.stop' | 'chat.abort' | 'agent.capabilities' | 'permissions.get' | 'permissions.set' | 'approvals.pending' | 'approvals.resolve' | 'task.list' | 'task.create' | 'task.update' | 'task.delete' | 'task.run' | 'status.health' | 'status.system' | 'status.usage' | 'models.list' | 'models.catalog' | 'sessions.list' | 'sessions.get' | 'sessions.describe' | 'sessions.resolve' | 'sessions.create' | 'sessions.archive' | 'sessions.restore' | 'sessions.delete' | 'sessions.reset' | 'sessions.patch' | 'sessions.currentModel' | 'sessions.abort' | 'terminal.open' | 'terminal.input' | 'terminal.resize' | 'terminal.close' | 'chat.history' | 'chat.trajectory' | 'skills.status' | 'skills.search' | 'skills.detail' | 'skills.install' | 'skills.update' | 'skills.securityVerdicts' | 'cancelMessage' | 'usage.cost' | 'sessions.usage' | 'sessions.usage.logs' | 'pairing.approve' | 'artifacts.list' | 'artifacts.get' | 'artifacts.download' | 'agents.files.list' | 'agents.files.get' | 'extCapabilities.status' | 'extCapabilities.check' | 'extCapabilities.install';
 export type ReadlineType = Extract<CmdType, 'chat.trajectory'>;
 export interface ClawMessage {
     type: 'res' | 'event';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dlinkclaw-openclaw",
-  "version": "2026.10.27",
+  "version": "2026.10.28",
   "description": "DLinkClaw OpenClaw channel plugin — 朵联 OpenClaw 接入通道",
   "keywords": [
     "DLinkClaw",