dsh-im-union 0.0.0-stage → 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,44 @@
+# Changelog
+
+本项目版本号遵循语义化版本；发布面与宿主兼容矩阵见 `scripts/hosts.mjs`（README 管理块同源）。
+
+## 0.1.0（首个功能版，dist-tag=latest）
+
+M1–M3 代码侧全量：14 渠道协议层 + 跨版本窄腰 + 会话引擎 + 管理面。
+
+### Added
+
+- 渠道（P0）：微信 iLink（官方 ClawBot 协议 + 扫码绑定 UI）、飞书（WS 长连 + 流式卡片/逐步消息双档 + 语音档可选）、Telegram（长轮询 + 编辑流式）、Discord（Gateway v10 + 表格转竖排）、企微智能机器人（长连 + 思考中/工具进度原生显示）
+- 渠道（P1）：钉钉 stream + AI Card；QQ 官方 API v2（被动窗口）；Slack Socket Mode 零 SDK + thread 模型
+- 渠道（P2）：WhatsApp（Baileys，QR 配对 + auth 目录持久化）；Matrix（CS API，E2EE 两档诚实档位）；iMessage（仅 macOS，非 darwin 硬拒载）；企微自建应用（回调验签 + 加解密，webhook 白名单路由）
+- 能力：命令面板 24 命令（含 /fork /rename /delivery /export /speak /mute /goal）；审批与交互提问 IM 闭环（waterfall 返回即接管，fail-closed D5）；图片/文件输入（宿主元数据判视觉 E4）；产物文件回传；投递日志与断线补发（≤3 次，uncertain 绝不重发 D7）；超时迟到结果收割；主动投递目标库 + 双向同步；碎片续写（.. / !!）；引用上下文增强；会话标题渠道徽章
+- AI Office Connector：查实宿主无公开 connector 协议面 → 离线 Job 队列诚实档（https 强制/租约/审批/并发上限）
+
+### Fixed
+
+- Cordis ctx 代理未 inject 属性访问即抛（可选链拦不住）→ 窄腰全 try/catch 守卫
+- 静音判定吞掉 /mute 自身导致的永久静默死锁；/model 与投递链 selections 键不一致导致的视觉判定永命中 unknown
+
+### Changed
+
+- publishConfig.tag：next → latest；THIRD_PARTY_NOTICES 运行时依赖清单与实现对齐（纠未采纳的 SDK 列表）
+
+## 0.0.1（首发占位，tag=next）
+
+预发布占位版本，非推荐安装线；语义为「协议层与跨版本骨架完成、真机验收进行中」。
+
+### Added
+
+- 跨版本窄腰（host-compat）：services 能力探测冻结 / settings-compat 三态代际分派（gen1/gen2/gen3）/ session-api（宿主 @Remote request-object 主形 + 位置参回退）/ interaction（waterfall 返回即接管）/ fs-api
+- 会话引擎：每聊天串行队列、follow-before-prompt 投递状态机（assistant/message 按 step 聚合 → 流式快照）、turn/end 六因映射、看门狗兜底
+- 命令面板 15 命令（/help /status /new /stop /steer /models /model /reasoning /presets /preset /workspace(s) /session(s) /menu），能力缺位=降级文案不抛
+- P0 五渠道协议层（净室重实现）：微信 iLink（官方 ClawBot 协议：长轮询/context_token/AES-128-ECB CDN 全链/typing/扫码绑定）、Telegram（Bot API 长轮询+编辑流式+Markdown 回退链）、Discord（Gateway v10+Thread 模型+表格转竖排）、飞书（官方 SDK 长连接+逐步消息）、企业微信智能机器人（长连接 aibot 协议+stream 编辑流式）
+- 审批与交互提问 IM 闭环（once-settle 状态机、发起者限定、fail-closed、5 分钟取消）
+- 图片输入公共层（宿主 capability 元数据判视觉、三重预算、渠道图片下载）
+- 多账号管理：AccountManager（原子文件态、secret 单向入库、暂停/恢复/白名单/诊断）+ 管理 API（requestRejection/Host/Origin/Cookie 三查、零凭据回包）+ client 半账号 CRUD 面板（九语）
+- 门禁四件套：typecheck / 单测 164 项 / dist 冒烟 / hosts:check 单源下发；peer 全枚举 0.1.2-rc.1..0.2.1-rc.1（11 tag）
+
+### Known (intentionally pre-release)
+
+- 各渠道真机 round-trip 验收进行中（T1.10）
+- 飞书流式卡片档/QR 创建机器人、企微原生进度显示、微信设置页扫码 UI 流为后续迭代

package/LICENSE

@@ -0,0 +1,28 @@
+MIT License
+
+Copyright (c) 2026 dsh-im-union contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+---
+
+This project is a clean-room reimplementation of capabilities popularized by
+xmanrui/dsh-im (MIT) and MichengAI/dsh-im-connect (Apache-2.0). No source code
+was copied from either project; see THIRD_PARTY_NOTICES.md for attribution of
+protocol knowledge and external SDK dependencies.

package/README.en.md

@@ -0,0 +1,34 @@
+# dsh-im-union
+
+A union IM bridge for DeepSeek Harness — a clean-room reimplementation merging the capability sets of xmanrui/dsh-im and MichengAI/dsh-im-connect, with no source copied from either.
+
+<!-- host-compat:begin — generated by scripts/sync-hosts.mjs from scripts/hosts.mjs; DO NOT EDIT -->
+- **Supported DSH hosts:** `0.1.2-rc.1` `0.1.5-rc.1` `0.1.5-rc.2` `0.1.5-rc.3` `0.1.7-rc.1` `0.1.7-rc.2` `0.2.0-rc.1` `0.2.0-rc.2` `0.2.1-alpha.2` `0.2.1-alpha.3` `0.2.1-rc.1` (11 rc/alpha releases across lines 0.1.2 / 0.1.5 / 0.1.7 / 0.2.0 / 0.2.1)
+<!-- host-compat:end -->
+
+## Status
+
+**0.1.0 feature release**: all 14 P0/P1/P2 channel protocol layers, the cross-version narrow waist, session engine, approval/question IM loop and multi-account management are delivered (574 unit tests; host-farm smoke green on 0.1.2 / 0.1.5 / 0.1.7 / 0.2.1 lines). Outstanding real-device acceptance items are registered in CHANGELOG.
+
+Highlights:
+
+- **Channels**: WeChat (official iLink QR bind), Feishu/Lark (long-connection, streaming cards, optional voice tier), Telegram, Discord, WeCom intelligent bot, DingTalk (stream + AI Card), QQ official bot, Slack (Socket Mode, zero SDK), WhatsApp (Baileys QR pairing), Matrix, iMessage (macOS only), WeCom self-built app (signed callback webhook), and more; unconfigured channels load nothing (lazy imports).
+- **In-chat loop**: 24 commands (`/help /status /new /stop /steer /model(s) /reasoning /preset(s) /session(s) /workspace(s) /fork /rename /queue /mute /unbind /goal /delivery /export /speak /menu`); tool approvals and agent questions answered in the originating chat (deny-by-default, 5-minute expiry, initiator only).
+- **Cross-version**: settings surface auto-adapts gen1/gen2/gen3; capability probing only, never version branches.
+
+## Install
+
+```sh
+dsh plugin --profile web add dsh-im-union@latest --registry=https://registry.npmjs.org/
+```
+
+Then add accounts in the "IM union bridge" panel: most channels use credential binding (secrets are one-way into the vault and never echoed back); WeChat/WhatsApp use QR pairing; the WeCom self-built app channel requires pointing your callback URL (`/api/dsh-im-union/wecom-app/callback`) in its console. See `SECURITY.md` for the non-negotiable privacy red lines and `THIRD_PARTY_NOTICES.md` for the clean-room provenance.
+
+## Development
+
+```sh
+npm install
+npm run typecheck
+npm test
+node scripts/sync-hosts.mjs --write
+```

package/README.md

@@ -1,3 +1,34 @@
-# Temporary Holding Version
+# dsh-im-union
+
+DeepSeek Harness 的 IM 联合桥——净室重写，能力合集来自社区两仓（xmanrui/dsh-im 与 MichengAI/dsh-im-connect），不复制其源码。
+
+<!-- host-compat:begin — generated by scripts/sync-hosts.mjs from scripts/hosts.mjs; DO NOT EDIT -->
+- **支持的 DSH 宿主：** `0.1.2-rc.1` `0.1.5-rc.1` `0.1.5-rc.2` `0.1.5-rc.3` `0.1.7-rc.1` `0.1.7-rc.2` `0.2.0-rc.1` `0.2.0-rc.2` `0.2.1-alpha.2` `0.2.1-alpha.3` `0.2.1-rc.1`（覆盖 0.1.2 / 0.1.5 / 0.1.7 / 0.2.0 / 0.2.1 共 11 个 rc/alpha）
+<!-- host-compat:end -->
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+## 状态
+
+**0.1.0 功能版**：P0/P1/P2 十四渠道协议层、跨版本窄腰、会话引擎、审批/提问 IM 闭环、多账号管理面均已交付（单测 574 项；宿主农场 0.1.2/0.1.5/0.1.7/0.2.1 四线冒烟全绿）。真机验收项逐项登记在 CHANGELOG；能力分期见开发仓计划台账。
+
+能力总览：
+
+- **渠道**：微信（官方 iLink 扫码）、飞书（长连/流式卡片/语音档可选）、Telegram、Discord、企微智能机器人（长连）、钉钉（stream+AI Card）、QQ 官方机器人、Slack（Socket Mode）、WhatsApp（Baileys 扫码）、Matrix、iMessage（仅 macOS）、企微自建应用（回调）等；未配置渠道零依赖零加载（懒 import）。
+- **IM 内闭环**：24 命令面板（/help /status /new /stop /steer /model(s) /reasoning /preset(s) /session(s) /workspace(s) /fork /rename /queue /mute /unbind /goal /delivery /export /speak /menu）；工具审批与交互提问原聊天回答（默认拒绝、5 分钟超时、发起者限定）。
+- **跨版本**：设置面 gen1/gen2/gen3 三态自适配；能力探测优先，禁版本号分支。
+
+## 安装
+
+```sh
+dsh plugin --profile web add dsh-im-union@latest --registry=https://registry.npmjs.org/
+```
+
+装好后在宿主侧栏/设置页的「IM 联合桥」面板添加账号：大部分渠道走凭据绑定（Bot Token/App 凭据，secret 字段只单向入库不回显）；微信/WhatsApp 走扫码绑定；企微自建应用需将本插件管理面回调 URL（`/api/dsh-im-union/wecom-app/callback`）配入后台接收服务器。隐私与凭据红线见 `SECURITY.md`；第三方依赖声明见 `THIRD_PARTY_NOTICES.md`（净室重实现，不复制任何上游源码）。
+
+## 开发
+
+```sh
+npm install
+npm run typecheck
+npm test
+node scripts/sync-hosts.mjs --write   # 宿主版本声明单源下发
+```

package/SECURITY.md

@@ -0,0 +1,20 @@
+# Security policy (dsh-im-union)
+
+不可让渡红线（实现与评审均以此为准）：
+
+1. **凭据存储**：宿主 `ctx.credentials` 为主存储；仅当宿主无该服务时回退到
+   profile 目录下的文件 vault（原子写 tmp+rename、POSIX 0600 / Windows 继承 ACL）。
+   vault 文件损坏时抛错，**绝不覆盖唯一副本**。secret 单向提交给宿主，任何
+   RPC/HTTP 响应与状态接口不回传 token、secret、原始用户标识或内部异常细节。
+2. **管理 API**：`/api/dsh-im-union` 每个请求先过宿主 `connection.requestRejection`
+   （Host/trustedHosts + Origin + 登录 Cookie 三查）；`connection` 服务缺失时返回
+   503，**不降级为匿名可用**。写请求要求 `Content-Type: application/json` +
+   客户端标识头，body 上限 1 MiB；响应携带 `Cache-Control: no-store`。
+3. **工具审批**：审批只在任务发起的原聊天闭环处理；群聊仅接受任务发起者回复；
+   永不回退网页端处理；审批消息发送失败按拒绝处理；5 分钟无回复取消动作；
+   任何路径不自动恢复 allowAllUsers / 开放响应模式。
+4. **入站准入**：先验 userId；私聊白名单为空即拒；群聊仅响应显式 @ 本机器人。
+5. **投递语义**：平台接受 ≠ 已送达（Receipt）；发送结果不确定时不自动重发，
+   宁可漏发不双发。
+
+漏洞报告：仓库 GitHub Security Advisory。

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,37 @@
+# Third-party notices
+
+dsh-im-union is a clean-room reimplementation. No source code is copied from the
+projects below; capability inventory and public protocol knowledge informed
+this design, and the listed upstream SDKs are consumed as external npm
+dependencies only.
+
+## Prior art (capability references, code NOT derived from)
+
+- xmanrui/dsh-im — MIT License. Itself derives some protocol adapters from
+  Tencent/openclaw-weixin (MIT), DingTalk-Real-AI/dingtalk-openclaw-connector,
+  and @wecom/wecom-openclaw-cli (ISC); we re-implement against the same public
+  platform APIs without porting any of that code.
+- MichengAI/dsh-im-connect — Apache License 2.0 (includes the §3 patent grant
+  with retaliation termination; no code ported).
+
+## Runtime npm dependencies (consumed as-is, licenses per their packages)
+
+- @larksuiteoapi/node-sdk (MIT) — Feishu/Lark bot long-connection SDK (its WS
+  handshake/signature surface is a private protocol, so the official SDK is used
+  instead of a clean-room reimplementation; lazily imported)
+- @whiskeysockets/baileys (MPL-2.0) — WhatsApp Web multi-device protocol library
+  (lazily imported; only the WhatsApp channel touches it)
+- qrcode (MIT) — QR PNG data-URL rendering for the WeChat iLink / WhatsApp
+  scan-to-bind flows (lazily imported)
+
+Everything else (Telegram, Discord, Slack, QQ, DingTalk, WeCom bot long-connection,
+WeCom self-built app callback crypto, WeChat iLink transport, Matrix CS API) is
+implemented directly against public protocol documents with ZERO runtime
+dependencies (Node >= 22 global fetch/WebSocket + node:crypto/node:zlib only).
+Earlier drafts of this file listed dingtalk-stream, @wecom/aibot-node-sdk and
+@tencent-connect/qqbot-connector; those SDKs were never adopted — the respective
+channels are zero-dependency clean-room implementations (corrected at 0.1.0).
+
+Optional external tools: ffmpeg (system binary, spawned only when the Feishu
+voice tier is explicitly enabled; never bundled, never assumed present — the
+feature degrades honestly when missing).