dsh-qq-digest 0.1.0 → 0.1.1

package/README.md

@@ -148,9 +148,10 @@ core 纯净性检查锁定：`src/core/` 不许 import `node:fs` / 子进程 /
 
 ## 安装进 DSH
 
-这一步分两块，互不冲突（row id 不同）：
-
 ```bash
+# 0) （可选）从 npm 拿包，或直接把本仓库放到任意目录
+npm i dsh-qq-digest
+
 # 1) MCP 行：给模型用的四个只读工具
 node scripts/install.mjs --apply
 
@@ -158,6 +159,11 @@ node scripts/install.mjs --apply
 node scripts/link-profile.mjs --apply
 ```
 
+第 1 步还会把本机 qq-bridge 的位置写进 `<DSH_HOME>/qq-digest/bridge-root.txt`
+（源码里不硬编码任何绝对路径）。如果没自动找到，用 `--bridge-root=D:/path/to/qq-bridge` 指定。
+
+**包内不含任何作者的个人信息**：QQ 号、群号、用户目录都是脱敏后的假值或运行时解析。
+
 第 2 步**不走 pnpm**：本机 profile 的 `node_modules` 里有文件被占用
 （`@img/sharp-win32-x64` 会在 pnpm 重装时报 `ERR_PNPM_EPERM`），所以这里用
 junction + 手改 profile `package.json`（会自动备份），和本机 `dsh-instruction-memory` 的装法一致。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-qq-digest",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "只读的 DSH QQ 摘要插件：群聊默认全开、私聊默认全关且只能逐条打开；MCP 四个只读工具 + 设置页（选群/起名/定时/立即总结），零发送能力",
   "type": "module",
   "license": "MIT",
@@ -51,6 +51,7 @@
   "files": [
     "lib",
     "src",
+    "scripts",
     "install",
     "cordis.patch.yml",
     "README.md",

package/scripts/check-all.mjs

@@ -0,0 +1,169 @@
+#!/usr/bin/env node
+/**
+ * 全量自检：把「插件在 DSH 里到底通不通」一次跑完。
+ *
+ * 只做只读探测 + 三个必然失败的写入（用来验证拒绝路径），不改动你的真实配置。
+ *
+ * 用法：node scripts/check-all.mjs [端口]
+ */
+
+import { existsSync, readFileSync, statSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { homedir } from 'node:os';
+
+const root = dirname(dirname(fileURLToPath(import.meta.url)));
+const PORTS = process.argv[2] ? [Number(process.argv[2])] : [4845, 8784, 1402, 14802];
+const DATA_DIR = join(process.env.DSH_HOME?.trim() || join(homedir(), '.dsh'), 'qq-digest');
+
+let failures = 0;
+const ok = (label, detail) => console.log(`PASS  ${label}${detail ? `  ${detail}` : ''}`);
+const bad = (label, detail) => { console.log(`FAIL  ${label}${detail ? `  ${detail}` : ''}`); failures += 1; };
+const info = (label, detail) => console.log(`INFO  ${label}${detail ? `  ${detail}` : ''}`);
+
+// ── 1. 静态：源码完整性 ───────────────────────────────────────────────────
+for (const file of ['lib/index.js', 'lib/client.js', 'src/config.js', 'src/runtime.js', 'src/service.js', 'package.json', 'cordis.patch.yml']) {
+  if (existsSync(join(root, file))) ok(`文件存在 ${file}`);
+  else bad(`缺文件 ${file}`);
+}
+
+const manifest = JSON.parse(readFileSync(join(root, 'package.json'), 'utf8'));
+if (manifest.dsh?.bundle?.patch) ok('manifest: dsh.bundle.patch', manifest.dsh.bundle.patch);
+else bad('manifest 缺 dsh.bundle.patch');
+if (manifest.dsh?.client?.platform === 'web') ok('manifest: dsh.client.platform', 'web');
+else bad('manifest 缺 dsh.client.platform');
+if (Array.isArray(manifest.dsh?.client?.inject) && manifest.dsh.client.inject.length > 0) {
+  ok('manifest: dsh.client.inject', manifest.dsh.client.inject.length + ' 个依赖');
+} else bad('manifest 缺 dsh.client.inject');
+
+const patch = readFileSync(join(root, 'cordis.patch.yml'), 'utf8');
+if (/-\s*insert:/.test(patch) && /name:\s*dsh-qq-digest/.test(patch)) ok('bundle patch 形态正确');
+else bad('bundle patch 形态不对');
+
+// ── 2. profile 接线 ──────────────────────────────────────────────────────
+const profileDir = join(process.env.DSH_HOME?.trim() || join(homedir(), '.dsh'), 'profiles', 'desktop');
+try {
+  const profilePkg = JSON.parse(readFileSync(join(profileDir, 'package.json'), 'utf8'));
+  if (profilePkg.dsh?.profile?.bundles?.includes('dsh-qq-digest')) ok('profile 已登记 bundle');
+  else bad('profile 未登记 bundle');
+  if (profilePkg.dependencies?.['dsh-qq-digest']) ok('profile 已登记依赖', profilePkg.dependencies['dsh-qq-digest']);
+  else bad('profile 未登记依赖');
+
+  const linkPath = join(profileDir, 'node_modules', 'dsh-qq-digest');
+  if (existsSync(linkPath)) ok('junction 存在');
+  else bad('junction 不存在');
+} catch (err) {
+  bad('读不到 profile', String(err.message));
+}
+
+// ── 3. 宿主半在线与状态形状 ──────────────────────────────────────────────
+let base = null;
+for (const port of PORTS) {
+  try {
+    const res = await fetch(`http://127.0.0.1:${port}/qq-digest-api/state`, {
+      headers: { accept: 'application/json' },
+      signal: AbortSignal.timeout(6000),
+    });
+    if (res.status === 200) { base = `http://127.0.0.1:${port}`; break; }
+  } catch { /* 下一个端口 */ }
+}
+
+if (base === null) {
+  bad('宿主半不在线（DSH 没跑，或 bundle 没加载）');
+} else {
+  ok('宿主半在线', base);
+  const state = await (await fetch(`${base}/qq-digest-api/state`, { headers: { accept: 'application/json' } })).json();
+  const newHost = typeof state.groupsEnabled === 'boolean';
+
+  if (typeof state.groupsEnabled === 'boolean') ok('状态含群聊总开关', String(state.groupsEnabled));
+  else bad('状态缺 groupsEnabled —— 宿主半还是旧版本，需要重启');
+
+  if (Array.isArray(state.privateRooms)) {
+    ok('状态含私聊列表', `${state.privateRooms.length} 条，打开 ${state.privateRooms.filter((r) => r.enabled).length} 条`);
+    const named = state.privateRooms.filter((r) => r.named);
+    info('已命名的私聊', named.length ? named.map((r) => `${r.qq}→${r.name}`).join(', ') : '(无)');
+  } else bad('状态缺 privateRooms —— 宿主半还是旧版本');
+
+  info('群列表', (state.rooms ?? []).map((r) => `${r.title ?? r.groupId}${r.enabled ? '' : '(关)'}`).join(' / ') || '(空)');
+  info('摘要器', state.summarizer);
+  info('定时', JSON.stringify(state.schedule));
+  info('客户端心跳', JSON.stringify(state.clientBoot ?? null));
+
+  if (state.clientBoot === undefined) {
+    info('clientBoot', '旧版宿主没有这个字段（重启后才有），不代表客户端有问题');
+  } else if (state.clientBoot?.mountedAt) {
+    ok('客户端半已注册设置页');
+  } else if (state.clientBoot?.factoryAt) {
+    bad('客户端半执行了但没注册上', state.clientBoot.lastError ?? state.clientBoot.lastPhase);
+  } else {
+    bad('客户端半没有任何心跳（bundle 没执行）');
+  }
+
+  if (state.policyDegraded) bad('策略降级（配置损坏 → 全关）', state.configError);
+  else ok('策略正常（未降级）');
+
+  if (state.adapterError) bad('数据源报错', state.adapterError.message);
+  else ok('数据源无报错');
+
+  // 拒绝路径：这三个都必须在落盘前被拒
+  const post = async (path, body) => {
+    const res = await fetch(`${base}${path}`, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify(body),
+    });
+    return { status: res.status, json: await res.json().catch(() => ({})) };
+  };
+
+  const badGroup = await post('/qq-digest-api/config', { groups: { 'private:88880001': { enabled: true } } });
+  if (badGroup.status === 400) ok('群列表里塞私聊 id → 400');
+  else bad('群列表里塞私聊 id 没被拒', badGroup.status);
+
+  const badTime = await post('/qq-digest-api/config', { schedule: { enabled: true, kind: 'daily', time: '25:99', weekdays: ['MO'], timeZone: 'Asia/Shanghai' } });
+  if (badTime.status === 400) ok('非法定时时间 → 400');
+  else bad('非法定时时间没被拒', badTime.status);
+
+  const badPrivate = newHost
+    ? await post('/qq-digest-api/config', { private: { abc: { enabled: true } } })
+    : null;
+  if (badPrivate === null) info('跳过私聊键校验', '宿主半是旧版本，还没有 private 字段');
+  else if (badPrivate.status === 400) ok('私聊键不是 QQ 号 → 400');
+  else bad('非法私聊键没被拒', badPrivate.status);
+
+  const badDigest = await fetch(`${base}/qq-digest-api/digest?group=private:1`);
+  if (badDigest.status === 400) ok('按私聊取摘要 → 400');
+  else bad('按私聊取摘要没被拒', badDigest.status);
+
+  const notFound = await fetch(`${base}/qq-digest-api/nope`);
+  if (notFound.status === 404) ok('未知路径 → 404');
+  else bad('未知路径返回异常', notFound.status);
+}
+
+// ── 4. 落盘 ──────────────────────────────────────────────────────────────
+for (const [name, label] of [['config.json', '配置'], ['digests.jsonl', '摘要'], ['watermarks.json', '水位线'], ['client-boot.json', '客户端心跳']]) {
+  const file = join(DATA_DIR, name);
+  if (!existsSync(file)) { info(`${label}文件`, `${name} 不存在`); continue; }
+  const size = statSync(file).size;
+  if (name.endsWith('.jsonl')) {
+    const lines = readFileSync(file, 'utf8').split('\n').filter(Boolean).length;
+    info(`${label}文件`, `${name} ${lines} 行 / ${size}B`);
+  } else {
+    info(`${label}文件`, `${name} ${size}B`);
+  }
+}
+
+if (existsSync(join(DATA_DIR, 'config.json'))) {
+  const cfg = JSON.parse(readFileSync(join(DATA_DIR, 'config.json'), 'utf8'));
+  info('配置内容', JSON.stringify({
+    groupsEnabled: cfg.groupsEnabled,
+    groups: Object.keys(cfg.groups ?? {}).length,
+    private: Object.entries(cfg.private ?? {}).filter(([, v]) => v.enabled).length + ' 条打开',
+    summarizer: cfg.summarizer,
+  }));
+  if (cfg.private && Object.values(cfg.private).some((v) => v.enabled === true)) {
+    info('注意', '有私聊处于打开状态（这是你显式设的，不是默认）');
+  }
+}
+
+console.log(`\n${failures === 0 ? '全部通过' : `${failures} 项失败`}`);
+process.exit(failures === 0 ? 0 : 1);

package/scripts/check-core-purity.mjs

@@ -0,0 +1,70 @@
+#!/usr/bin/env node
+/**
+ * core 层静态检查：纯逻辑层不许碰网络、子进程、文件系统写入，
+ * 也不许出现任何「发送」符号。
+ *
+ * 这不是风格检查，是安全边界检查：
+ * core 是唯一做裁决的地方，它如果能触网或写盘，
+ * 「只读」就从机制退化成一句承诺。
+ */
+
+import { readdirSync, readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+import { validateToolSurface, TOOLS } from '../src/core/toolSurface.js';
+
+const root = dirname(dirname(fileURLToPath(import.meta.url)));
+const coreDir = join(root, 'src', 'core');
+
+const FORBIDDEN_IMPORTS = [
+  "node:fs",
+  "node:child_process",
+  "node:net",
+  "node:http",
+  "node:https",
+  "node:dns",
+  "node:tls",
+  "node:worker_threads",
+];
+
+const FORBIDDEN_TOKENS = [
+  /\bfetch\s*\(/,
+  /\bsend_message\b/,
+  /\bsend_group_msg\b/,
+  /\bsend_private_msg\b/,
+  /\bsendGroup\s*\(/,
+  /\bsendPrivate\s*\(/,
+  /\bmark_read\b/,
+  /\/api\/send/,
+  /\bwriteFileSync\b/,
+  /\bappendFileSync\b/,
+  /\bexecSync\b/,
+  /\bspawnSync\b/,
+];
+
+const violations = [];
+
+const files = readdirSync(coreDir).filter((name) => name.endsWith('.js'));
+for (const name of files) {
+  const text = readFileSync(join(coreDir, name), 'utf8');
+  for (const specifier of FORBIDDEN_IMPORTS) {
+    if (text.includes(`'${specifier}'`) || text.includes(`"${specifier}"`)) {
+      violations.push(`${name}: 不许 import ${specifier}`);
+    }
+  }
+  for (const pattern of FORBIDDEN_TOKENS) {
+    if (pattern.test(text)) violations.push(`${name}: 命中禁止符号 ${pattern}`);
+  }
+}
+
+const surface = validateToolSurface(TOOLS);
+for (const violation of surface.violations) violations.push(`toolSurface: ${violation}`);
+
+if (violations.length > 0) {
+  console.error('core 纯净性检查失败：');
+  for (const violation of violations) console.error(`  - ${violation}`);
+  process.exit(1);
+}
+
+console.log(`core 纯净性检查通过：${files.length} 个文件，0 违规；工具面 ${TOOLS.length} 个工具，0 违规。`);

package/scripts/host-smoke.mjs

@@ -0,0 +1,186 @@
+#!/usr/bin/env node
+/**
+ * 宿主半冒烟：不启动 DSH，直接用一个假 ctx 把 apply() 跑起来，
+ * 再对着它注册的 HTTP 路由发真实的 req/res 对象。
+ *
+ * 这能提前抓到「路由没注册 / 路径写错 / JSON 形状不对 / 私聊没被拒」，
+ * 不必等到重启 DSH 之后才在设置页里发现。
+ */
+
+import { mkdtempSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { Readable } from 'node:stream';
+
+const dataDir = mkdtempSync(join(tmpdir(), 'qq-digest-host-'));
+process.env.QQ_DIGEST_DATA_DIR = dataDir;
+process.env.QQ_DIGEST_SOURCE = process.env.QQ_DIGEST_SOURCE || 'fixture';
+
+const { apply } = await import('../lib/index.js');
+
+let captured = null;
+const ctx = {
+  webServer: {
+    register(options) {
+      captured = options;
+      return () => {};
+    },
+  },
+  effect(fn) {
+    const disposer = fn();
+    return () => {};
+  },
+  get() {
+    return undefined;
+  },
+  logger: { info() {}, warn() {} },
+};
+
+apply(ctx);
+
+if (captured === null) {
+  console.error('FAIL: 没有注册任何路由');
+  process.exit(1);
+}
+if (captured.kind !== 'prefix' || captured.path !== '/qq-digest-api') {
+  console.error(`FAIL: 路由形状不对 ${JSON.stringify({ kind: captured.kind, path: captured.path })}`);
+  process.exit(1);
+}
+
+function request(handler, { method = 'GET', url, body }) {
+  return new Promise((resolve, reject) => {
+    const req = new Readable({ read() {} });
+    req.method = method;
+    req.url = url;
+    req.socket = { remoteAddress: '127.0.0.1' };
+    if (body !== undefined) req.push(JSON.stringify(body));
+    req.push(null);
+
+    const chunks = [];
+    const res = {
+      statusCode: 200,
+      headers: {},
+      writeHead(status, headers) {
+        this.statusCode = status;
+        this.headers = headers ?? {};
+      },
+      end(chunk) {
+        if (chunk) chunks.push(Buffer.from(chunk));
+        const text = Buffer.concat(chunks).toString('utf8');
+        try {
+          resolve({ status: this.statusCode, json: JSON.parse(text) });
+        } catch {
+          reject(new Error(`非 JSON 响应：${text.slice(0, 200)}`));
+        }
+      },
+    };
+
+    handler(req, res);
+  });
+}
+
+const results = [];
+function check(name, condition, detail) {
+  results.push({ name, ok: Boolean(condition), detail });
+}
+
+const state = await request(captured.handler, { url: '/qq-digest-api/state' });
+check('GET /state 返回 200', state.status === 200, state.status);
+check('状态里有 groups 数组', Array.isArray(state.json.rooms), typeof state.json.rooms);
+check('只暴露群', (state.json.rooms ?? []).every((room) => /^\d+$/.test(String(room.groupId))), JSON.stringify(state.json.rooms?.slice(0, 2)));
+check('fixture 下应看到 2 个群', (state.json.rooms ?? []).length === 2, (state.json.rooms ?? []).length);
+check('默认群聊总开关是开的', state.json.groupsEnabled === true, state.json.groupsEnabled);
+check('私聊单独成列且默认全关', Array.isArray(state.json.privateRooms) && state.json.privateRooms.length === 1 && state.json.privateRooms[0].enabled === false, JSON.stringify(state.json.privateRooms));
+
+const saved = await request(captured.handler, {
+  method: 'POST',
+  url: '/qq-digest-api/config',
+  body: { groups: { '100000': { enabled: false } }, summarizer: 'heuristic', schedule: { enabled: true, kind: 'daily', time: '09:30', weekdays: ['MO'], timeZone: 'Asia/Shanghai' } },
+});
+check('POST /config 保存成功', saved.status === 200 && saved.json.ok === true, saved.status);
+check('关掉的群出现在配置里', saved.json.config?.groups?.['group:100000']?.enabled === false, JSON.stringify(saved.json.config?.groups));
+check('定时时间被保存', saved.json.config?.schedule?.time === '09:30', saved.json.config?.schedule?.time);
+
+const afterSave = await request(captured.handler, { url: '/qq-digest-api/state' });
+const closed = (afterSave.json.rooms ?? []).find((room) => room.groupId === '100000');
+check('关掉的群在列表里标记为关闭', closed?.enabled === false, JSON.stringify(closed));
+
+const privateAttempt = await request(captured.handler, {
+  method: 'POST',
+  url: '/qq-digest-api/config',
+  body: { groups: { '88880001-private': { enabled: true }, 'private:88880001': { enabled: true } } },
+});
+check('私聊 id 被拒（400）', privateAttempt.status === 400, `${privateAttempt.status} ${JSON.stringify(privateAttempt.json)}`);
+
+const badTime = await request(captured.handler, {
+  method: 'POST',
+  url: '/qq-digest-api/config',
+  body: { groups: {}, summarizer: 'heuristic', schedule: { enabled: true, kind: 'daily', time: '9:3', weekdays: ['MO'], timeZone: 'Asia/Shanghai' } },
+});
+check('非法时间被拒（400）', badTime.status === 400, `${badTime.status} ${JSON.stringify(badTime.json)}`);
+
+const privSave = await request(captured.handler, {
+  method: 'POST',
+  url: '/qq-digest-api/config',
+  body: { groupsEnabled: false, groups: {}, private: { '88880001': { enabled: true, name: '测试私聊' } }, summarizer: 'heuristic', schedule: { enabled: false, kind: 'daily', time: '09:00', weekdays: ['MO'], timeZone: 'Asia/Shanghai' } },
+});
+check('可以逐条打开私聊', privSave.status === 200, privSave.status);
+check('总开关可以关掉', privSave.json.state?.groupsEnabled === false, privSave.json.state?.groupsEnabled);
+check('私聊开关落盘', privSave.json.state?.privateRooms?.[0]?.enabled === true, JSON.stringify(privSave.json.state?.privateRooms));
+check('私聊名字落盘', privSave.json.state?.privateRooms?.[0]?.name === '测试私聊', privSave.json.state?.privateRooms?.[0]?.name);
+
+const blockedRun = await request(captured.handler, { method: 'POST', url: '/qq-digest-api/run', body: {} });
+const blockedDenied = (blockedRun.json?.result?.denied ?? []).filter((item) => item.reason === 'GROUP_DISABLED');
+check('总开关关掉后所有群都被拒（单群覆盖也失效）', blockedDenied.length === 2, blockedDenied.length);
+
+const restore = await request(captured.handler, {
+  method: 'POST',
+  url: '/qq-digest-api/config',
+  body: { groupsEnabled: true, groups: {}, private: { '88880001': { enabled: false } }, summarizer: 'heuristic', schedule: { enabled: false, kind: 'daily', time: '09:00', weekdays: ['MO'], timeZone: 'Asia/Shanghai' } },
+});
+check('可以再恢复默认', restore.status === 200 && restore.json.state?.groupsEnabled === true, restore.status);
+
+const run = await request(captured.handler, { method: 'POST', url: '/qq-digest-api/run', body: {} });
+check('POST /run 返回结果', run.status === 200 && typeof run.json.result?.status === 'string', JSON.stringify(run.json.result?.status));
+
+const digest = await request(captured.handler, { url: '/qq-digest-api/digest?group=70001111' });
+check('GET /digest 只认群号', digest.status === 200 || digest.json.digest === null, digest.status);
+
+const privateDigest = await request(captured.handler, { url: '/qq-digest-api/digest?group=private%3A1' });
+check('私聊句柄读不到摘要（400）', privateDigest.status === 400, privateDigest.status);
+
+// 客户端半心跳：证明「设置页看不见」时能分清是哪一层的问题
+const bootFactory = await request(captured.handler, { method: 'POST', url: '/qq-digest-api/client-boot', body: { phase: 'factory' } });
+check('POST /client-boot 接受 factory 心跳', bootFactory.status === 200, bootFactory.status);
+const bootMounted = await request(captured.handler, { method: 'POST', url: '/qq-digest-api/client-boot', body: { phase: 'mounted', sectionId: 'qq-digest' } });
+check('POST /client-boot 接受 mounted 心跳', bootMounted.status === 200, bootMounted.status);
+const withBoot = await request(captured.handler, { url: '/qq-digest-api/state' });
+check('状态里回显客户端心跳', Boolean(withBoot.json.clientBoot?.factoryAt && withBoot.json.clientBoot?.mountedAt), JSON.stringify(withBoot.json.clientBoot));
+
+const notFound = await request(captured.handler, { url: '/qq-digest-api/nope' });
+check('未知路径 404', notFound.status === 404, notFound.status);
+
+// 重名：群和私聊同名必须被拒（放在最后，避免改动状态影响前面的用例）
+const dupSave = await request(captured.handler, {
+  method: 'POST',
+  url: '/qq-digest-api/config',
+  body: { groupsEnabled: true, groups: { '100000': { enabled: true, name: '重名' } }, private: { '88880001': { enabled: false, name: '重名' } }, summarizer: 'heuristic', schedule: { enabled: false, kind: 'daily', time: '09:00', weekdays: ['MO'], timeZone: 'Asia/Shanghai' } },
+});
+check('群与私聊同名 → 400', dupSave.status === 400 && String(dupSave.json.error ?? '').includes('DUPLICATE_NAME'), `${dupSave.status} ${JSON.stringify(dupSave.json)}`);
+
+const uniqueSave = await request(captured.handler, {
+  method: 'POST',
+  url: '/qq-digest-api/config',
+  body: { groupsEnabled: true, groups: { '100000': { enabled: true, name: '甲' } }, private: { '88880001': { enabled: false, name: '乙' } }, summarizer: 'heuristic', schedule: { enabled: false, kind: 'daily', time: '09:00', weekdays: ['MO'], timeZone: 'Asia/Shanghai' } },
+});
+check('名字互不相同 → 200', uniqueSave.status === 200, uniqueSave.status);
+
+for (const result of results) {
+  console.log(`${result.ok ? 'PASS' : 'FAIL'}  ${result.name}${result.detail === undefined ? '' : `  (${result.detail})`}`);
+}
+
+rmSync(dataDir, { recursive: true, force: true });
+
+const failed = results.filter((result) => !result.ok).length;
+console.log(`\n${results.length - failed}/${results.length} 通过`);
+process.exit(failed === 0 ? 0 : 1);

package/scripts/install.mjs

@@ -0,0 +1,123 @@
+#!/usr/bin/env node
+/**
+ * 把 qq-digest 接进 DSH profile —— 只做**本机接线**，不改任何源码。
+ *
+ * 做三件事：
+ *   1) 在 profile 的 cordis.patch.yml 里维护一段带标记的区块，插入 MCP 行；
+ *   2) 把本仓库的真实路径替换进安装片段（模板里是 __PACKAGE_ROOT__ 占位符，
+ *      这样仓库本身不携带作者机器的绝对路径）；
+ *   3) 把本机 qq-bridge 的位置写进 <DSH_HOME>/qq-digest/bridge-root.txt，
+ *      插件运行时靠它找到桥接（源码里不硬编码任何绝对路径）。
+ *
+ * 用法：
+ *   node scripts/install.mjs                      # 预览
+ *   node scripts/install.mjs --apply              # 写入（自动备份）
+ *   node scripts/install.mjs --apply --profile desktop
+ *   node scripts/install.mjs --apply --remove     # 移除 MCP 行
+ *   node scripts/install.mjs --apply --bridge-root=D:/path/to/qq-bridge
+ */
+
+import { copyFileSync, existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { homedir } from 'node:os';
+
+const root = dirname(dirname(fileURLToPath(import.meta.url)));
+
+const args = process.argv.slice(2);
+const apply = args.includes('--apply');
+const remove = args.includes('--remove');
+const profileArg = args.find((arg) => arg.startsWith('--profile='));
+const bridgeArg = args.find((arg) => arg.startsWith('--bridge-root='));
+const profile = profileArg ? profileArg.split('=')[1] : process.env.DSH_PROFILE || 'desktop';
+
+const BEGIN = '# === qq-digest MCP BEGIN ===';
+const END = '# === qq-digest MCP END ===';
+const BRIDGE_ROOT_FILE = 'bridge-root.txt';
+
+function resolveDshHome(env = process.env) {
+  const fromEnv = env.DSH_HOME;
+  if (typeof fromEnv === 'string' && fromEnv.trim() !== '') return resolve(fromEnv.trim());
+  return join(homedir(), '.dsh');
+}
+
+/** 找一个真实存在的 qq-bridge 目录（有 state/console-token 才算）。 */
+function detectBridgeRoot(explicit) {
+  const candidates = [
+    explicit,
+    process.env.QQ_DIGEST_BRIDGE_ROOT,
+    join(homedir(), 'AI', 'qq-bridge'),
+    process.env.USERNAME ? `D:/Users/${process.env.USERNAME}/AI/qq-bridge` : null,
+    process.env.USERNAME ? `C:/Users/${process.env.USERNAME}/AI/qq-bridge` : null,
+  ].filter((value) => typeof value === 'string' && value.trim() !== '');
+
+  for (const candidate of candidates) {
+    if (existsSync(join(candidate, 'state', 'console-token'))) return resolve(candidate);
+  }
+  return null;
+}
+
+const dshHome = resolveDshHome();
+const dataDir = join(dshHome, 'qq-digest');
+const patchFile = join(dshHome, 'profiles', profile, 'cordis.patch.yml');
+const bridgeRoot = detectBridgeRoot(bridgeArg ? bridgeArg.split('=').slice(1).join('=') : null);
+
+if (!existsSync(patchFile)) {
+  console.error(`找不到 profile 配置：${patchFile}`);
+  process.exit(1);
+}
+
+const fragment = readFileSync(join(root, 'install', 'cordis.patch.fragment.yml'), 'utf8');
+const block = fragment.replace(/__PACKAGE_ROOT__/g, root.replace(/\\/g, '/')).trimEnd();
+
+const current = readFileSync(patchFile, 'utf8');
+
+function stripBlock(text) {
+  const begin = text.indexOf(BEGIN);
+  if (begin === -1) return text;
+  const end = text.indexOf(END);
+  if (end === -1) return text;
+  return `${text.slice(0, begin)}${text.slice(end + END.length)}`.replace(/\n{3,}/g, '\n\n').trimEnd();
+}
+
+const withoutBlock = stripBlock(current);
+const next = remove ? `${withoutBlock}\n` : `${withoutBlock}\n\n${block}\n`;
+const changed = next !== current;
+
+console.log(`profile     = ${profile}`);
+console.log(`patch       = ${patchFile}`);
+console.log(`packageRoot = ${root.replace(/\\/g, '/')}`);
+console.log(`bridgeRoot  = ${bridgeRoot ?? '(没找到；插件会退回 ~/AI/qq-bridge)'}`);
+console.log(`action      = ${remove ? '移除 qq-digest 行' : '写入/更新 qq-digest 行'}`);
+console.log(`patch 变化  = ${changed ? 'yes' : 'no（已是目标状态）'}`);
+
+if (!apply) {
+  console.log('（预览模式：没有写入。加 --apply 才真正落盘。）');
+  process.exit(0);
+}
+
+if (changed) {
+  const backup = `${patchFile}.bak-${new Date().toISOString().replace(/[:.]/g, '-')}`;
+  copyFileSync(patchFile, backup);
+  writeFileSync(patchFile, next, 'utf8');
+  console.log(`已写入。备份：${backup}`);
+} else {
+  console.log('profile patch 无需改动。');
+}
+
+// 本机桥接位置：只写一次，不覆盖用户已有设置
+if (!remove) {
+  const bridgeFile = join(dataDir, BRIDGE_ROOT_FILE);
+  if (bridgeRoot === null) {
+    console.log(`跳过 ${BRIDGE_ROOT_FILE}：没检测到 qq-bridge（可用 --bridge-root=... 指定）`);
+  } else if (existsSync(bridgeFile)) {
+    console.log(`${BRIDGE_ROOT_FILE} 已存在，保持不动：${bridgeFile}`);
+  } else {
+    const { mkdirSync } = await import('node:fs');
+    mkdirSync(dataDir, { recursive: true });
+    writeFileSync(bridgeFile, `${bridgeRoot.replace(/\\/g, '/')}\n`, 'utf8');
+    console.log(`已记录桥接位置：${bridgeFile}`);
+  }
+}
+
+console.log('重启 DSH 后生效（MCP 行通常可热加载，bundle 行需要重启）。');

package/scripts/link-profile.mjs

@@ -0,0 +1,96 @@
+#!/usr/bin/env node
+/**
+ * 把本包挂进 DSH profile —— 不经过 pnpm。
+ *
+ * 为什么不用 plugin_manager 的 install_bundle：本机 profile 的 node_modules 里有
+ * 文件被占用（@img/sharp-win32-x64 EPERM），pnpm 一跑就整批重装并中途失败。
+ * 这里只做两件不依赖网络的事：
+ *   1) 在 profile 的 node_modules 里建一个 junction 指向本仓库；
+ *   2) 在 profile 的 package.json 里登记依赖与 bundle 名单。
+ *
+ * 用法：
+ *   node scripts/link-profile.mjs            # 预览
+ *   node scripts/link-profile.mjs --apply    # 写入（自动备份 package.json）
+ *   node scripts/link-profile.mjs --apply --profile desktop
+ *   node scripts/link-profile.mjs --apply --remove
+ */
+
+import { copyFileSync, existsSync, lstatSync, readFileSync, rmSync, symlinkSync } from 'node:fs';
+import { writeFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { homedir } from 'node:os';
+
+const root = dirname(dirname(fileURLToPath(import.meta.url)));
+const PACKAGE_NAME = 'dsh-qq-digest';
+
+const args = process.argv.slice(2);
+const apply = args.includes('--apply');
+const remove = args.includes('--remove');
+const profileArg = args.find((arg) => arg.startsWith('--profile='));
+const profile = profileArg ? profileArg.split('=')[1] : process.env.DSH_PROFILE || 'desktop';
+
+function resolveDshHome() {
+  const fromEnv = process.env.DSH_HOME;
+  if (typeof fromEnv === 'string' && fromEnv.trim() !== '') return resolve(fromEnv.trim());
+  return join(homedir(), '.dsh');
+}
+
+const profileDir = join(resolveDshHome(), 'profiles', profile);
+const manifestPath = join(profileDir, 'package.json');
+const linkPath = join(profileDir, 'node_modules', PACKAGE_NAME);
+
+if (!existsSync(manifestPath)) {
+  console.error(`找不到 profile：${manifestPath}`);
+  process.exit(1);
+}
+
+const manifest = JSON.parse(readFileSync(manifestPath, 'utf8'));
+const deps = manifest.dependencies ?? {};
+const bundles = manifest.dsh?.profile?.bundles ?? [];
+
+const linkSpec = `link:${root.replace(/\\/g, '/')}`;
+const linked = existsSync(linkPath) && lstatSync(linkPath).isSymbolicLink();
+
+console.log(`profile   = ${profile}`);
+console.log(`package   = ${root}`);
+console.log(`junction  = ${linkPath}${linked ? '（已存在）' : '（待创建）'}`);
+console.log(`dep       = ${deps[PACKAGE_NAME] ?? '(未登记)'} → ${remove ? '(移除)' : linkSpec}`);
+console.log(`bundles   = ${bundles.includes(PACKAGE_NAME) ? '已登记' : '未登记'}`);
+
+if (!apply) {
+  console.log('（预览模式：没有写入。加 --apply 才真正落盘。）');
+  process.exit(0);
+}
+
+if (remove) {
+  if (linked) rmSync(linkPath, { recursive: false, force: true });
+  delete deps[PACKAGE_NAME];
+  manifest.dependencies = deps;
+  if (manifest.dsh?.profile) {
+    manifest.dsh.profile.bundles = bundles.filter((name) => name !== PACKAGE_NAME);
+  }
+} else {
+  if (!linked) {
+    if (existsSync(linkPath)) {
+      console.error(`目标已存在且不是 junction：${linkPath}（先手动确认再处理）`);
+      process.exit(1);
+    }
+    symlinkSync(root, linkPath, 'junction');
+    console.log('已创建 junction');
+  }
+  deps[PACKAGE_NAME] = linkSpec;
+  manifest.dependencies = deps;
+  manifest.dsh = manifest.dsh ?? {};
+  manifest.dsh.profile = manifest.dsh.profile ?? {};
+  const nextBundles = bundles.includes(PACKAGE_NAME) ? bundles : [...bundles, PACKAGE_NAME];
+  manifest.dsh.profile.bundles = nextBundles;
+}
+
+const backup = `${manifestPath}.bak-${new Date().toISOString().replace(/[:.]/g, '-')}`;
+copyFileSync(manifestPath, backup);
+writeFileSync(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`, 'utf8');
+
+console.log(`已写入 ${manifestPath}`);
+console.log(`备份：${backup}`);
+console.log('重启 DSH 后生效（bundle 的客户端半在启动时随页加载）。');

package/scripts/smoke.mjs

@@ -0,0 +1,115 @@
+#!/usr/bin/env node
+/**
+ * 冒烟测试：用真实子进程跑一遍 MCP 协议，验证「装进去能用」而不只是「单元测试绿」。
+ *
+ * 用法：
+ *   node scripts/smoke.mjs                 # fixture 源（零副作用）
+ *   node scripts/smoke.mjs bridge          # 真桥接（只读；不会发消息）
+ *   node scripts/smoke.mjs snowluma        # 直连 SnowLuma（需网关在线）
+ *
+ * 它只发 tools/list 与三个只读工具的调用；run_summary 在 fixture 源下用本地启发式摘要，
+ * 不消耗模型额度。
+ */
+
+import { spawn } from 'node:child_process';
+import { existsSync, mkdtempSync, readFileSync, writeFileSync } from 'node:fs';
+import { homedir, tmpdir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const root = dirname(dirname(fileURLToPath(import.meta.url)));
+const source = process.argv[2] || 'fixture';
+const summarizer = process.argv[3] || 'heuristic';
+
+const dataDir = mkdtempSync(join(tmpdir(), 'qq-digest-smoke-'));
+// 把本机记录的 qq-bridge 位置带进临时数据目录，否则 bridge 源会退回 ~/AI/qq-bridge 而找不到令牌
+const realBridgeRoot = join(process.env.DSH_HOME?.trim() || join(homedir(), '.dsh'), 'qq-digest', 'bridge-root.txt');
+if (existsSync(realBridgeRoot)) writeFileSync(join(dataDir, 'bridge-root.txt'), readFileSync(realBridgeRoot, 'utf8'), 'utf8');
+writeFileSync(
+  join(dataDir, 'config.json'),
+  `${JSON.stringify(
+    {
+      version: 1,
+      groups: {},
+      summarizer,
+      schedule: { enabled: false, kind: 'daily', weekdays: ['MO'], time: '09:00', timeZone: 'Asia/Shanghai' },
+    },
+    null,
+    2,
+  )}\n`,
+  'utf8',
+);
+
+const child = spawn(process.execPath, [join(root, 'src', 'run-mcp.mjs')], {
+  env: { ...process.env, QQ_DIGEST_SOURCE: source, QQ_DIGEST_DATA_DIR: dataDir },
+  stdio: ['pipe', 'pipe', 'pipe'],
+});
+
+let stdout = '';
+let stderr = '';
+child.stdout.setEncoding('utf8');
+child.stderr.setEncoding('utf8');
+child.stdout.on('data', (chunk) => {
+  stdout += chunk;
+});
+child.stderr.on('data', (chunk) => {
+  stderr += chunk;
+});
+
+const requests = [
+  { jsonrpc: '2.0', id: 1, method: 'initialize', params: {} },
+  { jsonrpc: '2.0', id: 2, method: 'tools/list', params: {} },
+  { jsonrpc: '2.0', id: 3, method: 'tools/call', params: { name: 'qq_digest_status', arguments: {} } },
+  { jsonrpc: '2.0', id: 4, method: 'tools/call', params: { name: 'qq_digest_list_rooms', arguments: {} } },
+  { jsonrpc: '2.0', id: 5, method: 'tools/call', params: { name: 'qq_digest_run_summary', arguments: {} } },
+  { jsonrpc: '2.0', id: 6, method: 'tools/call', params: { name: 'qq_digest_get_digest', arguments: {} } },
+];
+
+for (const request of requests) {
+  child.stdin.write(`${JSON.stringify(request)}\n`);
+  await new Promise((resolve) => setTimeout(resolve, 400));
+}
+child.stdin.end();
+
+await new Promise((resolve) => {
+  const timer = setTimeout(() => {
+    child.kill();
+    resolve();
+  }, 25_000);
+  child.on('exit', () => {
+    clearTimeout(timer);
+    resolve();
+  });
+});
+
+const responses = new Map();
+for (const line of stdout.split('\n')) {
+  const trimmed = line.trim();
+  if (trimmed === '') continue;
+  try {
+    const message = JSON.parse(trimmed);
+    if (message.id !== undefined) responses.set(message.id, message);
+  } catch {
+    // 忽略非 JSON 行
+  }
+}
+
+function text(id) {
+  const message = responses.get(id);
+  if (!message) return '(无响应)';
+  if (message.error) return `ERROR ${message.error.message}`;
+  if (message.result?.tools) return message.result.tools.map((tool) => tool.name).join(', ');
+  return String(message.result?.content?.[0]?.text ?? '').replace(/\s+/g, ' ').slice(0, 700);
+}
+
+console.log(`source = ${source} / summarizer = ${summarizer}`);
+console.log(`stderr = ${stderr.trim().split('\n').slice(0, 2).join(' | ')}`);
+console.log(`tools  = ${text(2)}`);
+console.log(`status = ${text(3)}`);
+console.log(`rooms  = ${text(4)}`);
+console.log(`run    = ${text(5)}`);
+console.log(`digest = ${text(6)}`);
+
+const all = [...responses.values()].map((message) => JSON.stringify(message)).join('\n');
+const leaks = ['PRIVATE_SENTINEL', 'private:', '男人', 'EXCLUDED_SENTINEL'].filter((needle) => all.includes(needle));
+console.log(`private 泄漏检查 = ${leaks.length === 0 ? '通过（无 private 痕迹）' : `失败：${leaks.join(',')}`}`);

package/scripts/trigger.mjs

@@ -0,0 +1,67 @@
+#!/usr/bin/env node
+/**
+ * 命令行手动触发一次总结（走设置页同一套 API，不是另一条路径）。
+ *
+ * 用法：node scripts/trigger.mjs [端口]
+ *
+ * 它会真的调用模型（如果 config.summarizer === 'llm'），因此会产生少量费用。
+ */
+
+const PORTS = process.argv[2] ? [Number(process.argv[2])] : [8784, 1402, 14802];
+
+let base = null;
+for (const port of PORTS) {
+  try {
+    const res = await fetch(`http://127.0.0.1:${port}/qq-digest-api/state`, {
+      headers: { accept: 'application/json' },
+      signal: AbortSignal.timeout(5000),
+    });
+    if (res.status === 200) {
+      base = `http://127.0.0.1:${port}`;
+      break;
+    }
+  } catch {
+    // 换下一个端口
+  }
+}
+
+if (base === null) {
+  console.error('找不到在跑的 DSH（8784/1402/14802 都没响应 /qq-digest-api/state）');
+  process.exit(1);
+}
+
+console.log(`目标 ${base}`);
+const started = Date.now();
+const res = await fetch(`${base}/qq-digest-api/run`, {
+  method: 'POST',
+  headers: { 'content-type': 'application/json' },
+  body: JSON.stringify({ trigger: 'manual' }),
+  signal: AbortSignal.timeout(180_000),
+});
+const payload = await res.json();
+console.log(`HTTP ${res.status}，耗时 ${Math.round((Date.now() - started) / 1000)}s`);
+
+const result = payload.result ?? {};
+console.log(`状态 ${result.status}`);
+console.log(`产出 ${(result.summarized ?? []).length} 个群 / 跳过 ${(result.skipped ?? []).length} / 拒绝 ${(result.denied ?? []).length} / 失败 ${(result.errors ?? []).length}`);
+
+for (const item of result.summarized ?? []) {
+  console.log(`  ✓ ${item.roomTitle ?? item.roomHandle}：${item.messageCount} 条消息 → ${item.highlights} 条重点 / ${item.tasks} 项待办`);
+}
+for (const item of result.skipped ?? []) {
+  console.log(`  - ${item.roomHandle}：${item.reason}`);
+}
+for (const item of result.errors ?? []) {
+  console.log(`  ✗ ${item.roomHandle}：${item.code} ${item.message}`);
+}
+
+// 打印每个群最新一篇摘要的要点数量，正文留给设置页看
+const state = await (await fetch(`${base}/qq-digest-api/state`, { headers: { accept: 'application/json' } })).json();
+for (const room of state.rooms ?? []) {
+  if (!room.hasDigest) continue;
+  const digest = await (await fetch(`${base}/qq-digest-api/digest?group=${room.groupId}`, { headers: { accept: 'application/json' } })).json();
+  const d = digest.digest ?? {};
+  console.log(`\n[${room.title ?? room.groupId}] ${room.lastDigestAt}`);
+  console.log(`  ${d.overview ?? '(无概述)'}`);
+  (d.tasks ?? []).slice(0, 3).forEach((task) => console.log(`  · 待办：${task.what}${task.owner && task.owner !== '未指定' ? `（${task.owner}）` : ''}`));
+}

package/scripts/verify-dsh.mjs

@@ -0,0 +1,110 @@
+#!/usr/bin/env node
+/**
+ * DSH 适配性自检：一次跑完「插件在宿主里到底活没活」的全部可观测证据。
+ *
+ * 检查项：
+ *   1) 宿主半：设置页 API 是否可达、返回什么
+ *   2) 客户端半：最近一次 web boot 有没有因为它失败（看 desktop 的 crash log）
+ *   3) MCP 行：run-mcp 进程是否在跑
+ *   4) 落盘：配置/摘要目录状态
+ *
+ * 用法：node scripts/verify-dsh.mjs [端口]
+ * 端口省略时按 8784 → 1402 → 14802 依次试。
+ */
+
+import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+
+const PORTS = process.argv[2] ? [Number(process.argv[2])] : [8784, 1402, 14802];
+const LOG_DIR = join(homedir(), 'AppData', 'Roaming', '@deepseek-ai', 'dsh-desktop', 'logs');
+const DATA_DIR = join(process.env.DSH_HOME?.trim() || join(homedir(), '.dsh'), 'qq-digest');
+
+function ok(label, detail) {
+  console.log(`PASS  ${label}${detail ? `  ${detail}` : ''}`);
+}
+function bad(label, detail) {
+  console.log(`FAIL  ${label}${detail ? `  ${detail}` : ''}`);
+}
+
+let failures = 0;
+
+// 1) 宿主半
+let state = null;
+for (const port of PORTS) {
+  try {
+    const res = await fetch(`http://127.0.0.1:${port}/qq-digest-api/state`, {
+      headers: { accept: 'application/json' },
+      signal: AbortSignal.timeout(6000),
+    });
+    if (res.status === 200) {
+      state = await res.json();
+      ok('宿主半在线', `:${port} source=${state.source} 群=${state.rooms?.length ?? 0}`);
+      break;
+    }
+    console.log(`      :${port} HTTP ${res.status}`);
+  } catch {
+    console.log(`      :${port} 不可达`);
+  }
+}
+if (state === null) {
+  bad('宿主半未响应（DSH 没在跑，或行没挂上）');
+  failures += 1;
+} else {
+  if (Array.isArray(state.rooms) && state.rooms.length > 0) ok('群列表非空');
+  else bad('群列表为空（数据源不可达？）'), (failures += 1);
+  if (state.policyDegraded) bad('策略降级（配置损坏 → 全关）', state.configError), (failures += 1);
+  else ok('策略正常');
+  if (state.adapterError) bad('数据源报错', state.adapterError.message), (failures += 1);
+  else ok('数据源无报错');
+}
+
+// 2) 客户端半：看最近一次 web boot 是否因本插件失败
+try {
+  const clientFile = join(import.meta.dirname, '..', 'lib', 'client.js');
+  const fixTime = statSync(clientFile).mtimeMs;
+
+  const files = readdirSync(LOG_DIR)
+    .filter((name) => name.endsWith('-web-boot.log'))
+    .map((name) => ({ name, path: join(LOG_DIR, name), mtime: statSync(join(LOG_DIR, name)).mtimeMs }))
+    .sort((a, b) => b.mtime - a.mtime);
+
+  const newest = files[0];
+  if (!newest) {
+    console.log('SKIP  客户端半：没有 web-boot 崩溃日志可查（通常就是好事）');
+  } else if (newest.mtime < fixTime) {
+    // 修复之后还没重新加载过：既不能算通过，也不能把旧的失败算到新代码头上。
+    console.log(`SKIP  客户端半：修复后还没重新加载过（最近一次 boot ${new Date(newest.mtime).toISOString()} 早于 client.js ${new Date(fixTime).toISOString()}）`);
+  } else if (readFileSync(newest.path, 'utf8').includes('dsh-qq-digest: import failed')) {
+    bad('客户端半加载失败', `${newest.name} @ ${new Date(newest.mtime).toISOString()}`);
+    failures += 1;
+  } else {
+    ok('客户端半最近一次启动未报错', new Date(newest.mtime).toISOString());
+  }
+} catch (err) {
+  console.log(`SKIP  客户端半：读不到 desktop 日志目录（${err.code ?? err.message}）`);
+}
+
+// 3) MCP 行
+try {
+  const { execSync } = await import('node:child_process');
+  const out = execSync('tasklist /FI "IMAGENAME eq node.exe" /FO CSV', { encoding: 'utf8' });
+  ok('node 进程可枚举', `${out.split('\n').length - 2} 个（具体 run-mcp 进程见任务管理器）`);
+} catch {
+  console.log('SKIP  MCP 进程枚举失败');
+}
+
+// 4) 落盘
+const configFile = join(DATA_DIR, 'config.json');
+const digests = join(DATA_DIR, 'digests.jsonl');
+console.log(`     数据目录 ${DATA_DIR}`);
+console.log(`     config.json ${existsSync(configFile) ? '存在' : '不存在'}`);
+if (existsSync(digests)) {
+  const lines = readFileSync(digests, 'utf8').split('\n').filter(Boolean).length;
+  console.log(`     digests.jsonl ${lines} 条摘要`);
+} else {
+  console.log('     digests.jsonl 还没有（还没跑过总结）');
+}
+
+console.log(`\n${failures === 0 ? '全部通过' : `${failures} 项失败`}`);
+process.exit(failures === 0 ? 0 : 1);