koishi-plugin-ban-qrcode 1.1.0 → 1.1.2

package/lib/detect.d.ts

@@ -9,6 +9,7 @@ export type RoleLike = string | {
 };
 export interface ModerateInput {
     guildId?: string;
+    channelId?: string;
     isDirect?: boolean;
     userId?: string;
     selfId?: string;
@@ -22,6 +23,7 @@ export interface QrHit {
     text: string;
 }
 export type HitReason = 'qrcode' | 'group-invite' | 'ad-doc';
+export type SkipReason = 'direct' | 'no-guild' | 'no-user' | 'guild-filter' | 'self' | 'ignored' | 'admin';
 export interface FileRef {
     src: string;
     name: string;
@@ -39,9 +41,17 @@ export declare function collectImageSrcs(nodes: readonly ImageNode[]): string[];
 export declare function isOfficeFile(name: string): boolean;
 export declare function collectMessageParts(nodes: readonly ImageNode[], extra?: string): MessageParts;
 export declare function collectUrls(text: string): string[];
+export declare function unescapePayload(text: string): string;
 export declare function decodeEntities(text: string): string;
+export declare function stringifyShare(raw: unknown): string | undefined;
+export declare function isDownloadableSrc(src: string): boolean;
+export declare function summarizeSrc(src: string): string;
+export declare function elementTypes(nodes: readonly ImageNode[]): string[];
+export declare function resolveGuildId(input: Pick<ModerateInput, 'guildId' | 'channelId' | 'isDirect'>): string | undefined;
+export declare function skipModerateReason(input: ModerateInput): SkipReason | null;
 export declare function shouldModerate(input: ModerateInput): boolean;
 export declare function muteDurationMs(seconds: number): number;
 export declare function parseDataUrl(src: string): Buffer | null;
 export declare function defaultNotify(muteSeconds: number, reason?: HitReason): string;
-export declare function findQrInImages(srcs: readonly string[], download: (src: string) => Promise<Buffer>, decode: (buffer: Buffer) => Promise<string | null>): Promise<QrHit | null>;
+export type QrImageStatus = 'hit' | 'miss' | 'error';
+export declare function findQrInImages(srcs: readonly string[], download: (src: string) => Promise<Buffer>, decode: (buffer: Buffer) => Promise<string | null>, onImage?: (src: string, status: QrImageStatus) => void): Promise<QrHit | null>;

package/lib/detect.js

@@ -6,7 +6,14 @@ exports.collectImageSrcs = collectImageSrcs;
 exports.isOfficeFile = isOfficeFile;
 exports.collectMessageParts = collectMessageParts;
 exports.collectUrls = collectUrls;
+exports.unescapePayload = unescapePayload;
 exports.decodeEntities = decodeEntities;
+exports.stringifyShare = stringifyShare;
+exports.isDownloadableSrc = isDownloadableSrc;
+exports.summarizeSrc = summarizeSrc;
+exports.elementTypes = elementTypes;
+exports.resolveGuildId = resolveGuildId;
+exports.skipModerateReason = skipModerateReason;
 exports.shouldModerate = shouldModerate;
 exports.muteDurationMs = muteDurationMs;
 exports.parseDataUrl = parseDataUrl;
@@ -38,7 +45,16 @@ function roleLabels(roles) {
 function isAdminRole(roles) {
     return roleLabels(roles).some(role => ADMIN_ROLES.has(role) || role.toLowerCase() === 'owner');
 }
-const SHARE_TYPES = new Set(['json', 'xml', 'share', 'ark', 'lightapp']);
+const SHARE_TYPES = new Set([
+    'json',
+    'xml',
+    'share',
+    'ark',
+    'lightapp',
+    'onebot:json',
+    'onebot:xml',
+    'onebot:share',
+]);
 const FILE_TYPES = new Set(['file']);
 const OFFICE_FILE = /\.(docx?|txt)$/i;
 function collectImageSrcs(nodes) {
@@ -52,17 +68,17 @@ function collectMessageParts(nodes, extra = '') {
     const shares = [];
     const files = [];
     const texts = [];
+    const extraUrls = [];
     const seenImage = new Set();
     const seenShare = new Set();
     const seenFile = new Set();
     const addShare = (raw) => {
-        if (typeof raw !== 'string' || !raw.trim())
-            return;
-        const value = raw.trim();
-        if (seenShare.has(value))
+        const value = stringifyShare(raw);
+        if (!value || seenShare.has(value))
             return;
         seenShare.add(value);
         shares.push(value);
+        extraUrls.push(...collectUrlsFromJson(raw), ...collectUrls(value));
     };
     const visit = (items) => {
         for (const node of items) {
@@ -96,27 +112,30 @@ function collectMessageParts(nodes, extra = '') {
     visit(nodes);
     if (extra) {
         texts.push(extra);
+        const normalized = unescapePayload(extra);
         for (const match of extra.matchAll(/\[(?:CQ:)?json(?:,data=|:data=)([\s\S]+?)\]/gi))
             addShare(match[1]);
         for (const match of extra.matchAll(/\[(?:CQ:)?xml(?:,data=|:data=)([\s\S]+?)\]/gi))
             addShare(match[1]);
-        for (const match of extra.matchAll(/<(?:json|xml)\s[^>]*\bdata="([^"]+)"/gi))
+        for (const match of extra.matchAll(/<(?:json|xml|onebot:json|onebot:xml)\s[^>]*\bdata="([^"]+)"/gi)) {
             addShare(decodeEntities(match[1]));
+        }
+        if (/^\s*\{[\s\S]*"app"\s*:/.test(normalized))
+            addShare(normalized);
     }
     const text = texts.join('\n');
-    return {
-        images,
-        shares,
-        files,
-        urls: collectUrls([text, ...shares].join('\n')),
-        text,
-    };
+    const urls = uniqueUrls([
+        ...collectUrls(text),
+        ...extraUrls,
+        ...shares.flatMap(collectUrls),
+    ]);
+    return { images, shares, files, urls, text };
 }
 function collectUrls(text) {
     const urls = [];
     const seen = new Set();
-    for (const match of text.matchAll(/https?:\/\/[^\s<>"'`]+/gi)) {
-        const url = decodeEntities(match[0]).replace(/[),.;]+$/, '');
+    for (const match of unescapePayload(text).matchAll(/https?:\/\/[^\s<>"'`\\]+/gi)) {
+        const url = match[0].replace(/[),.;]+$/, '');
         if (!url || seen.has(url))
             continue;
         seen.add(url);
@@ -124,6 +143,9 @@ function collectUrls(text) {
     }
     return urls;
 }
+function unescapePayload(text) {
+    return decodeEntities(text).replace(/\\\//g, '/');
+}
 function decodeEntities(text) {
     return text
         .replace(/&quot;/g, '"')
@@ -132,24 +154,103 @@ function decodeEntities(text) {
         .replace(/&lt;/g, '<')
         .replace(/&gt;/g, '>');
 }
+function stringifyShare(raw) {
+    if (raw && typeof raw === 'object') {
+        try {
+            return JSON.stringify(raw);
+        }
+        catch {
+            return undefined;
+        }
+    }
+    if (typeof raw !== 'string' || !raw.trim())
+        return undefined;
+    return unescapePayload(raw.trim());
+}
+function isDownloadableSrc(src) {
+    return /^(https?:|data:|file:)/i.test(src);
+}
+function summarizeSrc(src) {
+    if (src.startsWith('data:'))
+        return `data:(${src.length})`;
+    return src.length > 160 ? `${src.slice(0, 157)}...` : src;
+}
+function elementTypes(nodes) {
+    return nodes.map(node => node.type);
+}
 function pickSrc(attrs) {
-    const src = attrs?.src ?? attrs?.url;
-    return typeof src === 'string' && src.trim() ? src.trim() : undefined;
+    const values = [attrs?.src, attrs?.url, attrs?.file]
+        .filter((value) => typeof value === 'string' && Boolean(value.trim()))
+        .map(value => value.trim());
+    return values.find(isDownloadableSrc) ?? values[0];
 }
-function shouldModerate(input) {
+function collectUrlsFromJson(raw) {
+    let value = raw;
+    if (typeof raw === 'string') {
+        try {
+            value = JSON.parse(unescapePayload(raw));
+        }
+        catch {
+            return [];
+        }
+    }
+    const urls = [];
+    walkJson(value, urls);
+    return urls;
+}
+function walkJson(value, urls) {
+    if (typeof value === 'string') {
+        urls.push(...collectUrls(value));
+        return;
+    }
+    if (Array.isArray(value)) {
+        for (const item of value)
+            walkJson(item, urls);
+        return;
+    }
+    if (value && typeof value === 'object') {
+        for (const item of Object.values(value))
+            walkJson(item, urls);
+    }
+}
+function uniqueUrls(urls) {
+    const seen = new Set();
+    const result = [];
+    for (const url of urls) {
+        if (!url || seen.has(url))
+            continue;
+        seen.add(url);
+        result.push(url);
+    }
+    return result;
+}
+function resolveGuildId(input) {
+    if (input.guildId)
+        return input.guildId;
+    if (!input.isDirect && input.channelId && !input.channelId.startsWith('private:'))
+        return input.channelId;
+    return undefined;
+}
+function skipModerateReason(input) {
     if (input.isDirect)
-        return false;
-    if (!input.guildId || !input.userId)
-        return false;
-    if (input.guilds.length && !input.guilds.includes(input.guildId))
-        return false;
+        return 'direct';
+    if (!resolveGuildId(input))
+        return 'no-guild';
+    if (!input.userId)
+        return 'no-user';
+    const guildId = resolveGuildId(input);
+    if (input.guilds.length && !input.guilds.includes(guildId))
+        return 'guild-filter';
     if (input.userId === input.selfId)
-        return false;
+        return 'self';
     if (input.ignoreUsers.includes(input.userId))
-        return false;
+        return 'ignored';
     if (input.skipAdmins && isAdminRole(input.roles))
-        return false;
-    return true;
+        return 'admin';
+    return null;
+}
+function shouldModerate(input) {
+    return skipModerateReason(input) === null;
 }
 function muteDurationMs(seconds) {
     return Math.max(0, Math.floor(seconds)) * 1000;
@@ -176,15 +277,18 @@ function defaultNotify(muteSeconds, reason = 'qrcode') {
         return `检测到${label}，已撤回。`;
     return `检测到${label}，已撤回并禁言 ${muteSeconds} 秒。`;
 }
-async function findQrInImages(srcs, download, decode) {
+async function findQrInImages(srcs, download, decode, onImage) {
     for (const src of srcs) {
         try {
             const text = await decode(await download(src));
-            if (text !== null)
+            if (text !== null) {
+                onImage?.(src, 'hit');
                 return { src, text };
+            }
+            onImage?.(src, 'miss');
         }
         catch {
-            // skip a single failed image
+            onImage?.(src, 'error');
         }
     }
     return null;

package/lib/document.js

@@ -26,7 +26,7 @@ function collectTencentDocUrls(text) {
     const urls = [];
     const seen = new Set();
     const re = new RegExp(DOC_RE.source, 'gi');
-    for (const match of text.matchAll(re)) {
+    for (const match of (0, detect_1.unescapePayload)(text).matchAll(re)) {
         const parsed = parseTencentDocUrl(match[0]);
         if (!parsed || seen.has(parsed.pageUrl))
             continue;

package/lib/index.d.ts

@@ -1,7 +1,7 @@
 import { Context, Schema } from 'koishi';
 export declare const name = "ban-qrcode";
 export declare const inject: string[];
-export declare const usage = "\n\u7FA4\u5185\u68C0\u6D4B\u5230\u56FE\u7247\u4E8C\u7EF4\u7801\u3001\u62C9\u7FA4\u5206\u4EAB\u5361\uFF0C\u6216\u817E\u8BAF\u6587\u6863 / Word \u91CC\u7684\u5356\u8D27\u5E7F\u544A\u65F6\uFF0C\u81EA\u52A8\u64A4\u56DE\u5E76\u7981\u8A00\u53D1\u9001\u8005\uFF08\u9ED8\u8BA4 60 \u79D2\uFF09\u3002\n\n\u673A\u5668\u4EBA\u9700\u8981\u64A4\u56DE\u6D88\u606F\u548C\u7981\u8A00\u6210\u5458\u7684\u6743\u9650\u3002\u7FA4\u4E3B / \u7BA1\u7406\u5458\u9ED8\u8BA4\u8DF3\u8FC7\u3002\n";
+export declare const usage = "\n\u7FA4\u5185\u68C0\u6D4B\u5230\u56FE\u7247\u4E8C\u7EF4\u7801\u3001\u62C9\u7FA4\u5206\u4EAB\u5361\uFF0C\u6216\u817E\u8BAF\u6587\u6863 / Word \u91CC\u7684\u5356\u8D27\u5E7F\u544A\u65F6\uFF0C\u81EA\u52A8\u64A4\u56DE\u5E76\u7981\u8A00\u53D1\u9001\u8005\uFF08\u9ED8\u8BA4 60 \u79D2\uFF09\u3002\n\n\u673A\u5668\u4EBA\u9700\u8981\u64A4\u56DE\u6D88\u606F\u548C\u7981\u8A00\u6210\u5458\u7684\u6743\u9650\u3002\u7FA4\u4E3B / \u7BA1\u7406\u5458\u9ED8\u8BA4\u8DF3\u8FC7\u3002\n\n\u81EA\u6D4B\u6CA1\u53CD\u5E94\u65F6\u6253\u5F00 debug\uFF0C\u770B\u65E5\u5FD7\u91CC\u662F skip admin\u3001\u56FE\u7247\u6CA1\u4E0B\u4E0B\u6765\uFF0C\u8FD8\u662F\u626B\u7801/\u6587\u6863\u672A\u547D\u4E2D\u3002\n";
 export interface Config {
     muteSeconds: number;
     recall: boolean;
@@ -14,6 +14,7 @@ export interface Config {
     scanGroupInvite: boolean;
     scanDocs: boolean;
     adKeywords: string[];
+    debug: boolean;
 }
 export declare const Config: Schema<Config>;
 export declare function apply(ctx: Context, config: Config): void;

package/lib/index.js

@@ -14,26 +14,31 @@ exports.usage = `
 群内检测到图片二维码、拉群分享卡，或腾讯文档 / Word 里的卖货广告时，自动撤回并禁言发送者（默认 60 秒）。
 
 机器人需要撤回消息和禁言成员的权限。群主 / 管理员默认跳过。
+
+自测没反应时打开 debug，看日志里是 skip admin、图片没下下来，还是扫码/文档未命中。
 `;
 exports.Config = koishi_1.Schema.object({
     muteSeconds: koishi_1.Schema.number().min(0).default(60).description('禁言秒数。0 表示只撤回不禁言。'),
     recall: koishi_1.Schema.boolean().default(true).description('撤回违规消息。'),
     notify: koishi_1.Schema.boolean().default(true).description('处理后在群内发送提示。'),
     notifyText: koishi_1.Schema.string().default('').description('自定义提示。留空则按原因和禁言秒数生成。'),
-    skipAdmins: koishi_1.Schema.boolean().default(true).description('跳过群主和管理员。'),
+    skipAdmins: koishi_1.Schema.boolean().default(true).description('跳过群主和管理员。自测请先关掉，或用普通成员号发。'),
     ignoreUsers: koishi_1.Schema.array(koishi_1.Schema.string()).role('table').default([]).description('忽略的用户 ID。'),
     guilds: koishi_1.Schema.array(koishi_1.Schema.string()).role('table').default([]).description('只在这些群生效。留空表示全部群。'),
     scanQrcode: koishi_1.Schema.boolean().default(true).description('扫描图片二维码。'),
     scanGroupInvite: koishi_1.Schema.boolean().default(true).description('拦截邀请 / 推荐群聊分享卡。'),
     scanDocs: koishi_1.Schema.boolean().default(true).description('检查腾讯文档和 Word / 文本附件里的广告。'),
     adKeywords: koishi_1.Schema.array(koishi_1.Schema.string()).role('table').default([]).description('额外广告关键词。命中即撤回。'),
+    debug: koishi_1.Schema.boolean().default(true).description('输出调试日志：跳过原因、消息结构、下载/扫码/文档结果。'),
 });
 function apply(ctx, config) {
     const logger = ctx.logger('ban-qrcode');
     const docHttp = createDocHttp(ctx.http);
+    void (0, qrcode_1.warmupQrDecoder)().catch(error => logger.warn(error));
     ctx.on('message', async (session) => {
-        if (!(0, detect_1.shouldModerate)({
+        const moderate = {
             guildId: session.guildId,
+            channelId: session.channelId,
             isDirect: session.isDirect,
             userId: session.userId,
             selfId: session.selfId,
@@ -41,41 +46,80 @@ function apply(ctx, config) {
             guilds: config.guilds,
             roles: session.event.member?.roles,
             skipAdmins: config.skipAdmins,
-        }))
-            return;
+        };
         const parts = (0, detect_1.collectMessageParts)(session.elements ?? [], session.content ?? '');
-        const docUrls = config.scanDocs ? (0, document_1.collectTencentDocUrls)([parts.text, ...parts.shares, ...parts.urls].join('\n')) : [];
+        const skip = (0, detect_1.skipModerateReason)(moderate);
+        if (skip) {
+            if (config.debug && looksRelevant(parts, config)) {
+                logger.info('skip %s user=%s guild=%s roles=%j images=%d shares=%d files=%d types=%j', skip, session.userId, (0, detect_1.resolveGuildId)(moderate), (0, detect_1.roleLabels)(moderate.roles), parts.images.length, parts.shares.length, parts.files.length, (0, detect_1.elementTypes)(session.elements ?? []));
+            }
+            return;
+        }
+        const docUrls = config.scanDocs
+            ? (0, document_1.collectTencentDocUrls)([parts.text, ...parts.shares, ...parts.urls].join('\n'))
+            : [];
         const officeFiles = config.scanDocs ? parts.files.filter(file => (0, detect_1.isOfficeFile)(file.name)) : [];
+        const docCards = config.scanDocs ? parts.shares.filter(share_1.isTencentDocCard) : [];
+        const docCardText = docCards.map(share_1.extractShareCardText).filter(Boolean).join('\n');
         const needInvite = config.scanGroupInvite && parts.shares.some(share_1.isGroupInviteCard);
         const needQr = config.scanQrcode && parts.images.length > 0;
-        const needDocs = Boolean(docUrls.length || officeFiles.length);
+        const needDocs = Boolean(docUrls.length || officeFiles.length || docCards.length);
+        if (config.debug) {
+            logger.info('seen user=%s guild=%s types=%j images=%d shares=%d files=%d docs=%d invite=%s', session.userId, (0, detect_1.resolveGuildId)(moderate), (0, detect_1.elementTypes)(session.elements ?? []), parts.images.length, parts.shares.length, parts.files.length, docUrls.length + officeFiles.length, needInvite);
+        }
         if (!needInvite && !needQr && !needDocs)
             return;
+        const resolveFile = (0, qrcode_1.createFileResolver)(session.bot);
+        const download = (src) => (0, qrcode_1.downloadImage)(ctx.http, src, resolveFile);
         try {
             if (needInvite) {
                 await enforce(session, config, logger, 'group-invite');
                 return;
             }
             if (needQr) {
-                const hit = await (0, detect_1.findQrInImages)(parts.images, src => (0, qrcode_1.downloadImage)(ctx.http, src), qrcode_1.decodeQr);
-                if (hit) {
-                    await enforce(session, config, logger, 'qrcode');
-                    return;
+                try {
+                    const hit = await (0, detect_1.findQrInImages)(parts.images, download, qrcode_1.decodeQr, (src, status) => {
+                        if (config.debug)
+                            logger.info('qr %s %s', status, (0, detect_1.summarizeSrc)(src));
+                    });
+                    if (hit) {
+                        await enforce(session, config, logger, 'qrcode');
+                        return;
+                    }
+                }
+                catch (error) {
+                    logger.warn(error);
                 }
             }
-            if (!needDocs)
+            if (!needDocs) {
+                if (config.debug)
+                    logger.info('no-hit user=%s guild=%s', session.userId, (0, detect_1.resolveGuildId)(moderate));
                 return;
+            }
+            let fetchedDoc = false;
             for (const url of docUrls) {
                 try {
                     const doc = await (0, document_1.fetchTencentDoc)(docHttp, url);
-                    if (!doc)
+                    if (!doc) {
+                        if (config.debug)
+                            logger.info('doc empty %s', url);
                         continue;
-                    if ((0, ad_1.detectAdContent)(doc.text, doc.title, config.adKeywords)) {
+                    }
+                    if (doc.text.trim())
+                        fetchedDoc = true;
+                    const ad = (0, ad_1.detectAdContent)(doc.text, doc.title, config.adKeywords);
+                    if (config.debug) {
+                        logger.info('doc %s title=%s ad=%s images=%d', url, doc.title || '-', Boolean(ad), doc.images.length);
+                    }
+                    if (ad) {
                         await enforce(session, config, logger, 'ad-doc');
                         return;
                     }
                     if (config.scanQrcode && doc.images.length) {
-                        const qr = await (0, detect_1.findQrInImages)(doc.images, src => (0, qrcode_1.downloadImage)(ctx.http, src), qrcode_1.decodeQr);
+                        const qr = await (0, detect_1.findQrInImages)(doc.images, download, qrcode_1.decodeQr, (src, status) => {
+                            if (config.debug)
+                                logger.info('doc-qr %s %s', status, (0, detect_1.summarizeSrc)(src));
+                        });
                         if (qr) {
                             await enforce(session, config, logger, 'qrcode');
                             return;
@@ -83,21 +127,39 @@ function apply(ctx, config) {
                     }
                 }
                 catch (error) {
+                    if (config.debug)
+                        logger.info('doc error %s', url);
                     logger.warn(error);
                 }
             }
+            if (!fetchedDoc && docCardText) {
+                const ad = (0, ad_1.detectAdContent)(docCardText, '', config.adKeywords);
+                if (config.debug)
+                    logger.info('doc card ad=%s', Boolean(ad));
+                if (ad) {
+                    await enforce(session, config, logger, 'ad-doc');
+                    return;
+                }
+            }
             for (const file of officeFiles) {
                 try {
-                    const doc = (0, document_1.extractOfficeText)(await (0, qrcode_1.downloadImage)(ctx.http, file.src), file.name);
-                    if (doc && (0, ad_1.detectAdContent)(doc.text, doc.title || file.name, config.adKeywords)) {
+                    const doc = (0, document_1.extractOfficeText)(await download(file.src), file.name);
+                    const ad = doc ? (0, ad_1.detectAdContent)(doc.text, doc.title || file.name, config.adKeywords) : null;
+                    if (config.debug)
+                        logger.info('office %s ad=%s', file.name, Boolean(ad));
+                    if (doc && ad) {
                         await enforce(session, config, logger, 'ad-doc');
                         return;
                     }
                 }
                 catch (error) {
+                    if (config.debug)
+                        logger.info('office error %s', file.name);
                     logger.warn(error);
                 }
             }
+            if (config.debug)
+                logger.info('no-hit user=%s guild=%s', session.userId, (0, detect_1.resolveGuildId)(moderate));
         }
         catch (error) {
             logger.warn(error);
@@ -105,28 +167,51 @@ function apply(ctx, config) {
     });
 }
 async function enforce(session, config, logger, reason) {
-    logger.info('%s from %s in %s', reason, session.userId, session.guildId);
+    const guildId = (0, detect_1.resolveGuildId)(session);
+    logger.info('%s from %s in %s', reason, session.userId, guildId);
     if (config.recall && session.messageId && session.channelId) {
         try {
             await session.bot.deleteMessage(session.channelId, session.messageId);
+            if (config.debug)
+                logger.info('recall ok %s', session.messageId);
         }
         catch (error) {
             logger.warn(error);
         }
     }
+    else if (config.debug && config.recall) {
+        logger.info('recall skipped messageId=%s channelId=%s', session.messageId, session.channelId);
+    }
     const duration = (0, detect_1.muteDurationMs)(config.muteSeconds);
-    if (duration > 0 && session.guildId && session.userId) {
+    if (duration > 0 && guildId && session.userId) {
         try {
-            await session.bot.muteGuildMember(session.guildId, session.userId, duration);
+            await session.bot.muteGuildMember(guildId, session.userId, duration);
+            if (config.debug)
+                logger.info('mute ok %s %sms', session.userId, duration);
         }
         catch (error) {
             logger.warn(error);
         }
     }
+    else if (config.debug && duration > 0) {
+        logger.info('mute skipped guild=%s user=%s', guildId, session.userId);
+    }
     if (config.notify) {
         await session.send(config.notifyText || (0, detect_1.defaultNotify)(config.muteSeconds, reason));
     }
 }
+function looksRelevant(parts, config) {
+    if (config.scanQrcode && parts.images.length)
+        return true;
+    if (config.scanGroupInvite && parts.shares.length)
+        return true;
+    if (config.scanDocs && (parts.files.some(file => (0, detect_1.isOfficeFile)(file.name))
+        || (0, document_1.collectTencentDocUrls)([parts.text, ...parts.shares, ...parts.urls].join('\n')).length
+        || parts.shares.some(share_1.isTencentDocCard))) {
+        return true;
+    }
+    return false;
+}
 function createDocHttp(http) {
     return {
         async text(url, headers) {

package/lib/qrcode.d.ts

@@ -1,3 +1,18 @@
 import { HTTP } from 'koishi';
-export declare function downloadImage(http: HTTP, src: string): Promise<Buffer>;
+type WechatScan = (input: {
+    data: Uint8ClampedArray;
+    width: number;
+    height: number;
+}) => Promise<{
+    text?: string | null;
+} | null | undefined>;
+type FileInternal = {
+    getImage?(src: string): unknown;
+};
+export declare function createFileResolver(bot: {
+    internal?: FileInternal;
+}): (src: string) => Promise<Buffer | string | null>;
+export declare function downloadImage(http: HTTP, src: string, resolveFile?: (src: string) => Promise<Buffer | string | null>): Promise<Buffer>;
 export declare function decodeQr(buffer: Buffer): Promise<string | null>;
+export declare function warmupQrDecoder(): Promise<WechatScan | null>;
+export {};

package/lib/qrcode.js

@@ -3,25 +3,129 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.createFileResolver = createFileResolver;
 exports.downloadImage = downloadImage;
 exports.decodeQr = decodeQr;
+exports.warmupQrDecoder = warmupQrDecoder;
+const promises_1 = require("node:fs/promises");
+const node_url_1 = require("node:url");
 const jimp_1 = __importDefault(require("jimp"));
 const jsqr_1 = __importDefault(require("jsqr"));
 const detect_1 = require("./detect");
-async function downloadImage(http, src) {
+let wechatScan;
+let wechatLoad;
+function createFileResolver(bot) {
+    return async (src) => {
+        const internal = bot.internal;
+        if (!internal)
+            return null;
+        try {
+            const info = unwrapFileInfo(await internal.getImage?.(src));
+            if (!info)
+                return null;
+            if (typeof info.base64 === 'string' && info.base64) {
+                return Buffer.from(info.base64, 'base64');
+            }
+            if (typeof info.url === 'string' && (0, detect_1.isDownloadableSrc)(info.url))
+                return info.url;
+            if (typeof info.file === 'string' && info.file) {
+                if ((0, detect_1.isDownloadableSrc)(info.file))
+                    return info.file;
+                return (0, promises_1.readFile)(info.file);
+            }
+            return null;
+        }
+        catch {
+            return null;
+        }
+    };
+}
+async function downloadImage(http, src, resolveFile) {
+    let lastError;
+    const remote = /^https?:/i.test(src);
+    if ((0, detect_1.isDownloadableSrc)(src)) {
+        try {
+            return await downloadDirect(http, src);
+        }
+        catch (error) {
+            lastError = error;
+        }
+        if (!remote) {
+            throw lastError instanceof Error ? lastError : new Error('cannot download image');
+        }
+    }
+    if (resolveFile) {
+        try {
+            const resolved = await resolveFile(src);
+            if (Buffer.isBuffer(resolved))
+                return resolved;
+            if (typeof resolved === 'string' && resolved && resolved !== src) {
+                return downloadDirect(http, resolved);
+            }
+        }
+        catch (error) {
+            lastError = lastError ?? error;
+        }
+    }
+    throw lastError instanceof Error ? lastError : new Error('cannot download image');
+}
+async function downloadDirect(http, src) {
     if (src.startsWith('data:')) {
         const data = (0, detect_1.parseDataUrl)(src);
         if (!data)
             throw new Error('invalid data url');
         return data;
     }
+    if (src.startsWith('file:')) {
+        return (0, promises_1.readFile)((0, node_url_1.fileURLToPath)(src));
+    }
+    if (typeof http.file === 'function') {
+        const file = await http.file(src);
+        return Buffer.from(file.data);
+    }
     return Buffer.from(await http.get(src, { responseType: 'arraybuffer' }));
 }
 async function decodeQr(buffer) {
-    const image = await jimp_1.default.read(buffer);
+    const image = await prepareImage(buffer);
     const { data, width, height } = image.bitmap;
-    const result = (0, jsqr_1.default)(new Uint8ClampedArray(data), width, height, {
-        inversionAttempts: 'attemptBoth',
-    });
-    return result?.data ?? null;
+    const pixels = new Uint8ClampedArray(data);
+    const quick = (0, jsqr_1.default)(pixels, width, height, { inversionAttempts: 'attemptBoth' });
+    if (quick?.data)
+        return quick.data;
+    const scan = await loadWechatScan();
+    if (!scan)
+        return null;
+    const result = await scan({ data: pixels, width, height });
+    return result?.text ?? null;
+}
+async function prepareImage(buffer) {
+    const image = await jimp_1.default.read(buffer);
+    const max = 2000;
+    if (image.bitmap.width > max || image.bitmap.height > max) {
+        return image.scaleToFit(max, max);
+    }
+    return image;
+}
+function warmupQrDecoder() {
+    return loadWechatScan();
+}
+function loadWechatScan() {
+    if (wechatScan)
+        return Promise.resolve(wechatScan);
+    wechatLoad ??= Function('return import("qr-scanner-wechat")')()
+        .then(mod => {
+        wechatScan = mod.scan;
+        return wechatScan;
+    })
+        .catch(() => null);
+    return wechatLoad;
+}
+function unwrapFileInfo(value) {
+    if (!value || typeof value !== 'object')
+        return null;
+    const record = value;
+    if (record.data && typeof record.data === 'object' && !Array.isArray(record.data)) {
+        return record.data;
+    }
+    return record;
 }

package/lib/share.d.ts

@@ -1,2 +1,4 @@
 export declare function normalizeShare(payload: string): string;
 export declare function isGroupInviteCard(payload: string): boolean;
+export declare function isTencentDocCard(payload: string): boolean;
+export declare function extractShareCardText(payload: string): string;

package/lib/share.js

@@ -2,6 +2,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.normalizeShare = normalizeShare;
 exports.isGroupInviteCard = isGroupInviteCard;
+exports.isTencentDocCard = isTencentDocCard;
+exports.extractShareCardText = extractShareCardText;
 const detect_1 = require("./detect");
 const INVITE_APPS = new Set([
     'com.tencent.qun.invite',
@@ -12,7 +14,7 @@ function normalizeShare(payload) {
     const wrapped = /^\[(?:CQ:)?json(?:,data=|:data=)/i.exec(text);
     if (wrapped && text.endsWith(']'))
         text = text.slice(wrapped[0].length, -1);
-    return (0, detect_1.decodeEntities)(text);
+    return (0, detect_1.decodeEntities)(text).replace(/\\\//g, '/');
 }
 function isGroupInviteCard(payload) {
     const raw = normalizeShare(payload);
@@ -47,6 +49,55 @@ function isGroupInviteCard(payload) {
         return true;
     return false;
 }
+function isTencentDocCard(payload) {
+    return /腾讯文档|docs\.qq\.com|doc\.weixin\.qq\.com/i.test(normalizeShare(payload));
+}
+function extractShareCardText(payload) {
+    const raw = normalizeShare(payload);
+    const json = tryParseJson(raw);
+    if (json) {
+        const chunks = [];
+        const seen = new Set();
+        const add = (value) => {
+            if (typeof value !== 'string')
+                return;
+            const text = value.trim();
+            if (!text || seen.has(text))
+                return;
+            seen.add(text);
+            chunks.push(text);
+        };
+        add(json.prompt);
+        add(json.desc);
+        if (isRecord(json.meta)) {
+            for (const item of Object.values(json.meta)) {
+                if (!isRecord(item))
+                    continue;
+                add(item.title);
+                add(item.desc);
+                add(item.prompt);
+                add(item.tag);
+                add(item.summary);
+                add(item.brief);
+            }
+        }
+        return chunks.join('\n');
+    }
+    const chunks = [];
+    const seen = new Set();
+    const add = (value) => {
+        const text = value?.trim();
+        if (!text || seen.has(text))
+            return;
+        seen.add(text);
+        chunks.push(text);
+    };
+    add(/brief=["']([^"']+)["']/i.exec(raw)?.[1]);
+    add(/<title[^>]*>([^<]+)/i.exec(raw)?.[1]);
+    add(/<summary[^>]*>([^<]+)/i.exec(raw)?.[1]);
+    add(/<desc[^>]*>([^<]+)/i.exec(raw)?.[1]);
+    return chunks.join('\n');
+}
 function tryParseJson(text) {
     try {
         const value = JSON.parse(text);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "koishi-plugin-ban-qrcode",
   "description": "检测到群内二维码、拉群卡片或文档广告后自动撤回并禁言",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "main": "lib/index.js",
   "typings": "lib/index.d.ts",
   "files": [
@@ -44,7 +44,8 @@
   },
   "dependencies": {
     "jimp": "^0.22.12",
-    "jsqr": "^1.4.0"
+    "jsqr": "^1.4.0",
+    "qr-scanner-wechat": "^0.1.3"
   },
   "devDependencies": {
     "@types/node": "^22.7.5",

package/readme.md

@@ -94,6 +94,7 @@ npm run build
 | `scanGroupInvite` | `boolean` | `true` | 拦截邀请 / 推荐群聊分享卡 |
 | `scanDocs` | `boolean` | `true` | 检查腾讯文档和 Word / 文本附件 |
 | `adKeywords` | `string[]` | `[]` | 额外广告关键词，命中即撤回 |
+| `debug` | `boolean` | `true` | 输出调试日志：跳过原因、消息结构、下载 / 扫码 / 文档结果 |
 
 默认提示按原因变化，例如：`检测到拉群卡片，已撤回并禁言 60 秒。` / `检测到文档广告，已撤回并禁言 60 秒。`
 
@@ -115,7 +116,7 @@ npm run build
 
 ### `decodeQr(buffer)`
 
-用 Jimp 读图、jsQR 解码。没有码时返回 `null`。
+用 Jimp 读图，先 jsQR、再微信扫码器解码。没有码时返回 `null`。
 
 ## Architecture
 
@@ -189,7 +190,9 @@ npm run build
 <details>
 <summary><strong>为什么没有撤回或禁言？</strong></summary>
 
-检查机器人是否有管理员权限，以及适配器是否实现 `deleteMessage` / `muteGuildMember`。权限不足时插件会打日志并继续后续步骤。
+先看 `ban-qrcode` 日志。自测最常见是自己是群主 / 管理员，默认 `skipAdmins` 会直接跳过（日志 `skip admin`）。把该项关掉，或用普通成员号发。
+
+也检查机器人是否有撤回 / 禁言权限。适配器没实现 `deleteMessage` / `muteGuildMember` 时会打 warn。
 </details>
 
 <details>
@@ -201,7 +204,7 @@ npm run build
 <details>
 <summary><strong>为什么有的二维码没扫到？</strong></summary>
 
-图太糊、码只占画面很小一块、或格式 Jimp 读不了（少见 webp）时可能漏检。把更清晰的整图发来更容易命中。
+先看日志是 `qr error`（图没下下来）还是 `qr miss`（下到了但没解出来）。下载走 Koishi 的 `http.file`，OneBot 还会再试 `get_image`。解码先 jsQR，失败再走官方 `qrcode-service` 同款的微信扫码器。图太糊、码只占画面很小一块仍可能漏检。
 </details>
 
 <details>
@@ -272,7 +275,7 @@ Actions 会 `npm ci` → `npm test` → `npm run build` → `npm publish --acces
 
 ## Changelog
 
-当前版本 **1.1.0**：在 1.0.0 扫码撤回之外，增加拉群分享卡拦截，以及腾讯文档 / Word 中的床品推销等广告识别。
+当前版本 **1.1.2**：修复 OneBot `getImage` 未绑定导致的生产崩溃，扫码失败不再跳过腾讯文档检测；文档分享卡按广告关键词兜底，而不是只看「大一新生必备清单」标题。1.1.1 补齐跳过原因日志，并用 `http.file` / OneBot `get_image` 与微信扫码器提高检出率。1.1.0 起拦截拉群分享卡和腾讯文档 / Word 广告。
 
 ## License