koishi-plugin-qq-github-bridge 0.0.0-stage → 1.0.0

package/lib/services/permission.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Permissions = void 0;
+const config_1 = require("../config");
+const errors_1 = require("../utils/errors");
+class Permissions {
+    ctx;
+    superAdmins;
+    constructor(ctx, config) {
+        this.ctx = ctx;
+        this.superAdmins = new Set(config.superAdmins);
+    }
+    async requireAdmin(actor, superOnly = false) {
+        // Console actors are constructed only after a fresh authenticated deployer check.
+        if (actor.source === 'console')
+            return;
+        if (this.superAdmins.has(actor.qq))
+            return;
+        if (superOnly)
+            throw new errors_1.BridgeError('forbidden', '只有超级管理员可以撤销管理员权限。');
+        const [admin] = await this.ctx.database.get('qgh_admin', actor.qq);
+        if (!admin)
+            throw new errors_1.BridgeError('forbidden', '此操作需要 GitHub Bridge 管理员权限。');
+    }
+    async add(actor, qq) {
+        await this.requireAdmin(actor);
+        if (!config_1.QQ_PATTERN.test(qq))
+            throw new errors_1.BridgeError('qq', '请输入有效的数字 QQ 号。');
+        if (this.superAdmins.has(qq))
+            return { message: `${qq} 已是后台配置的超级管理员。`, result: 'noop' };
+        const [existing] = await this.ctx.database.get('qgh_admin', qq);
+        if (existing)
+            return { message: `${qq} 已是管理员，无需重复添加。`, result: 'noop' };
+        await this.ctx.database.create('qgh_admin', {
+            qq, addedBy: actor.source === 'console' ? `console:${actor.id}` : actor.qq, createdAt: new Date(),
+        });
+        return { message: `已添加管理员 ${qq}，权限立即生效。`, result: 'success' };
+    }
+    async remove(actor, qq) {
+        await this.requireAdmin(actor, true);
+        if (!config_1.QQ_PATTERN.test(qq))
+            throw new errors_1.BridgeError('qq', '请输入有效的数字 QQ 号。');
+        if (this.superAdmins.has(qq))
+            throw new errors_1.BridgeError('super-admin', '超级管理员只能通过插件后台配置修改，不能在管理员列表或 QQ 指令中撤销。');
+        const [existing] = await this.ctx.database.get('qgh_admin', qq);
+        if (!existing)
+            return { message: `${qq} 当前不是管理员。`, result: 'noop' };
+        await this.ctx.database.remove('qgh_admin', qq);
+        return { message: `已撤销管理员 ${qq}。此前由其添加的其他管理员保持不变。`, result: 'success' };
+    }
+    async list(offset = 0, limit = 50) {
+        return this.ctx.database.get('qgh_admin', {}, { sort: { createdAt: 'asc', qq: 'asc' }, offset, limit });
+    }
+}
+exports.Permissions = Permissions;
+//# sourceMappingURL=permission.js.map

package/lib/services/permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.js","sourceRoot":"","sources":["../../src/services/permission.ts"],"names":[],"mappings":";;;AAEA,sCAAsC;AAEtC,4CAA6C;AAE7C,MAAa,WAAW;IAEO;IADZ,WAAW,CAAa;IACzC,YAA6B,GAAY,EAAE,MAAc;QAA5B,QAAG,GAAH,GAAG,CAAS;QACvC,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAChD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAY,EAAE,SAAS,GAAG,KAAK;QAChD,kFAAkF;QAClF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,OAAM;QACtC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,OAAM;QAC1C,IAAI,SAAS;YAAE,MAAM,IAAI,oBAAW,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAA;QACtE,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;QAClE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,oBAAW,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAA;IAC9E,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAY,EAAE,EAAU;QAChC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;QAC9B,IAAI,CAAC,mBAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,oBAAW,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;QACvE,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;QACvF,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QAC/D,IAAI,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;QACvE,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;YAC1C,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE;SAClG,CAAC,CAAA;QACF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAY,EAAE,EAAU;QACnC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACpC,IAAI,CAAC,mBAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,oBAAW,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;QACvE,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,oBAAW,CAAC,aAAa,EAAE,uCAAuC,CAAC,CAAA;QAC3G,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QAC/D,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;QACnE,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QAC/C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IACzE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE;QAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IACzG,CAAC;CACF;AAxCD,kCAwCC"}

package/lib/services/repository.d.ts

@@ -0,0 +1,8 @@
+import type { Binding } from '../config';
+import type { Repository } from '../types';
+export declare class RepositoryResolver {
+    private readonly groups;
+    constructor(bindings: Binding[]);
+    resolve(groupId: string): Repository | undefined;
+    all(): Repository[];
+}

package/lib/services/repository.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RepositoryResolver = void 0;
+class RepositoryResolver {
+    groups = new Map();
+    constructor(bindings) {
+        for (const item of bindings) {
+            if (item.enabled)
+                this.groups.set(item.groupId, {
+                    owner: item.owner,
+                    repo: item.repo,
+                    fullName: `${item.owner}/${item.repo}`,
+                });
+        }
+    }
+    resolve(groupId) { return this.groups.get(groupId); }
+    all() {
+        return [...new Map([...this.groups.values()].map(repo => [repo.fullName.toLowerCase(), repo])).values()];
+    }
+}
+exports.RepositoryResolver = RepositoryResolver;
+//# sourceMappingURL=repository.js.map

package/lib/services/repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../src/services/repository.ts"],"names":[],"mappings":";;;AAGA,MAAa,kBAAkB;IACZ,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAA;IAEvD,YAAY,QAAmB;QAC7B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,OAAO;gBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE;oBAC9C,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,QAAQ,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE;iBACvC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,OAAO,CAAC,OAAe,IAA4B,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA,CAAC,CAAC;IAEpF,GAAG;QACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IAC1G,CAAC;CACF;AAlBD,gDAkBC"}

package/lib/services/storage.d.ts

@@ -0,0 +1,13 @@
+import type { Context } from 'koishi';
+import type { Config } from '../config';
+import type { Actor, IncomingMessage } from '../types';
+export declare class Storage {
+    private readonly ctx;
+    private readonly config;
+    constructor(ctx: Context, config: Config);
+    claim(message: IncomingMessage): Promise<boolean>;
+    cooldown(qq: string): Promise<void>;
+    begin(actor: Actor, action: string, target: string): Promise<string | undefined>;
+    finish(id: string | undefined, result: string, detail: string): Promise<boolean>;
+    cleanup(): Promise<void>;
+}

package/lib/services/storage.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Storage = void 0;
+const node_crypto_1 = require("node:crypto");
+const errors_1 = require("../utils/errors");
+class Storage {
+    ctx;
+    config;
+    constructor(ctx, config) {
+        this.ctx = ctx;
+        this.config = config;
+    }
+    async claim(message) {
+        // The primary key is the atomic claim, including across reconnects / plugin reloads.
+        const [existing] = await this.ctx.database.get('qgh_event', message.eventKey);
+        if (existing)
+            return false;
+        try {
+            await this.ctx.database.create('qgh_event', {
+                id: message.eventKey,
+                // Allow clock skew and avoid cleanup racing a still-valid incoming event.
+                expiresAt: new Date(Math.max(Date.now(), message.timestamp) + this.config.dedupWindow + 60000),
+            });
+            return true;
+        }
+        catch {
+            const [winner] = await this.ctx.database.get('qgh_event', message.eventKey);
+            if (winner)
+                return false;
+            throw new errors_1.BridgeError('database', '数据库去重记录写入失败，未执行操作。');
+        }
+    }
+    async cooldown(qq) {
+        if (!this.config.userCooldown)
+            return;
+        const [existing] = await this.ctx.database.get('qgh_cooldown', qq);
+        const now = Date.now();
+        if (existing && +existing.expiresAt > now) {
+            throw new errors_1.BridgeError('cooldown', `操作过于频繁，请在 ${Math.ceil((+existing.expiresAt - now) / 1000)} 秒后重试。`);
+        }
+        await this.ctx.database.upsert('qgh_cooldown', [{ qq, expiresAt: new Date(now + this.config.userCooldown) }]);
+    }
+    async begin(actor, action, target) {
+        if (!this.config.auditEnabled)
+            return;
+        const id = (0, node_crypto_1.randomUUID)();
+        await this.ctx.database.create('qgh_audit', {
+            id, actorId: actor.id, actorQQ: actor.qq, source: actor.source, action, target,
+            groupId: actor.groupId, repository: actor.repository, createdAt: new Date(),
+            result: 'pending', detail: '',
+        });
+        return id;
+    }
+    async finish(id, result, detail) {
+        if (!id)
+            return true;
+        try {
+            // detail is an internal error code or constant, never exception text / API response data.
+            await this.ctx.database.set('qgh_audit', id, { result, detail });
+            return true;
+        }
+        catch {
+            this.ctx.logger('qq-github-bridge').warn('审计结果写入失败，原始记录保留为 pending；请核对操作结果。');
+            return false;
+        }
+    }
+    async cleanup() {
+        const now = Date.now();
+        await this.ctx.database.remove('qgh_event', { expiresAt: { $lt: new Date(now) } });
+        await this.ctx.database.remove('qgh_cooldown', { expiresAt: { $lt: new Date(now) } });
+        await this.ctx.database.remove('qgh_audit', { createdAt: { $lt: new Date(now - this.config.auditRetentionDays * 86400000) } });
+    }
+}
+exports.Storage = Storage;
+//# sourceMappingURL=storage.js.map

package/lib/services/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/services/storage.ts"],"names":[],"mappings":";;;AAAA,6CAAwC;AAIxC,4CAA6C;AAE7C,MAAa,OAAO;IACW;IAA+B;IAA5D,YAA6B,GAAY,EAAmB,MAAc;QAA7C,QAAG,GAAH,GAAG,CAAS;QAAmB,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE9E,KAAK,CAAC,KAAK,CAAC,OAAwB;QAClC,qFAAqF;QACrF,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC7E,IAAI,QAAQ;YAAE,OAAO,KAAK,CAAA;QAC1B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;gBAC1C,EAAE,EAAE,OAAO,CAAC,QAAQ;gBACpB,0EAA0E;gBAC1E,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC;aAC/F,CAAC,CAAA;YACF,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;YAC3E,IAAI,MAAM;gBAAE,OAAO,KAAK,CAAA;YACxB,MAAM,IAAI,oBAAW,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAA;QACzD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,OAAM;QACrC,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;QAClE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YAC1C,MAAM,IAAI,oBAAW,CAAC,UAAU,EAAE,aAAa,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAA;QACvG,CAAC;QACD,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/G,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAY,EAAE,MAAc,EAAE,MAAc;QACtD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,OAAM;QACrC,MAAM,EAAE,GAAG,IAAA,wBAAU,GAAE,CAAA;QACvB,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;YAC1C,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM;YAC9E,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE;YAC3E,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE;SAC9B,CAAC,CAAA;QACF,OAAO,EAAE,CAAA;IACX,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAsB,EAAE,MAAc,EAAE,MAAc;QACjE,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAA;QACpB,IAAI,CAAC;YACH,0FAA0F;YAC1F,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;YAChE,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAA;YAC7E,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;QAClF,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;QACrF,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,GAAG,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAA;IAChI,CAAC;CACF;AA5DD,0BA4DC"}

package/lib/types.d.ts

@@ -0,0 +1,93 @@
+export interface Repository {
+    owner: string;
+    repo: string;
+    fullName: string;
+}
+export interface Actor {
+    source: 'qq' | 'console';
+    id: string;
+    qq: string;
+    nickname: string;
+    groupId: string;
+    repository: string;
+}
+export interface IncomingMessage {
+    actor: Actor;
+    repository: Repository;
+    eventKey: string;
+    timestamp: number;
+    text: string;
+}
+export type Command = {
+    type: 'comment';
+    number: number;
+    body: string;
+} | {
+    type: 'close';
+    number: number;
+} | {
+    type: 'open';
+    number: number;
+} | {
+    type: 'admin-add';
+    qq: string;
+} | {
+    type: 'admin-remove';
+    qq: string;
+} | {
+    type: 'admin-list';
+    page: number;
+} | {
+    type: 'confirm';
+    code: string;
+} | {
+    type: 'invalid';
+    message: string;
+};
+export type MutatingCommand = Exclude<Command, {
+    type: 'invalid' | 'confirm' | 'admin-list';
+}>;
+export interface Outcome {
+    message: string;
+    result?: 'success' | 'noop';
+}
+export interface AdminView {
+    qq: string;
+    addedBy: string;
+    createdAt: string;
+}
+export interface AuditView {
+    id: string;
+    actorId: string;
+    actorQQ: string;
+    source: string;
+    action: string;
+    target: string;
+    groupId: string;
+    repository: string;
+    createdAt: string;
+    result: string;
+    detail: string;
+}
+export interface Dashboard {
+    admins: AdminView[];
+    hasMoreAdmins: boolean;
+    superAdmins: string[];
+    bindings: Array<{
+        groupId: string;
+        repository: string;
+        enabled: boolean;
+    }>;
+    audits: AuditView[];
+    auditEnabled: boolean;
+    auditRetentionDays: number;
+}
+export interface TokenStatus {
+    login: string;
+    repositories: Array<{
+        repository: string;
+        accessible: boolean;
+        message: string;
+    }>;
+    message: string;
+}

package/lib/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/lib/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/lib/utils/errors.d.ts

@@ -0,0 +1,8 @@
+/** Only deliberately authored messages may cross the chat / console boundary. */
+export declare class BridgeError extends Error {
+    readonly code: string;
+    readonly uncertain: boolean;
+    constructor(code: string, message: string, uncertain?: boolean);
+}
+export declare function publicError(error: unknown): BridgeError;
+export declare function redact(text: string, token: string): string;

package/lib/utils/errors.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BridgeError = void 0;
+exports.publicError = publicError;
+exports.redact = redact;
+/** Only deliberately authored messages may cross the chat / console boundary. */
+class BridgeError extends Error {
+    code;
+    uncertain;
+    constructor(code, message, uncertain = false) {
+        super(message);
+        this.code = code;
+        this.uncertain = uncertain;
+        this.name = 'BridgeError';
+    }
+}
+exports.BridgeError = BridgeError;
+function publicError(error) {
+    return error instanceof BridgeError
+        ? error
+        : new BridgeError('internal', '内部服务或数据库暂不可用，操作未能确认完成。请联系部署者检查服务。');
+}
+function redact(text, token) {
+    if (token)
+        text = text.split(token).join('[已隐藏敏感信息]');
+    return text.replace(/(?:gh[pousr]_[A-Za-z0-9_]+|github_pat_[A-Za-z0-9_]+)/g, '[已隐藏敏感信息]');
+}
+//# sourceMappingURL=errors.js.map

package/lib/utils/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":";;;AAQA,kCAIC;AAED,wBAGC;AAjBD,iFAAiF;AACjF,MAAa,WAAY,SAAQ,KAAK;IACR;IAA+C;IAA3E,YAA4B,IAAY,EAAE,OAAe,EAAkB,YAAY,KAAK;QAC1F,KAAK,CAAC,OAAO,CAAC,CAAA;QADY,SAAI,GAAJ,IAAI,CAAQ;QAAmC,cAAS,GAAT,SAAS,CAAQ;QAE1F,IAAI,CAAC,IAAI,GAAG,aAAa,CAAA;IAC3B,CAAC;CACF;AALD,kCAKC;AAED,SAAgB,WAAW,CAAC,KAAc;IACxC,OAAO,KAAK,YAAY,WAAW;QACjC,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,WAAW,CAAC,UAAU,EAAE,mCAAmC,CAAC,CAAA;AACtE,CAAC;AAED,SAAgB,MAAM,CAAC,IAAY,EAAE,KAAa;IAChD,IAAI,KAAK;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACrD,OAAO,IAAI,CAAC,OAAO,CAAC,uDAAuD,EAAE,WAAW,CAAC,CAAA;AAC3F,CAAC"}

package/lib/utils/lock.d.ts

@@ -0,0 +1,11 @@
+/** Bounded, instance-owned queue. A rejected task never poisons the next one. */
+export declare class SerialQueue {
+    private readonly capacity;
+    private tail;
+    private pending;
+    private closed;
+    constructor(capacity?: number);
+    run<T>(task: () => Promise<T>): Promise<T>;
+    close(): void;
+    drain(): Promise<void>;
+}

package/lib/utils/lock.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SerialQueue = void 0;
+const errors_1 = require("./errors");
+/** Bounded, instance-owned queue. A rejected task never poisons the next one. */
+class SerialQueue {
+    capacity;
+    tail = Promise.resolve();
+    pending = 0;
+    closed = false;
+    constructor(capacity = 64) {
+        this.capacity = capacity;
+    }
+    async run(task) {
+        if (this.closed)
+            throw new errors_1.BridgeError('disposed', '插件正在停用，请稍后再试。');
+        if (this.pending >= this.capacity)
+            throw new errors_1.BridgeError('busy', '当前操作较多，请稍后再试。');
+        this.pending++;
+        const previous = this.tail;
+        let release;
+        this.tail = new Promise(resolve => { release = resolve; });
+        try {
+            await previous;
+            if (this.closed)
+                throw new errors_1.BridgeError('disposed', '插件正在停用，请稍后再试。');
+            return await task();
+        }
+        finally {
+            this.pending--;
+            release();
+        }
+    }
+    close() { this.closed = true; }
+    drain() { return this.tail; }
+}
+exports.SerialQueue = SerialQueue;
+//# sourceMappingURL=lock.js.map

package/lib/utils/lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../src/utils/lock.ts"],"names":[],"mappings":";;;AAAA,qCAAsC;AAEtC,iFAAiF;AACjF,MAAa,WAAW;IAKO;IAJrB,IAAI,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;IACvC,OAAO,GAAG,CAAC,CAAA;IACX,MAAM,GAAG,KAAK,CAAA;IAEtB,YAA6B,WAAW,EAAE;QAAb,aAAQ,GAAR,QAAQ,CAAK;IAAG,CAAC;IAE9C,KAAK,CAAC,GAAG,CAAI,IAAsB;QACjC,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,oBAAW,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;QACnE,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,oBAAW,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;QACjF,IAAI,CAAC,OAAO,EAAE,CAAA;QACd,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAA;QAC1B,IAAI,OAAoB,CAAA;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,GAAG,OAAO,GAAG,OAAO,CAAA,CAAC,CAAC,CAAC,CAAA;QAC/D,IAAI,CAAC;YACH,MAAM,QAAQ,CAAA;YACd,IAAI,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,oBAAW,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;YACnE,OAAO,MAAM,IAAI,EAAE,CAAA;QACrB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,EAAE,CAAA;YACd,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC;IAED,KAAK,KAAK,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA,CAAC,CAAC;IAC9B,KAAK,KAAK,OAAO,IAAI,CAAC,IAAI,CAAA,CAAC,CAAC;CAC7B;AA1BD,kCA0BC"}

package/lib/utils/parser.d.ts

@@ -0,0 +1,9 @@
+import type { Config } from '../config';
+import type { Command } from '../types';
+export declare class MessageParser {
+    private readonly config;
+    private readonly reply;
+    constructor(config: Config);
+    parse(text: string): Command | null;
+    private number;
+}

package/lib/utils/parser.js

@@ -0,0 +1,87 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MessageParser = void 0;
+const re2_wasm_1 = require("re2-wasm");
+const config_1 = require("../config");
+const errors_1 = require("./errors");
+class MessageParser {
+    config;
+    reply;
+    constructor(config) {
+        this.config = config;
+        const pattern = config.replyPattern || `^${config.replyPrefix}(?<number>\\d+)\\s+(?<body>[\\s\\S]+)$`;
+        if (pattern.length > 1024 || !pattern.startsWith('^') || !pattern.endsWith('$') ||
+            !pattern.includes('(?<number>') || !pattern.includes('(?<body>')) {
+            throw new errors_1.BridgeError('config-regex', '回复正则最多 1024 字符，须使用 ^ 和 $ 全文匹配，并声明 number 和 body 命名捕获组。');
+        }
+        try {
+            this.reply = new re2_wasm_1.RE2(pattern, 'u');
+        }
+        catch {
+            // Never expose the pattern: a misconfigured pattern could itself contain secrets.
+            throw new errors_1.BridgeError('config-regex', '回复正则无效或使用了 RE2 不支持的语法（如回溯引用、前后查找）。');
+        }
+    }
+    parse(text) {
+        if (text.length > this.config.maxCommentLength + 4096)
+            return null;
+        const { adminPrefix, closePrefix, openPrefix } = this.config;
+        // Reserve privileged command namespaces before trying any custom comment expression.
+        if (text.startsWith(adminPrefix) && /^(?:\s|$)/.test(text.slice(adminPrefix.length))) {
+            const parts = text.split(/\s+/);
+            if (parts[1] === 'confirm' && parts.length === 3 && /^[a-f0-9]{12}$/.test(parts[2])) {
+                return { type: 'confirm', code: parts[2] };
+            }
+            if (parts[1] === 'list' && (parts.length === 2 || (parts.length === 3 && /^[1-9][0-9]{0,5}$/.test(parts[2])))) {
+                return { type: 'admin-list', page: parts[2] ? Number(parts[2]) : 1 };
+            }
+            if (parts.length === 3 && config_1.QQ_PATTERN.test(parts[2])) {
+                if (parts[1] === 'add')
+                    return { type: 'admin-add', qq: parts[2] };
+                if (parts[1] === 'remove')
+                    return { type: 'admin-remove', qq: parts[2] };
+            }
+            return { type: 'invalid', message: `用法：${adminPrefix} add/remove QQ号；${adminPrefix} list [页码]；${adminPrefix} confirm 确认码。` };
+        }
+        for (const [prefix, type] of [[closePrefix, 'close'], [openPrefix, 'open']]) {
+            if (!text.startsWith(prefix))
+                continue;
+            const suffix = text.slice(prefix.length);
+            // Ordinary words starting with the prefix are not commands.
+            if (suffix && !/^[0-9\s]/.test(suffix))
+                continue;
+            const number = this.number(suffix);
+            return number ? { type, number } : { type: 'invalid', message: `用法：${prefix}1003（编号须为正整数）。` };
+        }
+        const match = this.reply.exec(text);
+        // An alternative branch or a terminal newline must not defeat full matching.
+        if (match && match.index === 0 && match[0] === text) {
+            const number = this.number(match.groups?.number);
+            const body = match.groups?.body;
+            if (!number)
+                return { type: 'invalid', message: 'Issue / PR 编号必须是有效的正整数。' };
+            if (!body?.trim())
+                return { type: 'invalid', message: '评论正文不能为空。' };
+            if (body.length > this.config.maxCommentLength)
+                return { type: 'invalid', message: `评论过长，最多 ${this.config.maxCommentLength} 字符。` };
+            if (!this.config.allowMultiline && /[\r\n]/.test(body))
+                return { type: 'invalid', message: '当前配置不允许多行评论。' };
+            if (/\u0000/.test(body))
+                return { type: 'invalid', message: '评论包含不支持的空字符。' };
+            return { type: 'comment', number, body };
+        }
+        if (!this.config.replyPattern && new RegExp(`^${this.config.replyPrefix}[0-9]+\\s*$`).test(text)) {
+            return { type: 'invalid', message: '评论正文不能为空。' };
+        }
+        return null;
+    }
+    number(value) {
+        if (!value || !/^[1-9][0-9]*$/.test(value))
+            return;
+        const number = Number(value);
+        if (Number.isSafeInteger(number))
+            return number;
+    }
+}
+exports.MessageParser = MessageParser;
+//# sourceMappingURL=parser.js.map

package/lib/utils/parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.js","sourceRoot":"","sources":["../../src/utils/parser.ts"],"names":[],"mappings":";;;AAAA,uCAA8B;AAE9B,sCAAsC;AAEtC,qCAAsC;AAEtC,MAAa,aAAa;IAGK;IAFZ,KAAK,CAAK;IAE3B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;QACzC,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,IAAI,IAAI,MAAM,CAAC,WAAW,wCAAwC,CAAA;QACrG,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC7E,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,oBAAW,CAAC,cAAc,EAAE,wDAAwD,CAAC,CAAA;QACjG,CAAC;QACD,IAAI,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,IAAI,cAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAChD,kFAAkF;YAClF,MAAM,IAAI,oBAAW,CAAC,cAAc,EAAE,oCAAoC,CAAC,CAAA;QAC7E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAY;QAChB,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,GAAG,IAAI;YAAE,OAAO,IAAI,CAAA;QAClE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,MAAM,CAAA;QAC5D,qFAAqF;QACrF,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACrF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAC/B,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;YAC5C,CAAC;YACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9G,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YACtE,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,mBAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK;oBAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;gBAClE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;oBAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;YAC1E,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,WAAW,mBAAmB,WAAW,cAAc,WAAW,eAAe,EAAE,CAAA;QAC9H,CAAC;QACD,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,CAAU,EAAE,CAAC;YACrF,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAQ;YACtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACxC,4DAA4D;YAC5D,IAAI,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,SAAQ;YAChD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YAClC,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,MAAM,gBAAgB,EAAE,CAAA;QAC/F,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnC,6EAA6E;QAC7E,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,CAAA;YAC/B,IAAI,CAAC,MAAM;gBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAA;YAC3E,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE;gBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAA;YACnE,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB;gBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,IAAI,CAAC,MAAM,CAAC,gBAAgB,MAAM,EAAE,CAAA;YAClI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,CAAA;YAC3G,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,CAAA;YAC5E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;QAC1C,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjG,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAA;QAClD,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,MAAM,CAAC,KAAc;QAC3B,IAAI,CAAC,KAAK,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAM;QAClD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;QAC5B,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAA;IACjD,CAAC;CACF;AAhED,sCAgEC"}

package/package.json

@@ -1,6 +1,101 @@
 {
   "name": "koishi-plugin-qq-github-bridge",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.0",
+  "description": "通过 QQ 群安全评论、关闭和重开 GitHub Issue / PR，提供独立管理员与控制台管理。",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "files": [
+    "lib",
+    "dist",
+    "src",
+    "client",
+    "README.md",
+    "LICENSE",
+    "docs"
+  ],
+  "license": "MIT",
+  "author": "AoXuan (https://github.com/ClozyA)",
+  "homepage": "https://github.com/ClozyA/koishi-plugin-qq-github-bridge#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ClozyA/koishi-plugin-qq-github-bridge.git"
+  },
+  "bugs": {
+    "url": "https://github.com/ClozyA/koishi-plugin-qq-github-bridge/issues"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "keywords": [
+    "koishi",
+    "plugin",
+    "qq",
+    "onebot",
+    "napcat",
+    "github"
+  ],
+  "engines": {
+    "node": ">=22"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit && node scripts/client-types.cjs && vue-tsc --noEmit -p client/tsconfig.json",
+    "build": "tsc -p tsconfig.build.json && node scripts/build-client.cjs",
+    "test": "vitest run",
+    "preview": "npm run build && node scripts/preview-console.cjs",
+    "check": "npm run typecheck && npm run build && npm test",
+    "check:package": "node scripts/check-package.cjs",
+    "release:publish": "node scripts/publish-release.cjs",
+    "prepack": "npm run build"
+  },
+  "peerDependencies": {
+    "@koishijs/plugin-auth": "^4.1.7",
+    "@koishijs/plugin-console": "^5.30.11",
+    "koishi": "^4.18.11"
+  },
+  "peerDependenciesMeta": {
+    "@koishijs/plugin-console": {
+      "optional": true
+    },
+    "@koishijs/plugin-auth": {
+      "optional": true
+    }
+  },
+  "dependencies": {
+    "re2-wasm": "^1.0.2"
+  },
+  "devDependencies": {
+    "@koishijs/client": "5.30.11",
+    "@koishijs/plugin-adapter-onebot": "6.0.2",
+    "@koishijs/plugin-auth": "4.1.7",
+    "@koishijs/plugin-console": "5.30.11",
+    "@koishijs/plugin-database-sqlite": "4.7.0",
+    "@koishijs/plugin-http": "0.6.3",
+    "@koishijs/plugin-server": "3.2.9",
+    "@types/node": "^22.0.0",
+    "@vitejs/plugin-vue": "6.0.10",
+    "happy-dom": "21.0.4",
+    "koishi": "4.18.11",
+    "tar": "7.5.22",
+    "typescript": "~5.9.3",
+    "vitest": "^5.0.5",
+    "vue": "^3.5.12",
+    "vue-tsc": "^3.1.0"
+  },
+  "koishi": {
+    "description": {
+      "zh": "QQ 群与 GitHub Issue / PR 桥接，独立权限、持久去重和后台管理。"
+    },
+    "service": {
+      "required": [
+        "database",
+        "http"
+      ],
+      "optional": [
+        "console",
+        "auth"
+      ]
+    },
+    "browser": false
+  }
+}