qq-bot-roost 0.9.7 → 0.9.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +6 -5
- package/package.json +5 -4
- package/src/ledger.js +8 -4
- package/src/message.js +9 -1
- package/src/outbound.js +3 -2
- package/src/plugin/loader.js +77 -0
- package/src/plugin/manifest.js +149 -0
- package/src/plugin/market.js +70 -3
- package/src/plugin/protocol.js +2 -0
- package/src/storage/events-schema.js +29 -1
- package/src/tarball.js +32 -4
- package/src/trace.js +28 -0
- package/src/trust.js +264 -0
- package/src/updater.js +58 -8
- package/src/web/server.js +55 -4
- package/web/app.js +45 -0
- package/web/index.html +18 -0
- package/web/style.css +9 -0
package/web/index.html
CHANGED
|
@@ -394,6 +394,24 @@
|
|
|
394
394
|
<div class="hint">修改监听地址或端口需要重启进程才生效。</div>
|
|
395
395
|
</div>
|
|
396
396
|
|
|
397
|
+
<div class="box">
|
|
398
|
+
<div class="box-hd"><h3>插件来源校验</h3></div>
|
|
399
|
+
<label class="switch">
|
|
400
|
+
<input type="checkbox" name="trustEnforce">
|
|
401
|
+
强制校验插件市场签名
|
|
402
|
+
<span class="beta-tag" title="签名文件刚铺开，还没经过一轮完整发版验证">Beta</span>
|
|
403
|
+
<span class="hint">默认关闭</span>
|
|
404
|
+
</label>
|
|
405
|
+
<div class="hint" id="trustHint">
|
|
406
|
+
开启后，官方市场里未签名或签名不符的插件会被拒绝安装和更新；手写插件、以及你自己配置的市场源不受影响。
|
|
407
|
+
需要框架内置信任公钥——没内置时这个开关不起作用（所有插件照常放行）。
|
|
408
|
+
</div>
|
|
409
|
+
<div class="hint">
|
|
410
|
+
<b>Beta：</b>签名文件还没跟着一次正式发版走完流程，现在打开可能让某些插件装不上。
|
|
411
|
+
<b>建议先保持关闭</b>，等发版验证过一轮再考虑。
|
|
412
|
+
</div>
|
|
413
|
+
</div>
|
|
414
|
+
|
|
397
415
|
<div class="sticky-actions">
|
|
398
416
|
<span id="cfgMsg" class="hint"></span>
|
|
399
417
|
<button type="submit" class="btn primary">保存配置</button>
|
package/web/style.css
CHANGED
|
@@ -971,6 +971,15 @@ label.switch.small { font-size: 12.5px; color: var(--muted); }
|
|
|
971
971
|
background: var(--primary-soft, var(--panel-3)); color: var(--primary);
|
|
972
972
|
}
|
|
973
973
|
|
|
974
|
+
/* Beta 标记：签名开关还是 beta，不能让它看起来跟别的开关一样成熟 */
|
|
975
|
+
.beta-tag {
|
|
976
|
+
display: inline-block; margin-left: 6px; padding: 0 7px;
|
|
977
|
+
border-radius: 999px; font-size: 10.5px; font-weight: 600;
|
|
978
|
+
background: var(--warn-soft); color: var(--warn);
|
|
979
|
+
border: 1px solid var(--warn-border);
|
|
980
|
+
vertical-align: 1px;
|
|
981
|
+
}
|
|
982
|
+
|
|
974
983
|
/* 连接凭证下方的保存条：不吸底，紧跟在输入框下面 */
|
|
975
984
|
.cred-actions {
|
|
976
985
|
display: flex; align-items: center; justify-content: flex-end; gap: 14px;
|