✨ feat(auth): 添加群组和机器人唤醒命令支持，优化权限检查逻辑 (#2113)

* ✨ feat(auth): 添加群组和机器人唤醒命令支持，优化权限检查逻辑
✨ feat(llm): 增加额外请求头配置，改进API适配器请求头处理

* 🚨 auto fix by pre-commit hooks

* ```
fix(auth): 优化bot权限验证逻辑并改进错误提示

- 将bot存在性检查与状态检查分离，提供更精确的错误信息
- 修复当bot为None时的状态访问问题
- 移除不必要的注释，保持代码简洁
- 优化日志记录的位置和条件判断
```

---------

Co-authored-by: ATTomatoo <1126160939@qq.com>
Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

zhenxun/builtin_plugins/hooks/auth/auth_bot.py

@@ -15,6 +15,7 @@ async def auth_bot(
     bot_id: str,
     bot_data: BotConsole | BotSnapshot | None = None,
     skip_fetch: bool = False,
+    allow_sleep_bypass: bool = False,
 ):
     """bot层面的权限检查
 
@@ -33,16 +34,19 @@ async def auth_bot(
         if bot is None and not skip_fetch:
             bot = await BotMemoryCache.get(bot_id)
 
-        if not bot or not bot.status:
-            raise SkipPluginException("Bot不存在或休眠中阻断权限检测...")
+        if bot is None:
+            raise SkipPluginException("Bot不存在，阻断权限检测...")
+
+        if not bot.status and not allow_sleep_bypass:
+            raise SkipPluginException("Bot休眠中阻断权限检测...")
+
         if CommonUtils.format(plugin.module) in bot.block_plugins:
             raise SkipPluginException(
                 f"Bot插件 {plugin.name}({plugin.module}) 权限检查结果为关闭..."
             )
     finally:
-        # 记录执行时间
         elapsed = time.time() - start_time
-        if elapsed > WARNING_THRESHOLD:  # 记录耗时超过500ms的检查
+        if elapsed > WARNING_THRESHOLD:
             logger.warning(
                 f"auth_bot 耗时: {elapsed:.3f}s, "
                 f"bot_id={bot_id}, plugin={plugin.module}",

zhenxun/builtin_plugins/hooks/auth/auth_group.py

@@ -1,3 +1,4 @@
+import re
 import time
 
 from zhenxun.models.group_console import GroupConsole
@@ -8,6 +9,25 @@ from zhenxun.services.log import logger
 from .config import LOGGER_COMMAND, WARNING_THRESHOLD, SwitchEnum
 from .exception import SkipPluginException
 
+_GROUP_WAKE_PATTERN = re.compile(r"^醒来$", re.IGNORECASE)
+_GROUP_WAKE_CANONICAL_PATTERN = re.compile(r"^group-status\s+wake$", re.IGNORECASE)
+
+
+def _is_group_wake_command(plugin: PluginInfo, text: str) -> bool:
+    if "plugin_switch" not in (plugin.module or ""):
+        return False
+    normalized = re.sub(r"\s+", " ", (text or "").strip())
+    if not normalized:
+        return False
+    if (
+        _GROUP_WAKE_PATTERN.match(normalized) is not None
+        or _GROUP_WAKE_CANONICAL_PATTERN.match(normalized) is not None
+    ):
+        return True
+    # 兼容 to_me 前缀场景：如“真寻 醒来”
+    tokens = normalized.split(" ")
+    return len(tokens) == 2 and tokens[-1] == SwitchEnum.ENABLE
+
 
 async def auth_group(
     plugin: PluginInfo,
@@ -34,7 +54,7 @@ async def auth_group(
             raise SkipPluginException("群组信息不存在...")
         if group.level < 0:
             raise SkipPluginException("群组黑名单, 目标群组群权限权限-1...")
-        if text.strip() != SwitchEnum.ENABLE and not group.status:
+        if not _is_group_wake_command(plugin, text) and not group.status:
             raise SkipPluginException("群组休眠状态...")
         if plugin.level > group.level:
             raise SkipPluginException(

zhenxun/builtin_plugins/hooks/auth_checker.py

@@ -136,6 +136,10 @@ _PREFILTER_STATS = {
 }
 _PREFILTER_LAST_LOG = 0.0
 _CACHE_SWEEP_TASK: asyncio.Task | None = None
+_BOT_WAKE_COMMAND_PATTERN = re.compile(r"^bot醒来(?:\s+\S+)?$", re.IGNORECASE)
+_BOT_WAKE_CANONICAL_PATTERN = re.compile(
+    r"^bot_manage\s+bot_switch\s+enable(?:\s+\S+)?$", re.IGNORECASE
+)
 
 
 class HookTraceRecorder:
@@ -234,6 +238,20 @@ def _normalize_command(command: str) -> str:
     return text
 
 
+def _is_bot_wake_command(module: str, text: str | None) -> bool:
+    if "bot_manage" not in (module or ""):
+        return False
+    if not text:
+        return False
+    normalized = re.sub(r"\s+", " ", text.strip())
+    if not normalized:
+        return False
+    return (
+        _BOT_WAKE_COMMAND_PATTERN.match(normalized) is not None
+        or _BOT_WAKE_CANONICAL_PATTERN.match(normalized) is not None
+    )
+
+
 def _split_command_variants(command: str) -> tuple[str, ...]:
     text = command.strip()
     if not text:
@@ -350,6 +368,79 @@ def _matcher_module_name(matcher_cls: type[Matcher]) -> str:
     return (getattr(plugin, "name", "") or "").strip()
 
 
+def _collect_ai_route_modules(event: Event, state: dict | None = None) -> set[str]:
+    if state is not None:
+        cached = state.get("_zx_ai_route_modules")
+        if isinstance(cached, set):
+            return cached
+
+    raw_value = getattr(event, "_ai_route_modules", None)
+    result: set[str] = set()
+    if isinstance(raw_value, str):
+        normalized = raw_value.strip()
+        if normalized:
+            result.add(normalized)
+    elif isinstance(raw_value, set | frozenset | list | tuple):
+        for item in raw_value:
+            if not isinstance(item, str):
+                continue
+            normalized = item.strip()
+            if normalized:
+                result.add(normalized)
+
+    if state is not None and result:
+        state["_zx_ai_route_modules"] = result
+    return result
+
+
+def _collect_ai_route_heads(event: Event, state: dict | None = None) -> set[str]:
+    if state is not None:
+        cached = state.get("_zx_ai_route_heads")
+        if isinstance(cached, set):
+            return cached
+
+    raw_value = getattr(event, "_ai_route_heads", None)
+    result: set[str] = set()
+    if isinstance(raw_value, str):
+        normalized = raw_value.strip().casefold()
+        if normalized:
+            result.add(normalized)
+    elif isinstance(raw_value, set | frozenset | list | tuple):
+        for item in raw_value:
+            if not isinstance(item, str):
+                continue
+            normalized = item.strip().casefold()
+            if normalized:
+                result.add(normalized)
+
+    if state is not None and result:
+        state["_zx_ai_route_heads"] = result
+    return result
+
+
+def _matcher_matches_ai_route_heads(
+    matcher_cls: type[Matcher],
+    ai_route_heads: set[str],
+) -> bool:
+    if not ai_route_heads:
+        return False
+    matcher_commands = _extract_matcher_command_literals(matcher_cls)
+    if not matcher_commands:
+        return False
+    for command in matcher_commands:
+        normalized_command = command.strip().casefold()
+        if not normalized_command:
+            continue
+        for head in ai_route_heads:
+            if not head:
+                continue
+            if _command_matches(head, normalized_command) or _command_matches(
+                normalized_command, head
+            ):
+                return True
+    return False
+
+
 def _is_command_matcher_class(matcher_cls: type[Matcher]) -> bool:
     if matcher_cls in _MATCHER_COMMAND_TYPE_CACHE:
         return _MATCHER_COMMAND_TYPE_CACHE[matcher_cls]
@@ -602,6 +693,12 @@ async def _check_matcher_prefilter(
     if not module:
         return False, None
 
+    ai_route_modules = _collect_ai_route_modules(event, state)
+    ai_route_heads = _collect_ai_route_heads(event, state)
+    if ai_route_modules and module not in ai_route_modules:
+        if not _matcher_matches_ai_route_heads(matcher_cls, ai_route_heads):
+            return True, "route_miss"
+
     if not _ROUTE_INDEX_READY:
         await _ensure_route_index()
 
@@ -1425,12 +1522,21 @@ async def auth(
 
         # 并行执行所有 hook 检查，并记录执行时间
         hooks_start = time.time()
+        allow_sleep_bypass = _is_bot_wake_command(module, text)
 
         # 创建所有 hook 任务
         hook_tasks = []
         if event_cache is None:
             hook_tasks.append(
-                time_hook(auth_bot(plugin, bot.self_id), "auth_bot", hook_recorder)
+                time_hook(
+                    auth_bot(
+                        plugin,
+                        bot.self_id,
+                        allow_sleep_bypass=allow_sleep_bypass,
+                    ),
+                    "auth_bot",
+                    hook_recorder,
+                )
             )
         else:
             if bot_timeout:
@@ -1443,6 +1549,7 @@ async def auth(
                             bot.self_id,
                             bot_data=bot_data,
                             skip_fetch=True,
+                            allow_sleep_bypass=allow_sleep_bypass,
                         ),
                         "auth_bot",
                         hook_recorder,