fix(qqbot): close strict command visibility gaps

sliverp · sliverp · commit 4cd0bb40b723 · 2026-06-17T10:48:29.000+08:00
diff --git a/extensions/qqbot/src/engine/commands/command-visibility.test.ts b/extensions/qqbot/src/engine/commands/command-visibility.test.ts
@@ -67,6 +67,11 @@ describe("QQBot command visibility", () => {
     expect(classifyCoreCommandForGroup("/config", "strict").visibility).toBe("private");
   });
 
+  it("keeps strict mode fail-closed for unclassified slash commands", () => {
+    expect(classifyCoreCommandForGroup("/bot-dynamic", "strict").visibility).toBe("private");
+    expect(classifyCoreCommandForGroup("/unknown", "strict").visibility).toBe("private");
+  });
+
   it("does not make plugin and unknown slash commands private in all mode", () => {
     expect(classifyCoreCommandForGroup("/bot-help").visibility).not.toBe("private");
     expect(classifyCoreCommandForGroup("/unknown").visibility).not.toBe("private");
diff --git a/extensions/qqbot/src/engine/commands/command-visibility.ts b/extensions/qqbot/src/engine/commands/command-visibility.ts
@@ -103,14 +103,7 @@ export function classifyCoreCommandForGroup(
     if (STRICT_CORE_COMMANDS.has(commandName)) {
       return { commandName, visibility: "hidden" };
     }
-    if (
-      GROUP_VISIBLE_CORE_COMMANDS.has(commandName) ||
-      GROUP_HIDDEN_CORE_COMMANDS.has(commandName) ||
-      PRIVATE_ONLY_CORE_COMMANDS.has(commandName)
-    ) {
-      return { commandName, visibility: "private" };
-    }
-    return { commandName, visibility: "unknown" };
+    return { commandName, visibility: "private" };
   }
   if (GROUP_VISIBLE_CORE_COMMANDS.has(commandName)) {
     return { commandName, visibility: "group" };
