Refactor network adapter activation and message handling

Introduces isActive property to network adapters for more accurate activation checks, refactors message dispatch logic to use only active adapters, and improves heartbeat management for WebSocket adapters. Also sets default enableWebsocket to false in config and frontend forms, and adds a security dialog for missing tokens in the web UI.

packages/napcat-webui-frontend/src/components/network_edit/http_server.tsx

@@ -2,9 +2,9 @@ import GenericForm, { random_token } from './generic_form';
 import type { Field } from './generic_form';
 
 export interface HTTPServerFormProps {
-  data?: OneBotConfig['network']['httpServers'][0]
-  onClose: () => void
-  onSubmit: (data: OneBotConfig['network']['httpServers'][0]) => Promise<void>
+  data?: OneBotConfig['network']['httpServers'][0];
+  onClose: () => void;
+  onSubmit: (data: OneBotConfig['network']['httpServers'][0]) => Promise<void>;
 }
 
 type HTTPServerFormType = OneBotConfig['network']['httpServers'];
@@ -20,7 +20,7 @@ const HTTPServerForm: React.FC<HTTPServerFormProps> = ({
     host: '127.0.0.1',
     port: 3000,
     enableCors: true,
-    enableWebsocket: true,
+    enableWebsocket: false,
     messagePostFormat: 'array',
     token: random_token(16),
     debug: false,

packages/napcat-webui-frontend/src/components/network_edit/http_sse.tsx

@@ -2,11 +2,11 @@ import GenericForm, { random_token } from './generic_form';
 import type { Field } from './generic_form';
 
 export interface HTTPServerSSEFormProps {
-  data?: OneBotConfig['network']['httpSseServers'][0]
-  onClose: () => void
+  data?: OneBotConfig['network']['httpSseServers'][0];
+  onClose: () => void;
   onSubmit: (
     data: OneBotConfig['network']['httpSseServers'][0]
-  ) => Promise<void>
+  ) => Promise<void>;
 }
 
 type HTTPServerSSEFormType = OneBotConfig['network']['httpSseServers'];
@@ -22,7 +22,7 @@ const HTTPServerSSEForm: React.FC<HTTPServerSSEFormProps> = ({
     host: '127.0.0.1',
     port: 3000,
     enableCors: true,
-    enableWebsocket: true,
+    enableWebsocket: false,
     messagePostFormat: 'array',
     token: random_token(16),
     debug: false,

packages/napcat-webui-frontend/src/components/network_edit/modal.tsx

@@ -2,6 +2,7 @@ import { Modal, ModalContent, ModalHeader } from '@heroui/modal';
 import toast from 'react-hot-toast';
 
 import useConfig from '@/hooks/use-config';
+import useDialog from '@/hooks/use-dialog';
 
 import HTTPClientForm from './http_client';
 import HTTPServerForm from './http_server';
@@ -31,23 +32,57 @@ const NetworkFormModal = <T extends keyof OneBotConfig['network']> (
 ) => {
   const { isOpen, onOpenChange, field, data } = props;
   const { createNetworkConfig, updateNetworkConfig } = useConfig();
+  const dialog = useDialog();
   const isCreate = !data;
 
   const onSubmit = async (data: OneBotConfig['network'][typeof field][0]) => {
-    try {
-      if (isCreate) {
-        await createNetworkConfig(field, data);
-      } else {
-        await updateNetworkConfig(field, data);
+    const saveData = async (dataToSave: OneBotConfig['network'][typeof field][0]) => {
+      try {
+        if (isCreate) {
+          await createNetworkConfig(field, dataToSave);
+        } else {
+          await updateNetworkConfig(field, dataToSave);
+        }
+        toast.success('保存配置成功');
+      } catch (error) {
+        const msg = (error as Error).message;
+
+        toast.error(`保存配置失败: ${msg}`);
+
+        throw error;
       }
-      toast.success('保存配置成功');
-    } catch (error) {
-      const msg = (error as Error).message;
+    };
 
-      toast.error(`保存配置失败: ${msg}`);
-
-      throw error;
+    if (['httpServers', 'httpSseServers', 'websocketServers'].includes(field)) {
+      const serverData = data as any;
+      if (!serverData.token) {
+        await new Promise<void>((resolve, reject) => {
+          dialog.confirm({
+            title: '安全警告',
+            content: (
+              <div>
+                <p>检测到未配置Token，这可能导致安全风险。确认要继续吗？</p>
+                <p className='text-sm text-gray-500 mt-2'>(未配置Token时，Host将被强制限制为 127.0.0.1)</p>
+              </div>
+            ),
+            onConfirm: async () => {
+              serverData.host = '127.0.0.1';
+              try {
+                await saveData(serverData);
+                resolve();
+              } catch (e) {
+                reject(e);
+              }
+            },
+            onCancel: () => {
+              reject(new Error('Cancelled'));
+            },
+          });
+        });
+        return;
+      }
     }
+    await saveData(data);
   };
 
   const renderFormComponent = (onClose: () => void) => {