From 8811df59689117188d3de5dcc851d99b93d588e7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E6=BA=90=E6=96=87=E9=9B=A8?=
 <41315874+fumiama@users.noreply.github.com>
Date: Mon, 22 Sep 2025 22:51:04 +0800
Subject: [PATCH] feat(aichat): add perm check for cross-group

---
 plugin/aichat/main.go | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/plugin/aichat/main.go b/plugin/aichat/main.go
index 0a1859e3..acffe960 100644
--- a/plugin/aichat/main.go
+++ b/plugin/aichat/main.go
@@ -159,6 +159,17 @@ func init() {
 			}
 			logrus.Infoln("[aichat] agent do:", reqs)
 			for _, req := range reqs {
+				if req.Action == "send_group_msg" {
+					gid, ok := req.Params["group_id"].(int64)
+					if !ok {
+						logrus.Warnln("[aichat] invalid", req.Action, req.Params)
+						continue
+					}
+					if ctx.Event.GroupID != gid && !zero.SuperUserPermission(ctx) {
+						logrus.Warnln("[aichat] refuse to send out of grp from", ctx.Event.GroupID, "to", gid)
+						continue
+					}
+				}
 				ctx.CallAction(req.Action, req.Params)
 				process.SleepAbout1sTo2s()
 			}