@ai-wendao/ant 0.3.20 → 0.4.1

package/index.js

@@ -3,6 +3,8 @@ export const name = 'ant'
 import { createHash } from 'node:crypto'
 import { createRequire } from 'node:module'
 import { installSkill, listSkills, uninstallSkill } from './skill-install.js'
+import { readLocalDelegationSettings, recentDelegationStatus, startDelegationHost,
+  writeLocalDelegationSettings } from './delegation.js'
 
 export const inject = []
 
@@ -18,6 +20,17 @@ const SKILL_ORIGINAL_PATH = '/api/ant-teams/skills/original'
 const SKILL_INSTALL_PATH = '/api/ant-teams/skills/install'
 const SKILL_UNINSTALL_PATH = '/api/ant-teams/skills/uninstall'
 const PLUGINS_PATH = '/api/ant-teams/plugins'
+const DELEGATION_BOTS_PATH = '/api/ant-teams/delegation/bots'
+const DELEGATION_GRANTS_PATH = '/api/ant-teams/delegation/grants'
+const DELEGATION_ENROLLED_BOTS_PATH = '/api/ant-teams/delegation/enrolled-bots'
+const DELEGATION_GROUPS_PATH = '/api/ant-teams/delegation/groups'
+const DELEGATION_OWNER_CHALLENGE_PATH = '/api/ant-teams/delegation/owner-challenge'
+const DELEGATION_STATUS_PATH = '/api/ant-teams/delegation/status'
+const DELEGATION_CARDS_PATH = '/api/ant-teams/delegation/cards'
+const DELEGATION_SETTINGS_PATH = '/api/ant-teams/delegation/settings'
+const DELEGATION_EXECUTORS_PATH = '/api/ant-teams/delegation/executors'
+const DELEGATION_LOCAL_SETTINGS_PATH = '/api/ant-teams/delegation/local-settings'
+const DELEGATION_CANCEL_PATH = '/api/ant-teams/delegation/cancel'
 const ANT_NPM_PACKAGE_NAME = '@ai-wendao/ant'
 const BUNDLE_VERSION = createRequire(import.meta.url)('./package.json').version
 const MAX_MODEL_RESPONSE_BYTES = 1024 * 1024
@@ -117,7 +130,7 @@ async function updateModelSession(serviceUrl, token, action) {
   })
 }
 
-async function readLimitedBody(response) {
+async function readLimitedBody(response, maxBytes = MAX_MODEL_RESPONSE_BYTES) {
   if (!response.body) return ''
   const reader = response.body.getReader()
   const chunks = []
@@ -127,7 +140,7 @@ async function readLimitedBody(response) {
       const { done, value } = await reader.read()
       if (done) break
       size += value.byteLength
-      if (size > MAX_MODEL_RESPONSE_BYTES) {
+      if (size > maxBytes) {
         await reader.cancel()
         return null
       }
@@ -184,6 +197,252 @@ async function fetchMemberModels(request, credentials, settings) {
   }
 }
 
+function dshImService(ctx) {
+  try { return ctx.get?.('dshIm') ?? ctx.dshIm ?? null } catch { return null }
+}
+
+async function fetchDelegationBots(request, ctx) {
+  if (request.method !== 'GET') return jsonResponse(405, { message: '只支持 GET 请求。' })
+  const service = dshImService(ctx)
+  if (!service?.listBots || !service?.describeBot) return jsonResponse(503, { message: '请先安装并启用 DSH-IM。' })
+  try {
+    const bots = (await service.listBots()).filter((bot) => bot.channel === 'feishu').slice(0, 50)
+    const result = await Promise.all(bots.map(async (bot) => {
+      try {
+        const details = await service.describeBot(bot.botId)
+        return {
+          bot_id: bot.botId, name: details.account?.name || bot.botId,
+          fingerprint: details.account?.fingerprint,
+          connected: details.connected === true,
+          available: details.capabilities?.includes('exclusive-text-consumer')
+            && details.capabilities?.includes('reply-text-checked'),
+          history_available: details.capabilities?.includes('history-text-checked') === true,
+        }
+      } catch { return null }
+    }))
+    return jsonResponse(200, { bots: result.filter(Boolean) })
+  } catch { return jsonResponse(502, { message: '暂时无法读取 DSH-IM 机器人列表。' }) }
+}
+
+async function fetchDelegationGrants(request, ctx, credentials, settings) {
+  if (!['GET', 'POST', 'DELETE'].includes(request.method)) return jsonResponse(405, { message: '请求方式不支持。' })
+  let connection
+  try { connection = await readMemberConnection(credentials, settings) } catch {
+    return jsonResponse(500, { message: '无法读取 ANT 连接。' })
+  }
+  if (!connection) return jsonResponse(401, { message: '请先连接 ANT 团队。' })
+  let body
+  if (request.method !== 'GET') {
+    try {
+      const raw = await request.text()
+      if (raw.length > 16_384) return jsonResponse(413, { message: '委托设置过大。' })
+      body = JSON.parse(raw)
+    } catch { return jsonResponse(400, { message: '委托设置格式无效。' }) }
+  }
+  if (request.method === 'POST') {
+    const service = dshImService(ctx)
+    if (!service?.describeBot) return jsonResponse(503, { message: '请先安装并启用 DSH-IM。' })
+    try {
+      const bot = await service.describeBot(body.bot_id)
+      if (bot.channel !== 'feishu' || !bot.connected || bot.account?.fingerprint !== body.bot_fingerprint
+        || !bot.capabilities?.includes('exclusive-text-consumer') || !bot.capabilities?.includes('reply-text-checked')) {
+        return jsonResponse(400, { message: '请选择已连接且支持协作收件的飞书机器人。' })
+      }
+    } catch { return jsonResponse(400, { message: '机器人当前不可用。' }) }
+  }
+  if (request.method === 'DELETE' && (typeof body?.id !== 'string' || !/^[0-9a-f-]{36}$/iu.test(body.id))) {
+    return jsonResponse(400, { message: '委托授权编号无效。' })
+  }
+  const path = request.method === 'DELETE'
+    ? `/api/me/im-delegations/${encodeURIComponent(body.id)}` : '/api/me/im-delegations'
+  try {
+    const response = await fetch(new URL(path, connection.serviceUrl), {
+      method: request.method,
+      headers: { authorization: `Bearer ${connection.token}`, accept: 'application/json',
+        ...(request.method === 'POST' ? { 'content-type': 'application/json' } : {}) },
+      ...(request.method === 'POST' ? { body: JSON.stringify(body) } : {}),
+      redirect: 'manual', signal: AbortSignal.timeout(12_000),
+    })
+    if (response.status === 404 && request.method !== 'DELETE') {
+      return jsonResponse(426, { message: '团队服务端尚未支持委托审查，请联系管理员升级 ANT 服务端。' })
+    }
+    if (response.status === 204) return new Response(null, { status: 204 })
+    const text = await readLimitedBody(response)
+    if (text === null) return jsonResponse(502, { message: '委托设置响应过大。' })
+    return new Response(text, { status: response.status,
+      headers: { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' } })
+  } catch { return jsonResponse(502, { message: '暂时无法连接 ANT 团队服务。' }) }
+}
+
+async function fetchDelegationGroupSettings(request, ctx, credentials, settings, kind) {
+  const methods = kind === 'groups' ? ['GET'] : kind === 'challenge' ? ['POST'] : ['GET', 'POST', 'DELETE']
+  if (!methods.includes(request.method)) return jsonResponse(405, { message: '请求方式不支持。' })
+  let connection
+  try { connection = await readMemberConnection(credentials, settings) } catch {
+    return jsonResponse(500, { message: '无法读取 ANT 连接。' })
+  }
+  if (!connection) return jsonResponse(401, { message: '请先连接 ANT 团队。' })
+  let body = null
+  if (request.method !== 'GET') {
+    try {
+      const raw = await request.text()
+      if (raw.length > 2048) return jsonResponse(413, { message: '请求内容过大。' })
+      body = JSON.parse(raw)
+    } catch { return jsonResponse(400, { message: '请求格式无效。' }) }
+  }
+  if (kind === 'bots' && request.method === 'POST') {
+    const service = dshImService(ctx)
+    if (!service?.describeBot) return jsonResponse(503, { message: '请先安装并启用 DSH-IM。' })
+    try {
+      const bot = await service.describeBot(body.bot_id)
+      if (bot.channel !== 'feishu' || !bot.connected || bot.account?.fingerprint !== body.bot_fingerprint
+        || !bot.capabilities?.includes('exclusive-text-consumer') || !bot.capabilities?.includes('reply-text-checked')) {
+        return jsonResponse(400, { message: '请选择已连接且支持协作收件的飞书机器人。' })
+      }
+    } catch { return jsonResponse(400, { message: '机器人当前不可用。' }) }
+  }
+  if (kind === 'bots' && request.method === 'DELETE'
+    && (typeof body?.bot_id !== 'string' || !body.bot_id || body.bot_id.length > 128)) {
+    return jsonResponse(400, { message: '机器人编号无效。' })
+  }
+  const path = kind === 'groups' ? '/api/me/im-delegations/groups'
+    : kind === 'challenge' ? '/api/me/im-delegations/owner-challenge'
+      : request.method === 'DELETE'
+        ? `/api/me/im-delegations/bots/${encodeURIComponent(body.bot_id)}`
+        : '/api/me/im-delegations/bots'
+  try {
+    const response = await fetch(new URL(path, connection.serviceUrl), {
+      method: request.method,
+      headers: { authorization: `Bearer ${connection.token}`, accept: 'application/json',
+        ...(request.method === 'POST' ? { 'content-type': 'application/json' } : {}) },
+      ...(request.method === 'POST' ? { body: JSON.stringify(body) } : {}),
+      redirect: 'manual', signal: AbortSignal.timeout(12_000),
+    })
+    if (response.status === 404 && request.method !== 'DELETE') {
+      return jsonResponse(426, { message: '团队服务端尚未支持群聊委托，请联系管理员升级 ANT 服务端。' })
+    }
+    if (response.status === 204) return new Response(null, { status: 204 })
+    const text = await readLimitedBody(response)
+    if (text === null) return jsonResponse(502, { message: '团队服务响应过大。' })
+    return new Response(text, { status: response.status,
+      headers: { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' } })
+  } catch { return jsonResponse(502, { message: '暂时无法连接 ANT 团队服务。' }) }
+}
+
+async function fetchDelegationStatus(request, credentials, settings) {
+  if (request.method !== 'GET') return jsonResponse(405, { message: '只支持 GET 请求。' })
+  try {
+    const connection = await readMemberConnection(credentials, settings)
+    if (!connection) return jsonResponse(401, { message: '请先连接 ANT 团队。' })
+    return jsonResponse(200, { items: await recentDelegationStatus(connection.serviceUrl) })
+  } catch { return jsonResponse(503, { message: '本机委托任务记录暂时无法读取，请联系管理员检查。' }) }
+}
+
+async function fetchDelegationCards(request, ctx, credentials, settings) {
+  if (!['GET', 'POST', 'DELETE'].includes(request.method)) return jsonResponse(405, { message: '请求方式不支持。' })
+  let connection
+  try { connection = await readMemberConnection(credentials, settings) } catch {
+    return jsonResponse(500, { message: '无法读取 ANT 连接。' })
+  }
+  if (!connection) return jsonResponse(401, { message: '请先连接 ANT 团队。' })
+  let body = null
+  if (request.method !== 'GET') {
+    try {
+      const raw = await request.text()
+      if (raw.length > 32_768) return jsonResponse(413, { message: '任务设置过大。' })
+      body = JSON.parse(raw)
+    } catch { return jsonResponse(400, { message: '任务设置格式无效。' }) }
+  }
+  if (request.method === 'POST') {
+    const service = dshImService(ctx)
+    if (!service?.describeBot) return jsonResponse(503, { message: '请先安装并启用 DSH-IM。' })
+    try {
+      const bot = await service.describeBot(body.bot_id)
+      if (bot.channel !== 'feishu' || !bot.connected || bot.account?.fingerprint !== body.bot_fingerprint
+        || !bot.capabilities?.includes('exclusive-text-consumer') || !bot.capabilities?.includes('reply-text-checked')) {
+        return jsonResponse(400, { message: '请选择已连接且支持协作收件的飞书机器人。' })
+      }
+    } catch { return jsonResponse(400, { message: '机器人当前不可用。' }) }
+  }
+  if (request.method === 'DELETE' && (typeof body?.id !== 'string' || !/^[0-9a-f-]{36}$/iu.test(body.id))) {
+    return jsonResponse(400, { message: '任务编号无效。' })
+  }
+  const path = request.method === 'DELETE'
+    ? `/api/me/im-delegations/cards/${encodeURIComponent(body.id)}` : '/api/me/im-delegations/cards'
+  try {
+    const response = await fetch(new URL(path, connection.serviceUrl), {
+      method: request.method,
+      headers: { authorization: `Bearer ${connection.token}`, accept: 'application/json',
+        ...(request.method === 'POST' ? { 'content-type': 'application/json' } : {}) },
+      ...(request.method === 'POST' ? { body: JSON.stringify(body) } : {}),
+      redirect: 'manual', signal: AbortSignal.timeout(12_000),
+    })
+    if (response.status === 404 && request.method !== 'DELETE') return jsonResponse(426, { message: '团队服务端尚未支持自定义任务，请联系管理员升级。' })
+    if (response.status === 204) return new Response(null, { status: 204 })
+    const text = await readLimitedBody(response, request.method === 'GET' ? 8 * 1024 * 1024 : MAX_MODEL_RESPONSE_BYTES)
+    if (text === null) return jsonResponse(502, { message: '团队服务响应过大。' })
+    return new Response(text, { status: response.status,
+      headers: { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' } })
+  } catch { return jsonResponse(502, { message: '暂时无法连接 ANT 团队服务。' }) }
+}
+
+async function fetchDelegationRuntimeSettings(request, credentials, settings) {
+  if (request.method !== 'GET') return jsonResponse(405, { message: '请求方式不支持。' })
+  try {
+    const connection = await readMemberConnection(credentials, settings)
+    if (!connection) return jsonResponse(401, { message: '请先连接 ANT 团队。' })
+    const response = await fetch(new URL('/api/me/im-delegations/settings', connection.serviceUrl), {
+      headers: { authorization: `Bearer ${connection.token}`, accept: 'application/json' },
+      redirect: 'manual', signal: AbortSignal.timeout(12_000),
+    })
+    if (!response.ok) return jsonResponse(response.status, { message: '暂时无法读取团队协作设置。' })
+    return jsonResponse(200, await response.json())
+  } catch { return jsonResponse(502, { message: '暂时无法读取团队协作设置。' }) }
+}
+
+function fetchDelegationExecutors(request, ctx) {
+  if (request.method !== 'GET') return jsonResponse(405, { message: '请求方式不支持。' })
+  let providers = []
+  try { providers = (ctx.get?.('subagents') ?? ctx.subagents)?.list?.() || [] } catch {}
+  const available = new Set(providers)
+  return jsonResponse(200, [
+    { id: 'dsh', title: 'DSH', available: Boolean(ctx.sessionController && ctx.agents) },
+    { id: 'codex', title: 'Codex', available: available.has('codex') },
+    { id: 'claude-code', title: 'Claude Code', available: available.has('claude-code') },
+    { id: 'acp', title: 'DSH ACP', available: available.has('acp') },
+    { id: 'dsh-sdk', title: 'DSH SDK 子代理', available: available.has('dsh-sdk') },
+  ])
+}
+
+async function fetchDelegationLocalSettings(request, credentials, settings) {
+  if (!['GET', 'PUT'].includes(request.method)) return jsonResponse(405, { message: '请求方式不支持。' })
+  try {
+    if (!await readMemberConnection(credentials, settings)) return jsonResponse(401, { message: '请先连接 ANT 团队。' })
+    if (request.method === 'GET') return jsonResponse(200, await readLocalDelegationSettings())
+    const raw = await request.text()
+    if (raw.length > 256) return jsonResponse(413, { message: '设置内容过大。' })
+    const body = JSON.parse(raw)
+    return jsonResponse(200, await writeLocalDelegationSettings(body))
+  } catch (error) { return jsonResponse(400, { message: error?.message || '本机设置无法保存。' }) }
+}
+
+async function fetchDelegationCancel(request, credentials, settings, getHost) {
+  if (request.method !== 'POST') return jsonResponse(405, { message: '请求方式不支持。' })
+  try {
+    const connection = await readMemberConnection(credentials, settings)
+    if (!connection) return jsonResponse(401, { message: '请先连接 ANT 团队。' })
+    const raw = await request.text()
+    if (raw.length > 256) return jsonResponse(413, { message: '请求内容过大。' })
+    const body = JSON.parse(raw)
+    if (typeof body.task_id !== 'string' || !/^[A-F0-9]{10}$/u.test(body.task_id)) {
+      return jsonResponse(400, { message: '任务编号无效。' })
+    }
+    const host = getHost()
+    if (!host) return jsonResponse(503, { message: '协作机器人尚未就绪。' })
+    return jsonResponse(200, { canceled: await host.cancelTask(body.task_id, connection.serviceUrl) })
+  } catch { return jsonResponse(503, { message: '暂时无法取消任务，请稍后重试。' }) }
+}
+
 async function fetchServiceInfo(request, credentials, settings) {
   if (request.method !== 'POST') return jsonResponse(405, { message: '只支持 POST 请求' })
   let body
@@ -588,6 +847,7 @@ async function fetchAuthRequest(request, endpoint, credentials, settings) {
 
 export function apply(ctx) {
   ctx.inject(['connection', 'credentials', 'settings'], (connectionCtx) => {
+    let delegationHost = null
     connectionCtx.effect(() => connectionCtx.connection.fetch.register({
       path: SERVICE_INFO_PATH,
       methods: ['POST'],
@@ -632,6 +892,51 @@ export function apply(ctx) {
       path: PLUGINS_PATH, methods: ['GET'], requestBody: 'buffered',
       fetch: (request) => fetchMemberPlugins(request, connectionCtx.credentials, connectionCtx.settings),
     }), 'ant-teams: enterprise plugin catalog')
+    connectionCtx.effect(() => connectionCtx.connection.fetch.register({
+      path: DELEGATION_BOTS_PATH, methods: ['GET'], requestBody: 'buffered',
+      fetch: (request) => fetchDelegationBots(request, connectionCtx),
+    }), 'ant-teams: DSH-IM collaboration bots')
+    connectionCtx.effect(() => connectionCtx.connection.fetch.register({
+      path: DELEGATION_GRANTS_PATH, methods: ['GET', 'POST', 'DELETE'], requestBody: 'buffered',
+      fetch: (request) => fetchDelegationGrants(request, connectionCtx,
+        connectionCtx.credentials, connectionCtx.settings),
+    }), 'ant-teams: member delegation settings')
+    for (const [path, methods, kind] of [
+      [DELEGATION_ENROLLED_BOTS_PATH, ['GET', 'POST', 'DELETE'], 'bots'],
+      [DELEGATION_GROUPS_PATH, ['GET'], 'groups'],
+      [DELEGATION_OWNER_CHALLENGE_PATH, ['POST'], 'challenge'],
+    ]) {
+      connectionCtx.effect(() => connectionCtx.connection.fetch.register({
+        path, methods, requestBody: 'buffered',
+        fetch: (request) => fetchDelegationGroupSettings(request, connectionCtx,
+          connectionCtx.credentials, connectionCtx.settings, kind),
+      }), `ant-teams: member delegation ${kind}`)
+    }
+    connectionCtx.effect(() => connectionCtx.connection.fetch.register({
+      path: DELEGATION_STATUS_PATH, methods: ['GET'], requestBody: 'buffered',
+      fetch: (request) => fetchDelegationStatus(request, connectionCtx.credentials, connectionCtx.settings),
+    }), 'ant-teams: local delegated task status')
+    connectionCtx.effect(() => connectionCtx.connection.fetch.register({
+      path: DELEGATION_CARDS_PATH, methods: ['GET', 'POST', 'DELETE'], requestBody: 'buffered',
+      fetch: (request) => fetchDelegationCards(request, connectionCtx, connectionCtx.credentials, connectionCtx.settings),
+    }), 'ant-teams: member task cards')
+    connectionCtx.effect(() => connectionCtx.connection.fetch.register({
+      path: DELEGATION_SETTINGS_PATH, methods: ['GET'], requestBody: 'buffered',
+      fetch: (request) => fetchDelegationRuntimeSettings(request, connectionCtx.credentials, connectionCtx.settings),
+    }), 'ant-teams: collaboration defaults')
+    connectionCtx.effect(() => connectionCtx.connection.fetch.register({
+      path: DELEGATION_EXECUTORS_PATH, methods: ['GET'], requestBody: 'buffered',
+      fetch: (request) => fetchDelegationExecutors(request, connectionCtx),
+    }), 'ant-teams: local executor availability')
+    connectionCtx.effect(() => connectionCtx.connection.fetch.register({
+      path: DELEGATION_LOCAL_SETTINGS_PATH, methods: ['GET', 'PUT'], requestBody: 'buffered',
+      fetch: (request) => fetchDelegationLocalSettings(request, connectionCtx.credentials, connectionCtx.settings),
+    }), 'ant-teams: local delegated-task concurrency')
+    connectionCtx.effect(() => connectionCtx.connection.fetch.register({
+      path: DELEGATION_CANCEL_PATH, methods: ['POST'], requestBody: 'buffered',
+      fetch: (request) => fetchDelegationCancel(request, connectionCtx.credentials,
+        connectionCtx.settings, () => delegationHost),
+    }), 'ant-teams: owner cancellation for delegated tasks')
     connectionCtx.effect(() => connectionCtx.connection.fetch.register({
       path: DISCONNECT_PATH,
       methods: ['POST'],
@@ -676,5 +981,17 @@ export function apply(ctx) {
         } catch {}
       }
     }, 'ant-teams: ANT model activity session')
+    connectionCtx.inject?.(['dshIm', 'sessionController', 'sessions', 'agents', 'tools'], (delegationCtx) => {
+      delegationCtx.effect(() => {
+        const host = startDelegationHost(delegationCtx,
+          () => readMemberConnection(delegationCtx.credentials, delegationCtx.settings))
+        delegationHost = host
+        return async () => {
+          if (delegationHost === host) delegationHost = null
+          await host()
+        }
+      },
+      'ant-teams: delegated IM review intake')
+    })
   })
 }

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "@ai-wendao/ant",
-  "version": "0.3.20",
+  "version": "0.4.1",
   "description": "ANT (AI-native Teams) connects a DeepSeek Harness Desktop profile to team identity and approved models.",
   "type": "module",
   "scripts": {
-    "test": "node --test client.test.js index.test.js skill-install.test.js tools/migrate-legacy.test.mjs"
+    "test": "node --test client.test.js delegation.test.js index.test.js skill-install.test.js tools/migrate-legacy.test.mjs"
   },
   "bin": {
     "ant-migrate": "tools/migrate-legacy.mjs"
@@ -16,7 +16,7 @@
     "./client": "./client.js",
     "./locale/*.json": "./locale/*.json"
   },
-  "files": ["index.js", "client.js", "skill-install.js", "cordis.patch.yml", "locale/*.json", "tools/migrate-legacy.mjs", "MIGRATION.md", "README.md"],
+  "files": ["index.js", "client.js", "skill-install.js", "delegation.js", "conversation.js", "cordis.patch.yml", "locale/*.json", "tools/migrate-legacy.mjs", "MIGRATION.md", "README.md"],
   "dsh": {
     "bundle": {
       "patch": "./cordis.patch.yml"