@mhfire/dsh-im-bridge 0.1.3 → 0.2.0

package/README.en.md

@@ -1,82 +1,114 @@
-[中文](./README.md) | English
-
-# @mhfire/dsh-im-bridge
-
-WeCom AI Bot ⇄ DeepSeek Harness Agent bridge — a **DSH plugin**.
-
-Creates Agents **in-process** inside a dsh profile (no child-process spawn): per-sender durable sessions (the same WeCom user reuses one session with memory), sessions registered with the Web GUI (live view and continue-chat), plus a Settings → Plugins card (`allowFrom` / `agentTimeoutSec` / `startHint`, written to `settings.yaml` with hot reload).
-
-## Install
-
-### Recommended: npm package
-
-```powershell
-dsh plugin --profile web add @mhfire/dsh-im-bridge
-# Or pin a version:
-# dsh plugin --profile web add @mhfire/dsh-im-bridge@0.1.2
-```
-
-In `$DSH_HOME/profiles/web/cordis.patch.yml` (or your profile), supply credentials only (other fields ship as bundle defaults and can be overridden):
-
-```yaml
-- id: im-bridge
-  config:
-    botId: "<your BotID>"
-    secret: "<your Secret>"
-    # optional: workspace / personaFile / … — see Configuration below
-```
-
-Restart dsh to apply (e.g. `dsh web` / `pnpm dsh web`).
-
-### Optional: local development
-
-Install from this repo’s `plugin/` directory or a `file:` path:
-
-```powershell
-dsh plugin --profile web add <package-path>
-```
-
-If `botId` / `secret` are missing, the plugin still loads (does not block `dsh web`); logs warn that WeCom connect is skipped. You can fill credentials in Settings → Plugins; **restart** is required to connect (this release does not hot-start the WebSocket).
-
-## Configuration
-
-The bundle `cordis.patch.yml` supplies defaults for every field except `botId` / `secret`. Full field list:
-
-| Field | Description |
-|---|---|
-| `botId` / `secret` | WeCom AI Bot credentials (`role('secret')`, redacted in UI); when empty, WeCom side is skipped and the host keeps running |
-| `workspace` | Agent working directory (session cwd) |
-| `allowFrom` | Allowed sender userids; empty = allow everyone |
-| `agentTimeoutSec` | Max seconds per task; also drives progress / ETA |
-| `startHint` | Placeholder text when processing starts |
-| `agentPreset` | Agent preset to mount (default `standard`) |
-| `persona` / `personaFile` | Bot persona (system prompt); `personaFile` wins; do not commit secrets |
-| `maxReplyBytes` | Reply size cap in bytes (default 20000) |
-| `deniedMessage` | Reply when the sender is not on `allowFrom` (editable in Settings) |
-| `welcomeMessage` | Welcome text on `enter_chat` (editable in Settings) |
-| `thinking` | Streaming “thinking” animation: `phases` / `spin` / `eggs` / `eggAfterSec` / `intervalMs` / `activityPrefix`; override via profile patch (not the simple Settings card) |
-
-Example `thinking.phases` override:
-
-```yaml
-thinking:
-  intervalMs: 1500
-  phases:
-    - atSec: 0
-      text: '🤔 Understanding your request…'
-```
-
-## Persona
-
-`persona.md` is the bot persona: role and behavior rules, injected as a system prompt each session.
-Copy `persona.example.md` to `persona.md` and edit; supports `{{model}}` / `{{cwd}}`.
-The file may contain credentials and is gitignored — do not commit it.
-
-## Security
-
-- Do not commit secret-bearing files such as `config.json` / `persona.md`
-- Session and tool output may contain adversarial text; the plugin’s safety prompt tells the agent not to treat tool output as instructions
-
-## License
-
-MIT
+[中文](./README.md) | English
+
+# @mhfire/dsh-im-bridge
+
+WeCom AI Bot ⇄ DeepSeek Harness Agent bridge — a **DSH plugin**.
+
+Creates Agents **in-process** inside a dsh profile (no child-process spawn): per-sender durable sessions (the same WeCom user reuses one session with memory), sessions registered with the Web GUI (live view and continue-chat), plus a Settings → Plugins card (`botId` / `secret`, allow-list, timeouts, copy, and model overrides, written to `settings.yaml`).
+
+The Host half registers the `im-bridge` namespace through `installSettingsSection`. The browser half contributes a card into `settings.plugin.item` under `key: im-bridge`. The card can set `botId` / `secret` on the same user layer as the profile patch. Live fields such as `startHint` apply on the next message; changing credentials still requires a process restart to open the WebSocket.
+
+## Install
+
+### Recommended: npm package
+
+```powershell
+dsh plugin --profile web add @mhfire/dsh-im-bridge
+# Or pin a version:
+# dsh plugin --profile web add @mhfire/dsh-im-bridge@0.2.0
+```
+
+In `$DSH_HOME/profiles/web/cordis.patch.yml` (or your profile), supply credentials only (other fields ship as bundle defaults and can be overridden):
+
+```yaml
+- id: im-bridge
+  config:
+    botId: "<your BotID>"
+    secret: "<your Secret>"
+    # optional: workspace / personaFile / … — see Configuration below
+```
+
+Restart dsh to apply (e.g. `dsh web` / `pnpm dsh web`).
+
+### Optional: local development
+
+Install from this repo’s `plugin/` directory or a `file:` path:
+
+```powershell
+dsh plugin --profile web add <package-path>
+```
+
+If `botId` / `secret` are missing, the plugin still loads (does not block `dsh web`); logs warn that WeCom connect is skipped. You can also fill them at the top of the Settings → Plugins card (same user layer as the profile patch); the badge becomes “Configured” after save. Changing credentials still requires a **restart** to connect (this release does not hot-reconnect).
+
+## Configuration
+
+The bundle `cordis.patch.yml` supplies defaults for every field except `botId` / `secret`. Full field list:
+
+| Field | Description |
+|---|---|
+| `botId` / `secret` | WeCom AI Bot credentials (`role('secret')`, redacted in UI); when empty, WeCom side is skipped and the host keeps running |
+| `workspace` | Agent working directory (session cwd) |
+| `allowFrom` | Allowed sender userids; empty = allow everyone |
+| `agentTimeoutSec` | Max seconds per task; also drives progress / ETA |
+| `startHint` | Placeholder text when processing starts |
+| `agentPreset` | Agent preset to mount (default `standard`) |
+| `provider` / `model` | WeCom-only model; **both must be non-empty** to override, otherwise follow the GUI `agent-default-model`. Filling only one warns and falls back. Editable in Settings; applies to later new sender sessions only |
+| `reasoningEffort` | Optional effort when the WeCom override is in effect; ignored otherwise |
+| `persona` / `personaFile` | Bot persona; precedence: `personaFile` → `persona` → packaged default (zh/en via Host `locale.preference`); overrides do not follow language; do not commit secrets |
+| `maxReplyBytes` | Reply size cap in bytes (default 20000) |
+| `deniedMessage` | Reply when the sender is not on `allowFrom` (editable in Settings) |
+| `welcomeMessage` | Welcome text on `enter_chat` (editable in Settings) |
+| `thinking` | Streaming animation. Precedence: tool activity (`toolLabels`) > model stream phase (`reasoningStatus` / `outputStatus` from `assistant/chunk`) > timed `phases` fallback; also `spin` / `reasoningSpin` / `outputSpin` / `eggs` |
+
+To give WeCom a different model from the GUI, set both in the profile `cordis.patch.yml`:
+
+```yaml
+- id: im-bridge
+  config:
+    provider: deepseek-official
+    model: deepseek-reasoner
+```
+
+Behavior:
+
+1. `reasoning-delta` → rotating “model thinking” copy + `reasoningSpin`
+2. `text-delta` → rotating “writing reply” copy + `outputSpin`
+3. `tool/call` → `activityPrefix` + friendly label; brief done/fail after `tool/result`
+4. No chunks yet → timed `phases` (unrelated to whether the model is reasoning)
+
+```yaml
+thinking:
+  intervalMs: 1500
+  reasoningStatus:
+    - '💭 Model thinking…'
+  outputStatus:
+    - '✍️ Writing reply…'
+  toolLabels:
+    pwsh: PowerShell
+```
+
+## Persona
+
+Precedence: `personaFile` → `persona` string → packaged default persona.
+
+- **Packaged defaults**: [`persona.default.md`](./persona.default.md) (Chinese) / [`persona.default.en.md`](./persona.default.en.md) (English). Chosen from Host settings `locale.preference` (`zh`|`en`); **falls back to Chinese when unset** (the Host cannot see a browser-only provisional locale). Re-read on each assemble so a Settings language change applies on the next request.
+- **Overrides do not follow language**: a set `personaFile` / non-empty `persona` always wins.
+
+**Recommended override**: place `persona.md` next to `cordis.patch.yml` under `$DSH_HOME/profiles/<name>/`, and point `personaFile` at it with an absolute path (relative paths resolve against process cwd):
+
+```yaml
+- id: im-bridge
+  config:
+    personaFile: 'C:\\Users\\you\\.dsh\\profiles\\web\\persona.md'
+```
+
+Or copy [`persona.example.md`](./persona.example.md) as a fill-in template. Supports `{{model}}` / `{{cwd}}`. Do not commit secret-bearing persona files. Welcome / deny / thinking copy remain Chinese config strings and do not follow locale yet.
+
+## Security
+
+- Do not commit secret-bearing files such as `config.json` / `persona.md`
+- Session and tool output may contain adversarial text; the plugin’s safety prompt tells the agent not to treat tool output as instructions
+
+## License
+
+MIT

package/README.md

@@ -1,82 +1,114 @@
-中文 | [English](./README.en.md)
-
-# @mhfire/dsh-im-bridge
-
-企业微信智能机器人 ⇄ DeepSeek Harness Agent 桥接 **DSH 插件**。
-
-在 dsh profile 内**进程内**创建 Agent（不再 spawn 子进程）：per-sender 持久会话（同一企业微信用户复用同一会话，有上下文记忆），会话与 Web GUI 同进程注册（实时可见、可续聊），并在 Settings → 插件配置页提供配置卡片（`allowFrom` / `agentTimeoutSec` / `startHint`，写入 `settings.yaml` 热生效）。
-
-## 安装
-
-### 推荐：从 npm 安装
-
-```powershell
-dsh plugin --profile web add @mhfire/dsh-im-bridge
-# 或钉版本：
-# dsh plugin --profile web add @mhfire/dsh-im-bridge@0.1.2
-```
-
-在 `$DSH_HOME/profiles/web/cordis.patch.yml`（或对应 profile）中补密钥即可（其余项已有 bundle 默认，可按需覆盖）：
-
-```yaml
-- id: im-bridge
-  config:
-    botId: "<你的 BotID>"
-    secret: "<你的 Secret>"
-    # 可选：workspace / personaFile 等，见下方配置项
-```
-
-重启 dsh 进程即可使用（例如 `dsh web` / `pnpm dsh web`）。
-
-### 备选：本地开发
-
-从本仓库 `plugin/` 目录或 `file:` 路径安装：
-
-```powershell
-dsh plugin --profile web add <本包路径>
-```
-
-未配置 `botId` / `secret` 时插件仍会加载（不阻塞 `dsh web`），日志会提示跳过企微连线；Settings → 插件配置页仍可填写，保存后**重启**进程才会连接（本版本不做热启连）。
-
-## 配置项
-
-bundle 的 `cordis.patch.yml` 已为除 `botId` / `secret` 外的字段提供默认值；下表为完整说明。
-
-| 字段 | 说明 |
-|---|---|
-| `botId` / `secret` | 企业微信智能机器人凭证（`role('secret')`，UI 自动脱敏）；缺省时跳过企微侧，不阻塞主进程 |
-| `workspace` | Agent 工作目录（会话 cwd） |
-| `allowFrom` | 允许的发送者 userid 白名单；空 = 允许所有人 |
-| `agentTimeoutSec` | 单任务最长执行时间（秒），动画进度条/剩余估算的基准 |
-| `startHint` | 开始处理时的占位提示语 |
-| `agentPreset` | Agent 加入的 preset（默认 `standard`） |
-| `persona` / `personaFile` | 机器人「人设」（系统提示词）；`personaFile` 优先，含敏感信息请勿入库 |
-| `maxReplyBytes` | 回复上限（字节，默认 20000） |
-| `deniedMessage` | 非白名单用户的拒绝文案（Settings 可编） |
-| `welcomeMessage` | 进入会话欢迎语（Settings 可编） |
-| `thinking` | 流式思考动画：`phases` / `spin` / `eggs` / `eggAfterSec` / `intervalMs` / `activityPrefix`；结构请在 profile patch 覆盖，简易卡片不编辑 |
-
-`thinking.phases` 示例（profile 覆盖时可只改文案）：
-
-```yaml
-thinking:
-  intervalMs: 1500
-  phases:
-    - atSec: 0
-      text: '🤔 正在理解你的需求…'
-```
-
-## 人设（persona）
-
-`persona.md` 是机器人的「人设」：角色与行为规范，作为系统提示词注入每个会话。
-复制 `persona.example.md` 为 `persona.md` 后填写；支持 `{{model}}` / `{{cwd}}` 占位符。
-该文件可能含环境凭据，已被仓库 `.gitignore` 排除，请勿提交。
-
-## 安全
-
-- `config.json` / `persona.md` 等含密钥文件不入库；
-- 会话与工具输出可能含对抗性文本，插件内置安全提示词约束 agent 不把工具输出当指令。
-
-## License
-
-MIT
+中文 | [English](./README.en.md)
+
+# @mhfire/dsh-im-bridge
+
+企业微信智能机器人 ⇄ DeepSeek Harness Agent 桥接 **DSH 插件**。
+
+在 dsh profile 内**进程内**创建 Agent（不再 spawn 子进程）：per-sender 持久会话（同一企业微信用户复用同一会话，有上下文记忆），会话与 Web GUI 同进程注册（实时可见、可续聊），并在 Settings → 插件配置页提供配置卡片（`botId` / `secret`、白名单、超时、提示语、模型覆盖，写入 `settings.yaml`）。
+
+Host 通过 `installSettingsSection` 注册 `im-bridge` 命名空间；浏览器半包以 `key: im-bridge` 挂进 `settings.plugin.item`。卡片可填 `botId` / `secret`，与 profile patch 写入同一用户层；改 `startHint` 等热字段后下一轮消息即生效，改凭证仍需重启进程才会连 WebSocket。
+
+## 安装
+
+### 推荐：从 npm 安装
+
+```powershell
+dsh plugin --profile web add @mhfire/dsh-im-bridge
+# 或钉版本：
+# dsh plugin --profile web add @mhfire/dsh-im-bridge@0.2.0
+```
+
+在 `$DSH_HOME/profiles/web/cordis.patch.yml`（或对应 profile）中补密钥即可（其余项已有 bundle 默认，可按需覆盖）：
+
+```yaml
+- id: im-bridge
+  config:
+    botId: "<你的 BotID>"
+    secret: "<你的 Secret>"
+    # 可选：workspace / personaFile 等，见下方配置项
+```
+
+重启 dsh 进程即可使用（例如 `dsh web` / `pnpm dsh web`）。
+
+### 备选：本地开发
+
+从本仓库 `plugin/` 目录或 `file:` 路径安装：
+
+```powershell
+dsh plugin --profile web add <本包路径>
+```
+
+未配置 `botId` / `secret` 时插件仍会加载（不阻塞 `dsh web`），日志会提示跳过企微连线；也可在 Settings → 插件配置卡片顶部填写，保存后徽章变为「已配置」，与 profile patch 同一用户层。改凭证仍要**重启**进程才会连接（本版本不做热重连）。
+
+## 配置项
+
+bundle 的 `cordis.patch.yml` 已为除 `botId` / `secret` 外的字段提供默认值；下表为完整说明。
+
+| 字段 | 说明 |
+|---|---|
+| `botId` / `secret` | 企业微信智能机器人凭证（`role('secret')`，UI 自动脱敏）；缺省时跳过企微侧，不阻塞主进程 |
+| `workspace` | Agent 工作目录（会话 cwd） |
+| `allowFrom` | 允许的发送者 userid 白名单；空 = 允许所有人 |
+| `agentTimeoutSec` | 单任务最长执行时间（秒），动画进度条/剩余估算的基准 |
+| `startHint` | 开始处理时的占位提示语 |
+| `agentPreset` | Agent 加入的 preset（默认 `standard`） |
+| `provider` / `model` | 企微专用模型；**两者都非空**才覆盖，否则跟随 GUI 的 `agent-default-model`；只填一项会告警并回退。Settings 可编，只影响之后新建的发送者会话 |
+| `reasoningEffort` | 覆盖生效时可选的推理强度；未覆盖模型时忽略 |
+| `persona` / `personaFile` | 机器人「人设」；优先级：`personaFile` → `persona` → 包内默认（按 Host `locale.preference` 选中/英）；覆盖不跟语言切换；含敏感信息请勿入库 |
+| `maxReplyBytes` | 回复上限（字节，默认 20000） |
+| `deniedMessage` | 非白名单用户的拒绝文案（Settings 可编） |
+| `welcomeMessage` | 进入会话欢迎语（Settings 可编） |
+| `thinking` | 流式动画。优先级：工具活动（`toolLabels`）> 模型流式阶段（`reasoningStatus` / `outputStatus`，来自 `assistant/chunk`）> 时间轴 `phases` 兜底；另有 `spin` / `reasoningSpin` / `outputSpin` / `eggs` 等 |
+
+企微与 GUI 使用不同模型时，在 profile `cordis.patch.yml` 同时填写：
+
+```yaml
+- id: im-bridge
+  config:
+    provider: deepseek-official
+    model: deepseek-reasoner
+```
+
+`thinking` 行为：
+
+1. 收到 `reasoning-delta` → 「模型思考中」类文案轮换 + `reasoningSpin`
+2. 收到 `text-delta` → 「正在输出回复」类文案轮换 + `outputSpin`
+3. `tool/call` → `activityPrefix` + 友好名；`tool/result` 短暂完成/失败后清空
+4. 尚无 chunk 时 → 按秒数走 `phases`（与模型是否在推理无关）
+
+```yaml
+thinking:
+  intervalMs: 1500
+  reasoningStatus:
+    - '💭 模型思考中…'
+  outputStatus:
+    - '✍️ 正在输出回复…'
+  toolLabels:
+    pwsh: PowerShell
+```
+
+## 人设（persona）
+
+优先级：`personaFile` → `persona` 字符串 → 包内默认人设。
+
+- **包内默认**：[`persona.default.md`](./persona.default.md)（中文）/ [`persona.default.en.md`](./persona.default.en.md)（英文）。按 Host settings `locale.preference`（`zh`|`en`）选择；**未显式选择时回退中文**（Host 看不到仅浏览器决定的语言）。每次 assemble 重新读取，Settings 改语言后下一轮请求生效。
+- **覆盖不跟语言切换**：配置了 `personaFile` / 非空 `persona` 时始终用该内容。
+
+**推荐覆盖方式**：在 `$DSH_HOME/profiles/<name>/` 与 `cordis.patch.yml` 同目录放置 `persona.md`，并在 profile patch 里用绝对路径指向它（相对路径相对进程 cwd，不宜依赖）：
+
+```yaml
+- id: im-bridge
+  config:
+    personaFile: 'C:\\Users\\you\\.dsh\\profiles\\web\\persona.md'
+```
+
+也可复制 [`persona.example.md`](./persona.example.md) 为模板后按环境填写。支持 `{{model}}` / `{{cwd}}` 占位符。含环境凭据的人设文件请勿提交。欢迎语 / 拒绝文案 / 思考动画文案目前仍为中文配置项，不随语言切换。
+
+## 安全
+
+- `config.json` / `persona.md` 等含密钥文件不入库；
+- 会话与工具输出可能含对抗性文本，插件内置安全提示词约束 agent 不把工具输出当指令。
+
+## License
+
+MIT

package/cordis.patch.yml

@@ -1,47 +1,83 @@
-# dsh-im-bridge bundle patch: 插入插件行并给出非密钥默认配置。
-# botId/secret 由 profile 层 ($DSH_HOME/profiles/<name>/cordis.patch.yml) 或 Settings 覆盖。
-- insert:
-    - id: im-bridge
-      name: '@mhfire/dsh-im-bridge'
-      config:
-        workspace: !!js process.cwd()
-        allowFrom: []
-        startHint: '🧠 正在思考...'
-        agentTimeoutSec: 600
-        agentPreset: standard
-        persona: ''
-        personaFile: ''
-        maxReplyBytes: 20000
-        deniedMessage: '无权访问本服务'
-        welcomeMessage: '👋 办公助手已就绪。直接发消息即可，例如查文件、整理文档、查资料或处理日常事务。'
-        thinking:
-          eggAfterSec: 240
-          intervalMs: 1500
-          activityPrefix: '🛠️ 正在执行 '
-          spin:
-            - '🧠'
-            - '💭'
-            - '✨'
-            - '🔎'
-            - '⚡'
-          eggs:
-            - '📎 顺手把要点整理好了，稍后一起给你'
-            - '📶 网络有点忙，让它慢慢跑'
-            - '🎯 结果快出来了，坚持一下'
-            - '🗂️ 资料较多，正在汇总中'
-            - '🌙 别盯着了，完成会自动通知你'
-          phases:
-            - atSec: 0
-              text: '🤔 正在理解你的需求…'
-            - atSec: 8
-              text: '📋 正在整理任务清单'
-            - atSec: 25
-              text: '🔍 正在查找相关资料'
-            - atSec: 55
-              text: '✍️ 正在处理文档/数据'
-            - atSec: 120
-              text: '🧠 正在思考最佳方案…'
-            - atSec: 240
-              text: '⏳ 任务较繁琐，请稍候…'
-            - atSec: 420
-              text: '☕ 快好了，正在收尾…'
+# dsh-im-bridge bundle patch: 插入插件行并给出非密钥默认配置。
+# botId/secret 由 profile 层 ($DSH_HOME/profiles/<name>/cordis.patch.yml) 或 Settings 覆盖。
+- insert:
+    - id: im-bridge
+      name: '@mhfire/dsh-im-bridge'
+      config:
+        workspace: !!js process.cwd()
+        allowFrom: []
+        startHint: '🧠 正在思考...'
+        agentTimeoutSec: 600
+        agentPreset: standard
+        # 空 = 跟随 GUI 的 agent-default-model; provider 与 model 同时填写才只影响企微
+        provider: ''
+        model: ''
+        reasoningEffort: ''
+        persona: ''
+        personaFile: ''
+        maxReplyBytes: 20000
+        deniedMessage: '无权访问本服务'
+        welcomeMessage: '👋 办公助手已就绪。直接发消息即可，例如查文件、整理文档、查资料或处理日常事务。'
+        thinking:
+          eggAfterSec: 240
+          intervalMs: 1500
+          activityPrefix: '🛠️ 正在执行 '
+          toolLabels:
+            pwsh: PowerShell
+            bash: Shell
+            read_file: 读文件
+            read: 读文件
+            write_file: 写文件
+            write: 写文件
+            edit_file: 编辑文件
+            str_replace: 编辑文件
+            glob: 查找文件
+            grep: 搜索内容
+            web_search: 网页搜索
+            web_fetch: 抓取网页
+            todo_write: 更新待办
+          reasoningStatus:
+            - '💭 助手思考中…'
+            - '🧠 深入分析中…'
+            - '✨ 梳理思路中…'
+          outputStatus:
+            - '✍️ 正在输出回复…'
+            - '📝 组织文字中…'
+            - '💬 生成回答中…'
+          reasoningSpin:
+            - '💭'
+            - '🧠'
+            - '🌀'
+            - '✨'
+          outputSpin:
+            - '✍️'
+            - '📝'
+            - '💬'
+            - '⚡'
+          spin:
+            - '🧠'
+            - '💭'
+            - '✨'
+            - '🔎'
+            - '⚡'
+          eggs:
+            - '📎 顺手把要点整理好了，稍后一起给你'
+            - '📶 网络有点忙，让它慢慢跑'
+            - '🎯 结果快出来了，坚持一下'
+            - '🗂️ 资料较多，正在汇总中'
+            - '🌙 别盯着了，完成会自动通知你'
+          phases:
+            - atSec: 0
+              text: '🤔 正在理解你的需求…'
+            - atSec: 8
+              text: '📋 正在整理任务清单'
+            - atSec: 25
+              text: '🔍 正在查找相关资料'
+            - atSec: 55
+              text: '✍️ 正在处理文档/数据'
+            - atSec: 120
+              text: '🧠 正在思考最佳方案…'
+            - atSec: 240
+              text: '⏳ 任务较繁琐，请稍候…'
+            - atSec: 420
+              text: '☕ 快好了，正在收尾…'