@michengai/dsh-automation 0.1.11 → 0.1.13

package/lib/index.js

@@ -21547,21 +21547,6 @@ function automationSessionTitle(taskName, iso) {
   return `${formatRunStamp(iso)} - ${taskName}`;
 }
 
-// src/permission-presets.ts
-function normalizePermissionPreset(input, names) {
-  if (typeof input !== "string") return void 0;
-  const raw = input.trim();
-  if (raw === "") return void 0;
-  const value = raw === "full-access" ? "danger-full-access" : raw;
-  return names.includes(value) ? value : void 0;
-}
-function isUnattendedPermissionSafe(name2, presets) {
-  const normalized = normalizePermissionPreset(name2, presets.names);
-  if (normalized === void 0) return false;
-  const sandbox = presets.resolve?.(normalized).sandbox;
-  return (sandbox ?? normalized) !== "danger-full-access";
-}
-
 // src/executor.ts
 var UNATTENDED_TOOL_ALLOWLIST = /* @__PURE__ */ new Set([
   "run_code",
@@ -21605,9 +21590,6 @@ function unattendedToolGuardReason(name2, args) {
   return UNATTENDED_TOOL_ALLOWLIST.has(name2) ? void 0 : `\u5DE5\u5177 '${name2}' \u4E0D\u5728\u65E0\u4EBA\u503C\u5B88\u81EA\u52A8\u5316\u5141\u8BB8\u5217\u8868\u4E2D\u3002`;
 }
 function applyUnattendedPermission(presets, session, permission) {
-  if (!isUnattendedPermissionSafe(permission, presets)) {
-    throw new Error("\u65E0\u4EBA\u503C\u5B88\u81EA\u52A8\u5316\u62D2\u7EDD\u5B8C\u5168\u6587\u4EF6\u7CFB\u7EDF\u8BBF\u95EE\u6743\u9650\u3002");
-  }
   presets.set(session, permission);
   setApprovalPolicy(session, "never");
 }
@@ -21791,6 +21773,15 @@ function pinAutomationSessionTitle(ctx, session, title) {
   }
 }
 
+// src/permission-presets.ts
+function normalizePermissionPreset(input, names) {
+  if (typeof input !== "string") return void 0;
+  const raw = input.trim();
+  if (raw === "") return void 0;
+  const value = raw === "full-access" ? "danger-full-access" : raw;
+  return names.includes(value) ? value : void 0;
+}
+
 // src/service.ts
 var MAX_TIMER_DELAY_MS = 2147483647;
 var OPTION_CACHE_TTL_MS = 3e4;
@@ -21858,20 +21849,17 @@ var AutomationService = class _AutomationService {
     });
   }
   permissionNames() {
-    const presets = this.permissionPresets();
-    return presets.names.filter((name2) => isUnattendedPermissionSafe(name2, presets));
+    return this.permissionPresets().names;
   }
   permissionOptions() {
     const presets = this.permissionPresets();
-    return this.permissionNames().map((name2) => presets.optionOf(name2));
+    return presets.names.map((name2) => presets.optionOf(name2));
   }
   defaultPermission() {
     const presets = this.permissionPresets();
     const value = normalizePermissionPreset(presets.defaultPreset, presets.names);
-    if (value !== void 0 && isUnattendedPermissionSafe(value, presets)) return value;
-    const fallback = this.permissionNames()[0];
-    if (fallback === void 0) throw new Error("Host \u6CA1\u6709\u53EF\u7528\u4E8E\u65E0\u4EBA\u503C\u5B88\u4EFB\u52A1\u7684\u5B89\u5168\u6743\u9650\u9884\u8BBE\u3002");
-    return fallback;
+    if (value === void 0) throw new Error("Host \u7684\u9ED8\u8BA4\u6743\u9650\u9884\u8BBE\u4E0D\u5728\u5B98\u65B9\u6743\u9650\u5217\u8868\u4E2D\u3002");
+    return value;
   }
   async dispose() {
     this.stopping = true;
@@ -22353,9 +22341,6 @@ var AutomationService = class _AutomationService {
     if (input === void 0) return this.defaultPermission();
     const value = normalizePermissionPreset(input, presets.names);
     if (value === void 0) throw new AutomationRequestError(`unknown permission preset '${input}'`);
-    if (!isUnattendedPermissionSafe(value, presets)) {
-      throw new AutomationRequestError("\u65E0\u4EBA\u503C\u5B88\u81EA\u52A8\u5316\u4E0D\u5141\u8BB8\u4F7F\u7528\u5B8C\u5168\u6587\u4EF6\u7CFB\u7EDF\u8BBF\u95EE\u6743\u9650\u3002");
-    }
     return value;
   }
   /** 把旧版 full-access 及已移除的预设收敛到 Host 当前可用列表。 */
@@ -22363,23 +22348,12 @@ var AutomationService = class _AutomationService {
     const presets = this.permissionPresets();
     const fallback = this.defaultPermission();
     for (const [id, definition] of this.definitions.entries()) {
-      const normalized = normalizePermissionPreset(definition.permissionPreset, presets.names);
-      const unsafe = normalized !== void 0 && !isUnattendedPermissionSafe(normalized, presets);
-      const permissionPreset2 = normalized !== void 0 && !unsafe ? normalized : fallback;
-      if (permissionPreset2 === definition.permissionPreset && !unsafe) continue;
-      await this.definitions.put(id, {
-        ...definition,
-        permissionPreset: permissionPreset2,
-        ...unsafe ? {
-          status: "paused",
-          revision: definition.revision + 1,
-          updatedAt: toIso()
-        } : {}
-      });
+      const permissionPreset2 = normalizePermissionPreset(definition.permissionPreset, presets.names) ?? fallback;
+      if (permissionPreset2 === definition.permissionPreset) continue;
+      await this.definitions.put(id, { ...definition, permissionPreset: permissionPreset2 });
     }
     for (const [id, run] of this.runs.entries()) {
-      const normalized = normalizePermissionPreset(run.targetSnapshot.permissionPreset, presets.names);
-      const permissionPreset2 = normalized !== void 0 && isUnattendedPermissionSafe(normalized, presets) ? normalized : fallback;
+      const permissionPreset2 = normalizePermissionPreset(run.targetSnapshot.permissionPreset, presets.names) ?? fallback;
       if (permissionPreset2 === run.targetSnapshot.permissionPreset) continue;
       await this.runs.put(id, {
         ...run,
@@ -22537,6 +22511,9 @@ var WEEKDAYS = ["MO", "TU", "WE", "TH", "FR", "SA", "SU"];
 var RpcRequestError = class extends Error {
   name = "RpcRequestError";
 };
+function isBadRequest(error51) {
+  return error51 instanceof RpcRequestError || error51 instanceof AutomationRequestError;
+}
 function record2(value, label) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) {
     throw new RpcRequestError(`${label} must be an object`);
@@ -22607,7 +22584,7 @@ function errorResult(error51, aborted2 = false) {
     };
   }
   const message = error51 instanceof Error ? error51.message : String(error51);
-  const badRequest = error51 instanceof RpcRequestError || error51 instanceof AutomationRequestError;
+  const badRequest = isBadRequest(error51);
   return {
     ok: false,
     error: {
@@ -22755,6 +22732,10 @@ function registerAutomationRpc(ctx, service) {
           throw new RpcRequestError(`unknown automation endpoint '${endpoint}'`);
       }
     } catch (error51) {
+      if (!signal.aborted && !isBadRequest(error51)) {
+        const detail = error51 instanceof Error ? error51.stack ?? error51.message : String(error51);
+        ctx.logger.warn(`dsh-automation: RPC '${endpoint}' failed: ${detail}`);
+      }
       return errorResult(error51, signal.aborted);
     }
   }, { authority: "loopback" });

package/lib/types/client/create-modal-logic.d.ts

@@ -1,2 +1,5 @@
+import type { AutomationPermission } from './protocol.js';
 /** 新建/编辑弹窗只允许取消或 ESC 关闭，点旁边不能关。 */
 export declare function shouldCloseCreateModal(reason: 'backdrop' | 'escape' | 'cancel'): boolean;
+/** 与 Chat 一致：从其他权限切换到完全访问时显示风险确认。 */
+export declare function shouldConfirmFullAccess(current: AutomationPermission, next: AutomationPermission): boolean;

package/lib/types/executor.d.ts

@@ -1,6 +1,6 @@
 /** 已认领 run 的独立 Agent 执行边界。 */
 import type { Context } from '@deepseek-ai/cordis';
-import { type PermissionPresetService } from './permission-presets.ts';
+import type { PermissionPresetService } from './permission-presets.ts';
 import type { AutomationDefinition, AutomationRun } from './types.ts';
 interface SessionEventLike {
     readonly seq: number;

package/lib/types/permission-presets.d.ts

@@ -8,13 +8,7 @@ export interface PermissionPresetService {
     readonly names: readonly string[];
     readonly defaultPreset: string;
     optionOf(name: string): PermissionOption;
-    resolve?(name: string): {
-        readonly sandbox: 'read-only' | 'workspace-write' | 'danger-full-access';
-        readonly approval: 'ask' | 'never';
-    };
     set(session: unknown, name: string): void;
 }
 /** 兼容旧版插件曾保存的 full-access 名称，其余值必须来自 Host 当前列表。 */
 export declare function normalizePermissionPreset(input: unknown, names: readonly string[]): string | undefined;
-/** 无人值守任务禁止完全文件系统访问；自定义预设也按其真实 sandbox 语义判断。 */
-export declare function isUnattendedPermissionSafe(name: string, presets: PermissionPresetService): boolean;

package/lib/types/rpc.d.ts

@@ -1,6 +1,9 @@
 /** 仅 loopback 的 Web 客户端 RPC 适配器。 */
 import { type AutomationService } from './service.ts';
 interface RpcContext {
+    readonly logger: {
+        warn(message: string): void;
+    };
     readonly connection: {
         readonly rpc: {
             handle(channel: string, handler: (endpoint: string, payload: unknown, signal: AbortSignal) => Promise<unknown>, options: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@michengai/dsh-automation",
-  "version": "0.1.11",
+  "version": "0.1.13",
   "description": "在独立 DSH Session 中按计划执行编码任务，支持 Web 设置页与 Agent 双入口管理。",
   "type": "module",
   "main": "./lib/index.js",