@michengai/dsh-automation 0.1.31 → 0.1.32

package/CHANGELOG.md

@@ -4,6 +4,10 @@
 
 The five most recent published versions are listed below. Git tags and GitHub Releases now mirror these entries; historical sections retain links to their original release commits.
 
+## 0.1.32 — 2026-09-06
+
+- Removed the fixed unattended tool allowlist and background-shell ban so tool calls and background process management follow DSH. Retained automatic rejection of approval requests and task timeout cancellation.
+
 ## 0.1.31 — 2026-09-05
 
 - Aligned the scheduled-task editor with the Host modal surface, elevation, themed mask, and borderless close icon while preserving its existing dismissal behavior.

package/CHANGELOG.zh-CN.md

@@ -4,6 +4,10 @@
 
 以下记录最近发布的五个版本。Git 标签与 GitHub Release 现已和这些条目同步；历史条目继续保留原始发布提交链接。
 
+## 0.1.32 — 2026-09-06
+
+- 移除无人值守自动化的固定工具白名单和后台 shell 禁令，工具调用及后台进程管理统一遵循 DSH；保留需要审批即拒绝和任务超时取消约束。
+
 ## 0.1.31 — 2026-09-05
 
 - 将定时任务编辑器的浮层背景、阴影、主题遮罩和无边框关闭图标与宿主统一，同时保留原有关闭行为。

package/README.md

@@ -124,6 +124,7 @@ Each dispatched run uses the saved prompt, workspace, model, and permission boun
 | Item | Behavior |
 | --- | --- |
 | Permission | Options and the default come directly from the Host `permissionPresets` service, including custom presets. |
+| Tool calls | Follow Host tool availability, permission, and approval checks without an additional fixed tool allowlist or a background-shell ban. The Host manages background processes. |
 | Full access | The official `danger-full-access` option uses the same risk confirmation and orange warning as Chat. |
 | Approval | Chat create follows the session policy. Full access (`never`) proceeds; Workspace Write / Read Only (`ask`) shows the official card. Unattended runs stay fail-closed `never`. |
 | Retry | No automatic retry after a started run. |

package/README.zh-CN.md

@@ -124,6 +124,7 @@ dsh --profile web --dump-config
 | 项目 | 行为 |
 | --- | --- |
 | 权限 | 列表和默认值直接来自 Host 官方 `permissionPresets` 服务；支持 Host 注册的自定义预设。 |
+| 工具调用 | 遵循 Host 的工具可用性、权限和审批检查，不额外维护固定工具白名单或禁止后台 shell；后台进程由 Host 管理。 |
 | 完全访问 | 选择官方 `danger-full-access` 时显示与 Chat 一致的风险确认和橙色提示。 |
 | 审批 | 对话创建跟随当前会话策略。Full access（`never`）直接创建；Workspace Write / Read Only（`ask`）走官方授权卡。无人值守运行仍是 fail-closed 的 `never`。 |
 | 重试 | 已经开始的运行不会自动重试。 |

package/lib/index.js

@@ -54,27 +54,6 @@ function automationSessionTitle(taskName, iso, timeZone2) {
 }
 
 // src/executor.ts
-var UNATTENDED_TOOL_ALLOWLIST = /* @__PURE__ */ new Set([
-  "run_code",
-  "bash",
-  "pwsh",
-  "read",
-  "read_image",
-  "write",
-  "edit",
-  "str_replace_editor",
-  "glob",
-  "grep",
-  "lsp",
-  "web_search",
-  "web_fetch",
-  "skill",
-  "session_search",
-  "session_trace",
-  "session_event_read",
-  "session_event_search",
-  "session_event_trace"
-]);
 var CANCEL_CONVERGENCE_TIMEOUT_MS = 1e4;
 async function settlesWithin(promise2, timeoutMs) {
   let timer;
@@ -89,12 +68,6 @@ async function settlesWithin(promise2, timeoutMs) {
     if (timer !== void 0) clearTimeout(timer);
   }
 }
-function unattendedToolGuardReason(name2, args) {
-  if ((name2 === "bash" || name2 === "pwsh") && typeof args === "object" && args !== null && args.run_in_background === true) {
-    return "\u65E0\u4EBA\u503C\u5B88\u8FD0\u884C\u4E0D\u5141\u8BB8\u542F\u52A8\u540E\u53F0\u8FDB\u7A0B\u3002";
-  }
-  return UNATTENDED_TOOL_ALLOWLIST.has(name2) ? void 0 : `\u5DE5\u5177 '${name2}' \u4E0D\u5728\u65E0\u4EBA\u503C\u5B88\u81EA\u52A8\u5316\u5141\u8BB8\u5217\u8868\u4E2D\u3002`;
-}
 function applyUnattendedPermission(presets, session, permission) {
   presets.set(session, permission);
   setApprovalPolicy(session, "never");
@@ -173,7 +146,6 @@ async function executeAutomationRun(ctx, definition, run, config2) {
         const agent = agentCtx.agent;
         if (agent === void 0) throw new Error("automation setup has no scoped Agent");
         applyUnattendedPermission(ctx.permissionPresets, agent.session, target.permissionPreset);
-        agentCtx.tools.guard((exec) => unattendedToolGuardReason(exec.name, exec.arguments));
       }
     }));
     await handle.agent.whenIdle();

package/lib/types/executor.d.ts

@@ -13,7 +13,6 @@ interface SessionEventReader {
 }
 /** 对不保证及时响应 AbortSignal 的宿主任务设置第二道退出上限。 */
 export declare function settlesWithin(promise: Promise<unknown>, timeoutMs: number): Promise<boolean>;
-export declare function unattendedToolGuardReason(name: string, args: unknown): string | undefined;
 export interface RunCompletion {
     readonly sessionId?: string;
     readonly status: 'succeeded' | 'failed' | 'cancelled';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@michengai/dsh-automation",
-  "version": "0.1.31",
+  "version": "0.1.32",
   "description": "在独立 DSH Session 中按计划执行编码任务，支持 Web 设置页与 Agent 双入口管理。",
   "type": "module",
   "main": "./lib/index.js",