@xmanrui/dsh-im 4.2.1 → 4.4.0

package/plugin-src/client/styles.js

@@ -228,10 +228,15 @@ const CSS = String.raw`
 .dim-contextHeaderTooltip { width: min(340px, calc(100vw - 72px)); }
 .dim-contextClose { width: 30px; height: 30px; flex: none; display: grid; place-items: center; padding: 0; border: 0; border-radius: 6px; color: var(--dsw-alias-label-secondary, #646a73); background: transparent; cursor: pointer; }
 .dim-contextClose:hover:not(:disabled) { background: var(--dsw-alias-interactive-bg-hover, #eef0f3); }
-.dim-contextSection { min-width: 0; margin: 14px 0; padding: 0; border: 0; }
-.dim-contextSection legend { margin-bottom: 8px; padding: 0; font-weight: 500; }
+.dim-contextTabs { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 3px; margin-top: 14px; padding: 3px; border: 1px solid var(--dsw-alias-border-l1, #eef0f3); border-radius: 8px; background: var(--dsw-alias-bg-module-platform, #f7f8fa); }
+.dim-contextTab { min-width: 0; min-height: 34px; padding: 5px 12px; border: 0; border-radius: 6px; color: var(--dsw-alias-label-secondary, #646a73); background: transparent; font: inherit; font-weight: 500; cursor: pointer; transition: color .15s ease, background .15s ease, box-shadow .15s ease; }
+.dim-contextTab:hover:not(:disabled):not([aria-selected="true"]) { color: var(--dsw-alias-label-primary, #1f2329); background: var(--dsw-alias-interactive-bg-hover, #eef0f3); }
+.dim-contextTab[aria-selected="true"] { color: var(--dsw-alias-state-business-primary, #3370ff); background: var(--dsw-alias-bg-layer-1, #fff); box-shadow: 0 1px 3px rgb(31 35 41 / 12%); }
+.dim-contextTabPanel[hidden] { display: none; }
+.dim-contextSection { min-width: 0; margin: 0; padding: 0; border: 0; }
+.dim-contextScope { margin-top: 10px; padding: 12px; border: 1px solid var(--dsw-alias-border-l2, #dfe1e5); border-radius: 9px; background: var(--dsw-alias-bg-layer-1, #fff); }
+.dim-contextScopeBlock { margin-top: 12px; }
 .dim-contextLegend { position: relative; display: inline-flex; align-items: center; gap: 6px; }
-.dim-contextSwitches { display: grid; grid-template-columns: 1fr; gap: 2px; }
 .dim-contextSwitchRow { display: flex; align-items: center; justify-content: space-between; gap: 8px; min-height: 34px; cursor: pointer; }
 .dim-contextSwitchLabel { min-width: 0; display: inline-flex; align-items: baseline; gap: 5px; flex-wrap: wrap; }
 .dim-contextUnavailable { color: var(--dsw-alias-label-tertiary, #8f959e); font-size: 11px; line-height: 16px; font-weight: 400; }
@@ -274,7 +279,7 @@ const CSS = String.raw`
 .dim-contextEntry:focus-visible, .dim-contextDialog button:focus-visible, .dim-contextDialog input:focus-visible, .dim-contextDialog textarea:focus-visible { outline: 2px solid var(--dsw-alias-state-business-primary, #3370ff); outline-offset: 2px; }
 .dim-contextEntry:disabled, .dim-contextDialog button:disabled, .dim-contextDialog input:disabled, .dim-contextDialog textarea:disabled { opacity: .55; cursor: not-allowed; }
 @media (pointer: coarse) {
-  .dim-contextEntry, .dim-contextClose, .dim-contextFooter button, .dim-contextTextActions button, .dim-contextField, .dim-contextSwitchRow { min-height: 44px; }
+  .dim-contextEntry, .dim-contextTab, .dim-contextClose, .dim-contextFooter button, .dim-contextTextActions button, .dim-contextField, .dim-contextSwitchRow { min-height: 44px; }
   .dim-contextClose, .dim-contextTextActions button { min-width: 44px; }
   .dim-contextGuidance textarea { font-size: 16px; }
 }
@@ -364,9 +369,18 @@ const CSS = String.raw`
 .dim-botSettingsButton:focus-visible { outline: 2px solid var(--dsw-alias-state-business-primary, #3370ff); outline-offset: 2px; }
 .dim-botSettingsTooltip { position: absolute; top: calc(100% + 6px); right: 0; z-index: 30; width: max-content; padding: 6px 9px; border: 1px solid var(--dsw-alias-border-l2, #dfe1e5); border-radius: 7px; color: var(--dsw-alias-label-primary, #1f2329); background: var(--dsw-alias-bg-layer-3, #fff); box-shadow: 0 8px 24px rgb(31 35 41 / 14%); font-size: 11px; line-height: 16px; opacity: 0; visibility: hidden; transform: translateY(-3px); pointer-events: none; transition: opacity .15s ease, transform .15s ease, visibility .15s ease; }
 .dim-botSettingsAction:hover .dim-botSettingsTooltip, .dim-botSettingsAction:focus-within .dim-botSettingsTooltip { opacity: 1; visibility: visible; transform: translateY(0); }
-.dim-deliveryPage { min-width: 0; display: grid; gap: 14px; }
+.dim-deliveryPage { min-width: 0; display: grid; }
 .dim-deliveryHeader { min-width: 0; display: flex; align-items: center; justify-content: space-between; gap: 16px; }
-.dim-deliveryHeaderMeta { min-width: 0; display: flex; align-items: center; justify-content: flex-end; gap: 10px; text-align: right; }
+.dim-botSettingsTabsBar { min-width: 0; margin-top: 10px; border-bottom: 1px solid var(--dsw-alias-border-l2, #dfe1e5); }
+.dim-botSettingsTabs { min-width: 0; display: flex; align-items: flex-end; gap: 24px; overflow-x: auto; scrollbar-width: none; }
+.dim-botSettingsTabs::-webkit-scrollbar { display: none; }
+.dim-botSettingsTab { position: relative; min-height: 38px; flex: none; display: inline-flex; align-items: center; justify-content: center; padding: 6px 2px 9px; border: 0; color: var(--dsw-alias-label-secondary, #646a73); background: transparent; font: inherit; font-size: 13px; line-height: 20px; font-weight: 560; white-space: nowrap; cursor: pointer; transition: color .15s ease; }
+.dim-botSettingsTab::after { content: ''; position: absolute; right: 0; bottom: -1px; left: 0; height: 2px; border-radius: 2px 2px 0 0; background: transparent; transform: scaleX(.45); transition: background .15s ease, transform .15s ease; }
+.dim-botSettingsTab:hover:not([aria-selected="true"]) { color: var(--dsw-alias-label-primary, #1f2329); }
+.dim-botSettingsTab[aria-selected="true"] { color: var(--dsw-alias-state-business-primary, #3370ff); font-weight: 650; }
+.dim-botSettingsTab[aria-selected="true"]::after { background: var(--dsw-alias-state-business-primary, #3370ff); transform: scaleX(1); }
+.dim-botSettingsTab:focus-visible { outline: 2px solid var(--dsw-alias-state-business-primary, #3370ff); outline-offset: -2px; border-radius: 5px; }
+.dim-botSettingsTabPanel { min-width: 0; display: grid; gap: 14px; padding-top: 14px; }
 .dim-deliveryDocsLink { min-height: 30px; flex: none; display: inline-flex; align-items: center; gap: 4px; padding: 5px 8px; border-radius: 7px; color: var(--dsw-alias-state-business-primary, #3370ff); font-size: 12px; line-height: 18px; text-decoration: none; white-space: nowrap; }
 .dim-deliveryDocsLink:hover { background: color-mix(in srgb, var(--dsw-alias-state-business-primary, #3370ff) 8%, transparent); }
 .dim-deliveryDocsLink:focus-visible { outline: 2px solid var(--dsw-alias-state-business-primary, #3370ff); outline-offset: 2px; }
@@ -378,6 +392,7 @@ const CSS = String.raw`
 .dim-deliveryButton[data-kind="danger"] { color: var(--dsw-alias-state-error-primary, #d54941); }
 .dim-deliveryBack { flex: none; border-color: transparent; background: transparent; }
 .dim-deliveryIdentity, .dim-deliveryTargets { min-width: 0; padding: 16px; border: 1px solid var(--dsw-alias-border-l2, #dfe1e5); border-radius: 12px; background: var(--dsw-alias-bg-layer-3, #fff); }
+.dim-deliveryIdentityHeading { min-width: 0; display: flex; align-items: center; justify-content: space-between; gap: 12px; }
 .dim-deliveryBotName, .dim-deliverySectionHeading h3 { min-width: 0; overflow: hidden; margin: 0; font-size: 15px; line-height: 22px; font-weight: 650; text-overflow: ellipsis; white-space: nowrap; }
 .dim-deliveryIdentity > div:first-child p, .dim-deliverySectionHeading p { margin: 2px 0 0; color: var(--dsw-alias-label-secondary, #646a73); font-size: 12px; line-height: 18px; }
 .dim-deliveryBotId { min-width: 0; display: grid; grid-template-columns: max-content minmax(0, 1fr) max-content; align-items: center; gap: 10px; margin-top: 12px; padding: 10px 12px; border-radius: 9px; background: var(--dsw-alias-bg-module-platform, #f7f8fa); }
@@ -420,6 +435,38 @@ const CSS = String.raw`
 .dim-targetField input[readonly] { color: var(--dsw-alias-label-secondary, #646a73); background: var(--dsw-alias-bg-module-platform, #f7f8fa); }
 .dim-targetFormError { margin: 10px 0 0; font-size: 12px; line-height: 18px; }
 .dim-targetFormActions { display: flex; justify-content: flex-end; gap: 7px; margin-top: 12px; }
+.dim-accessPage { min-width: 0; display: grid; gap: 14px; }
+.dim-accessScene { position: relative; min-width: 0; margin: 0; padding: 16px; border: 1px solid var(--dsw-alias-border-l2, #dfe1e5); border-radius: 12px; background: var(--dsw-alias-bg-layer-3, #fff); }
+.dim-accessScene > legend { padding: 0 6px; color: var(--dsw-alias-label-primary, #1f2329); font-size: 15px; line-height: 22px; font-weight: 650; }
+.dim-accessLegendContent { display: inline-flex; align-items: center; gap: 6px; }
+.dim-panel .dim-accessLegendHelp { position: static; }
+.dim-accessLegendHelp .dim-channelTooltip { top: 20px; right: auto; left: 16px; width: min(320px, calc(100% - 32px)); max-width: none; }
+.dim-accessControls { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 12px; }
+.dim-accessControls[data-mode="allowlist"] { grid-template-columns: minmax(0, 1fr); }
+.dim-accessField { min-width: 0; display: grid; align-content: start; gap: 5px; color: var(--dsw-alias-label-secondary, #646a73); font-size: 11px; line-height: 16px; }
+.dim-accessField input, .dim-accessField select { width: 100%; min-width: 0; height: 36px; padding: 0 9px; border: 1px solid var(--dsw-alias-border-l2, #dfe1e5); border-radius: 7px; color: var(--dsw-alias-label-primary, #1f2329); background: var(--dsw-alias-bg-layer-1, #fff); font: inherit; font-size: 12px; }
+.dim-accessField input:focus, .dim-accessField select:focus { outline: 2px solid color-mix(in srgb, var(--dsw-alias-state-business-primary, #3370ff) 28%, transparent); border-color: var(--dsw-alias-state-business-primary, #3370ff); }
+.dim-accessUsers { min-width: 0; margin-top: 14px; padding-top: 14px; border-top: 1px solid var(--dsw-alias-border-l1, #eef0f3); }
+.dim-accessUsersHeading { position: relative; min-width: 0; display: flex; align-items: flex-start; justify-content: space-between; gap: 12px; }
+.dim-accessUsersHeading > div { min-width: 0; }
+.dim-accessUsersTitle { display: inline-flex; align-items: center; gap: 6px; }
+.dim-accessUsersHeading strong { color: var(--dsw-alias-label-primary, #1f2329); font-size: 13px; line-height: 20px; font-weight: 620; }
+.dim-accessUsersHeading p { margin: 2px 0 0; color: var(--dsw-alias-label-secondary, #646a73); font-size: 11px; line-height: 17px; }
+.dim-panel .dim-accessUsersHelp { position: static; }
+.dim-accessUsersHelp .dim-channelTooltip { top: calc(100% + 7px); right: auto; left: 0; width: min(320px, 100%); max-width: none; }
+.dim-accessAddUser { width: 32px; height: 32px; min-height: 32px; flex: 0 0 32px; padding: 0; font-size: 20px; line-height: 1; }
+.dim-accessUsersEmpty { margin-top: 10px; padding: 15px 12px; border: 1px dashed var(--dsw-alias-border-l2, #dfe1e5); border-radius: 8px; color: var(--dsw-alias-label-tertiary, #8f959e); font-size: 12px; line-height: 18px; text-align: center; }
+.dim-accessUserList { display: grid; gap: 9px; margin: 10px 0 0; padding: 0; list-style: none; }
+.dim-accessUserRow { min-width: 0; display: grid; grid-template-columns: minmax(0, 1fr) minmax(145px, 180px) max-content; align-items: end; gap: 10px; padding: 11px; border: 1px solid var(--dsw-alias-border-l1, #eef0f3); border-radius: 9px; background: var(--dsw-alias-bg-module-platform, #f7f8fa); }
+.dim-accessDeleteUser { margin-bottom: 1px; }
+.dim-accessUnsupported { padding: 18px 14px; border: 1px dashed var(--dsw-alias-border-l2, #dfe1e5); border-radius: 9px; color: var(--dsw-alias-label-secondary, #646a73); background: var(--dsw-alias-bg-module-platform, #f7f8fa); text-align: center; }
+.dim-accessUnsupported strong { color: var(--dsw-alias-label-primary, #1f2329); font-size: 13px; line-height: 20px; }
+.dim-accessUnsupported p { margin: 4px 0 0; font-size: 12px; line-height: 18px; }
+.dim-accessState { padding: 11px 13px; border: 1px solid color-mix(in srgb, var(--dsw-alias-state-warn-primary, #d97706) 24%, var(--dsw-alias-border-l2, #dfe1e5)); border-radius: 9px; color: var(--dsw-alias-state-warn-primary, #d97706); background: color-mix(in srgb, var(--dsw-alias-state-warn-primary, #d97706) 7%, var(--dsw-alias-bg-layer-1, #fff)); font-size: 12px; line-height: 18px; }
+.dim-accessFeedback { margin: 0; padding: 10px 12px; border-radius: 8px; color: var(--dsw-alias-label-secondary, #646a73); background: var(--dsw-alias-bg-module-platform, #f7f8fa); font-size: 12px; line-height: 18px; }
+.dim-accessFeedback[data-tone="success"] { color: var(--dsw-alias-state-success-primary, #20a162); }
+.dim-accessFeedback[data-tone="error"] { color: var(--dsw-alias-state-error-primary, #d54941); }
+.dim-accessActions { display: flex; justify-content: flex-end; }
 .dim-panel .dim-botCard .dim-cardFooter { margin-top: 0; }
 .dim-panel .ddt-headingCopy { display: none; }
 .dim-panel .ddt-qrFrame, .dim-panel .ddt-countdown { width: min(270px, 100%); }
@@ -443,6 +490,9 @@ const CSS = String.raw`
   .dim-targetActions { justify-content: flex-start; }
   .dim-targetFormGrid { grid-template-columns: minmax(0, 1fr); }
   .dim-targetSuggestionHeading { align-items: stretch; flex-direction: column; }
+  .dim-accessControls { grid-template-columns: minmax(0, 1fr); }
+  .dim-accessUserRow { grid-template-columns: minmax(0, 1fr); }
+  .dim-accessDeleteUser { justify-self: start; }
 }
 @media (max-width: 840px) {
   .dim-title { align-items: flex-start; }
@@ -466,11 +516,12 @@ const CSS = String.raw`
   .dim-rail { grid-template-columns: minmax(0, 1fr); }
   .dim-loopbackRecovery { align-items: stretch; flex-direction: column; gap: 12px; }
   .dim-loopbackRecoveryAction { width: 100%; }
-  .dim-deliveryHeader, .dim-deliverySectionHeading { align-items: stretch; flex-direction: column; }
-  .dim-deliveryHeaderMeta { justify-content: space-between; text-align: left; }
+  .dim-deliverySectionHeading { align-items: stretch; flex-direction: column; }
+  .dim-botSettingsTabs { gap: 18px; }
   .dim-deliveryBotId { grid-template-columns: minmax(0, 1fr) max-content; }
   .dim-deliveryBotId > span { grid-column: 1 / -1; }
   .dim-targetActions .dim-deliveryButton { flex: 1 1 auto; }
+  .dim-accessActions .dim-deliveryButton { width: 100%; }
   .dim-directoryPickerBackdrop { padding: 10px; }
   .dim-directoryPicker { height: calc(100vh - 20px); min-height: 0; border-radius: 14px; }
   .dim-directoryPickerHeader { padding: 18px 17px 14px; }

package/plugin-src/host/channels/dingtalk/production.mjs

@@ -20,6 +20,10 @@ import { createConnectionSupervisor } from './connection-supervisor.mjs';
 import { createHarnessCommandExecutor } from '../../harness-command-executor.mjs';
 import { harnessConnection } from '../../harness-connection.mjs';
 import { createHarnessSessionExecutors } from '../../harness-session-coordinator.mjs';
+import {
+  accessPolicyProvider,
+  initialAccessPolicyFor,
+} from '../shared/access-policy-production.mjs';
 
 function pluginPaths(config) {
   const dshHome = resolve(config.dshHome ?? process.env.DSH_HOME ?? join(homedir(), '.dsh'));
@@ -60,6 +64,7 @@ export async function createProductionController(ctx, config = {}, internals = {
   }
   await Promise.all(configuredBots.map((bot) => workspaces.ensure(bot.botId, {
     defaultAgentPreset: config.agentPreset,
+    initialAccessPolicy: initialAccessPolicyFor('dingtalk', bot),
   })));
   const observedConfigStore = typeof configStore.remove === 'function'
     ? observeBotWorkspaceRemovals(configStore, { workspaces })
@@ -101,7 +106,10 @@ export async function createProductionController(ctx, config = {}, internals = {
     logger,
     createRuntime: async ({ botId, config: botConfig, clientSecret }) => {
       const state = await stateFor(botId);
-      await workspaces.ensure(botId, { defaultAgentPreset: config.agentPreset });
+      await workspaces.ensure(botId, {
+        defaultAgentPreset: config.agentPreset,
+        initialAccessPolicy: initialAccessPolicyFor('dingtalk', botConfig),
+      });
       const workspaceScope = createBotWorkspaceScope(harness, {
         botId, workspaces, state, agentPresetCatalog,
       });
@@ -111,6 +119,9 @@ export async function createProductionController(ctx, config = {}, internals = {
         harness: workspaceScope.harness,
         state: workspaceScope.state,
         contextEnhancement: { botId, getSettings: () => workspaces.contextEnhancementFor(botId) },
+        accessPolicy: accessPolicyProvider(workspaces, botId, {
+          channel: 'dingtalk', config: botConfig,
+        }),
         replyTimeoutMs: config.replyTimeoutMs ?? 600_000,
         maxMessageChars: config.maxMessageChars ?? 4_000,
         connectTimeoutMs: config.connectTimeoutMs ?? 15_000,

package/plugin-src/host/channels/dingtalk/rpc.mjs

@@ -1,5 +1,6 @@
 import QRCode from 'qrcode';
 import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from '../shared/context-enhancement-rpc.mjs';
+import { SET_ACCESS_POLICY_ENDPOINT, validAccessPolicyPayload } from '../shared/access-policy-rpc.mjs';
 import { resolveRpcAuthority } from '../../rpc-authority.mjs';
 import { publicWorkspaceError, SET_WORKSPACE_ENDPOINT, validWorkspacePayload } from '../shared/workspace-rpc.mjs';
 import { SET_AGENT_PRESET_ENDPOINT, validAgentPresetPayload } from '../shared/agent-preset-rpc.mjs';
@@ -20,6 +21,7 @@ export const DINGTALK_ENDPOINTS = Object.freeze({
   setWorkspace: SET_WORKSPACE_ENDPOINT,
   setAgentPreset: SET_AGENT_PRESET_ENDPOINT,
   setContextEnhancement: SET_CONTEXT_ENHANCEMENT_ENDPOINT,
+  setAccessPolicy: SET_ACCESS_POLICY_ENDPOINT,
   approveSender: 'bot.sender.approve',
   revokeSender: 'bot.sender.revoke',
 });
@@ -100,6 +102,10 @@ function payloadFailure(endpoint, payload) {
     return validContextEnhancementPayload(payload)
       ? null : '请提交有效的上下文增强设置。';
   }
+  if (endpoint === DINGTALK_ENDPOINTS.setAccessPolicy) {
+    return validAccessPolicyPayload(payload)
+      ? null : '请提交有效的访问设置。';
+  }
   if (endpoint === DINGTALK_ENDPOINTS.approveSender) {
     return exactKeys(payload, ['botId', 'requestId', 'confirm'])
       && validId(payload.botId)
@@ -262,6 +268,11 @@ export function createDingtalkRpcHandler(controller, { encodeQr = qrDataUrl } =
         value = await controller.updateContextEnhancement(
           payload.botId, payload.config, (status) => publicStatus(status, cachedEncode),
         );
+      } else if (endpoint === DINGTALK_ENDPOINTS.setAccessPolicy) {
+        if (typeof controller.updateAccessPolicy !== 'function') throw new Error('Access policy update is unavailable');
+        value = await controller.updateAccessPolicy(
+          payload.botId, payload.policy, (status) => publicStatus(status, cachedEncode),
+        );
       } else if (endpoint === DINGTALK_ENDPOINTS.setAgentPreset) {
         if (typeof controller.updateAgentPreset !== 'function') throw new Error('Agent preset update is unavailable');
         value = await publicStatus(

package/plugin-src/host/channels/feishu/production.mjs

@@ -24,8 +24,39 @@ import {
 } from '../../../../src/channels/shared/bot-workspace-store.mjs';
 import { listAgentPresetCatalog } from '../../../../src/channels/shared/agent-preset.mjs';
 import { createDeliveryAdapter } from '../../delivery-adapter.mjs';
+import {
+  accessPolicyProvider,
+  initialAccessPolicyFor,
+} from '../shared/access-policy-production.mjs';
+
+// The WebSocket agent built here is only used for the Feishu long connection,
+// whose endpoint is open.feishu.cn (Feishu) or open.larksuite.com (Lark).
+// Honor NO_PROXY/no_proxy for those hosts so users with blanket proxy
+// environments exported in their shell (Clash/V2Ray etc.) keep a direct
+// connection to Feishu instead of routing the WSS handshake through the proxy.
+const LONG_CONNECTION_HOSTS = ['open.feishu.cn', 'open.larksuite.com'];
+
+function hostExcludedByNoProxyEntry(host, entry) {
+  if (entry === '*') return true;
+  const bare = entry.startsWith('.') ? entry.slice(1) : entry;
+  if (!bare) return false;
+  return host === bare || host.endsWith(`.${bare}`);
+}
+
+function longConnectionExcludedByNoProxy(env) {
+  for (const key of ['no_proxy', 'NO_PROXY']) {
+    const value = env?.[key];
+    if (typeof value !== 'string' || !value.trim()) continue;
+    const entries = value.split(',').map((entry) => entry.trim().toLowerCase()).filter(Boolean);
+    if (LONG_CONNECTION_HOSTS.some((host) => entries.some((entry) => hostExcludedByNoProxyEntry(host, entry)))) {
+      return true;
+    }
+  }
+  return false;
+}
 
 function webSocketProxyUrl(env) {
+  if (longConnectionExcludedByNoProxy(env)) return undefined;
   for (const key of ['https_proxy', 'HTTPS_PROXY', 'http_proxy', 'HTTP_PROXY']) {
     const value = env?.[key];
     if (typeof value === 'string' && value.trim()) return value.trim();
@@ -93,6 +124,7 @@ export async function createProductionController(ctx, config = {}, internals = {
   }
   await Promise.all(configuredBots.map((bot) => workspaces.ensure(bot.id, {
     defaultAgentPreset: config.agentPreset,
+    initialAccessPolicy: initialAccessPolicyFor('feishu', bot),
   })));
   const observedConfigStore = typeof configStore.removeBot === 'function'
     ? observeBotWorkspaceRemovals(configStore, {
@@ -154,7 +186,10 @@ export async function createProductionController(ctx, config = {}, internals = {
     createRuntime: async ({ botId, config: botConfig, appSecret, repair }) => {
       const state = await stateFor(botConfig);
       const id = botId ?? botConfig.id ?? botConfig.appId;
-      await workspaces.ensure(id, { defaultAgentPreset: config.agentPreset });
+      await workspaces.ensure(id, {
+        defaultAgentPreset: config.agentPreset,
+        initialAccessPolicy: initialAccessPolicyFor('feishu', botConfig),
+      });
       const workspaceScope = createBotWorkspaceScope(harness, {
         botId: id, workspaces, state, agentPresetCatalog,
       });
@@ -171,6 +206,9 @@ export async function createProductionController(ctx, config = {}, internals = {
         harness: workspaceScope.harness,
         state: workspaceScope.state,
         contextEnhancement: { botId: id, getSettings: () => workspaces.contextEnhancementFor(id) },
+        accessPolicy: accessPolicyProvider(workspaces, id, {
+          channel: 'feishu', config: botConfig,
+        }),
         replyTimeoutMs: config.replyTimeoutMs ?? 600_000,
         slashCommands: config.slashCommands !== false,
         ...(wsAgent ? { wsAgent } : {}),

package/plugin-src/host/channels/feishu/rpc.mjs

@@ -5,21 +5,27 @@ import {
 } from '../../../../src/channels/shared/agent-preset.mjs';
 import { publicConnectionTestResult } from '../../../../src/channels/shared/connection-test.mjs';
 import { publicMessageFailure } from '../../../../src/channels/shared/message-failure.mjs';
+import { normalizeAccessPolicy } from '../../../../src/channels/shared/access-policy.mjs';
 import { resolveRpcAuthority } from '../../rpc-authority.mjs';
 import { publicWorkspaceError, validWorkspacePayload } from '../shared/workspace-rpc.mjs';
 import { validAgentPresetPayload } from '../shared/agent-preset-rpc.mjs';
 import { validContextEnhancementPayload } from '../shared/context-enhancement-rpc.mjs';
+import { SET_ACCESS_POLICY_ENDPOINT, validAccessPolicyPayload } from '../shared/access-policy-rpc.mjs';
 import { normalizeContextEnhancementConfig } from '../../../../src/channels/shared/context-enhancement.mjs';
 import {
   isFeishuGroupResponseMode,
   normalizeFeishuGroupResponseMode,
 } from '../../../../src/channels/feishu/group-response-mode.mjs';
 import {
-  FEISHU_ENDPOINTS,
+  FEISHU_ENDPOINTS as FEISHU_CLIENT_ENDPOINTS,
   FEISHU_RPC_CHANNEL,
 } from '../../../client/channels/feishu/api.js';
 
-export { FEISHU_ENDPOINTS, FEISHU_RPC_CHANNEL };
+export const FEISHU_ENDPOINTS = Object.freeze({
+  ...FEISHU_CLIENT_ENDPOINTS,
+  setAccessPolicy: SET_ACCESS_POLICY_ENDPOINT,
+});
+export { FEISHU_RPC_CHANNEL };
 export const FEISHU_MULTI_ENDPOINTS = Object.freeze({
   reconnectBot: 'bot.reconnect',
   disconnectBot: 'bot.disconnect',
@@ -279,6 +285,7 @@ function publicBotEntry(entry) {
     configured: source.configured === true,
     agentPreset: normalizeAgentPresetId(source.agentPreset),
     contextEnhancement: normalizeContextEnhancementConfig(source.contextEnhancement),
+    accessPolicy: normalizeAccessPolicy(source.accessPolicy),
     groupResponseMode: normalizeFeishuGroupResponseMode(source.groupResponseMode),
     groupMessagePermissionGranted: source.groupMessagePermissionGranted === true,
     bot: publicBot(source.bot),
@@ -422,6 +429,10 @@ function validPayload(endpoint, payload) {
     return validContextEnhancementPayload(payload)
       ? null : '请提交有效的上下文增强设置。';
   }
+  if (endpoint === FEISHU_ENDPOINTS.setAccessPolicy) {
+    return validAccessPolicyPayload(payload)
+      ? null : '请提交有效的访问设置。';
+  }
   if (endpoint === FEISHU_ENDPOINTS.setGroupResponseMode) {
     return hasOnlyKeys(payload, new Set(['botId', 'groupResponseMode']))
       && safeOpaqueId(payload.botId)
@@ -679,6 +690,12 @@ export function createFeishuRpcHandler(controller, { encodeQr = qrCodeDataUrl }
           payload.botId, payload.config,
           (status) => toPublicFeishuStatus(status, { encodeQr: cachedEncodeQr }),
         );
+      } else if (endpoint === FEISHU_ENDPOINTS.setAccessPolicy) {
+        if (typeof controller.updateAccessPolicy !== 'function') throw new Error('Access policy update is unavailable');
+        value = await controller.updateAccessPolicy(
+          payload.botId, payload.policy,
+          (status) => toPublicFeishuStatus(status, { encodeQr: cachedEncodeQr }),
+        );
       } else if (endpoint === FEISHU_ENDPOINTS.setAgentPreset) {
         if (typeof controller.updateAgentPreset !== 'function') throw new Error('Agent preset update is unavailable');
         value = await toPublicFeishuStatus(

package/plugin-src/host/channels/qq/production.mjs

@@ -20,6 +20,10 @@ import { createConnectionSupervisor } from './connection-supervisor.mjs';
 import { createHarnessCommandExecutor } from '../../harness-command-executor.mjs';
 import { harnessConnection } from '../../harness-connection.mjs';
 import { createHarnessSessionExecutors } from '../../harness-session-coordinator.mjs';
+import {
+  accessPolicyProvider,
+  initialAccessPolicyFor,
+} from '../shared/access-policy-production.mjs';
 
 function pluginPaths(config) {
   const dshHome = resolve(config.dshHome ?? process.env.DSH_HOME ?? join(homedir(), '.dsh'));
@@ -54,6 +58,7 @@ export async function createProductionController(ctx, config = {}, internals = {
   await workspaces.reconcile(configuredBots.map((bot) => bot.botId));
   await Promise.all(configuredBots.map((bot) => workspaces.ensure(bot.botId, {
     defaultAgentPreset: config.agentPreset,
+    initialAccessPolicy: initialAccessPolicyFor('qq', bot),
   })));
   const observedConfigStore = typeof configStore.remove === 'function'
     ? observeBotWorkspaceRemovals(configStore, { workspaces })
@@ -92,7 +97,10 @@ export async function createProductionController(ctx, config = {}, internals = {
     logger,
     createRuntime: async ({ botId, config: botConfig, appSecret }) => {
       const state = await stateFor(botId);
-      await workspaces.ensure(botId, { defaultAgentPreset: config.agentPreset });
+      await workspaces.ensure(botId, {
+        defaultAgentPreset: config.agentPreset,
+        initialAccessPolicy: initialAccessPolicyFor('qq', botConfig),
+      });
       const workspaceScope = createBotWorkspaceScope(harness, {
         botId, workspaces, state, agentPresetCatalog,
       });
@@ -102,6 +110,9 @@ export async function createProductionController(ctx, config = {}, internals = {
         harness: workspaceScope.harness,
         state: workspaceScope.state,
         contextEnhancement: { botId, getSettings: () => workspaces.contextEnhancementFor(botId) },
+        accessPolicy: accessPolicyProvider(workspaces, botId, {
+          channel: 'qq', config: botConfig,
+        }),
         replyTimeoutMs: config.replyTimeoutMs ?? 600_000,
         connectTimeoutMs: config.connectTimeoutMs ?? 20_000,
         logger: {

package/plugin-src/host/channels/qq/rpc.mjs

@@ -4,6 +4,7 @@ import {
   publicConnectionTestResult,
 } from '../../../../src/channels/shared/connection-test.mjs';
 import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from '../shared/context-enhancement-rpc.mjs';
+import { SET_ACCESS_POLICY_ENDPOINT, validAccessPolicyPayload } from '../shared/access-policy-rpc.mjs';
 import { resolveRpcAuthority } from '../../rpc-authority.mjs';
 import { publicWorkspaceError, SET_WORKSPACE_ENDPOINT, validWorkspacePayload } from '../shared/workspace-rpc.mjs';
 import { SET_AGENT_PRESET_ENDPOINT, validAgentPresetPayload } from '../shared/agent-preset-rpc.mjs';
@@ -20,6 +21,7 @@ export const QQ_ENDPOINTS = Object.freeze({
   setWorkspace: SET_WORKSPACE_ENDPOINT,
   setAgentPreset: SET_AGENT_PRESET_ENDPOINT,
   setContextEnhancement: SET_CONTEXT_ENHANCEMENT_ENDPOINT,
+  setAccessPolicy: SET_ACCESS_POLICY_ENDPOINT,
 });
 export const QQ_RPC_ENDPOINTS = Object.freeze(Object.values(QQ_ENDPOINTS));
 
@@ -82,6 +84,10 @@ function payloadFailure(endpoint, payload) {
     return validContextEnhancementPayload(payload)
       ? null : '请提交有效的上下文增强设置。';
   }
+  if (endpoint === QQ_ENDPOINTS.setAccessPolicy) {
+    return validAccessPolicyPayload(payload)
+      ? null : '请提交有效的访问设置。';
+  }
   return 'Unknown QQ endpoint.';
 }
 
@@ -182,6 +188,11 @@ export function createQqRpcHandler(controller, { encodeQr = qrDataUrl } = {}) {
         value = await controller.updateContextEnhancement(
           payload.botId, payload.config, (status) => publicStatus(status, cachedEncode),
         );
+      } else if (endpoint === QQ_ENDPOINTS.setAccessPolicy) {
+        if (typeof controller.updateAccessPolicy !== 'function') throw new Error('Access policy update is unavailable');
+        value = await controller.updateAccessPolicy(
+          payload.botId, payload.policy, (status) => publicStatus(status, cachedEncode),
+        );
       } else if (endpoint === QQ_ENDPOINTS.setAgentPreset) {
         if (typeof controller.updateAgentPreset !== 'function') throw new Error('Agent preset update is unavailable');
         value = await publicStatus(

package/plugin-src/host/channels/shared/access-policy-production.mjs

@@ -0,0 +1,137 @@
+import {
+  createAccessPolicy,
+  createAccessPolicyScope,
+} from '../../../../src/channels/shared/access-policy.mjs';
+
+function policyUsers(users) {
+  return users.map((id) => ({ id, canExecuteCommands: true }));
+}
+
+function openScope(allowlistUsers = []) {
+  return createAccessPolicyScope({
+    mode: 'open',
+    open: {
+      defaultCanExecuteCommands: true,
+      commandPermissionOverrides: [],
+    },
+    allowlist: { users: policyUsers(allowlistUsers) },
+  });
+}
+
+function allowlistScope(users = []) {
+  return createAccessPolicyScope({
+    mode: 'allowlist',
+    open: {
+      defaultCanExecuteCommands: false,
+      commandPermissionOverrides: [],
+    },
+    allowlist: { users: policyUsers(users) },
+  });
+}
+
+function cleanIds(values) {
+  return [...new Set((Array.isArray(values) ? values : [values])
+    .filter((value) => typeof value === 'string' || typeof value === 'number'
+      || typeof value === 'bigint')
+    .map((value) => String(value).trim())
+    .filter(Boolean))];
+}
+
+function whatsappNumberJids(values) {
+  return cleanIds(values).map((value) => `${value.replace(/^\+/, '')}@s.whatsapp.net`);
+}
+
+/**
+ * Build the one-time, backwards-compatible seed for a bot whose workspace
+ * document does not yet contain an access policy.
+ */
+export function initialAccessPolicyFor(channel, config = {}) {
+  const key = String(channel ?? '').trim().toLowerCase();
+  if (key === 'weixin') {
+    return createAccessPolicy({
+      direct: allowlistScope(),
+      group: allowlistScope(),
+    });
+  }
+  if (key === 'feishu') {
+    const owners = cleanIds(config.ownerOpenIds ?? config.ownerOpenId);
+    const scope = owners.includes('*') ? openScope() : allowlistScope();
+    return createAccessPolicy({ direct: scope, group: scope });
+  }
+  if (key === 'qq') {
+    const owners = cleanIds(config.ownerUserOpenid);
+    return createAccessPolicy({
+      direct: owners.includes('*') ? openScope() : allowlistScope(),
+      group: openScope(),
+    });
+  }
+  if (key === 'telegram') {
+    const users = cleanIds(config.allowedUsers);
+    if ((config.accessMode ?? 'compatible') === 'private-allowlist') {
+      return createAccessPolicy({
+        direct: allowlistScope(users),
+        group: allowlistScope(),
+      });
+    }
+    return createAccessPolicy({
+      direct: openScope(users),
+      group: openScope(),
+    });
+  }
+  if (key === 'whatsapp') {
+    const mode = config.accessMode ?? 'self-only';
+    const allowed = whatsappNumberJids(config.allowedNumbers);
+    if (mode === 'open') {
+      return createAccessPolicy({ direct: openScope(allowed), group: openScope() });
+    }
+    return createAccessPolicy({
+      direct: allowlistScope(mode === 'private-allowlist'
+        ? allowed
+        : []),
+      group: allowlistScope(),
+    });
+  }
+  if (['dingtalk', 'wecom', 'slack', 'discord'].includes(key)) {
+    return createAccessPolicy({ direct: openScope(), group: openScope() });
+  }
+  throw new TypeError(`Unsupported access-policy channel: ${channel}`);
+}
+
+export function privilegedSenderIdsFor(channel, config = {}) {
+  const key = String(channel ?? '').trim().toLowerCase();
+  if (key === 'weixin') return cleanIds(config.ownerUserId);
+  if (key === 'feishu') {
+    return cleanIds(config.ownerOpenIds ?? config.ownerOpenId).filter((id) => id !== '*');
+  }
+  if (key === 'dingtalk') {
+    const approved = Array.isArray(config.approvedSenders) ? config.approvedSenders : [];
+    return cleanIds(approved.map((entry) => entry?.staffId));
+  }
+  if (key === 'qq') return cleanIds(config.ownerUserOpenid).filter((id) => id !== '*');
+  if (key === 'whatsapp') return cleanIds(config.accountJid);
+  return [];
+}
+
+export function accessPolicyProvider(workspaces, botId, { channel, config, equals } = {}) {
+  if (!workspaces || typeof workspaces.accessPolicyFor !== 'function') {
+    throw new TypeError('A workspace store with access policies is required');
+  }
+  const privilegedSenderIds = new Set(privilegedSenderIdsFor(channel, config));
+  const sameSender = typeof equals === 'function' ? equals : (left, right) => left === right;
+  return Object.freeze({
+    botId,
+    getSettings: () => workspaces.accessPolicyFor(botId),
+    isPrivileged(senderIds, conversationType) {
+      if (!['direct', 'group'].includes(conversationType)) return false;
+      const candidates = Array.isArray(senderIds) ? senderIds : [senderIds];
+      try {
+        return candidates.some((senderId) => typeof senderId === 'string'
+          && [...privilegedSenderIds].some((privilegedId) => (
+            sameSender(senderId.trim(), privilegedId) === true
+          )));
+      } catch {
+        return false;
+      }
+    },
+  });
+}

package/plugin-src/host/channels/shared/access-policy-rpc.mjs

@@ -0,0 +1,17 @@
+import { validateAccessPolicy } from '../../../../src/channels/shared/access-policy.mjs';
+
+export const SET_ACCESS_POLICY_ENDPOINT = 'bot.access-policy.set';
+
+export function validAccessPolicyPayload(payload) {
+  try {
+    if (!payload || typeof payload !== 'object' || Array.isArray(payload)
+      || Reflect.ownKeys(payload).length !== 2
+      || !Object.hasOwn(payload, 'botId') || !Object.hasOwn(payload, 'policy')
+      || typeof payload.botId !== 'string'
+      || !/^[A-Za-z0-9_-]{1,128}$/.test(payload.botId)) return false;
+    validateAccessPolicy(payload.policy);
+    return true;
+  } catch {
+    return false;
+  }
+}

package/plugin-src/host/channels/shared/production.mjs

@@ -17,6 +17,10 @@ import {
   createDeliveryAdapter,
   supportsDeliveryChannel,
 } from '../../delivery-adapter.mjs';
+import {
+  accessPolicyProvider,
+  initialAccessPolicyFor,
+} from './access-policy-production.mjs';
 
 export function pluginPaths(config, channel) {
   const dshHome = resolve(config.dshHome ?? process.env.DSH_HOME ?? join(homedir(), '.dsh'));
@@ -46,6 +50,11 @@ export async function createTokenProductionController(ctx, config, internals, de
     throw new TypeError(`dsh-im ${channel} runtimeOptions must return an object`);
   }
   const createSupervisor = internals.createConnectionSupervisor ?? createTokenConnectionSupervisor;
+  const seedAccessPolicy = typeof definitions.initialAccessPolicyForBot === 'function'
+    ? definitions.initialAccessPolicyForBot
+    // Telegram is the only token channel with a legacy access model. Other
+    // current token channels preserve their fully-open baseline.
+    : (bot) => initialAccessPolicyFor(channel === 'telegram' ? 'telegram' : 'discord', bot);
   const logger = typeof ctx.logger === 'function'
     ? ctx.logger(`dsh-im:${channel}`) : (ctx.logger ?? console);
   const agentPresetCatalog = () => listAgentPresetCatalog(ctx);
@@ -59,6 +68,7 @@ export async function createTokenProductionController(ctx, config, internals, de
   await workspaces.reconcile(configuredBots.map((bot) => bot.botId));
   await Promise.all(configuredBots.map((bot) => workspaces.ensure(bot.botId, {
     defaultAgentPreset: config.agentPreset,
+    initialAccessPolicy: seedAccessPolicy(bot),
   })));
   const observedConfigStore = typeof configStore.remove === 'function'
     ? observeBotWorkspaceRemovals(configStore, { workspaces })
@@ -96,7 +106,10 @@ export async function createTokenProductionController(ctx, config, internals, de
     ...(internals.inspectToken ? { inspectToken: internals.inspectToken } : {}),
     createRuntime: async ({ botId, config: botConfig, token }) => {
       const state = await stateFor(botId);
-      await workspaces.ensure(botId, { defaultAgentPreset: config.agentPreset });
+      await workspaces.ensure(botId, {
+        defaultAgentPreset: config.agentPreset,
+        initialAccessPolicy: seedAccessPolicy(botConfig),
+      });
       const workspaceScope = createBotWorkspaceScope(harness, {
         botId, workspaces, state, agentPresetCatalog,
       });
@@ -107,6 +120,7 @@ export async function createTokenProductionController(ctx, config, internals, de
         harness: workspaceScope.harness,
         state: workspaceScope.state,
         contextEnhancement: { botId, getSettings: () => workspaces.contextEnhancementFor(botId) },
+        accessPolicy: accessPolicyProvider(workspaces, botId, { channel, config: botConfig }),
         replyTimeoutMs: config.replyTimeoutMs ?? 600_000,
         connectTimeoutMs: config.connectTimeoutMs ?? 20_000,
         logger: {