@xmanrui/dsh-im 4.3.0 → 4.4.0

package/plugin-src/host/channels/telegram/rpc.mjs

@@ -3,60 +3,13 @@ import {
   createTokenBotRpcHandler,
 } from '../shared/rpc.mjs';
 import { resolveRpcAuthority } from '../../rpc-authority.mjs';
-import { normalizeTelegramAccessPolicy } from '../../../../src/channels/telegram/config-store.mjs';
 
 export const TELEGRAM_RPC_CHANNEL = '/telegram';
-export const TELEGRAM_ENDPOINTS = Object.freeze({
-  ...TOKEN_BOT_ENDPOINTS,
-  setAccessPolicy: 'bot.access-policy.set',
-});
+export const TELEGRAM_ENDPOINTS = TOKEN_BOT_ENDPOINTS;
 export const TELEGRAM_RPC_ENDPOINTS = Object.freeze(Object.values(TELEGRAM_ENDPOINTS));
 
 export function createTelegramRpcHandler(controller) {
-  if (typeof controller?.setAccessPolicy !== 'function') {
-    throw new TypeError('A complete Telegram controller is required (setAccessPolicy)');
-  }
-  const sharedHandler = createTokenBotRpcHandler(controller, { channel: 'Telegram' });
-  return async (endpoint, payload, signal) => {
-    if (endpoint !== TELEGRAM_ENDPOINTS.setAccessPolicy) {
-      return sharedHandler(endpoint, payload, signal);
-    }
-    if (signal?.aborted) {
-      return { ok: false, error: { code: 'cancelled', message: 'The request was cancelled.' } };
-    }
-    const keys = payload && typeof payload === 'object' && !Array.isArray(payload)
-      ? Object.keys(payload) : [];
-    if (keys.length !== 3 || !keys.every((key) => (
-      ['botId', 'accessMode', 'allowedUsers'].includes(key)
-    )) || typeof payload.botId !== 'string' || !/^[A-Za-z0-9_-]{1,128}$/.test(payload.botId)) {
-      return {
-        ok: false,
-        error: { code: 'bad-request', message: 'bot.access-policy.set requires a valid policy.' },
-      };
-    }
-    let accessPolicy;
-    try {
-      accessPolicy = normalizeTelegramAccessPolicy(payload);
-    } catch {
-      return {
-        ok: false,
-        error: { code: 'bad-request', message: '请输入有效的 Telegram 访问模式和数字 User ID。' },
-      };
-    }
-    try {
-      const value = await controller.setAccessPolicy(payload.botId, accessPolicy);
-      return signal?.aborted
-        ? { ok: false, error: { code: 'cancelled', message: 'The request was cancelled.' } }
-        : { ok: true, value };
-    } catch {
-      return signal?.aborted
-        ? { ok: false, error: { code: 'cancelled', message: 'The request was cancelled.' } }
-        : {
-            ok: false,
-            error: { code: 'telegram-operation-failed', message: 'Telegram 操作失败，请稍后重试。' },
-          };
-    }
-  };
+  return createTokenBotRpcHandler(controller, { channel: 'Telegram' });
 }
 
 export function installTelegramRpc(ctx, controller, authority) {

package/plugin-src/host/channels/wecom/production.mjs

@@ -20,6 +20,10 @@ import { createConnectionSupervisor } from './connection-supervisor.mjs';
 import { createHarnessCommandExecutor } from '../../harness-command-executor.mjs';
 import { harnessConnection } from '../../harness-connection.mjs';
 import { createHarnessSessionExecutors } from '../../harness-session-coordinator.mjs';
+import {
+  accessPolicyProvider,
+  initialAccessPolicyFor,
+} from '../shared/access-policy-production.mjs';
 
 function pluginPaths(config) {
   const dshHome = resolve(config.dshHome ?? process.env.DSH_HOME ?? join(homedir(), '.dsh'));
@@ -54,6 +58,7 @@ export async function createProductionController(ctx, config = {}, internals = {
   await workspaces.reconcile(configuredBots.map((bot) => bot.botId));
   await Promise.all(configuredBots.map((bot) => workspaces.ensure(bot.botId, {
     defaultAgentPreset: config.agentPreset,
+    initialAccessPolicy: initialAccessPolicyFor('wecom', bot),
   })));
   const observedConfigStore = typeof configStore.remove === 'function'
     ? observeBotWorkspaceRemovals(configStore, { workspaces })
@@ -95,7 +100,10 @@ export async function createProductionController(ctx, config = {}, internals = {
     logger,
     createRuntime: async ({ botId, config: botConfig, secret }) => {
       const state = await stateFor(botId);
-      await workspaces.ensure(botId, { defaultAgentPreset: config.agentPreset });
+      await workspaces.ensure(botId, {
+        defaultAgentPreset: config.agentPreset,
+        initialAccessPolicy: initialAccessPolicyFor('wecom', botConfig),
+      });
       const workspaceScope = createBotWorkspaceScope(harness, {
         botId, workspaces, state, agentPresetCatalog,
       });
@@ -105,6 +113,9 @@ export async function createProductionController(ctx, config = {}, internals = {
         harness: workspaceScope.harness,
         state: workspaceScope.state,
         contextEnhancement: { botId, getSettings: () => workspaces.contextEnhancementFor(botId) },
+        accessPolicy: accessPolicyProvider(workspaces, botId, {
+          channel: 'wecom', config: botConfig,
+        }),
         replyTimeoutMs: config.replyTimeoutMs ?? 600_000,
         connectTimeoutMs: config.connectTimeoutMs ?? 20_000,
         maxReconnectAttempts: config.maxReconnectAttempts ?? 10,

package/plugin-src/host/channels/wecom/rpc.mjs

@@ -1,5 +1,6 @@
 import QRCode from 'qrcode';
 import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from '../shared/context-enhancement-rpc.mjs';
+import { SET_ACCESS_POLICY_ENDPOINT, validAccessPolicyPayload } from '../shared/access-policy-rpc.mjs';
 import { resolveRpcAuthority } from '../../rpc-authority.mjs';
 import { publicWorkspaceError, SET_WORKSPACE_ENDPOINT, validWorkspacePayload } from '../shared/workspace-rpc.mjs';
 import { SET_AGENT_PRESET_ENDPOINT, validAgentPresetPayload } from '../shared/agent-preset-rpc.mjs';
@@ -20,6 +21,7 @@ export const WECOM_ENDPOINTS = Object.freeze({
   setWorkspace: SET_WORKSPACE_ENDPOINT,
   setAgentPreset: SET_AGENT_PRESET_ENDPOINT,
   setContextEnhancement: SET_CONTEXT_ENHANCEMENT_ENDPOINT,
+  setAccessPolicy: SET_ACCESS_POLICY_ENDPOINT,
 });
 export const WECOM_RPC_ENDPOINTS = Object.freeze(Object.values(WECOM_ENDPOINTS));
 
@@ -82,6 +84,10 @@ function payloadFailure(endpoint, payload) {
     return validContextEnhancementPayload(payload)
       ? null : '请提交有效的上下文增强设置。';
   }
+  if (endpoint === WECOM_ENDPOINTS.setAccessPolicy) {
+    return validAccessPolicyPayload(payload)
+      ? null : '请提交有效的访问设置。';
+  }
   return 'Unknown Enterprise WeChat endpoint.';
 }
 
@@ -183,6 +189,11 @@ export function createWecomRpcHandler(controller, { encodeQr = qrDataUrl } = {})
         value = await controller.updateContextEnhancement(
           payload.botId, payload.config, (status) => publicStatus(status, cachedEncode),
         );
+      } else if (endpoint === WECOM_ENDPOINTS.setAccessPolicy) {
+        if (typeof controller.updateAccessPolicy !== 'function') throw new Error('Access policy update is unavailable');
+        value = await controller.updateAccessPolicy(
+          payload.botId, payload.policy, (status) => publicStatus(status, cachedEncode),
+        );
       } else if (endpoint === WECOM_ENDPOINTS.setAgentPreset) {
         if (typeof controller.updateAgentPreset !== 'function') throw new Error('Agent preset update is unavailable');
         value = await publicStatus(

package/plugin-src/host/channels/weixin/production.mjs

@@ -23,6 +23,10 @@ import { createConnectionSupervisor } from './connection-supervisor.mjs';
 import { createHarnessCommandExecutor } from '../../harness-command-executor.mjs';
 import { harnessConnection } from '../../harness-connection.mjs';
 import { createHarnessSessionExecutors } from '../../harness-session-coordinator.mjs';
+import {
+  accessPolicyProvider,
+  initialAccessPolicyFor,
+} from '../shared/access-policy-production.mjs';
 
 function pluginPaths(config) {
   const dshHome = resolve(config.dshHome ?? process.env.DSH_HOME ?? join(homedir(), '.dsh'));
@@ -60,6 +64,7 @@ export async function createProductionController(ctx, config = {}, internals = {
   await workspaces.reconcile(configuredBots.map((bot) => bot.botId));
   await Promise.all(configuredBots.map((bot) => workspaces.ensure(bot.botId, {
     defaultAgentPreset: config.agentPreset,
+    initialAccessPolicy: initialAccessPolicyFor('weixin', bot),
   })));
   const observedConfigStore = typeof configStore.remove === 'function'
     ? observeBotWorkspaceRemovals(configStore, { workspaces })
@@ -98,7 +103,10 @@ export async function createProductionController(ctx, config = {}, internals = {
     logger,
     createRuntime: async ({ botId, config: accountConfig, token }) => {
       const state = await stateFor(botId);
-      await workspaces.ensure(botId, { defaultAgentPreset: config.agentPreset });
+      await workspaces.ensure(botId, {
+        defaultAgentPreset: config.agentPreset,
+        initialAccessPolicy: initialAccessPolicyFor('weixin', accountConfig),
+      });
       const workspaceScope = createBotWorkspaceScope(harness, {
         botId, workspaces, state, agentPresetCatalog,
       });
@@ -109,6 +117,9 @@ export async function createProductionController(ctx, config = {}, internals = {
         harness: workspaceScope.harness,
         state: workspaceScope.state,
         contextEnhancement: { botId, getSettings: () => workspaces.contextEnhancementFor(botId) },
+        accessPolicy: accessPolicyProvider(workspaces, botId, {
+          channel: 'weixin', config: accountConfig,
+        }),
         replyTimeoutMs: config.replyTimeoutMs ?? 600_000,
         maxMessageChars: config.maxMessageChars ?? DEFAULT_WEIXIN_MAX_MESSAGE_CHARS,
         logger: {

package/plugin-src/host/channels/weixin/rpc.mjs

@@ -1,5 +1,6 @@
 import QRCode from 'qrcode';
 import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from '../shared/context-enhancement-rpc.mjs';
+import { SET_ACCESS_POLICY_ENDPOINT, validAccessPolicyPayload } from '../shared/access-policy-rpc.mjs';
 import { resolveRpcAuthority } from '../../rpc-authority.mjs';
 import {
   publicWorkspaceError,
@@ -27,6 +28,7 @@ export const WEIXIN_ENDPOINTS = Object.freeze({
   setWorkspace: SET_WORKSPACE_ENDPOINT,
   setAgentPreset: SET_AGENT_PRESET_ENDPOINT,
   setContextEnhancement: SET_CONTEXT_ENHANCEMENT_ENDPOINT,
+  setAccessPolicy: SET_ACCESS_POLICY_ENDPOINT,
 });
 export const WEIXIN_RPC_ENDPOINTS = Object.freeze(Object.values(WEIXIN_ENDPOINTS));
 
@@ -89,6 +91,10 @@ function payloadFailure(endpoint, payload) {
     return validContextEnhancementPayload(payload)
       ? null : '请提交有效的上下文增强设置。';
   }
+  if (endpoint === WEIXIN_ENDPOINTS.setAccessPolicy) {
+    return validAccessPolicyPayload(payload)
+      ? null : '请提交有效的访问设置。';
+  }
   return 'Unknown Weixin endpoint.';
 }
 
@@ -218,6 +224,11 @@ export function createWeixinRpcHandler(controller, { encodeQr = qrDataUrl } = {}
         value = await controller.updateContextEnhancement(
           payload.botId, payload.config, (status) => publicStatus(status, cachedEncode),
         );
+      } else if (endpoint === WEIXIN_ENDPOINTS.setAccessPolicy) {
+        if (typeof controller.updateAccessPolicy !== 'function') throw new Error('Access policy update is unavailable');
+        value = await controller.updateAccessPolicy(
+          payload.botId, payload.policy, (status) => publicStatus(status, cachedEncode),
+        );
       } else if (endpoint === WEIXIN_ENDPOINTS.setAgentPreset) {
         if (typeof controller.updateAgentPreset !== 'function') throw new Error('Agent preset update is unavailable');
         value = await publicStatus(

package/plugin-src/host/channels/whatsapp/production.mjs

@@ -6,7 +6,10 @@ import { WhatsappConfigStore } from '../../../../src/channels/whatsapp/config-st
 import { WhatsappHarnessClient } from '../../../../src/channels/whatsapp/harness-client.mjs';
 import { WhatsappStateStore } from '../../../../src/channels/whatsapp/state-store.mjs';
 import { WhatsappController } from '../../../../src/channels/whatsapp/whatsapp-controller.mjs';
-import { WhatsappRuntime } from '../../../../src/channels/whatsapp/whatsapp-runtime.mjs';
+import {
+  WhatsappRuntime,
+  whatsappAccessPolicyIdsEqual,
+} from '../../../../src/channels/whatsapp/whatsapp-runtime.mjs';
 import { createWhatsappWebSession } from '../../../../src/channels/whatsapp/whatsapp-web-session.mjs';
 import {
   BotWorkspaceStore,
@@ -20,6 +23,10 @@ import { createTokenConnectionSupervisor } from '../shared/connection-supervisor
 import { createHarnessCommandExecutor } from '../../harness-command-executor.mjs';
 import { harnessConnection } from '../../harness-connection.mjs';
 import { createHarnessSessionExecutors } from '../../harness-session-coordinator.mjs';
+import {
+  accessPolicyProvider,
+  initialAccessPolicyFor,
+} from '../shared/access-policy-production.mjs';
 
 const AUTH_DIRECTORY_PATTERN = /^[a-f0-9-]{36}$/;
 
@@ -61,6 +68,7 @@ export async function createProductionController(ctx, config = {}, internals = {
   await workspaces.reconcile(configuredBots.map((bot) => bot.botId));
   await Promise.all(configuredBots.map((bot) => workspaces.ensure(bot.botId, {
     defaultAgentPreset: config.agentPreset,
+    initialAccessPolicy: initialAccessPolicyFor('whatsapp', bot),
   })));
   const observedConfigStore = typeof configStore.remove === 'function'
     ? observeBotWorkspaceRemovals(configStore, { workspaces })
@@ -98,7 +106,10 @@ export async function createProductionController(ctx, config = {}, internals = {
     logger,
     createRuntime: async ({ botId, config: botConfig, authDir }) => {
       const state = await stateFor(botId);
-      await workspaces.ensure(botId, { defaultAgentPreset: config.agentPreset });
+      await workspaces.ensure(botId, {
+        defaultAgentPreset: config.agentPreset,
+        initialAccessPolicy: initialAccessPolicyFor('whatsapp', botConfig),
+      });
       const workspaceScope = createBotWorkspaceScope(harness, {
         botId, workspaces, state, agentPresetCatalog,
       });
@@ -108,6 +119,9 @@ export async function createProductionController(ctx, config = {}, internals = {
         harness: workspaceScope.harness,
         state: workspaceScope.state,
         contextEnhancement: { botId, getSettings: () => workspaces.contextEnhancementFor(botId) },
+        accessPolicy: accessPolicyProvider(workspaces, botId, {
+          channel: 'whatsapp', config: botConfig, equals: whatsappAccessPolicyIdsEqual,
+        }),
         replyTimeoutMs: config.replyTimeoutMs ?? 600_000,
         connectTimeoutMs: config.connectTimeoutMs ?? 30_000,
         createSession,

package/plugin-src/host/channels/whatsapp/rpc.mjs

@@ -1,7 +1,7 @@
 import QRCode from 'qrcode';
 
 import { publicConnectionTestResult } from '../../../../src/channels/shared/connection-test.mjs';
-import { normalizeWhatsappAccessPolicy } from '../../../../src/channels/whatsapp/config-store.mjs';
+import { SET_ACCESS_POLICY_ENDPOINT, validAccessPolicyPayload } from '../shared/access-policy-rpc.mjs';
 import { SET_CONTEXT_ENHANCEMENT_ENDPOINT, validContextEnhancementPayload } from '../shared/context-enhancement-rpc.mjs';
 import { resolveRpcAuthority } from '../../rpc-authority.mjs';
 import { publicWorkspaceError, SET_WORKSPACE_ENDPOINT, validWorkspacePayload } from '../shared/workspace-rpc.mjs';
@@ -15,7 +15,7 @@ export const WHATSAPP_ENDPOINTS = Object.freeze({
   cancelProvisioning: 'provision.cancel',
   reconnectBot: 'bot.reconnect',
   deleteBot: 'bot.delete',
-  setAccessPolicy: 'bot.access-policy.set',
+  setAccessPolicy: SET_ACCESS_POLICY_ENDPOINT,
   setWorkspace: SET_WORKSPACE_ENDPOINT,
   setAgentPreset: SET_AGENT_PRESET_ENDPOINT,
   setContextEnhancement: SET_CONTEXT_ENHANCEMENT_ENDPOINT,
@@ -55,15 +55,8 @@ function payloadFailure(endpoint, payload) {
       && payload.confirm === true ? null : 'bot.delete requires a botId and confirm=true.';
   }
   if (endpoint === WHATSAPP_ENDPOINTS.setAccessPolicy) {
-    if (!exactKeys(payload, ['botId', 'accessMode', 'allowedNumbers'])
-      || Object.keys(payload).length !== 3
-      || !validId(payload.botId)) return '请输入有效的 WhatsApp 访问模式和电话号码。';
-    try {
-      normalizeWhatsappAccessPolicy(payload);
-      return null;
-    } catch {
-      return '请输入有效的 WhatsApp 访问模式和电话号码。';
-    }
+    return validAccessPolicyPayload(payload)
+      ? null : '请提交有效的访问设置。';
   }
   if (endpoint === WHATSAPP_ENDPOINTS.setWorkspace) {
     return validWorkspacePayload(payload)
@@ -111,7 +104,7 @@ async function publicStatus(value, encodeQr) {
 }
 
 export function createWhatsappRpcHandler(controller, { encodeQr = qrDataUrl } = {}) {
-  for (const method of ['status', 'startProvisioning', 'registrationStatus', 'cancelProvisioning', 'reconnectBot', 'deleteBot', 'setAccessPolicy']) {
+  for (const method of ['status', 'startProvisioning', 'registrationStatus', 'cancelProvisioning', 'reconnectBot', 'deleteBot']) {
     if (typeof controller?.[method] !== 'function') {
       throw new TypeError(`A complete WhatsApp controller is required (${method})`);
     }
@@ -191,9 +184,11 @@ export function createWhatsappRpcHandler(controller, { encodeQr = qrDataUrl } =
           cachedEncode,
         );
       } else if (endpoint === WHATSAPP_ENDPOINTS.setAccessPolicy) {
-        value = await publicStatus(
-          await controller.setAccessPolicy(payload.botId, normalizeWhatsappAccessPolicy(payload)),
-          cachedEncode,
+        if (typeof controller.updateAccessPolicy !== 'function') throw new Error('Access policy update is unavailable');
+        value = await controller.updateAccessPolicy(
+          payload.botId,
+          payload.policy,
+          (status) => publicStatus(status, cachedEncode),
         );
       } else {
         value = await publicStatus(await controller.deleteBot(payload.botId), cachedEncode);

package/src/channels/dingtalk/dingtalk-bridge.mjs

@@ -58,6 +58,10 @@ import {
   messageFailureText,
   setLastMessageFailure,
 } from '../shared/message-failure.mjs';
+import {
+  COMMAND_PERMISSION_DENIED_MESSAGE,
+  evaluateInboundAccess,
+} from '../shared/inbound-access.mjs';
 import { t } from '../shared/i18n.mjs';
 
 const CARD_INITIAL_TEXT = '已连接 DeepSeek Harness，正在思考…';
@@ -374,6 +378,7 @@ export class DingtalkHarnessBridge {
   #harness;
   #state;
   #contextEnhancement;
+  #accessPolicy;
   #status;
   #logger;
   #replyTimeoutMs;
@@ -397,6 +402,7 @@ export class DingtalkHarnessBridge {
     harness,
     state,
     contextEnhancement,
+    accessPolicy,
     status = createDingtalkBridgeStatus(),
     logger = console,
     replyTimeoutMs = 600_000,
@@ -415,6 +421,7 @@ export class DingtalkHarnessBridge {
     this.#harness = harness;
     this.#state = state;
     this.#contextEnhancement = contextEnhancement;
+    this.#accessPolicy = accessPolicy;
     this.#status = status;
     this.#logger = logger;
     this.#approvals = new HarnessApprovalQueue({ label: 'DingTalk', logger });
@@ -439,17 +446,13 @@ export class DingtalkHarnessBridge {
     const sender = senderStaffId(message);
     if (!messageId || !sender || this.#state.hasSeen(messageId)
       || this.#acceptedMessageIds.has(messageId)) return Promise.resolve();
-    this.#acceptedMessageIds.set(messageId, contextSnapshot === undefined ? captureContextEnhancement(
-      this.#contextEnhancement,
-      message.conversationType === '1' || message.conversationType === 1 ? 'direct'
-        : message.conversationType === '2' || message.conversationType === 2 ? 'group' : null,
-    ) : contextSnapshot);
+    const conversationType = String(message.conversationType) === '2' ? 'group'
+      : String(message.conversationType) === '1' ? 'direct' : null;
 
     let key;
     try {
       key = conversationKey(message, sender);
     } catch {
-      this.#acceptedMessageIds.delete(messageId);
       increment(this.#status, 'messagesRejected');
       this.#status.lastRejectedAt = new Date().toISOString();
       return Promise.resolve();
@@ -461,9 +464,6 @@ export class DingtalkHarnessBridge {
     } catch {
       // An unsafe reply route must never be able to submit an approval.
     }
-    if (sessionWebhook && String(message.conversationType) !== '2') {
-      rememberConnectionTestTarget(this.#state, { sessionWebhook });
-    }
     const pending = this.#pendingInteractions.get(key);
     const promptMessage = dingtalkInboundMessage(message, {
       api: this.#api,
@@ -473,6 +473,26 @@ export class DingtalkHarnessBridge {
     const commandText = nonEmptyString(promptMessage.content) ?? '';
     const addressed = String(message.conversationType) !== '2' || message?.isInAtList === true;
     const direct = String(message.conversationType) !== '2';
+    if (addressed) {
+      const access = evaluateInboundAccess(this.#accessPolicy, {
+        conversationType,
+        senderIds: sender,
+        text: commandText,
+        hasImages: hasInboundImages(promptMessage),
+        hasFiles: hasInboundFiles(promptMessage),
+      });
+      if (!access.allowed) {
+        this.#acceptedMessageIds.set(messageId, null);
+        return this.#finishAccessDecision(message, messageId, sessionWebhook, access);
+      }
+    }
+    this.#acceptedMessageIds.set(messageId, contextSnapshot === undefined ? captureContextEnhancement(
+      this.#contextEnhancement,
+      conversationType,
+    ) : contextSnapshot);
+    if (sessionWebhook && direct) {
+      rememberConnectionTestTarget(this.#state, { sessionWebhook });
+    }
     const statusReaction = sessionWebhook && addressed ? this.#startStatusReaction(message) : null;
     const finish = (task) => Promise.resolve(task).then(
       (value) => {
@@ -855,6 +875,38 @@ export class DingtalkHarnessBridge {
     return task;
   }
 
+  #finishAccessDecision(message, messageId, sessionWebhook, access) {
+    let task;
+    task = Promise.resolve().then(async () => {
+      if (this.#state.hasSeen(messageId)) return;
+      await this.#state.markSeen(messageId);
+      if (access.reason === 'command-not-allowed' && sessionWebhook) {
+        increment(this.#status, 'messagesReceived');
+        this.#status.lastMessageAt = new Date().toISOString();
+        await this.#send(
+          sessionWebhook,
+          t(COMMAND_PERMISSION_DENIED_MESSAGE),
+          this.#atUsersFor(message),
+        );
+        increment(this.#status, 'messagesReplied');
+        this.#status.lastReplyAt = new Date().toISOString();
+      } else {
+        increment(this.#status, 'messagesRejected');
+        this.#status.lastRejectedAt = new Date().toISOString();
+      }
+      this.#status.lastError = null;
+    }).catch((error) => {
+      if (this.#signal?.aborted) return;
+      this.#status.lastError = error?.message ?? String(error);
+      this.#logger.error?.('[dsh-dingtalk] failed to apply inbound access policy', error);
+    }).finally(() => {
+      this.#acceptedMessageIds.delete(messageId);
+      this.#commandTasks.delete(task);
+    });
+    this.#commandTasks.add(task);
+    return task;
+  }
+
   async #process(message, messageId, sender, key, {
     alreadyRecorded = false,
     preparedMessage,

package/src/channels/dingtalk/dingtalk-runtime.mjs

@@ -130,6 +130,7 @@ export class DingtalkRuntime {
   #harness;
   #state;
   #contextEnhancement;
+  #accessPolicy;
   #logger;
   #replyTimeoutMs;
   #maxMessageChars;
@@ -152,6 +153,7 @@ export class DingtalkRuntime {
     harness,
     state,
     contextEnhancement,
+    accessPolicy,
     logger = console,
     replyTimeoutMs = 600_000,
     maxMessageChars = 4_000,
@@ -170,6 +172,7 @@ export class DingtalkRuntime {
     this.#harness = harness;
     this.#state = state;
     this.#contextEnhancement = contextEnhancement;
+    this.#accessPolicy = accessPolicy;
     this.#logger = logger;
     this.#replyTimeoutMs = replyTimeoutMs;
     this.#maxMessageChars = maxMessageChars;
@@ -238,6 +241,7 @@ export class DingtalkRuntime {
         harness: this.#harness,
         state: this.#state,
         contextEnhancement: this.#contextEnhancement,
+        accessPolicy: this.#accessPolicy,
         status: this.#status,
         logger: this.#logger,
         replyTimeoutMs: this.#replyTimeoutMs,

package/src/channels/discord/discord-runtime.mjs

@@ -3,6 +3,7 @@ import { fetchFileStream } from '../shared/file-download.mjs';
 import { fetchImageBuffer } from '../shared/image-prompt.mjs';
 import { t } from '../shared/i18n.mjs';
 import { captureContextEnhancement } from '../shared/context-enhancement.mjs';
+import { evaluateInboundAccess } from '../shared/inbound-access.mjs';
 import { DiscordApi } from './discord-api.mjs';
 import { createDiscordBridgeStatus, DiscordHarnessBridge } from './discord-bridge.mjs';
 
@@ -433,6 +434,7 @@ export class DiscordRuntime {
   #harness;
   #state;
   #contextEnhancement;
+  #accessPolicy;
   #logger;
   #replyTimeoutMs;
   #connectTimeoutMs;
@@ -464,6 +466,7 @@ export class DiscordRuntime {
     harness,
     state,
     contextEnhancement,
+    accessPolicy,
     logger = console,
     replyTimeoutMs = 600_000,
     connectTimeoutMs = 20_000,
@@ -480,6 +483,7 @@ export class DiscordRuntime {
     this.#harness = harness;
     this.#state = state;
     this.#contextEnhancement = contextEnhancement;
+    this.#accessPolicy = accessPolicy;
     this.#logger = logger;
     this.#replyTimeoutMs = replyTimeoutMs;
     this.#connectTimeoutMs = connectTimeoutMs;
@@ -559,6 +563,7 @@ export class DiscordRuntime {
         harness: this.#harness,
         state: this.#state,
         contextEnhancement: this.#contextEnhancement,
+        accessPolicy: this.#accessPolicy,
         status: this.#status,
         logger: this.#logger,
         replyTimeoutMs: this.#replyTimeoutMs,
@@ -730,6 +735,24 @@ export class DiscordRuntime {
   async #acceptMessage(message, bridge) {
     const messageId = String(message?.id ?? '');
     if (!messageId || this.#state.hasSeen(messageId)) return;
+    const preflight = normalizeDiscordMessage(message, this.#config.platformId);
+    let accessDecision;
+    if (preflight?.kind === 'group' && preflight.addressed === true
+      && preflight.senderIsBot !== true) {
+      accessDecision = evaluateInboundAccess(this.#accessPolicy, {
+        conversationType: 'group',
+        senderIds: [preflight.senderId],
+        text: preflight.content,
+        hasImages: preflight.images.length > 0,
+        hasFiles: preflight.files.length > 0,
+      });
+      if (!accessDecision.allowed) {
+        // Let the shared bridge apply its normal silent/command-denial behavior,
+        // but do so against the source channel before creating a Thread.
+        await bridge.accept(preflight, { accessDecision });
+        return;
+      }
+    }
     let route = this.#routing.get(messageId);
     if (!route) {
       const contextSnapshot = captureContextEnhancement(
@@ -750,7 +773,12 @@ export class DiscordRuntime {
     }
     try {
       const normalized = await route.pendingRoute;
-      if (normalized) await bridge.accept(normalized, { contextSnapshot: route.contextSnapshot });
+      if (normalized) {
+        await bridge.accept(normalized, {
+          contextSnapshot: route.contextSnapshot,
+          ...(accessDecision ? { accessDecision } : {}),
+        });
+      }
     } catch (error) {
       if (error?.code === 'discord-thread-create-uncertain') {
         await this.#state.markSeen(messageId);