@xmanrui/dsh-im 4.3.0 → 4.5.0

package/src/channels/shared/bot-workspace-store.mjs

@@ -13,6 +13,10 @@ import {
   normalizeAgentPresetCatalog,
   validateAgentPresetId,
 } from './agent-preset.mjs';
+import {
+  normalizeAccessPolicy,
+  validateAccessPolicy,
+} from './access-policy.mjs';
 import { CONNECTION_TEST_STATE_IDENTITY } from './connection-test.mjs';
 import {
   DEFAULT_CONTEXT_ENHANCEMENT_CONFIG,
@@ -131,6 +135,26 @@ function normalizeDeliveryTargets(value) {
   return deliveryTargets;
 }
 
+function normalizeAccessPolicies(value, workspaces) {
+  const accessPolicies = Object.create(null);
+  if (value === undefined) return accessPolicies;
+  if (!value || typeof value !== 'object' || Array.isArray(value)) {
+    // Preserve the distinction between a missing policy (eligible for startup
+    // initialization) and damaged persisted data (fail closed).
+    for (const botId of Object.keys(workspaces)) accessPolicies[botId] = null;
+    return accessPolicies;
+  }
+  for (const [botId, policy] of Object.entries(value)) {
+    try {
+      botIdOf(botId);
+      accessPolicies[botId] = normalizeAccessPolicy(policy);
+    } catch {
+      // An invalid key cannot identify a bot, so it is isolated and ignored.
+    }
+  }
+  return accessPolicies;
+}
+
 function normalizeDocument(value) {
   if (!value || ![1, 2].includes(value.version) || !value.workspaces
     || typeof value.workspaces !== 'object' || Array.isArray(value.workspaces)) return null;
@@ -168,15 +192,52 @@ function normalizeDocument(value) {
   if (value.version === 1 && value.deliveryTargets !== undefined) return null;
   const deliveryTargets = normalizeDeliveryTargets(value.deliveryTargets);
   if (!deliveryTargets) return null;
+  const accessPolicies = normalizeAccessPolicies(value.accessPolicies, workspaces);
+  const version = value.accessPolicies === undefined ? value.version : 2;
   return {
-    version: value.version,
+    // A v1 file cannot be emitted with this optional v2 section. If one is
+    // recovered from an interrupted/manual edit, retain it on the next write.
+    version,
     workspaces,
     agentPresets,
     contextEnhancement,
     deliveryTargets,
+    accessPolicies,
   };
 }
 
+function storedDocument({
+  version,
+  workspaces,
+  agentPresets,
+  contextEnhancement,
+  deliveryTargets,
+  accessPolicies,
+}) {
+  const document = { version, workspaces };
+  if (Object.keys(agentPresets).length > 0) document.agentPresets = agentPresets;
+  if (Object.keys(contextEnhancement).length > 0) {
+    document.contextEnhancement = contextEnhancement;
+  }
+  if (version >= 2 && Object.keys(deliveryTargets).length > 0) {
+    document.deliveryTargets = deliveryTargets;
+  }
+  if (version >= 2 && Object.keys(accessPolicies).length > 0) {
+    document.accessPolicies = accessPolicies;
+  }
+  return document;
+}
+
+async function writeStoredDocument(path, document) {
+  await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+  const temporary = `${path}.tmp`;
+  await writeFile(temporary, `${JSON.stringify(document, null, 2)}\n`, {
+    encoding: 'utf8',
+    mode: 0o600,
+  });
+  await rename(temporary, path);
+}
+
 export async function validateWorkspacePath(value) {
   if (typeof value !== 'string' || !value.trim() || !isAbsolute(value.trim())) {
     const error = new Error('工作区必须是绝对路径。');
@@ -208,6 +269,7 @@ export class BotWorkspaceStore {
   #agentPresets = {};
   #contextEnhancement = {};
   #deliveryTargets = Object.create(null);
+  #accessPolicies = Object.create(null);
   #generations = new Map();
   #nextGeneration = 1;
   #incarnations = new Map();
@@ -233,6 +295,7 @@ export class BotWorkspaceStore {
       this.#agentPresets = normalized.agentPresets;
       this.#contextEnhancement = normalized.contextEnhancement;
       this.#deliveryTargets = normalized.deliveryTargets;
+      this.#accessPolicies = normalized.accessPolicies;
     } catch (error) {
       if (error?.code !== 'ENOENT') throw error;
       this.#version = 1;
@@ -240,6 +303,7 @@ export class BotWorkspaceStore {
       this.#agentPresets = {};
       this.#contextEnhancement = {};
       this.#deliveryTargets = Object.create(null);
+      this.#accessPolicies = Object.create(null);
     }
     this.#generations.clear();
     this.#nextGeneration = 1;
@@ -278,6 +342,13 @@ export class BotWorkspaceStore {
       : DEFAULT_CONTEXT_ENHANCEMENT_CONFIG;
   }
 
+  accessPolicyFor(botId) {
+    const id = botIdOf(botId);
+    return this.has(id) && Object.hasOwn(this.#accessPolicies, id)
+      ? this.#accessPolicies[id]
+      : null;
+  }
+
   listDeliveryTargets(botId) {
     const id = botIdOf(botId);
     if (!this.has(id)) throw deliveryTargetError('unknown-bot', 'Unknown bot');
@@ -373,28 +444,53 @@ export class BotWorkspaceStore {
     }
   }
 
-  async ensure(botId, { workspace = this.#defaultWorkspace, defaultAgentPreset } = {}) {
+  async ensure(botId, {
+    workspace = this.#defaultWorkspace,
+    defaultAgentPreset,
+    initialAccessPolicy,
+  } = {}) {
     const id = botIdOf(botId);
     const initialWorkspace = resolve(workspace);
     return this.#enqueue(id, async () => {
-      if (!this.#workspaces[id]) {
-        const agentPreset = validateAgentPresetId(defaultAgentPreset);
+      const createsBot = !this.#workspaces[id];
+      const initializesAccessPolicy = initialAccessPolicy !== undefined
+        && !Object.hasOwn(this.#accessPolicies, id);
+      if (createsBot || initializesAccessPolicy) {
+        const accessPolicy = initializesAccessPolicy
+          ? validateAccessPolicy(initialAccessPolicy)
+          : undefined;
+        const agentPreset = createsBot ? validateAgentPresetId(defaultAgentPreset) : null;
         const hadAgentPreset = Object.hasOwn(this.#agentPresets, id);
         const previousAgentPreset = this.#agentPresets[id];
-        this.#workspaces[id] = initialWorkspace;
-        if (agentPreset) this.#agentPresets[id] = agentPreset;
-        this.#generations.set(id, this.#freshGeneration());
-        this.#incarnations.set(id, this.#freshIncarnation());
+        const nextAccessPolicies = initializesAccessPolicy
+          ? { ...this.#accessPolicies, [id]: accessPolicy }
+          : this.#accessPolicies;
+        if (createsBot) {
+          this.#workspaces[id] = initialWorkspace;
+          if (agentPreset) this.#agentPresets[id] = agentPreset;
+          this.#generations.set(id, this.#freshGeneration());
+          this.#incarnations.set(id, this.#freshIncarnation());
+        }
+        const nextVersion = initializesAccessPolicy ? 2 : this.#version;
         try {
-          await this.#persist();
+          await this.#persist(
+            this.#contextEnhancement,
+            this.#deliveryTargets,
+            nextVersion,
+            nextAccessPolicies,
+          );
         } catch (error) {
-          delete this.#workspaces[id];
-          if (hadAgentPreset) this.#agentPresets[id] = previousAgentPreset;
-          else delete this.#agentPresets[id];
-          this.#generations.delete(id);
-          this.#incarnations.delete(id);
+          if (createsBot) {
+            delete this.#workspaces[id];
+            if (hadAgentPreset) this.#agentPresets[id] = previousAgentPreset;
+            else delete this.#agentPresets[id];
+            this.#generations.delete(id);
+            this.#incarnations.delete(id);
+          }
           throw error;
         }
+        this.#accessPolicies = nextAccessPolicies;
+        this.#version = nextVersion;
       } else if (!this.#generations.has(id)) {
         this.#generations.set(id, this.#freshGeneration());
       }
@@ -487,6 +583,30 @@ export class BotWorkspaceStore {
     });
   }
 
+  async setAccessPolicy(botId, value, { incarnation } = {}) {
+    const id = botIdOf(botId);
+    const expectedIncarnation = incarnation === undefined ? this.incarnationFor(id) : incarnation;
+    const policy = validateAccessPolicy(value);
+    return this.#enqueue(id, async () => {
+      if (!this.has(id) || expectedIncarnation !== this.incarnationFor(id)) {
+        const error = new Error('找不到要修改的机器人。');
+        error.code = 'workspace-bot-not-found';
+        throw error;
+      }
+      const next = { ...this.#accessPolicies, [id]: policy };
+      // Inbound messages keep the previous committed snapshot until rename succeeds.
+      await this.#persist(
+        this.#contextEnhancement,
+        this.#deliveryTargets,
+        2,
+        next,
+      );
+      this.#accessPolicies = next;
+      this.#version = 2;
+      return policy;
+    });
+  }
+
   async bindWorkspaceSession(botId, value, {
     conversationKey,
     sessionId,
@@ -646,6 +766,7 @@ export class BotWorkspaceStore {
       ...Object.keys(this.#agentPresets),
       ...Object.keys(this.#contextEnhancement),
       ...Object.keys(this.#deliveryTargets),
+      ...Object.keys(this.#accessPolicies),
       ...this.#dirtyRemovals,
     ]);
     for (const botId of candidates) {
@@ -663,6 +784,7 @@ export class BotWorkspaceStore {
           workspace: this.workspaceFor(bot.botId),
           agentPreset: this.agentPresetFor(bot.botId),
           contextEnhancement: this.contextEnhancementFor(bot.botId),
+          accessPolicy: this.accessPolicyFor(bot.botId),
         }
         : bot),
     };
@@ -694,12 +816,14 @@ export class BotWorkspaceStore {
     const hadPreset = Object.hasOwn(this.#agentPresets, id);
     const hadContextEnhancement = Object.hasOwn(this.#contextEnhancement, id);
     const hadDeliveryTargets = Object.hasOwn(this.#deliveryTargets, id);
+    const hadAccessPolicy = Object.hasOwn(this.#accessPolicies, id);
     const needsCleanup = hadWorkspace || hadPreset || hadContextEnhancement
-      || hadDeliveryTargets || this.#dirtyRemovals.has(id);
+      || hadDeliveryTargets || hadAccessPolicy || this.#dirtyRemovals.has(id);
     delete this.#workspaces[id];
     delete this.#agentPresets[id];
     delete this.#contextEnhancement[id];
     delete this.#deliveryTargets[id];
+    delete this.#accessPolicies[id];
     this.#generations.delete(id);
     this.#incarnations.delete(id);
     if (!needsCleanup) return {
@@ -733,24 +857,16 @@ export class BotWorkspaceStore {
     contextEnhancement = this.#contextEnhancement,
     deliveryTargets = this.#deliveryTargets,
     version = this.#version,
+    accessPolicies = this.#accessPolicies,
   ) {
-    const document = { version, workspaces: this.#workspaces };
-    if (Object.keys(this.#agentPresets).length > 0) {
-      document.agentPresets = this.#agentPresets;
-    }
-    if (Object.keys(contextEnhancement).length > 0) {
-      document.contextEnhancement = contextEnhancement;
-    }
-    if (version >= 2 && Object.keys(deliveryTargets).length > 0) {
-      document.deliveryTargets = deliveryTargets;
-    }
-    await mkdir(dirname(this.#path), { recursive: true, mode: 0o700 });
-    const temporary = `${this.#path}.tmp`;
-    await writeFile(temporary, `${JSON.stringify(document, null, 2)}\n`, {
-      encoding: 'utf8',
-      mode: 0o600,
-    });
-    await rename(temporary, this.#path);
+    await writeStoredDocument(this.#path, storedDocument({
+      version,
+      workspaces: this.#workspaces,
+      agentPresets: this.#agentPresets,
+      contextEnhancement,
+      deliveryTargets,
+      accessPolicies,
+    }));
     this.#dirtyRemovals.clear();
   }
 
@@ -758,7 +874,8 @@ export class BotWorkspaceStore {
     if (Object.keys(this.#workspaces).length > 0
       || Object.keys(this.#agentPresets).length > 0
       || Object.keys(this.#contextEnhancement).length > 0
-      || Object.keys(this.#deliveryTargets).length > 0) {
+      || Object.keys(this.#deliveryTargets).length > 0
+      || Object.keys(this.#accessPolicies).length > 0) {
       await this.#persist();
       return;
     }
@@ -1094,6 +1211,11 @@ export function createBotWorkspaceScope(
             readHistory(...args) {
               return invokeCurrentSession('readSessionHistory', args, 'history read');
             },
+            ...(typeof target.renameSession === 'function' ? {
+              renameTitle(...args) {
+                return invokeStartedSessionMutation('renameSession', args, 'title rename');
+              },
+            } : {}),
             selectModel(...args) {
               return invokeCurrentSession('selectSessionModel', args, 'model selection');
             },
@@ -1280,6 +1402,31 @@ export function createWorkspaceAwareController(controller, { workspaces, stateFo
       return result;
     });
   };
+  const updateAccessPolicy = (botId, value, projectStatus) => {
+    const incarnation = workspaces.incarnationFor(botId);
+    const policy = validateAccessPolicy(value);
+    return withBotTransition(botId, async () => {
+      const snapshot = await controller.status();
+      if (!snapshot?.bots?.some((bot) => bot?.botId === botId)) {
+        const error = new Error('找不到要修改的机器人。');
+        error.code = 'workspace-bot-not-found';
+        throw error;
+      }
+      const catalog = await resolveAgentPresetCatalog(agentPresetCatalog);
+      const decorated = workspaces.decorateStatus(snapshot);
+      const updated = {
+        ...decorated,
+        bots: decorated.bots.map((bot) => bot?.botId === botId
+          ? { ...bot, accessPolicy: policy } : bot),
+        ...(catalog ? { agentPresetCatalog: catalog } : {}),
+      };
+      // Prepare the complete channel-specific response before commit. Failed
+      // projections and disk writes must leave the live policy unchanged.
+      const result = projectStatus ? await projectStatus(updated) : updated;
+      await workspaces.setAccessPolicy(botId, policy, { incarnation });
+      return result;
+    });
+  };
   const deleteWithWorkspace = (botId, invokeDelete) => withBotTransition(botId, async () => {
     // Fence the old runtime without changing the durable mapping. A crash
     // before the controller removes its config therefore keeps the bot's
@@ -1320,6 +1467,7 @@ export function createWorkspaceAwareController(controller, { workspaces, stateFo
       if (property === 'updateWorkspace') return updateWorkspace;
       if (property === 'updateAgentPreset') return updateAgentPreset;
       if (property === 'updateContextEnhancement') return updateContextEnhancement;
+      if (property === 'updateAccessPolicy') return updateAccessPolicy;
       const value = Reflect.get(target, property, target);
       if (typeof value !== 'function') return value;
       if (property === 'deleteBot') {

package/src/channels/shared/command-permission.mjs

@@ -0,0 +1,32 @@
+import { isBatchInputCommand } from './batch-input.mjs';
+import { isCompactCommand } from './compact-command.mjs';
+import { isControlCommand } from './control-command.mjs';
+import { isHistoryCommand } from './history-command.mjs';
+import { isModelCommand } from './model-command.mjs';
+import { isPresetCommand } from './preset-command.mjs';
+import { isWorkspaceCommand } from './workspace-command.mjs';
+
+const SIMPLE_TEXT_COMMANDS = new Set(['/help', '/status', '/new']);
+
+/**
+ * Match only commands that the shared bridges already execute locally.
+ * Unknown slash-prefixed text remains an ordinary prompt.
+ */
+export function isSharedLocalCommand(text, {
+  hasImages = false,
+  hasFiles = false,
+} = {}) {
+  if (typeof text !== 'string') return false;
+  const command = text.trim();
+  if (!command) return false;
+  if (isBatchInputCommand(command) || isHistoryCommand(command)) return true;
+  if (!hasFiles && (
+    isControlCommand(command)
+    || isModelCommand(command)
+    || isPresetCommand(command)
+  )) return true;
+  if (hasImages || hasFiles) return false;
+  return SIMPLE_TEXT_COMMANDS.has(command.toLowerCase())
+    || isWorkspaceCommand(command)
+    || isCompactCommand(command);
+}

package/src/channels/shared/compact-command.mjs

@@ -70,9 +70,8 @@ function compactErrorMessage(error) {
  * Unknown input returns null so the caller may continue ordinary message routing.
  */
 export async function runCompactCommand(text, harness, state, conversationKey, options = {}) {
-  if (typeof text !== 'string') return null;
+  if (!isCompactCommand(text)) return null;
   const match = COMPACT_COMMAND.exec(text.trim());
-  if (!match) return null;
   if (match[1].trim()) return commandResult(t(COMPACT_USAGE));
   if (typeof state?.sessionFor !== 'function') {
     return commandResult(t('当前机器人没有可用的会话状态。'));
@@ -94,3 +93,7 @@ export async function runCompactCommand(text, harness, state, conversationKey, o
     return commandResult(compactErrorMessage(error));
   }
 }
+
+export function isCompactCommand(text) {
+  return typeof text === 'string' && COMPACT_COMMAND.test(text.trim());
+}

package/src/channels/shared/context-enhancement.mjs

@@ -1,6 +1,6 @@
 // Shared by the Host and settings UI; keep this module browser-compatible.
 export const CONTEXT_ENHANCEMENT_FIELDS = Object.freeze([
-  'channel', 'conversationType', 'senderId', 'senderName', 'botId',
+  'channel', 'conversationType', 'senderId', 'senderName', 'conversationTitle', 'botId',
 ]);
 
 export const CONTEXT_ENHANCEMENT_GUIDANCE_MAX_LENGTH = 8_000;
@@ -36,7 +36,10 @@ const CHANNELS = new Set([
   'wecom', 'weixin', 'feishu', 'dingtalk', 'qq',
   'slack', 'telegram', 'discord', 'whatsapp',
 ]);
-const SOURCE_LIMITS = { channel: 16, conversationType: 6, senderId: 256, senderName: 256, botId: 128 };
+const SOURCE_LIMITS = {
+  channel: 16, conversationType: 6, senderId: 256, senderName: 256,
+  conversationTitle: 256, botId: 128,
+};
 const CONTROL_CHARACTERS = /[\u0000-\u001f\u007f-\u009f\u202a-\u202e\u2066-\u2069]/g;
 
 function invalidConfig(message) {
@@ -61,7 +64,7 @@ function validateContextEnhancementScope(input) {
     throw invalidConfig('群聊和私聊开关必须是布尔值。');
   }
   if (!Array.isArray(fields) || ![...fields].every((field) => CONTEXT_ENHANCEMENT_FIELDS.includes(field))) {
-    throw invalidConfig('来源字段只能选择已定义的五个字段。');
+    throw invalidConfig('来源字段只能选择已定义的六个字段。');
   }
   if (typeof guidance !== 'string' || guidance.length > CONTEXT_ENHANCEMENT_GUIDANCE_MAX_LENGTH) {
     throw invalidConfig(`增强提示词不得超过 ${CONTEXT_ENHANCEMENT_GUIDANCE_MAX_LENGTH} 个字符。`);
@@ -146,7 +149,9 @@ function sourceString(value, field) {
 
 function sourceBlock(snapshot, sourceFactory) {
   const { fields } = snapshot.config;
-  const needsSource = fields.some((field) => ['channel', 'senderId', 'senderName'].includes(field));
+  const needsSource = fields.some((field) => [
+    'channel', 'senderId', 'senderName', 'conversationTitle',
+  ].includes(field));
   const source = needsSource ? sourceFactory?.() : null;
   const projected = {};
   for (const field of fields) {

package/src/channels/shared/harness-client.mjs

@@ -911,6 +911,12 @@ export class HarnessClient {
     return created.sessionId;
   }
 
+  async renameSession(sessionId, title, options = {}) {
+    if (typeof sessionId !== 'string' || !sessionId) throw new TypeError('sessionId is required');
+    if (typeof title !== 'string' || !title.trim()) throw new TypeError('session title is required');
+    return this.rpc('session.rename', { sessionId, title }, 30_000, options);
+  }
+
   async executeCommand(sessionId, line, options = {}) {
     if (typeof sessionId !== 'string' || !sessionId) throw new TypeError('sessionId is required');
     if (typeof line !== 'string' || !line) throw new TypeError('command line is required');

package/src/channels/shared/i18n-en/feishu.mjs

@@ -227,7 +227,6 @@ export default {
     '/sessionlist or /sessions  List workspace sessions',
   '/session ID  绑定已有会话': '/session ID  Bind an existing session',
   '/workspacelist  列出工作区': '/workspacelist  List workspaces',
-  '/workspace 路径  切换工作区': '/workspace PATH  Switch workspace',
   '/new  开启全新会话': '/new  Start a new session',
   '📊 状态 / 压缩': '📊 Status / compact',
   '/status  连接状态': '/status  Connection status',
@@ -247,8 +246,8 @@ export default {
   '/steer 指令  给 Agent 补充指令': '/steer INSTRUCTION  Steer the Agent',
   '**📋 卡片功能**\n\n1. 会话下拉 — 切换当前绑定会话\n2. 工作区下拉 — 切换工作区\n3. 🤖 预设下拉 — 切换 Agent 预设\n4. 🧠 模型下拉 — 切换模型\n5. 🆕 新会话 — 开启全新会话\n6. 📋 会话/关注 — 查看/绑定会话，管理关注\n7. ⏹ 停止 — 停止当前任务\n8. 📐 压缩 — 压缩当前会话上下文\n9. 补充指令 — 给 Agent 发送指令\n10. 🗄 归档切换 — 显示/隐藏归档会话\n11. 📊 状态 — 查看系统连接状态\n12. 📖 帮助 — 查看本帮助':
     '**📋 Card features**\n\n1. Session dropdown — switch the bound session\n2. Workspace dropdown — switch workspace\n3. 🤖 Preset dropdown — switch Agent Preset\n4. 🧠 Model dropdown — switch model\n5. 🆕 New session — start fresh\n6. 📋 Sessions/watches — view or bind sessions and manage watches\n7. ⏹ Stop — stop the current task\n8. 📐 Compact — compact the current session context\n9. Steer task — send an instruction to the Agent\n10. 🗄 Archived toggle — show or hide archived sessions\n11. 📊 Status — view connection status\n12. 📖 Help — view this help',
-  '**⌨️ 文本命令**\n\n`/m` — 打开菜单卡片\n`/new` — 开启全新会话\n`/session ID` — 绑定已有会话\n`/sessionlist [工作区]` 或 `/sessions [工作区]` — 列出会话\n`/workspace 路径` — 切换工作区\n`/workspacelist` — 列出工作区\n`/status` — 查看连接状态\n`/compact` — 压缩上下文\n`/stop` — 停止当前任务\n`/steer 指令` — 补充指令\n`/watch ID` — 关注会话\n`/watchlist` — 关注列表\n`/unwatch ID` — 取消关注\n`/archived on/off` — 归档显隐\n`/presetlist` 或 `/presets` — 列出预设\n`/preset [序号/ID]` — 切换预设\n`/preset --default` — 跟随默认\n`/models` — 列出模型\n`/reasoninglist` 或 `/reasonings` — 按序号列出当前模型可用推理等级\n`/reasoning [序号、等级ID或 --default]` — 查看或切换当前推理等级\n`/model [序号或完整模型ID] [推理等级ID]` — 查看或切换当前会话模型\n`/batch` — 开启批量输入（仅私聊，最多 10 条文字）\n`/send` — 提交当前批次\n`/cancel` — 取消当前批次\n`/repair` — 补全飞书权限与卡片回调':
-    '**⌨️ Text commands**\n\n`/m` — open the menu card\n`/new` — start a new session\n`/session ID` — bind an existing session\n`/sessionlist [workspace]` or `/sessions [workspace]` — list sessions\n`/workspace PATH` — switch workspace\n`/workspacelist` — list workspaces\n`/status` — view connection status\n`/compact` — compact context\n`/stop` — stop the current task\n`/steer INSTRUCTION` — steer the task\n`/watch ID` — watch a session\n`/watchlist` — list watched sessions\n`/unwatch ID` — stop watching\n`/archived on/off` — show or hide archived sessions\n`/presetlist` or `/presets` — list presets\n`/preset [index/ID]` — switch preset\n`/preset --default` — follow default\n`/models` — list models\n`/reasoninglist` or `/reasonings` — list reasoning efforts for the current model\n`/reasoning [index, effort ID, or --default]` — show or switch reasoning effort\n`/model [index or full model ID] [reasoning effort ID]` — show or switch the current Session model\n`/batch` — start batch input (direct messages only, up to 10 text messages)\n`/send` — submit the current batch\n`/cancel` — cancel the current batch\n`/repair` — complete Feishu permissions and the card callback',
+  '**⌨️ 文本命令**\n\n`/m` — 打开菜单卡片\n`/new` — 开启全新会话\n`/session ID` — 绑定已有会话\n`/sessionlist [工作区]` 或 `/sessions [工作区]` — 列出会话\n`/workspace 工作区序号或绝对路径` — 切换工作区\n`/workspacelist` — 列出工作区\n`/status` — 查看连接状态\n`/compact` — 压缩上下文\n`/stop` — 停止当前任务\n`/steer 指令` — 补充指令\n`/watch ID` — 关注会话\n`/watchlist` — 关注列表\n`/unwatch ID` — 取消关注\n`/archived on/off` — 归档显隐\n`/presetlist` 或 `/presets` — 列出预设\n`/preset [序号/ID]` — 切换预设\n`/preset --default` — 跟随默认\n`/models` — 列出模型\n`/reasoninglist` 或 `/reasonings` — 按序号列出当前模型可用推理等级\n`/reasoning [序号、等级ID或 --default]` — 查看或切换当前推理等级\n`/model [序号或完整模型ID] [推理等级ID]` — 查看或切换当前会话模型\n`/batch` — 开启批量输入（仅私聊，最多 10 条文字）\n`/send` — 提交当前批次\n`/cancel` — 取消当前批次\n`/repair` — 补全飞书权限与卡片回调':
+    '**⌨️ Text commands**\n\n`/m` — open the menu card\n`/new` — start a new session\n`/session ID` — bind an existing session\n`/sessionlist [workspace]` or `/sessions [workspace]` — list sessions\n`/workspace <workspace index or absolute path>` — switch workspace\n`/workspacelist` — list workspaces\n`/status` — view connection status\n`/compact` — compact context\n`/stop` — stop the current task\n`/steer INSTRUCTION` — steer the task\n`/watch ID` — watch a session\n`/watchlist` — list watched sessions\n`/unwatch ID` — stop watching\n`/archived on/off` — show or hide archived sessions\n`/presetlist` or `/presets` — list presets\n`/preset [index/ID]` — switch preset\n`/preset --default` — follow default\n`/models` — list models\n`/reasoninglist` or `/reasonings` — list reasoning efforts for the current model\n`/reasoning [index, effort ID, or --default]` — show or switch reasoning effort\n`/model [index or full model ID] [reasoning effort ID]` — show or switch the current Session model\n`/batch` — start batch input (direct messages only, up to 10 text messages)\n`/send` — submit the current batch\n`/cancel` — cancel the current batch\n`/repair` — complete Feishu permissions and the card callback',
   '**💡 数字兜底**\n回复数字快速操作：\n**1**工作区列表 · **2**新会话 · **3**会话/关注\n**4**状态 · **5**补全权限 · **6**帮助':
     '**💡 Number fallback**\nReply with a number for a quick action:\n**1** Workspace list · **2** New session · **3** Sessions/watches\n**4** Status · **5** Complete permissions · **6** Help',
   '从下方下拉选择补充指令；最后一项可自定义输入。':
@@ -338,6 +337,7 @@ export default {
 
   // feishu/feishu-channel.mjs
   '正在生成…': 'Generating…',
+  '⤵️ 最终结果见下方': '⤵️ Final result below',
   '回答完成': 'Answer complete',
   '内容较长，生成完成后将分段发送完整回答。':
     'This response is long. The complete answer will be sent in parts when generation finishes.',

package/src/channels/shared/i18n-en/shared-a.mjs

@@ -120,7 +120,8 @@ export default {
   '{label}机器人已连接 DeepSeek Harness。': 'The {label} bot is connected to DeepSeek Harness.',
   '/new  开启一个全新会话': '/new  Start a brand-new session',
   '/compact  压缩当前会话的较早上下文': '/compact  Compact the earlier context of the current session',
-  '/workspace 工作区绝对路径  切换工作区': '/workspace <absolute workspace path>  Switch workspace',
+  '/workspace 工作区序号或绝对路径  切换工作区':
+    '/workspace <workspace index or absolute path>  Switch workspace',
   '/workspacelist  列出工作区绝对路径': '/workspacelist  List absolute workspace paths',
   '/sessionlist [工作区序号或绝对路径]  列出会话 ID 和标题':
     '/sessionlist [workspace index or absolute path]  List session IDs and titles',

package/src/channels/shared/i18n-en/shared-b.mjs

@@ -17,7 +17,8 @@ export default {
   '当前 Harness Host 上存在的工作区（{count}）：':
     'Workspaces on the current Harness Host ({count}):',
   '（当前）': '(current)',
-  '切换用法：/workspace 工作区绝对路径': 'To switch: /workspace Workspace absolute path',
+  '切换用法：/workspace 工作区序号或绝对路径':
+    'To switch: /workspace Workspace index or absolute path',
   '查看会话：/sessionlist 工作区序号或绝对路径':
     'To view Sessions: /sessionlist Workspace index or absolute path',
   '机器人正在移除或已重新接入，无法列出原会话的工作区。':
@@ -80,10 +81,12 @@ export default {
   '归档：{archived}': 'Archived: {archived}',
   '是': 'Yes',
   '否': 'No',
-  '用法：/workspace 工作区绝对路径': 'Usage: /workspace Workspace absolute path',
+  '用法：/workspace 工作区序号或绝对路径':
+    'Usage: /workspace Workspace index or absolute path',
   '当前机器人暂不支持切换工作区。': 'This bot does not support switching Workspaces yet.',
   '工作区已切换为：{workspace}': 'Workspace switched to: {workspace}',
-  '{message}\n用法：/workspace 工作区绝对路径': '{message}\nUsage: /workspace Workspace absolute path',
+  '{message}\n用法：/workspace 工作区序号或绝对路径':
+    '{message}\nUsage: /workspace Workspace index or absolute path',
   '机器人正在移除或已重新接入，无法切换原会话的工作区。':
     'The bot is being removed or has been reconnected; cannot switch the Workspace of the original Session.',
 

package/src/channels/shared/i18n-en/shared-c.mjs

@@ -185,4 +185,6 @@ export default {
     'Collected {count}/{limit} messages. The batch is full; send /send or /cancel.',
   '批量内容提交失败，已保留 {count} 条消息。\n请再次发送 /send 重试或 /cancel 取消。':
     'Batch submission failed; {count} messages were retained.\nSend /send to retry or /cancel to cancel.',
+  '你可以发送普通消息，但没有执行命令的权限。':
+    'You can send regular messages, but you do not have permission to run commands.',
 };

package/src/channels/shared/inbound-access.mjs

@@ -0,0 +1,43 @@
+import { evaluateAccessPolicy } from './access-policy.mjs';
+import { isSharedLocalCommand } from './command-permission.mjs';
+
+export const COMMAND_PERMISSION_DENIED_MESSAGE = '你可以发送普通消息，但没有执行命令的权限。';
+
+const POLICY_NOT_CONFIGURED = Object.freeze({ allowed: true, reason: 'policy-not-configured' });
+const PRIVILEGED_SENDER = Object.freeze({ allowed: true, reason: 'privileged-sender' });
+
+/**
+ * Read one committed policy snapshot and decide a single inbound event.
+ * A missing provider is kept backward-compatible for direct bridge fixtures;
+ * production always injects a provider, whose missing/damaged value fails closed.
+ */
+export function evaluateInboundAccess(accessPolicy, {
+  conversationType,
+  senderIds,
+  text = '',
+  hasImages = false,
+  hasFiles = false,
+  isCommand = isSharedLocalCommand(text, { hasImages, hasFiles }),
+} = {}) {
+  if (!accessPolicy) return POLICY_NOT_CONFIGURED;
+  try {
+    if (typeof accessPolicy.isPrivileged === 'function'
+      && accessPolicy.isPrivileged(senderIds, conversationType) === true) {
+      return PRIVILEGED_SENDER;
+    }
+  } catch {
+    // A broken privilege lookup must not bypass the persisted policy.
+  }
+  let policy = null;
+  try {
+    policy = accessPolicy.getSettings();
+  } catch {
+    // Provider failures are equivalent to an unavailable persisted policy.
+  }
+  return evaluateAccessPolicy(policy, {
+    conversationType,
+    senderIds,
+    isCommand,
+    ...(typeof accessPolicy.equals === 'function' ? { equals: accessPolicy.equals } : {}),
+  });
+}

package/src/channels/shared/session-title.mjs

@@ -0,0 +1,74 @@
+const DEFAULT_MAX_TITLE_BYTES = 60;
+
+const OSC_SEQUENCE = /(?:\u001b\]|\u009d)(?:(?!\u0007|\u001b\\)[\s\S])*(?:\u0007|\u001b\\|$)/gu;
+const CSI_SEQUENCE = /(?:\u001b\[|\u009b)[0-?]*[ -/]*[@-~]/gu;
+const ESC_SEQUENCE = /\u001b[@-_]/gu;
+const CONTROL_CHARACTER = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f-\u009f]/gu;
+const DIRECTIONAL_CONTROL = /[\u200b\u200e\u200f\u202a-\u202e\u2060-\u2064\u2066-\u206f\ufeff]/gu;
+const INJECTED_CONTEXT_PREFIX = /^(?:<dsh_im_source>[\s\S]*?<\/dsh_im_source>\s*)?(?:<dsh_im_source_guidance>[\s\S]*?<\/dsh_im_source_guidance>\s*)?/u;
+const SEGMENTER = new Intl.Segmenter(undefined, { granularity: 'grapheme' });
+
+function cleanTitleText(input) {
+  return input
+    .replace(OSC_SEQUENCE, '')
+    .replace(CSI_SEQUENCE, '')
+    .replace(ESC_SEQUENCE, '')
+    .replace(CONTROL_CHARACTER, '')
+    .replace(DIRECTIONAL_CONTROL, '')
+    .replace(/\s+/gu, ' ')
+    .trim();
+}
+
+function truncateTitle(input, maxBytes = DEFAULT_MAX_TITLE_BYTES) {
+  if (Buffer.byteLength(input, 'utf8') <= maxBytes) return input;
+  const suffix = '…';
+  const budget = maxBytes - Buffer.byteLength(suffix, 'utf8');
+  let output = '';
+  for (const { segment } of SEGMENTER.segment(input)) {
+    if (Buffer.byteLength(output + segment, 'utf8') > budget) break;
+    output += segment;
+  }
+  return `${output.trimEnd()}${suffix}`;
+}
+
+function contentText(content) {
+  if (typeof content === 'string') return content;
+  if (!Array.isArray(content)) return '';
+  return content
+    .filter((block) => block?.type === 'text' && typeof block.text === 'string')
+    .map((block) => block.text)
+    .join('\n');
+}
+
+function fileDisplayName(file) {
+  const value = file?.name ?? file?.filename ?? file?.fileName;
+  if (typeof value !== 'string') return '';
+  return value
+    .replaceAll('\\', '/')
+    .split('/')
+    .at(-1)
+    ?.replace(/[\u0000-\u001f\u007f]/gu, '')
+    .trim() ?? '';
+}
+
+/** Build a deterministic title from the unenhanced first user message. */
+export function initialSessionTitle({ text, content, files } = {}) {
+  const original = typeof text === 'string' ? cleanTitleText(text) : '';
+  if (original) return truncateTitle(original);
+
+  // Structured image prompts may only expose their default text through content.
+  // Strip only the leading blocks inserted by dsh-im; matching tags later in user
+  // content remain ordinary user text.
+  const visibleContent = cleanTitleText(
+    contentText(content).replace(INJECTED_CONTEXT_PREFIX, ''),
+  );
+  if (visibleContent) return truncateTitle(visibleContent);
+
+  const fileName = Array.isArray(files)
+    ? files.map(fileDisplayName).find(Boolean)
+    : '';
+  const cleanFileName = fileName ? cleanTitleText(fileName) : '';
+  return cleanFileName ? truncateTitle(cleanFileName) : null;
+}
+
+export const INITIAL_SESSION_TITLE_MAX_BYTES = DEFAULT_MAX_TITLE_BYTES;