@xmanrui/dsh-im 4.33.0 → 4.34.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xmanrui/dsh-im",
-  "version": "4.33.0",
+  "version": "4.34.1",
   "icon": "./assets/logo-plugin-message-link-gradient.webp",
   "description": "把微信、飞书、企微、钉钉、QQ、Telegram、WhatsApp、Slack、Discord、Matrix接入DSH。 Connect Telegram, WhatsApp, Slack, Discord, Matrix, WeChat, Feishu, WeCom, DingTalk, and QQ to DSH.",
   "keywords": [

package/plugin-src/client/access-policy-settings.js

@@ -8,6 +8,7 @@ import {
 import { h, localizeText } from './i18n.js';
 
 export const ACCESS_POLICY_ENDPOINT = 'bot.access-policy.set';
+const CONFIRMED_OWNER_CHANNELS = new Set(['weixin', 'feishu', 'qq', 'whatsapp', 'discord']);
 
 export const ACCESS_CHANNEL_DEFINITIONS = Object.freeze({
   weixin: Object.freeze({
@@ -17,9 +18,9 @@ export const ACCESS_CHANNEL_DEFINITIONS = Object.freeze({
   }),
   feishu: Object.freeze({
     directUserLabel: '飞书 Open ID',
-    directPlaceholder: 'ou_xxx',
+    directPlaceholder: '填写使用者的 Open ID（ou_xxx），不是机器人 ID',
     groupUserLabel: '群成员 Open ID',
-    groupPlaceholder: 'ou_xxx',
+    groupPlaceholder: '填写使用者的 Open ID（ou_xxx），不是机器人 ID',
   }),
   dingtalk: Object.freeze({
     directUserLabel: '钉钉用户 ID',
@@ -125,6 +126,8 @@ function ScenePolicyEditor({
   placeholder,
   disabled = false,
   unsupported = false,
+  ownerHelp,
+  identityHelp,
   onChange,
 }) {
   const ownerHelpId = React.useId();
@@ -165,7 +168,7 @@ function ScenePolicyEditor({
           id: ownerHelpId,
           className: 'dim-channelTooltip dim-accessHelpTooltip',
           role: 'tooltip',
-        }, '原所有者或扫码接入者始终可以访问并执行命令；以下设置仅约束其他用户。')))),
+        }, ownerHelp, identityHelp ? h('br') : null, identityHelp)))),
   unsupported
     ? h('div', { className: 'dim-accessUnsupported', role: 'note' },
         h('strong', null, '当前渠道不支持群聊'),
@@ -271,6 +274,12 @@ function ScenePolicyEditor({
 
 export function AccessPolicySettingsPage({ channel, account, rpcCall, onSaved }) {
   const definition = ACCESS_CHANNEL_DEFINITIONS[channel];
+  const ownerHelp = CONFIRMED_OWNER_CHANNELS.has(channel)
+    ? '已由接入流程确认的所有者可以访问并执行命令，不受本页限制。未识别到所有者身份时，按本页访问设置执行。'
+    : '原所有者或扫码接入者始终可以访问并执行命令；以下设置仅约束其他用户。';
+  const identityHelp = channel === 'feishu'
+    ? '白名单请填写使用者的 Open ID，不是机器人的 Open ID。仅保存通配符的接入配置不包含所有者身份。'
+    : null;
   const initialPolicy = normalizeAccessPolicy(account?.accessPolicy);
   const initialKey = JSON.stringify(initialPolicy);
   const [draft, setDraft] = React.useState(() => clonePolicy(
@@ -333,6 +342,8 @@ export function AccessPolicySettingsPage({ channel, account, rpcCall, onSaved })
     policy: draft.direct,
     userLabel: definition.directUserLabel,
     placeholder: definition.directPlaceholder,
+    ownerHelp,
+    identityHelp,
     disabled: saving,
     onChange: (direct) => { setDraft((current) => ({ ...current, direct })); setFeedback(null); },
   }),
@@ -342,6 +353,10 @@ export function AccessPolicySettingsPage({ channel, account, rpcCall, onSaved })
     policy: draft.group,
     userLabel: definition.groupUserLabel ?? definition.directUserLabel,
     placeholder: definition.groupPlaceholder ?? definition.directPlaceholder,
+    ownerHelp,
+    identityHelp: channel === 'qq'
+      ? '扫码获得的是私聊身份，群聊只有匹配已确认的所有者身份时才豁免；其他成员按群聊白名单设置执行。'
+      : identityHelp,
     disabled: saving || definition.groupSupported === false,
     unsupported: definition.groupSupported === false,
     onChange: (group) => { setDraft((current) => ({ ...current, group })); setFeedback(null); },

package/plugin-src/client/i18n.js

@@ -68,6 +68,11 @@ const EN = Object.freeze({
   '尚未添加用户': 'No users added',
   '当前渠道不支持群聊': 'Group chat is not supported by this channel',
   '原所有者或扫码接入者始终可以访问并执行命令；以下设置仅约束其他用户。': 'The original owner or QR-code operator can always access the bot and run commands; the settings below apply only to other users.',
+  '已由接入流程确认的所有者可以访问并执行命令，不受本页限制。未识别到所有者身份时，按本页访问设置执行。': 'Owners confirmed during connection setup can access the bot and run commands regardless of these settings. When no owner has been identified, these access settings apply.',
+  '白名单请填写使用者的 Open ID，不是机器人的 Open ID。仅保存通配符的接入配置不包含所有者身份。': 'Enter the user’s Open ID in the allowlist, not the bot’s Open ID. A connection configured with only a wildcard has no identified owner.',
+  '扫码获得的是私聊身份，群聊只有匹配已确认的所有者身份时才豁免；其他成员按群聊白名单设置执行。': 'QR setup identifies the owner for direct messages. In groups, only a matching confirmed owner identity is exempt; other members follow the group allowlist settings.',
+  '填写使用者的 Open ID（ou_xxx），不是机器人 ID': 'Enter the user’s Open ID (ou_xxx), not the bot ID',
+  '这里需要填写用户的 Open ID，不能填写机器人自己的 Open ID。': 'Enter a user Open ID here, not the bot’s own Open ID.',
   '此区域无需配置，保存私聊设置时会保留现有群聊策略。': 'No setup is needed here. Saving direct-message settings keeps the existing group policy.',
   '访问设置已保存。': 'Access settings saved.',
   '访问设置暂不可用。': 'Access settings are currently unavailable.',

package/plugin-src/host/channels/feishu/production.mjs

@@ -1,4 +1,5 @@
 import { getImageInputSettingsStore } from '../../../../src/channels/shared/image-input-settings-store.mjs';
+import { t } from '../../../../src/channels/shared/i18n.mjs';
 import { homedir } from 'node:os';
 import { join, resolve } from 'node:path';
 import { unlink } from 'node:fs/promises';
@@ -291,6 +292,16 @@ export async function createProductionController(ctx, config = {}, internals = {
     stateFor: stateForBotId,
     agentPresetCatalog,
     modelCatalog,
+    validateAccessPolicyForBot(botId, policy) {
+      const botOpenId = configStore.getBot(botId)?.botOpenId;
+      if (!botOpenId) return;
+      if ([policy.direct, policy.group].some((scope) => scope.mode === 'allowlist'
+        && scope.allowlist.users.some((user) => user.id === botOpenId))) {
+        const error = new TypeError(t('这里需要填写用户的 Open ID，不能填写机器人自己的 Open ID。'));
+        error.code = 'access-policy-invalid';
+        throw error;
+      }
+    },
   });
 
   const supervisor = createSupervisor({

package/plugin-src/host/channels/shared/access-policy-production.mjs

@@ -109,6 +109,7 @@ export function privilegedSenderIdsFor(channel, config = {}) {
   }
   if (key === 'qq') return cleanIds(config.ownerUserOpenid).filter((id) => id !== '*');
   if (key === 'whatsapp') return cleanIds(config.accountJid);
+  if (key === 'discord') return cleanIds(config.ownerUserId);
   return [];
 }
 

package/plugin-src/host/channels/shared/workspace-rpc.mjs

@@ -26,6 +26,7 @@ export function publicWorkspaceError(error) {
     'model-selection-unavailable',
     'model-reasoning-unavailable',
     'context-enhancement-invalid',
+    'access-policy-invalid',
   ].includes(error?.code)) return null;
   return { code: error.code, message: error.message };
 }

package/plugin-src/host/modern-harness-api.mjs

@@ -240,6 +240,9 @@ class ModernHarnessApi {
       models: (request, signal) => rpcResult(request, () => this.#sessionModels(
         request.payload.sessionId, signal,
       )),
+      permissions: (request, signal) => rpcResult(request, () => this.#sessionPermissions(
+        request.payload.sessionId, signal,
+      )),
       selectModel: (request, signal) => rpcResult(request, () => this.#invoke(
         'session', 'selectModel', { request: request.payload }, signal,
       )),
@@ -414,6 +417,25 @@ class ModernHarnessApi {
     return this.#invoke('session', 'modelCatalog', {}, signal);
   }
 
+  async #sessionPermissions(sessionId, signal) {
+    const [catalog, projection] = await Promise.all([
+      this.#invoke('permissionPresets', 'catalog', {}, signal),
+      this.#invoke('session', 'projections', { request: { sessionId } }, signal),
+    ]);
+    if (projection === null) {
+      const error = new Error('Session not found');
+      error.failure = { code: 'session-not-found', message: error.message, details: {} };
+      throw error;
+    }
+    const currentValue = projection?.values?.permissions?.currentValue;
+    if (typeof currentValue !== 'string' || !Array.isArray(catalog?.options)) {
+      const error = new Error('Host permission presets are unavailable');
+      error.failure = { code: 'permissions-unavailable', message: error.message, details: {} };
+      throw error;
+    }
+    return { currentValue, options: catalog.options };
+  }
+
   async #sessionModels(sessionId, signal) {
     const [catalog, list] = await Promise.all([
       this.#modelCatalog(signal),

package/src/channels/discord/config-store.mjs

@@ -20,6 +20,26 @@ export function maskDiscordBotId(platformId) {
 
 export class DiscordConfigStore extends TokenBotConfigStore {
   constructor(path) {
-    super(path, { channel: 'Discord', ...IDENTITY_OPTIONS });
+    super(path, {
+      channel: 'Discord',
+      ...IDENTITY_OPTIONS,
+      normalizeBotExtension(value) {
+        if (value.ownerUserId == null) return { ownerUserId: null };
+        const ownerUserId = typeof value.ownerUserId === 'string' ? value.ownerUserId.trim() : '';
+        if (!/^\d{5,30}$/.test(ownerUserId) || ownerUserId === value.platformId?.trim()) return null;
+        return { ownerUserId };
+      },
+    });
+  }
+
+  save(value) {
+    // Shared credential binding rebuilds the base config. Preserve only this
+    // bot's confirmed identity when omitted; explicit null still clears it.
+    return super.save({
+      ...value,
+      ownerUserId: value?.ownerUserId === undefined
+        ? this.get(value?.botId)?.ownerUserId ?? null
+        : value.ownerUserId,
+    });
   }
 }

package/src/channels/discord/discord-api.mjs

@@ -123,6 +123,10 @@ export class DiscordApi {
     return this.#request('users/@me', { ...options, method: 'GET' });
   }
 
+  getCurrentApplication(options = {}) {
+    return this.#request('applications/@me', { ...options, method: 'GET' });
+  }
+
   getGatewayBot(options = {}) {
     return this.#request('gateway/bot', { ...options, method: 'GET' });
   }
@@ -345,3 +349,31 @@ export async function inspectDiscordToken(token, options = {}) {
     username: cleanString(bot.username),
   };
 }
+
+/** Owner lookup is optional metadata, bounded separately from Gateway startup. */
+export async function inspectDiscordOwner(token, {
+  platformId,
+  timeoutMs = 5_000,
+  signal,
+  ...options
+} = {}) {
+  const api = new DiscordApi({ token, ...options });
+  const lookupSignal = requestSignal(signal, positiveTimeout(timeoutMs, 'owner lookup timeout'));
+  const request = { signal: lookupSignal, retry: false };
+  const application = await api.getCurrentApplication(request);
+  const bot = application?.bot ?? await api.getCurrentUser(request);
+  if ((!application?.bot && bot?.bot !== true) || bot?.bot === false
+    || snowflake(bot?.id, 'bot id') !== platformId) {
+    throw new Error('Discord application does not belong to the configured bot');
+  }
+  // A team application belongs to its team owner, not every developer or the
+  // synthetic application owner that Discord can return for team applications.
+  const ownerUserId = snowflake(application?.team != null
+    ? application.team.owner_user_id
+    : application?.owner?.id, 'owner id');
+  if (ownerUserId === platformId || (application?.owner?.bot === true && application?.team == null)) {
+    throw new Error('Discord application owner is not a human identity');
+  }
+  lookupSignal.throwIfAborted();
+  return ownerUserId;
+}

package/src/channels/discord/discord-controller.mjs

@@ -1,16 +1,37 @@
 import { TokenBotController } from '../shared/token-bot-controller.mjs';
 import { deriveDiscordBotIdentity, maskDiscordBotId } from './config-store.mjs';
-import { inspectDiscordToken } from './discord-api.mjs';
+import { inspectDiscordOwner, inspectDiscordToken } from './discord-api.mjs';
 import { DISCORD_DESCRIPTOR } from './discord-bridge.mjs';
 
 export class DiscordController extends TokenBotController {
   constructor(options) {
+    if (typeof options.createRuntime !== 'function') throw new TypeError('Discord runtime factory must be a function');
+    const inspectOwner = options.inspectOwner ?? inspectDiscordOwner;
+    if (typeof inspectOwner !== 'function') throw new TypeError('Discord owner inspector must be a function');
     super({
       ...options,
       descriptor: DISCORD_DESCRIPTOR,
       inspectToken: options.inspectToken ?? inspectDiscordToken,
       deriveIdentity: deriveDiscordBotIdentity,
       maskPlatformId: maskDiscordBotId,
+      createRuntime: async (request) => {
+        // Run inside the parent's existing per-bot transition. The production
+        // callback must receive the committed owner before building its policy.
+        let config = options.configStore.get(request.botId) ?? request.config;
+        try {
+          const ownerUserId = await inspectOwner(request.token, { platformId: config.platformId });
+          if (ownerUserId != null && ownerUserId !== config.ownerUserId) {
+            config = await options.configStore.save({ ...config, ownerUserId });
+          }
+        } catch {
+          // Neither provider errors nor optional metadata writes should break
+          // an otherwise usable bot. Do not log provider responses or user IDs.
+          (options.logger ?? console).warn?.('[dsh-im:discord] owner lookup unavailable; using saved identity', {
+            botId: request.botId,
+          });
+        }
+        return options.createRuntime({ ...request, config });
+      },
     });
   }
 }

package/src/channels/feishu/bridge.mjs

@@ -1,3 +1,4 @@
+import { isPermissionCommand, runPermissionCommand } from '../shared/permission-command.mjs';
 import { randomUUID } from 'node:crypto';
 import QRCode from 'qrcode';
 import {
@@ -298,6 +299,7 @@ function printableText(value) {
 }
 
 function isFeishuLocalCommand(text, { hasImages = false, hasFiles = false } = {}) {
+  if (isPermissionCommand(text)) return true;
   if (hasImages || hasFiles || typeof text !== 'string') return false;
   const command = text.trim();
   return MENU_COMMAND.test(command)
@@ -1234,6 +1236,7 @@ export class FeishuHarnessBridge {
       return processing;
     }
     const commandRunner = isHistoryCommand(commandText) ? runHistoryCommand
+      : isPermissionCommand(commandText) ? runPermissionCommand
       : hasInboundFiles(commandMessage) ? null : isControlCommand(commandText)
       ? runControlCommand
       : (isModelCommand(commandText)
@@ -1408,11 +1411,20 @@ export class FeishuHarnessBridge {
     return current;
   }
 
+  #logAccessDenied(conversationType, reason) {
+    this.#logger.info?.('[dsh-feishu] inbound access denied', {
+      botId: this.#accessPolicy?.botId,
+      conversationType,
+      reason,
+    });
+  }
+
   #finishAccessDecision(event, messageId, access) {
     let current;
     current = Promise.resolve().then(async () => {
       if (this.#state.hasSeen(messageId)) return;
       await this.#state.markSeen(messageId);
+      this.#logAccessDenied(event.message.chat_type === 'p2p' ? 'direct' : 'group', access.reason);
       if (access.reason === 'command-not-allowed') {
         this.#status.lastMessageAt = new Date().toISOString();
         this.#status.messagesReceived += 1;
@@ -1656,6 +1668,7 @@ export class FeishuHarnessBridge {
           || (!hasImages && !hasFiles && NUMBER_REPLY.test(text) && this.#menus.has(key)),
       });
       if (!transcribedAccess.allowed) {
+        this.#logAccessDenied(event.message.chat_type === 'p2p' ? 'direct' : 'group', transcribedAccess.reason);
         if (transcribedAccess.reason === 'command-not-allowed') {
           await this.#send(
             event.message.chat_id,
@@ -1690,6 +1703,15 @@ export class FeishuHarnessBridge {
       await this.#handleRepairCommand(event, commandText);
       return;
     }
+    if (isPermissionCommand(text)) {
+      const result = await runPermissionCommand(text, this.#harness, this.#state, key, {
+        signal: this.#signal, hasImages, hasFiles,
+      });
+      for (const reply of result.messages) {
+        await this.#send(event.message.chat_id, reply, { replyTo: event.message.message_id });
+      }
+      return;
+    }
     if (commandText === '/help') {
       await this.#send(event.message.chat_id, menuHelpText(), { replyTo: event.message.message_id });
       return;
@@ -2298,11 +2320,11 @@ export class FeishuHarnessBridge {
       isCommand: !isInteractionResponse,
     });
     if (!access.allowed) {
+      this.#logAccessDenied(conversationType, access.reason);
       if (access.reason === 'command-not-allowed') {
         return this.#send(route.chatId, t(COMMAND_PERMISSION_DENIED_MESSAGE))
           .catch(() => undefined);
       }
-      this.#logger.warn?.('[dsh-feishu] ignoring card action blocked by access policy');
       return Promise.resolve();
     }
     // A used card is recent even if it was first created long ago.

package/src/channels/feishu/feishu-cards.mjs

@@ -535,6 +535,9 @@ export function menuHelpText() {
     '/preset [序号或完整ID]  查看或设置当前机器人 Agent Preset',
     '纯数字 ID：/preset id:<ID>',
     '/preset --default  跟随 Host 默认',
+    '/permissionlist  按序号列出权限档位',
+    '/permission [序号或完整ID]  查看或切换当前会话权限',
+    '纯数字 ID：/permission id:<ID>',
     '/models  列出模型',
     '/reasoninglist 或 /reasonings  按序号列出当前模型可用推理等级',
     '/reasoning [序号、等级ID或 --default]  查看或切换当前推理等级',
@@ -619,6 +622,8 @@ export function helpCard(extraTextLines = []) {
     { tag: 'hr' },
     { tag: 'div', text: markdown([
       t(HELP_TEXT_COMMANDS),
+      t('`/permissionlist` — 按序号列出权限档位'),
+      t('`/permission [序号/ID]` — 查看或切换当前会话权限'),
       t('/ws、/wsl、/workspaces  工作区命令别名'),
       t('`/version` — 查看插件版本'),
       t('/history [数量]  查看最近历史消息（默认 3 条，最多 5 条）'),

package/src/channels/feishu/slash-command-panel.mjs

@@ -49,6 +49,8 @@ export const SLASH_COMMAND_MANIFEST = Object.freeze([
   { command: 'reasoning', icon: 'ai-deepthink_outlined', default: '查看或切换推理等级', en_us: 'Show or switch the reasoning effort' },
   { command: 'presetlist', icon: 'skill_outlined', default: '列出可用 Agent 预设', en_us: 'List available Agent Presets' },
   { command: 'preset', icon: 'skill_outlined', default: '查看或切换 Agent 预设', en_us: 'Show or switch the Agent Preset' },
+  { command: 'permissionlist', icon: 'skill_outlined', default: '按序号列出权限档位', en_us: 'List numbered permission presets' },
+  { command: 'permission', icon: 'skill_outlined', default: '查看或切换当前会话权限', en_us: 'Show or switch current session permissions' },
   { command: 'stop', icon: 'clear_outlined', default: '停止当前任务', en_us: 'Stop the current task' },
   { command: 'steer', icon: 'promptword_outlined', default: '给当前任务补充指令', en_us: 'Send additional instructions to the current task' },
   { command: 'batch', icon: 'chat-ai_outlined', default: '开始批量输入（仅私聊）', en_us: 'Start batch input (private chats only)' },

package/src/channels/qq/qq-bridge.mjs

@@ -1,3 +1,4 @@
+import { isPermissionCommand, runPermissionCommand } from '../shared/permission-command.mjs';
 import { createDeferredDeliveryCoordinator, deferredOutcomeText } from '../shared/deferred-delivery-coordinator.mjs';
 import { runWorkspaceCommand } from '../shared/workspace-command.mjs';
 import { runCompactCommand } from '../shared/compact-command.mjs';
@@ -115,6 +116,9 @@ function helpText() {
     t('/preset [序号或完整ID]  查看或设置当前机器人 Agent Preset'),
     t('纯数字 ID：/preset id:<ID>'),
     t('/preset --default  跟随 Host 默认'),
+    t('/permissionlist  按序号列出权限档位'),
+    t('/permission [序号或完整ID]  查看或切换当前会话权限'),
+    t('纯数字 ID：/permission id:<ID>'),
     t('/stop  停止当前任务'),
     t('/steer 补充指令  纠偏当前任务'),
     t('/batch  开始批量输入（仅私聊，最多 10 条文字）'),
@@ -523,7 +527,7 @@ export class QqHarnessBridge {
             text: commandText,
             hasImages: hasQqImageAttachments(message),
             hasFiles: hasQqFileAttachments(message),
-            ...(explicitMenu || numericMenu ? { isCommand: true } : {}),
+            ...(explicitMenu || numericMenu || isPermissionCommand(commandText) ? { isCommand: true } : {}),
           })
         : senderAllowed(message, this.#ownerUserOpenid)
           ? { allowed: true, reason: 'legacy-owner' }
@@ -594,6 +598,7 @@ export class QqHarnessBridge {
     const commandRunner = explicitMenu || numericMenu
       ? () => this.#runMenuCommand(message, menuInput, key)
       : isHistoryCommand(commandText) ? runHistoryCommand
+      : isPermissionCommand(commandText) ? runPermissionCommand
       : hasQqFileAttachments(message) ? null : isControlCommand(commandText)
       ? runControlCommand
       : (isModelCommand(commandText)

package/src/channels/shared/bot-workspace-store.mjs

@@ -2002,6 +2002,11 @@ export function createBotWorkspaceScope(
             models(...args) {
               return invokeCurrentSession('getSessionModels', args, 'model listing');
             },
+            ...(typeof target.getSessionPermissions === 'function' ? {
+              permissions(...args) {
+                return invokeCurrentSession('getSessionPermissions', args, 'permission listing');
+              },
+            } : {}),
             readHistory(...args) {
               return invokeCurrentSession('readSessionHistory', args, 'history read');
             },
@@ -2131,6 +2136,7 @@ export function createWorkspaceAwareController(controller, {
   stateFor,
   agentPresetCatalog,
   modelCatalog,
+  validateAccessPolicyForBot,
 } = {}) {
   if (!controller || !workspaces || typeof stateFor !== 'function') {
     throw new TypeError('controller, workspaces, and stateFor are required');
@@ -2284,6 +2290,9 @@ export function createWorkspaceAwareController(controller, {
         error.code = 'workspace-bot-not-found';
         throw error;
       }
+      // Channel-specific identity checks must finish before projecting or
+      // committing the new policy. Existing channels need no extra validation.
+      await validateAccessPolicyForBot?.(botId, policy);
       const [catalog, models] = await Promise.all([
         resolveAgentPresetCatalog(agentPresetCatalog),
         resolveModelCatalog(modelCatalog),

package/src/channels/shared/command-list-snapshots.mjs

@@ -0,0 +1,33 @@
+export const COMMAND_LIST_TTL_MS = 15 * 60_000;
+export const COMMAND_LIST_MAX_ENTRIES = 256;
+
+/** Short-lived lists scoped to a bot's state and conversation, never persisted. */
+export function createCommandListSnapshots() {
+  const states = new WeakMap();
+  return {
+    save(state, key, value) {
+      if ((!state || typeof state !== 'object') && typeof state !== 'function') return;
+      let entries = states.get(state);
+      if (!entries) states.set(state, entries = new Map());
+      const now = Date.now();
+      for (const [entryKey, entry] of entries) {
+        if (entry.expiresAt <= now) entries.delete(entryKey);
+      }
+      entries.delete(key);
+      entries.set(key, { value, expiresAt: now + COMMAND_LIST_TTL_MS });
+      while (entries.size > COMMAND_LIST_MAX_ENTRIES) entries.delete(entries.keys().next().value);
+    },
+    load(state, key) {
+      const entries = states.get(state);
+      const entry = entries?.get(key);
+      if (!entry) return null;
+      if (entry.expiresAt <= Date.now()) {
+        entries.delete(key);
+        return null;
+      }
+      entries.delete(key);
+      entries.set(key, entry);
+      return entry.value;
+    },
+  };
+}

package/src/channels/shared/harness-client.mjs

@@ -1139,6 +1139,12 @@ export class HarnessClient {
     return validateModelCatalog(value, 'session.models', { session: true });
   }
 
+  async getSessionPermissions(sessionId, options = {}) {
+    if (typeof sessionId !== 'string' || !sessionId) throw new TypeError('sessionId is required');
+    await this.ensureRunning(options);
+    return this.rpc('session.permissions', { sessionId }, 30_000, options);
+  }
+
   async selectSessionModel(sessionId, selection, options = {}) {
     if (typeof sessionId !== 'string' || !sessionId) throw new TypeError('sessionId is required');
     if (!validModelSelection(selection)) {

package/src/channels/shared/i18n-en/feishu.mjs

@@ -1,5 +1,7 @@
 // English translations (feishu area). Keys are exact Chinese literals passed to t().
 export default {
+  '这里需要填写用户的 Open ID，不能填写机器人自己的 Open ID。':
+    'Enter a user Open ID here, not the bot’s own Open ID.',
   '已结束本轮提问，将在当前会话中继续处理图片。':
     'The questions have been closed. Your image will be processed in this conversation.',
   '图片已排队，但暂时无法结束当前提问。请先回答问题或发送 /stop，结束后会继续处理图片。':

package/src/channels/shared/i18n-en/permission.mjs

@@ -0,0 +1,30 @@
+export default {
+  '用法：/permission 查看当前权限；/permissionlist 列出档位；/permission <序号或完整ID> 切换；纯数字 ID 使用 /permission id:<ID>。': 'Usage: /permission to show current permissions; /permissionlist to list presets; /permission <number or full ID> to switch; use /permission id:<ID> for numeric IDs.',
+  '仅影响当前会话；沙箱与审批策略会同时按 Host 的档位定义更新。': 'Applies only to the current session; sandbox and approval policies change together according to the Host preset.',
+  '请先执行 /permissionlist，再按列表序号选择权限档位。': 'Run /permissionlist first, then select a permission preset by its number.',
+  '完全文件访问，不再请求审批。': 'Full file access without approval prompts.',
+  '可写工作区和允许的临时目录；扩大访问范围需要审批。': 'Write inside the workspace and permitted temporary directories; wider retries require approval.',
+  '当前聊天绑定的会话已不存在，请先绑定或建立会话。': 'The bound session no longer exists. Bind or start a session first.',
+  '当前 Host 暂不支持从机器人查看或切换权限档位。': 'This Host does not support viewing or switching permission presets from the bot.',
+  '未能确认权限切换结果，请执行 /permission 核对当前档位。': 'Could not confirm the permission change. Run /permission to check the current preset.',
+  '暂时无法获取权限档位，请稍后重试。': 'Could not read permission presets. Please try again later.',
+  '权限命令仅支持纯文字，请移除图片或文件后重试。': 'Permission commands require plain text. Remove images or files and try again.',
+  '当前聊天尚未绑定会话，请先发送普通消息建立会话，或使用 /session 绑定已有会话。': 'This chat has no bound session. Send a regular message to start one, or use /session to bind an existing session.',
+  '当前会话已变化，请重新执行 /permissionlist。': 'The current session changed. Run /permissionlist again.',
+  '当前会话权限：{id}': 'Current session permissions: {id}',
+  ' ✓ 当前': ' ✓ Current',
+  '当前没有可用权限档位。': 'No permission presets are currently available.',
+  '切换：/permission <序号或完整ID>': 'Switch: /permission <number or full ID>',
+  '查看可用档位与序号：/permissionlist': 'Show available presets and numbers: /permissionlist',
+  '权限档位序号无效，请重新执行 /permissionlist。': 'Invalid permission preset number. Run /permissionlist again.',
+  '当前 Host 未注册 /permission 命令，请确认权限预设组件已启用。': 'This Host has not registered /permission. Check that permission presets are enabled.',
+  '该权限档位不存在或已不可用，请重新执行 /permissionlist。': 'That permission preset no longer exists or is unavailable. Run /permissionlist again.',
+  '权限切换失败。': 'Permission change failed.',
+  '当前会话权限已切换为：{id}': 'Current session permissions changed to: {id}',
+  '恢复工作区权限：/permission workspace-write（需 Host 支持该档位）': 'Restore workspace permissions: /permission workspace-write (if supported by the Host)',
+  '/permissionlist  按序号列出权限档位': '/permissionlist  List numbered permission presets',
+  '/permission [序号或完整ID]  查看或切换当前会话权限': '/permission [number or full ID]  Show or switch current session permissions',
+  '纯数字 ID：/permission id:<ID>': 'Numeric IDs: /permission id:<ID>',
+  '`/permissionlist` — 按序号列出权限档位': '`/permissionlist` — List numbered permission presets',
+  '`/permission [序号/ID]` — 查看或切换当前会话权限': '`/permission [number/ID]` — Show or switch current session permissions',
+};

package/src/channels/shared/i18n-en.mjs

@@ -1,4 +1,5 @@
 import imageInput from './i18n-en/image-input.mjs';
+import permission from './i18n-en/permission.mjs';
 import diagnostics from './i18n-en/diagnostics.mjs';
 // English translations for host-side user-facing text.
 // Keys are the exact Chinese literals passed to t() in src/channels/**.
@@ -26,6 +27,7 @@ export const EN = Object.freeze(Object.assign(
   {},
   diagnostics,
   imageInput,
+  permission,
   sharedA,
   sharedB,
   sharedC,