@xmanrui/dsh-im 4.35.1 → 4.36.1

package/src/channels/shared/harness-approval.mjs

@@ -1,4 +1,5 @@
 import { t } from './i18n.mjs';
+import { evaluateInboundAccess } from './inbound-access.mjs';
 
 const APPROVAL_REPLIES = new Map([
   ['批准', 'allowed-once'],
@@ -9,6 +10,12 @@ const APPROVAL_REPLIES = new Map([
   ['no', 'rejected'],
 ]);
 
+export const COMPETITIVE_APPROVAL_CHANNELS = Object.freeze([
+  'feishu', 'weixin', 'dingtalk', 'wecom', 'wecom-app', 'qq',
+  'telegram', 'slack', 'discord', 'whatsapp', 'matrix',
+]);
+
+const APPROVAL_UNAVAILABLE_TEXT = '机器人端无法处理这次审批，请到 Web 查看。';
 const APPROVAL_PROMPT = '请精准回复「批准」或「拒绝」（也支持：同意 / 不同意 / yes / no）。';
 const APPROVAL_AFTER_QUESTION_PROMPT = '请先完成当前问题，再精准回复「批准」或「拒绝」。';
 const APPROVAL_RESOLVED_TEXT = '该审批已处理，无需再次回复。';
@@ -95,6 +102,7 @@ function approvalResult(pending, outcome) {
 }
 
 function approvalOutcomeText(outcome) {
+  if (outcome === 'unavailable') return t(APPROVAL_UNAVAILABLE_TEXT);
   if (outcome === 'allowed-once') return t('已批准，仅对本次操作有效。');
   if (outcome === 'rejected') return t('已拒绝此次操作。');
   return t(APPROVAL_RESOLVED_TEXT);
@@ -210,6 +218,51 @@ export class HarnessApprovalQueue {
     };
   }
 
+  /** Present a bound private-chat approval without creating an IM prompt. */
+  async handleSessionSyncRequested(interaction, context, { signal, completion, runtimeSignal, accessPolicy } = {}) {
+    if (signal?.aborted || runtimeSignal?.aborted) return false;
+    const validateRoute = context.validate;
+    context = { ...context, validate: async () => {
+      await validateRoute?.();
+      if (!context.actor || !evaluateInboundAccess(accessPolicy, {
+        conversationType: 'direct', senderIds: [context.actor], text: 'yes',
+      }).allowed) throw new Error('Approval recipient is no longer allowed');
+    } };
+    await context.validate();
+    if (signal?.aborted || runtimeSignal?.aborted) return false;
+    let resolved = false;
+    const finish = (outcome) => this.handleResolved({
+      kind: 'approval', interactionId: interaction.interactionId, outcome,
+    });
+    const onStop = () => {
+      queueMicrotask(async () => {
+        if (resolved) return;
+        try {
+          await interaction.withdraw?.();
+          await finish('unavailable');
+        } catch (error) {
+          this.#logger.warn?.(`[dsh-im:${this.#label}] failed to withdraw a stopped approval:`, error);
+        }
+      });
+    };
+    runtimeSignal?.addEventListener('abort', onStop, { once: true });
+    Promise.resolve(completion).then(async (outcome) => {
+      resolved = true;
+      runtimeSignal?.removeEventListener('abort', onStop);
+      await finish(outcome);
+    }).catch((error) => this.#logger.warn?.(`[dsh-im:${this.#label}] failed to retire a synced approval:`, error));
+    try {
+      await this.handleRequested(interaction, context);
+      if (runtimeSignal?.aborted) onStop();
+      return this.#byId.has(interaction.interactionId);
+    } catch (error) {
+      runtimeSignal?.removeEventListener('abort', onStop);
+      await interaction.withdraw?.();
+      await finish('unavailable');
+      throw error;
+    }
+  }
+
   async handleRequested(interaction, context) {
     if (interaction?.kind !== 'approval') return false;
     const payload = interaction.payload;
@@ -257,7 +310,7 @@ export class HarnessApprovalQueue {
     if (!text) {
       const rejected = await this.#rejectInteraction(interaction, payload);
       await send(rejected
-        ? t('无法完整展示这次操作，已安全拒绝此次审批。')
+        ? (interaction.withdraw ? t(APPROVAL_UNAVAILABLE_TEXT) : t('无法完整展示这次操作，已安全拒绝此次审批。'))
         : t(APPROVAL_RESOLVED_TEXT));
       return true;
     }
@@ -272,6 +325,7 @@ export class HarnessApprovalQueue {
       requiresMention: context.requiresMention === true,
       send,
       render,
+      validate: context.validate,
       onResolved: typeof context.onResolved === 'function' ? context.onResolved : null,
       text,
       presented: false,
@@ -342,13 +396,14 @@ export class HarnessApprovalQueue {
     for (const pending of pendingItems) this.#remove(pending);
     await Promise.all(pendingItems.map(async (pending) => {
       try {
-        await pending.interaction.respond(
+        if (pending.interaction.withdraw) await pending.interaction.withdraw();
+        else await pending.interaction.respond(
           approvalResult(pending, 'rejected'),
           { signal: AbortSignal.timeout(5_000) },
         );
-        pending.closedOutcome = 'rejected';
+        pending.closedOutcome = pending.interaction.withdraw ? 'unavailable' : 'rejected';
         if (pending.presented || pending.deliveryCompleted) {
-          await this.#notifyResolved(pending, 'rejected');
+          await this.#notifyResolved(pending, pending.closedOutcome);
         }
       } catch (error) {
         if (error?.code === 'interaction-not-pending') {
@@ -372,9 +427,12 @@ export class HarnessApprovalQueue {
     if (pending.presentationTask) return pending.presentationTask;
     // A channel-provided renderer shows the approval as an interactive card
     // (e.g. approve/reject buttons); otherwise fall back to plain text.
-    const task = pending.render
-      ? Promise.resolve().then(() => pending.render(pending, pending.send))
-      : Promise.resolve().then(() => pending.send(pending.text));
+    const task = Promise.resolve().then(async () => {
+      await pending.validate?.();
+      if (pending.inactive || pending.resolving) return;
+      if (pending.render) await pending.render(pending, pending.send);
+      else await pending.send(pending.text);
+    });
     pending.presentationTask = task;
     try {
       await task;
@@ -384,6 +442,12 @@ export class HarnessApprovalQueue {
       } else if (pending.closedOutcome) {
         await this.#notifyResolved(pending, pending.closedOutcome);
       }
+    } catch (error) {
+      if (!pending.interaction.withdraw) throw error;
+      pending.presentationTask = null;
+      await pending.interaction.withdraw();
+      await this.handleResolved({ kind: 'approval', interactionId: pending.approvalId, outcome: 'unavailable' });
+      this.#logger.warn?.(`[dsh-im:${this.#label}] approval presentation unavailable:`, error);
     } finally {
       if (pending.presentationTask === task) pending.presentationTask = null;
     }
@@ -392,6 +456,15 @@ export class HarnessApprovalQueue {
   async #submit(pending, outcome) {
     pending.submitting = true;
     try {
+      if (pending.validate) {
+        try { await pending.validate(); }
+        catch (error) {
+          await pending.interaction.withdraw?.();
+          throw Object.assign(new Error('Approval route is no longer available', { cause: error }), {
+            code: 'interaction-not-pending',
+          });
+        }
+      }
       await pending.interaction.respond(approvalResult(pending, outcome));
     } catch (error) {
       if (error?.code === 'interaction-not-pending') {
@@ -491,6 +564,10 @@ export class HarnessApprovalQueue {
 
   async #rejectInteraction(interaction, payload) {
     try {
+      if (interaction.withdraw) {
+        await interaction.withdraw();
+        return true;
+      }
       await interaction.respond({
         ok: true,
         value: {

package/src/channels/shared/harness-client.mjs

@@ -2,6 +2,7 @@ import { spawn } from 'node:child_process';
 import { randomUUID } from 'node:crypto';
 import { mkdir } from 'node:fs/promises';
 import { isAbsolute } from 'node:path';
+import { performance } from 'node:perf_hooks';
 
 import { adoptRegisteredWorkspaceSession } from './harness-session-binding.mjs';
 import { sameWorkspacePath } from './default-workspace.mjs';
@@ -504,33 +505,9 @@ function consumeInteractionOwnership(ownership, entries) {
       ownership.completed = true;
       continue;
     }
-    let toolCall = null;
-    if (event.type === 'tool/call'
-      && ownership.active
-      && event.data?.turn === ownership.turn
-      && typeof event.data?.callId === 'string'
-      && event.data.callId) {
-      toolCall = {
-        callId: event.data.callId,
-        name: event.data?.name,
-        arguments: event.data?.arguments,
-      };
-    } else if (event.type === 'tool/code-dispatch-start'
-      && ownership.active
-      && typeof event.data?.subCallId === 'string'
-      && event.data.subCallId) {
-      let argumentsText;
-      try {
-        argumentsText = JSON.stringify(event.data?.arguments);
-      } catch {
-        argumentsText = undefined;
-      }
-      toolCall = {
-        callId: event.data.subCallId,
-        name: event.data?.name,
-        arguments: argumentsText,
-      };
-    }
+    const toolCall = ownership.active
+      && (event.type !== 'tool/call' || event.data?.turn === ownership.turn)
+      ? harnessToolCallFromEvent(event) : null;
     if (toolCall) ownership.toolCalls.set(toolCall.callId, Object.freeze(toolCall));
   }
 }
@@ -540,17 +517,36 @@ function consumeInteractionOwnership(ownership, entries) {
  * this Session.  The modern Harness adapter uses the same ownership registry
  * as HarnessClient so it never steals a browser-owned question or approval.
  */
-export function hasActiveHarnessInteractionOwner(scope, sessionId, entries = []) {
+export function activeHarnessInteractionOwner(scope, sessionId, entries = []) {
   if (!scope || !['object', 'function', 'string'].includes(typeof scope)
-    || typeof sessionId !== 'string' || !sessionId) return false;
+    || typeof sessionId !== 'string' || !sessionId) return null;
   const owners = interactionRegistry(scope).ownerships.get(sessionId);
-  if (!owners || owners.size === 0) return false;
+  if (!owners || owners.size === 0) return null;
   for (const ownership of owners) consumeInteractionOwnership(ownership, entries);
-  return [...owners].some((ownership) => (
+  return [...owners].filter((ownership) => (
     ownership.active
     && !ownership.completed
     && typeof ownership.reconnect === 'function'
-  ));
+  )).sort((left, right) => left.order - right.order)[0] ?? null;
+}
+
+/** Whether a live IM consumer owns this turn. */
+export function hasActiveHarnessInteractionOwner(scope, sessionId, entries = []) {
+  return activeHarnessInteractionOwner(scope, sessionId, entries) !== null;
+}
+
+/** Read the operation attached to a normal or PTC tool-call event. */
+export function harnessToolCallFromEvent(event) {
+  const data = event?.data;
+  if (event?.type === 'tool/call' && typeof data?.callId === 'string') {
+    return { callId: data.callId, name: data.name, arguments: data.arguments };
+  }
+  if (event?.type === 'tool/code-dispatch-start' && typeof data?.subCallId === 'string') {
+    let argumentsText;
+    try { argumentsText = JSON.stringify(data.arguments); } catch { /* Unserializable details cannot be approved. */ }
+    return { callId: data.subCallId, name: data.name, arguments: argumentsText };
+  }
+  return null;
 }
 
 export class HarnessReplyTracker {
@@ -934,6 +930,7 @@ export class HarnessClient {
   #managedProcess = null;
   #interactionRegistry;
   #interactionOwnerships;
+  #competitiveApprovals;
   #interactionClaims;
   #controlOwnerships;
 
@@ -941,6 +938,7 @@ export class HarnessClient {
     baseUrl,
     apiProxy,
     interactionScope = apiProxy,
+    competitiveApprovals = false,
     workspace,
     ungroupedWorkspace,
     agentPreset,
@@ -991,6 +989,7 @@ export class HarnessClient {
       || !['object', 'function'].includes(typeof interactionScope))) {
       throw new TypeError('interactionScope must identify the current Host');
     }
+    this.#competitiveApprovals = competitiveApprovals === true;
     this.#workspace = workspace;
     // Only the reserved IM directory bypasses grouping, even after /ws switches.
     this.#ungroupedWorkspace = ungroupedWorkspace;
@@ -1015,6 +1014,12 @@ export class HarnessClient {
   }
 
   async rpc(method, payload = {}, timeoutMs = 30_000, options = {}) {
+    const startedAt = performance.now();
+    const withDiagnostics = error => Object.assign(error, {
+      durationMs: Math.round(performance.now() - startedAt),
+      timeoutMs,
+      transport: this.#apiProxy ? 'host-api' : 'http',
+    });
     const rpcId = options.rpcId ?? `${this.#rpcIdPrefix}-${randomUUID()}`;
     const timeoutSignal = AbortSignal.timeout(timeoutMs);
     const signal = options.signal
@@ -1053,24 +1058,24 @@ export class HarnessClient {
       // Preserve an explicit caller cancellation; it is control flow, not a
       // Harness availability diagnosis.
       if (options.signal?.aborted) throw error;
-      if (error instanceof HarnessTransportError) throw error;
-      throw new HarnessTransportError(
+      if (error instanceof HarnessTransportError) throw withDiagnostics(error);
+      throw withDiagnostics(new HarnessTransportError(
         timeoutSignal.aborted ? 'harness-timeout' : 'harness-connect-failed',
         method,
         { cause: error },
-      );
+      ));
     }
     if (body?.type !== 'server-response' || body?.rpcId !== rpcId) {
-      throw new HarnessTransportError('harness-response-invalid', method, {
+      throw withDiagnostics(new HarnessTransportError('harness-response-invalid', method, {
         cause: new Error(`Harness returned an invalid response for ${method}`),
-      });
+      }));
     }
     if (!body.result || typeof body.result !== 'object' || typeof body.result.ok !== 'boolean') {
-      throw new HarnessTransportError('harness-response-invalid', method, {
+      throw withDiagnostics(new HarnessTransportError('harness-response-invalid', method, {
         cause: new Error(`Harness returned an invalid result for ${method}`),
-      });
+      }));
     }
-    if (!body.result?.ok) throw new HarnessRpcError(method, body.result?.error);
+    if (!body.result?.ok) throw withDiagnostics(new HarnessRpcError(method, body.result?.error));
     return body.result.value;
   }
 
@@ -1783,6 +1788,7 @@ export class HarnessClient {
           lastSeq: baselineSeq,
           reconnect: null,
           order: -1,
+          competitiveApprovals: this.#competitiveApprovals,
           toolCalls: new Map(),
           control,
         }
@@ -2130,6 +2136,11 @@ export class HarnessClient {
             ? this.#interactionClaims.get(claimKey)?.recovered === true
             : false,
           ...(toolCall ? { toolCall } : {}),
+          ...(kind === 'approval' && payload.competitive === true ? {
+            withdraw: () => this.respondInteraction(envelope.rpcId, {
+              ok: false, error: { code: 'unavailable', message: 'IM cannot answer this approval', details: {} },
+            }, { signal: AbortSignal.timeout(5_000) }),
+          } : {}),
           reconnect: close,
           respond: (result, options = {}) => this.respondInteraction(
             envelope.rpcId,

package/src/channels/shared/i18n-en/diagnostics.mjs

@@ -47,6 +47,9 @@ export default Object.freeze({
   "暂未识别具体原因，请复制诊断信息，并查看相同参考号的 DSH 日志。": "The underlying cause is unknown. Copy the diagnostics and find the matching reference in the DSH logs.",
   "多个原因": "Multiple causes",
   "服务域名": "Service host",
+  "RPC 方法": "RPC method",
+  "调用方式": "Transport",
+  "宿主 API（进程内）": "Host API (in-process)",
   "请求耗时（毫秒）": "Request duration (ms)",
   "超时阈值（毫秒）": "Timeout (ms)",
   "Node 版本": "Node version",

package/src/channels/shared/i18n-en/shared-c.mjs

@@ -70,6 +70,9 @@ export default {
   '已批准，仅对本次操作有效。':
     'Approved — valid for this operation only.',
   '已拒绝此次操作。': 'This operation was rejected.',
+  '机器人端无法处理这次审批，请到 Web 查看。': 'The bot cannot handle this approval. Please check the Web interface.',
+  '未找到可处理端，本次操作未获批准。': 'No approval interface is available. This operation was not approved.',
+  '有操作在等待审批：{tool}，请到 Web 处理。': 'An operation is awaiting approval: {tool}. Please handle it in the Web interface.',
   '无法完整展示这次操作，已安全拒绝此次审批。':
     'The operation could not be displayed in full, so this approval was safely rejected.',
   '审批提交失败，请重新回复「批准」或「拒绝」。':

package/src/channels/shared/message-failure.mjs

@@ -218,7 +218,7 @@ export function classifyMessageFailure(error, {
     : businessCode;
   if (code === 'REQUEST_TIMEOUT' || code === 'NETWORK_ERROR') details.hint = connectionHint(details);
   return Object.freeze({
-    ...(code === 'INTERNAL_UNKNOWN' || details.reason !== 'unknown' || details.httpStatus || details.providerCode ? { details } : {}),
+    ...(code === 'INTERNAL_UNKNOWN' || details.reason !== 'unknown' || details.httpStatus || details.providerCode || details.method ? { details } : {}),
     code,
     reason: safeReason ?? safeFailureReason(error?.code) ?? code,
     message: typeof userMessage === 'string' && userMessage.trim()

package/src/channels/shared/text-harness-bridge.mjs

@@ -1381,6 +1381,12 @@ export class TextHarnessBridge {
     });
   }
 
+  async presentSessionSyncApproval(interaction, context, options = {}) {
+    return this.#approvals.handleSessionSyncRequested(interaction, context, {
+      ...options, runtimeSignal: this.#signal ?? options.runtimeSignal, accessPolicy: this.#accessPolicy,
+    });
+  }
+
   async #handleInteraction(interaction, {
     key,
     actor,

package/src/channels/shared/token-bot-controller.mjs

@@ -247,6 +247,22 @@ export class TokenBotController {
     });
   }
 
+  async presentSessionSyncApproval(botId, target, interaction, options = {}) {
+    const config = this.#configStore.get(botId);
+    if (!config) throw new Error(`Unknown ${this.#descriptor.label} bot`);
+    return this.#withBotTransition(botId, async () => {
+      const runtime = this.#runtimes.get(botId);
+      if (!runtime?.status?.ready || typeof runtime.presentSessionSyncApproval !== 'function') {
+        const error = new Error(t('{label}机器人尚未连接', {
+          label: this.#descriptor.label,
+        }));
+        error.code = 'bot-not-connected';
+        throw error;
+      }
+      return runtime.presentSessionSyncApproval(target, interaction, options);
+    });
+  }
+
   async deleteBot(botId) {
     const warnings = [];
     const config = this.#configStore.get(botId);

package/src/channels/slack/manifest.mjs

@@ -21,6 +21,7 @@ oauth_config:
       - files:read
       - files:write
       - groups:history
+      - im:read
       - im:history
       - mpim:history
       - reactions:write

package/src/channels/slack/slack-api.mjs

@@ -234,6 +234,13 @@ export class SlackApi {
     });
   }
 
+  async conversationInfo({ channelId, signal } = {}) {
+    const value = await this.#request('conversations.info', {
+      tokenKind: 'bot', signal, body: { channel: slackId(channelId, 'channel id') },
+    });
+    return value.channel;
+  }
+
   async fileInfo({ fileId, signal } = {}) {
     const value = await this.#request('files.info', {
       tokenKind: 'bot',

package/src/channels/slack/slack-controller.mjs

@@ -207,6 +207,20 @@ export class SlackController {
     });
   }
 
+  async presentSessionSyncApproval(botId, target, interaction, options = {}) {
+    const config = this.#configStore.get(botId);
+    if (!config) throw new Error('Unknown Slack bot');
+    return this.#withBotTransition(botId, async () => {
+      const runtime = this.#runtimes.get(botId);
+      if (!runtime?.status?.ready || typeof runtime.presentSessionSyncApproval !== 'function') {
+        const error = new Error(t('Slack机器人尚未连接'));
+        error.code = 'bot-not-connected';
+        throw error;
+      }
+      return runtime.presentSessionSyncApproval(target, interaction, options);
+    });
+  }
+
   async deleteBot(botId) {
     const warnings = [];
     const config = this.#configStore.get(botId);

package/src/channels/slack/slack-runtime.mjs

@@ -473,6 +473,18 @@ export class SlackRuntime {
     return this.#bridge.sendConnectionTest(text);
   }
 
+  async presentSessionSyncApproval(target, interaction, options = {}) {
+    if (!this.#status.ready || !this.#bridge) return false;
+    const channelId = target?.route?.channelId;
+    const channel = await this.#api.conversationInfo({ channelId, signal: options.signal });
+    const actor = channel?.is_im === true && typeof channel.user === 'string' ? channel.user : '';
+    if (!actor) return false;
+    return this.#bridge.presentSessionSyncApproval(interaction, {
+      key: options.key, actor, validate: options.validate,
+      send: (text) => this.sendProactiveText(target, text),
+    }, options);
+  }
+
   async sendProactiveText(target, text, options = {}) {
     if (!this.#status.ready || !this.#bridge) {
       const error = new Error('Slack bot is not connected');

package/src/channels/telegram/telegram-runtime.mjs

@@ -1171,6 +1171,16 @@ export class TelegramRuntime {
     return this.#bridge.sendConnectionTest(text);
   }
 
+  async presentSessionSyncApproval(target, interaction, options = {}) {
+    if (!this.#status.ready || !this.#bridge) return false;
+    const actor = typeof target?.route?.chatId === 'string' ? target.route.chatId.trim() : '';
+    if (!actor) return false;
+    return this.#bridge.presentSessionSyncApproval(interaction, {
+      key: options.key, actor, validate: options.validate,
+      send: (text) => this.sendProactiveText(target, text),
+    }, options);
+  }
+
   async sendProactiveText(target, text, options = {}) {
     if (!this.#status.ready || !this.#bridge) {
       const error = new Error('Telegram bot is not connected');

package/src/channels/wecom/wecom-bridge.mjs

@@ -1668,6 +1668,12 @@ export class WecomHarnessBridge {
     }
   }
 
+  async presentSessionSyncApproval(interaction, context, options = {}) {
+    return this.#approvals.handleSessionSyncRequested(interaction, context, {
+      ...options, runtimeSignal: this.#signal, accessPolicy: this.#accessPolicy,
+    });
+  }
+
   async #handleInteraction(interaction, {
     key,
     actor,

package/src/channels/wecom/wecom-controller.mjs

@@ -281,6 +281,20 @@ export class WecomController {
     });
   }
 
+  async presentSessionSyncApproval(botId, target, interaction, options = {}) {
+    const config = this.#configStore.get(botId);
+    if (!config) throw new Error('Unknown Enterprise WeChat bot');
+    return this.#withBotTransition(botId, async () => {
+      const runtime = this.#runtimes.get(botId);
+      if (!runtime?.status?.ready || typeof runtime.presentSessionSyncApproval !== 'function') {
+        const error = new Error(t('企业微信连接当前离线'));
+        error.code = 'bot-not-connected';
+        throw error;
+      }
+      return runtime.presentSessionSyncApproval(target, interaction, options);
+    });
+  }
+
   async deleteBot(botId) {
     const warnings = [];
     const config = this.#configStore.get(botId);

package/src/channels/wecom/wecom-runtime.mjs

@@ -230,6 +230,16 @@ export class WecomRuntime {
     });
   }
 
+  async presentSessionSyncApproval(target, interaction, options = {}) {
+    if (!this.#status.ready || !this.#bridge) return false;
+    const actor = typeof target?.route?.chatId === 'string' ? target.route.chatId.trim() : '';
+    if (!actor) return false;
+    return this.#bridge.presentSessionSyncApproval(interaction, {
+      key: options.key, actor, validate: options.validate,
+      send: (text) => this.sendProactiveText(target, text),
+    }, options);
+  }
+
   async sendProactiveText(target, text, { signal } = {}) {
     const chatId = typeof target?.route?.chatId === 'string'
       ? target.route.chatId.trim() : '';

package/src/channels/wecom-app/wecom-app-bridge.mjs

@@ -855,6 +855,12 @@ export class WecomAppBridge {
     }
   }
 
+  async presentSessionSyncApproval(interaction, context, options = {}) {
+    return this.#approvals.handleSessionSyncRequested(interaction, context, {
+      ...options, runtimeSignal: this.#signal, accessPolicy: this.#accessPolicy,
+    });
+  }
+
   async #handleInteraction(interaction, { key, actor }) {
     if (interaction?.kind === 'approval') {
       return this.#approvals.handleRequested(interaction, {

package/src/channels/wecom-app/wecom-app-controller.mjs

@@ -290,6 +290,20 @@ export class WecomAppController {
     });
   }
 
+  async presentSessionSyncApproval(botId, target, interaction, options = {}) {
+    const config = this.#configStore.get(botId);
+    if (!config) throw new Error('Unknown Enterprise WeChat app bot');
+    return this.#withBotTransition(botId, async () => {
+      const runtime = this.#runtimes.get(botId);
+      if (!runtime?.status?.ready || typeof runtime.presentSessionSyncApproval !== 'function') {
+        const error = new Error(t('企业微信应用当前离线'));
+        error.code = 'bot-not-connected';
+        throw error;
+      }
+      return runtime.presentSessionSyncApproval(target, interaction, options);
+    });
+  }
+
   async deleteBot(botId) {
     const warnings = [];
     const config = this.#configStore.get(botId);

package/src/channels/wecom-app/wecom-app-runtime.mjs

@@ -193,6 +193,16 @@ export class WecomAppRuntime {
     });
   }
 
+  async presentSessionSyncApproval(target, interaction, options = {}) {
+    if (!this.#started || !this.#bridge) return false;
+    const actor = typeof target?.route?.chatId === 'string' ? target.route.chatId.trim() : '';
+    if (!actor) return false;
+    return this.#bridge.presentSessionSyncApproval(interaction, {
+      key: options.key, actor, validate: options.validate,
+      send: (text) => this.sendProactiveText(target, text),
+    }, options);
+  }
+
   async sendProactiveText(target, text, { signal } = {}) {
     const chatId = typeof target?.route?.chatId === 'string' ? target.route.chatId.trim() : '';
     if ((target?.kind !== 'user') || !chatId) {

package/src/channels/weixin/weixin-bridge.mjs

@@ -1102,6 +1102,12 @@ export class WeixinHarnessBridge {
     }
   }
 
+  async presentSessionSyncApproval(interaction, context, options = {}) {
+    return this.#approvals.handleSessionSyncRequested(interaction, context, {
+      ...options, runtimeSignal: this.#signal, accessPolicy: this.#accessPolicy,
+    });
+  }
+
   async #handleInteraction(interaction, {
     key,
     actor,

package/src/channels/weixin/weixin-controller.mjs

@@ -289,6 +289,20 @@ export class WeixinController {
     });
   }
 
+  async presentSessionSyncApproval(botId, target, interaction, options = {}) {
+    const config = this.#configStore.get(botId);
+    if (!config) throw new Error('Unknown Weixin account');
+    return this.#withBotTransition(botId, async () => {
+      const runtime = this.#runtimes.get(botId);
+      if (!runtime?.status?.ready || typeof runtime.presentSessionSyncApproval !== 'function') {
+        const error = new Error(t('微信连接当前离线'));
+        error.code = 'bot-not-connected';
+        throw error;
+      }
+      return runtime.presentSessionSyncApproval(target, interaction, options);
+    });
+  }
+
   async deleteBot(botId) {
     const config = this.#configStore.get(botId);
     if (!config) throw weixinStageError('workspace-bot-not-found', undefined, 'account.remove');

package/src/channels/weixin/weixin-runtime.mjs

@@ -392,6 +392,16 @@ export class WeixinRuntime {
     return result;
   }
 
+  async presentSessionSyncApproval(target, interaction, options = {}) {
+    if (!this.#status.ready || !this.#bridge) return false;
+    const actor = typeof target?.route?.toUserId === 'string' ? target.route.toUserId.trim() : '';
+    if (!actor) return false;
+    return this.#bridge.presentSessionSyncApproval(interaction, {
+      key: options.key, actor, validate: options.validate,
+      send: (text) => this.sendProactiveText(target, text),
+    }, options);
+  }
+
   async sendProactiveText(target, text, { signal } = {}) {
     const toUserId = typeof target?.route?.toUserId === 'string'
       ? target.route.toUserId.trim() : '';