@ycodium-ai/plugin-im 0.2.2962 → 0.2.2966

package/README.md

@@ -6,9 +6,12 @@ to the chat, and anything the agent needs approved lands there too.
 
 ## What it does
 
-Each settings-card row is one bot (platform, credentials, who may use it); the
-chats it talks in (private chats, groups) are not configured, they pick their own
-project:
+Each settings-card row is one **bot card** (alias, platform, credentials, access
+mode, allow list, queue vs steer, and channel options such as Lark panel mode and
+WeCom numbered-reply hints). Row
+actions check the connection, copy a diagnostic reference (`IM-CONN-…`), and for
+Lark guide scope repair. Chats (private or group) are not configured on the card;
+they pick their own project:
 
 - **Connect a Lark bot** (Beta) is a button on top of the card (web and desktop; mobile
   fills rows by hand). One scan, then the plugin creates the Lark app through the developer
@@ -16,10 +19,15 @@ project:
   saved as secrets and the scanner as the only allowed person: no draft, no Save. It relies on
   non-public console interfaces and may break; the dialog then shows the step list with the
   failed step marked. See `src/lark/setup/`.
-- **Allowed people** is an allow-list of that platform's user ids. Empty means
-  nobody can make the agent work. Someone who is not on it gets one reply with
-  their own user id and where to put it, at most once every ten minutes per
-  person (the table of who was told is bounded in memory).
+- **Access mode** (per bot): `allowlist` (default) or `open`. `allowlist` admits only
+  the people on the allow list; `open` admits any sender the platform can identify.
+  New bots start on `allowlist`.
+- **Allowed people** is an allow-list of that platform's user ids (shown when the
+  mode is allowlist). Empty means nobody can make the agent work. Someone who is
+  not admitted gets one reply with their own user id and where to put it, at most
+  once every ten minutes per person (the table of who was told is bounded in memory).
+  In `open` mode any identifiable sender is admitted; the deny hint still applies
+  when the platform reports no sender id.
 - A chat with no project starts nothing. The first message from an allowed
   person gets a project picker (a card on Lark, an inline keyboard on Telegram,
   a numbered text list on WeCom, which has no buttons: reply with the number or
@@ -49,7 +57,12 @@ project:
 
 Platforms are adapters behind one plugin, not three plugins. Lark uses the
 vendor SDK for its long connection; WeCom speaks JSON over a WebSocket; Telegram
-is HTTP long-polling.
+is HTTP long-polling. **WeCom App** (`wecom-app`) is the self-built application
+channel (YCO-235): HTTP callbacks with official encrypt/decrypt, URL verification,
+inbound text, and outbound `cgi-bin/message/send`. It listens on `127.0.0.1:30987`
+by default (path `/wecom-app-callback/<rowId>/<secret>`); put a reverse proxy or
+tunnel in front and paste the public URL into WeCom “Receive messages → API receive”.
+Streaming and media are not in this skeleton yet — final replies go out actively.
 
 The default is one message per finished turn. A single turn can produce dozens
 of assistant messages, mostly commentary between tool calls.
@@ -241,3 +254,11 @@ plugin API version 3.
 ## License
 
 UNLICENSED.
+
+## 主动投递（骨架）
+
+按 botId+targetId 投递（提案 [0068](../../docs/internals/proposals/0068-im-proactive-delivery.md)）：
+
+- 设置里可配投递目标，并 **opt-in** 开启本机 HTTP（**只听 `127.0.0.1`**，可选 Bearer token）。
+- `POST /v1/delivery/messages` 体为 `{ botId, targetId, text }`；`botId` 是机器人表行 id。
+- **不要**用 `network.serve` 当这条入站口；同 Host 插件互调另走 typed RPC（尚未做）。