dsh-bots 0.2.11 → 0.2.13

package/lib/client.js

@@ -317,6 +317,13 @@
 .dbs-error{margin:4px 8px;padding:5px 9px;border-radius:8px;font-size:12px;line-height:18px;cursor:pointer;background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-state-error-primary,#f85149)}
 
 .dbs-chatview{position:absolute;top:0;bottom:0;pointer-events:auto;display:flex;flex-direction:column;background:var(--dsw-alias-bg-base);font-family:var(--dsw-font-family,inherit);z-index:2;--dsh-chat-content-width:748px;--dsh-composer-card-max-width:calc(var(--dsh-chat-content-width) + 32px);--dsh-composer-side-clearance:16px;--dsh-composer-dock-inset:8px;--dsh-composer-text-max-height:336px;min-width:0}
+.dbs-mediaRefs{display:flex;flex-wrap:wrap;gap:6px;margin-top:6px;align-items:center}
+.dbs-mediaImg{max-width:280px;max-height:210px;border-radius:10px;cursor:zoom-in;display:block;border:1px solid var(--dsw-alias-border-l1,rgba(0,0,0,.08))}
+.dbs-mediaLoading{width:28px;height:20px;display:inline-flex;align-items:center;color:var(--dsw-alias-label-tertiary)}
+.dbs-fileChip{display:inline-flex;align-items:center;gap:5px;padding:3px 10px;border-radius:999px;background:var(--dsw-alias-interactive-bg-hover);font-size:12px;line-height:18px;color:var(--dsw-alias-label-secondary);cursor:pointer;max-width:100%;user-select:none}
+.dbs-fileChip:hover{color:var(--dsw-alias-label-primary)}
+.dbs-fileChipName{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.dbs-setLabel{font-size:12px;line-height:16px;color:var(--dsw-alias-label-tertiary);margin:8px 0 4px}
 .dbs-chatbar{flex:none;display:flex;align-items:center;gap:8px;height:44px;padding:0 12px;border-bottom:1px solid var(--dsw-alias-border-l1,rgba(0,0,0,.08))}
 .dbs-chatbarName{font-size:14px;line-height:20px;font-weight:600;color:var(--dsw-alias-label-primary);white-space:nowrap;overflow:hidden;text-overflow:ellipsis;min-width:0}
 .dbs-scrollBody{scrollbar-gutter:stable;flex-direction:column;flex:1;min-height:0;display:flex;overflow:hidden auto}
@@ -450,7 +457,18 @@
                 'action.saving': '保存中…',
                 'action.stop': '停止生成',
                 'chat.stop.noop': '当前没有进行中的生成',
+                'media.openFailed': '打开失败，文件可能已移动或被删除',
                 'chat.members.manage': '管理成员',
+                'chat.settings': '设置',
+                'chat.settings.title': '会话设置',
+                'chat.settings.name': '名称',
+                'chat.settings.desc': '简介',
+                'chat.settings.workspace': '工作区隔离',
+                'chat.settings.root': '工作区根目录',
+                'chat.settings.rootPh': '留空 = 不启用',
+                'chat.settings.paths': '额外可写路径（逗号分隔）',
+                'chat.settings.pathsPh': '/tmp/xxx, /Users/you/shared',
+                'chat.settings.hint': '写入被沙盒限制在工作区（含额外路径）内，读取不受限；同 slug 的 Bot 共享同一目录。',
                 'modal.members.title': '管理群成员',
                 'modal.members.hint': '勾选的 Bot 为群成员；保存后立即生效（可随时再改）。',
                 'action.delete': '删除',
@@ -551,7 +569,18 @@
                 'action.saving': 'Saving…',
                 'action.stop': 'Stop generating',
                 'chat.stop.noop': 'No generation in progress',
+                'media.openFailed': 'Open failed — the file may have moved or been deleted',
                 'chat.members.manage': 'Manage members',
+                'chat.settings': 'Settings',
+                'chat.settings.title': 'Session settings',
+                'chat.settings.name': 'Name',
+                'chat.settings.desc': 'Description',
+                'chat.settings.workspace': 'Workspace jail',
+                'chat.settings.root': 'Workspace root',
+                'chat.settings.rootPh': 'Empty = disabled',
+                'chat.settings.paths': 'Extra writable paths (comma-separated)',
+                'chat.settings.pathsPh': '/tmp/xxx, /Users/you/shared',
+                'chat.settings.hint': 'Writes are sandboxed to the workspace (plus extra paths); reads stay unrestricted. Bots sharing a slug share one directory.',
                 'modal.members.title': 'Manage group members',
                 'modal.members.hint': 'Checked bots are members; changes apply immediately on save (editable again anytime).',
                 'action.delete': 'Delete',
@@ -754,6 +783,7 @@
                 confirmDelete: null,
                 /** Manage-members dialog: group agentId | null (system modal). */
                 manageMembers: null,
+                settingsAgentId: null,
                 /** Bumped on a language switch so module-scope `t` output re-renders. */
                 localeRev: 0,
             };
@@ -1292,6 +1322,93 @@
                 const p2 = (n) => String(n).padStart(2, '0');
                 return e('span', { className: 'dbs-msgTime', title: stampOf(ms) }, d.getFullYear() + '-' + p2(d.getMonth() + 1) + '-' + p2(d.getDate()) + ' ' + clockOf(ms));
             }
+            // ---- Media references: bot-written local files in message text. ----
+            // Images render inline (host readImage → data URL, session-cached);
+            // documents/media render as a click-to-open chip (host openFile). The
+            // host enforces the real boundary — gateway data dir only, ≤8MB, image
+            // extension allowlist — so the client regexes are UX filters, not trust.
+            const MEDIA_IMG_RE = /\.(png|jpe?g|gif|webp|bmp|svg)$/i;
+            const MEDIA_FILE_RE = /\.(pdf|mp3|wav|m4a|mp4|mov|zip|csv|xlsx|docx|pptx|md|txt|json)$/i;
+            const MEDIA_PATH_RE = /\/[^\s，。；、！？：；""''（）【】《》<>"'`\\|]+/g;
+            const MEDIA_MAX_REFS = 6;
+            const mediaUrlCache = new Map();
+            function mediaPathsOf(text) {
+                if (typeof text !== 'string' || text.indexOf('/') === -1)
+                    return [];
+                const out = [];
+                for (const m of text.matchAll(MEDIA_PATH_RE)) {
+                    const p = m[0].replace(/[.,;:!?、。，；：！？）)】\]>}]+$/, '');
+                    if (p.length < 4 || p.startsWith('//'))
+                        continue; // //… = URL fragment
+                    if (!MEDIA_IMG_RE.test(p) && !MEDIA_FILE_RE.test(p))
+                        continue;
+                    if (out.indexOf(p) !== -1)
+                        continue;
+                    out.push(p);
+                    if (out.length >= MEDIA_MAX_REFS)
+                        break;
+                }
+                return out;
+            }
+            function FileChip(p) {
+                const [failed, setFailed] = React.useState(false);
+                const base = p.path.slice(p.path.lastIndexOf('/') + 1) || p.path;
+                const open = () => { botsCall('openFile', { path: p.path }).catch(() => setFailed(true)); };
+                return e('span', {
+                    className: 'dbs-fileChip', title: p.path, role: 'button', tabIndex: 0,
+                    onClick: open,
+                    onKeyDown: (ev) => { if (ev.key === 'Enter' || ev.key === ' ') {
+                        ev.preventDefault();
+                        open();
+                    } },
+                }, Ico('IconFolderClose16', { size: 12 }), e('span', { className: 'dbs-fileChipName' }, base), failed === true ? e('span', { className: 'dbs-meta' }, t('media.openFailed')) : null);
+            }
+            function MediaImage(p) {
+                const [url, setUrl] = React.useState(mediaUrlCache.get(p.path) ?? null);
+                const [err, setErr] = React.useState(false);
+                React.useEffect(() => {
+                    if (mediaUrlCache.has(p.path))
+                        return;
+                    let alive = true;
+                    botsCall('readImage', { path: p.path })
+                        .then((r) => {
+                        const u = 'data:' + r.mime + ';base64,' + r.dataBase64;
+                        mediaUrlCache.set(p.path, u);
+                        if (alive)
+                            setUrl(u);
+                    })
+                        .catch(() => { if (alive)
+                        setErr(true); });
+                    return () => { alive = false; };
+                    // eslint-disable-next-line react-hooks/exhaustive-deps
+                }, [p.path]);
+                if (url !== null) {
+                    return e('img', {
+                        className: 'dbs-mediaImg', src: url, alt: p.path, title: p.path,
+                        onClick: () => { botsCall('openFile', { path: p.path }).catch(() => undefined); },
+                    });
+                }
+                if (err === true)
+                    return e(FileChip, { path: p.path });
+                return e('span', { className: 'dbs-mediaLoading' }, Ico('IconLoadingOutline16', { size: 14 }));
+            }
+            function MediaRefs(p) {
+                const refs = mediaPathsOf(p.text);
+                if (refs.length === 0)
+                    return null;
+                const imgs = refs.filter((r) => MEDIA_IMG_RE.test(r));
+                const files = p.files === true ? refs.filter((r) => !MEDIA_IMG_RE.test(r)) : [];
+                if (imgs.length === 0 && files.length === 0)
+                    return null;
+                return e('div', { className: 'dbs-mediaRefs' }, imgs.map((r) => e(MediaImage, { key: r, path: r })), files.map((r) => e(FileChip, { key: r, path: r })));
+            }
+            /**
+             * Settings glyph — three sliders, drawn inline (the primitives package
+             * exposes no verified gear export; same policy as SendUpIcon).
+             */
+            function SettingsGlyph() {
+                return e('svg', { viewBox: '0 0 16 16', width: '16', height: '16', 'aria-hidden': true }, e('g', { stroke: 'currentColor', strokeWidth: 1.5, strokeLinecap: 'round' }, e('line', { x1: 2, y1: 4, x2: 14, y2: 4 }), e('line', { x1: 2, y1: 8, x2: 14, y2: 8 }), e('line', { x1: 2, y1: 12, x2: 14, y2: 12 })), e('g', { fill: 'currentColor' }, e('circle', { cx: 10, cy: 4, r: 2 }), e('circle', { cx: 5.5, cy: 8, r: 2 }), e('circle', { cx: 11.5, cy: 12, r: 2 })));
+            }
             function ToolCard(p) {
                 const [open, setOpen] = React.useState(false);
                 const en = p.entry;
@@ -1311,12 +1428,12 @@
                     } },
                 }, StateDot !== null
                     ? e(StateDot, { state: en.toolStatus === 'running' ? 'ongoing' : en.toolStatus === 'error' ? 'error' : 'done', size: 10 })
-                    : e('span', { style: { width: 10, height: 10, borderRadius: 999, background: tone, display: 'inline-block' } }), e('span', { className: 'dbs-toolName' }, en.toolName ?? t('tool.fallbackName')), e('span', { className: 'dbs-toolTrail' }, en.content !== '' ? e('span', { className: 'dbs-meta' }, open ? t('action.collapse') : t('action.expand')) : null, e(MsgTime, { entry: en }))), open && en.content !== '' ? e('div', { className: 'dbs-toolBody' }, en.content) : null);
+                    : e('span', { style: { width: 10, height: 10, borderRadius: 999, background: tone, display: 'inline-block' } }), e('span', { className: 'dbs-toolName' }, en.toolName ?? t('tool.fallbackName')), e('span', { className: 'dbs-toolTrail' }, en.content !== '' ? e('span', { className: 'dbs-meta' }, open ? t('action.collapse') : t('action.expand')) : null, e(MsgTime, { entry: en }))), open && en.content !== '' ? e('div', { className: 'dbs-toolBody' }, en.content, e(MediaRefs, { text: en.content })) : null);
             }
             function Entry(p) {
                 const en = p.entry;
                 if (en.display === 'user') {
-                    return e('div', { className: 'dbs-userRow' }, e('div', { className: 'dbs-userStack' }, e('div', { className: 'dbs-bubble' }, e(MessageText, { text: en.content }))), e(MsgTime, { entry: en }));
+                    return e('div', { className: 'dbs-userRow' }, e('div', { className: 'dbs-userStack' }, e('div', { className: 'dbs-bubble' }, e(MessageText, { text: en.content }), e(MediaRefs, { text: en.content, files: true }))), e(MsgTime, { entry: en }));
                 }
                 if (en.display === 'tool')
                     return e(ToolCard, { entry: en });
@@ -1332,7 +1449,7 @@
                 // stands above; only the reply clock rides along, right-aligned and
                 // quiet — the way native IMs chain quick follow-ups under one name.
                 if (p.compact === true) {
-                    return e('div', { className: 'dbs-botRow', 'data-compact': 'true' }, e('div', { className: 'dbs-mdRow' }, e(MarkdownText, { text: en.content, streaming: en.isStreaming === true }), en.isStreaming === true ? e('span', { className: 'dbs-caret' }) : null), e('div', { className: 'dbs-compactTime' }, e(MsgTime, { entry: en })));
+                    return e('div', { className: 'dbs-botRow', 'data-compact': 'true' }, e('div', { className: 'dbs-mdRow' }, e(MarkdownText, { text: en.content, streaming: en.isStreaming === true }), en.isStreaming === true ? e('span', { className: 'dbs-caret' }) : null, en.isStreaming === true ? null : e(MediaRefs, { text: en.content, files: true })), e('div', { className: 'dbs-compactTime' }, e(MsgTime, { entry: en })));
                 }
                 // Bot message: avatar + prominent per-author name + full-datetime in
                 // one header row, so multi-member rooms read at a glance.
@@ -1349,7 +1466,7 @@
                 const authorColor = 'hsl(' + String(hueOf(avAgent.id)) + ' 55% 45%)';
                 return e('div', { className: 'dbs-botRow' }, e('div', { className: 'dbs-author' }, e(Avatar, { agent: avAgent, size: 18 }), displayName != null && displayName !== ''
                     ? e('span', { className: 'dbs-authorName', style: { color: authorColor } }, displayName)
-                    : null, e(MsgTime, { entry: en })), e('div', { className: 'dbs-mdRow' }, e(MarkdownText, { text: en.content, streaming: en.isStreaming === true }), en.isStreaming === true ? e('span', { className: 'dbs-caret' }) : null));
+                    : null, e(MsgTime, { entry: en })), e('div', { className: 'dbs-mdRow' }, e(MarkdownText, { text: en.content, streaming: en.isStreaming === true }), en.isStreaming === true ? e('span', { className: 'dbs-caret' }) : null, en.isStreaming === true ? null : e(MediaRefs, { text: en.content, files: true })));
             }
             function ChatView(p) {
                 const s = useStore();
@@ -1607,12 +1724,16 @@
                     variant: 'ghost', size: 'sm', title: t('action.close'), 'aria-label': t('action.close'),
                     icon: Ico('IconCloseOutline16', { size: 16 }),
                     onClick: () => patch({ chatAgentId: null }),
-                }), agent !== null ? e(Avatar, { agent, size: 24 }) : null, e('span', { className: 'dbs-chatbarName' }, agent?.name ?? t('chat.loading')), e('span', { className: 'dbs-meta' }, isGroup ? t('chat.group', { n: memberNames.length }) : t('chat.single')), isGroup
+                }), agent !== null ? e(Avatar, { agent, size: 24 }) : null, e('span', { className: 'dbs-chatbarName' }, agent?.name ?? t('chat.loading')), e('span', { className: 'dbs-meta' }, isGroup ? t('chat.group', { n: memberNames.length }) : t('chat.single')), e('span', { style: { flex: 1 } }), isGroup
                     ? e(Button, {
                         variant: 'ghost', size: 'sm', title: t('chat.members.manage'), 'aria-label': t('chat.members.manage'),
                         onClick: () => patch({ manageMembers: p.agentId }),
                     }, t('chat.members.manage'))
-                    : null, e('span', { style: { flex: 1 } })), error !== null
+                    : null, e('button', {
+                    className: 'dbs-railBtn', type: 'button',
+                    title: t('chat.settings'), 'aria-label': t('chat.settings'),
+                    onClick: () => patch({ settingsAgentId: p.agentId }),
+                }, e(SettingsGlyph, null))), error !== null
                     ? e('div', { className: 'dbs-error', onClick: () => setError(null) }, error)
                     : null, e('div', { className: 'dbs-scrollArea' }, e('div', { className: 'dbs-scrollBody', ref: scrollRef, onScroll: onScrollBody }, e('div', { className: 'dbs-scroll' }, e('div', { className: 'dbs-column' }, entries === null
                     ? e('div', { className: 'dbs-skeleton' }, e('div', { className: 'dbs-skelRow', style: { width: '42%' } }), e('div', { className: 'dbs-skelRow', style: { width: '76%' } }), e('div', { className: 'dbs-skelRow', style: { width: '58%' } }))
@@ -2073,6 +2194,113 @@
                     onClick: () => void submit(),
                 }, working ? t('action.saving') : t('action.save')))));
             }
+            /**
+             * Per-session settings: name (+ description) for every chat; singles
+             * additionally get the §14 workspace-jail editor (root + extra writable
+             * paths). updateAgent merges only the name/description/title/avatar
+             * fields engine-side, so saving cannot clobber the rest of a profile;
+             * an empty root removes the jail (workspaceRoot: null).
+             */
+            function AgentSettingsModal() {
+                const s = useStore();
+                const agent = agentById(s.settingsAgentId);
+                const isGroup = agent?.isGroup === true;
+                const [name, setName] = React.useState('');
+                const [desc, setDesc] = React.useState('');
+                const [root, setRoot] = React.useState('');
+                const [paths, setPaths] = React.useState('');
+                const [wsLoaded, setWsLoaded] = React.useState(false);
+                const [working, setWorking] = React.useState(false);
+                const [err, setErr] = React.useState(null);
+                React.useEffect(() => {
+                    if (agent === null || agent === undefined)
+                        return;
+                    setName(String(agent.name ?? ''));
+                    setDesc(String(agent.description ?? ''));
+                    if (agent.isGroup === true) {
+                        setWsLoaded(true);
+                        return;
+                    }
+                    let alive = true;
+                    botsCall('workspaceGet', { agentId: agent.id })
+                        .then((c) => {
+                        if (alive === false)
+                            return;
+                        setRoot(c.workspaceRoot ?? '');
+                        setPaths((c.allowPaths ?? []).join(', '));
+                        setWsLoaded(true);
+                    })
+                        .catch(() => { if (alive)
+                        setWsLoaded(true); });
+                    return () => { alive = false; };
+                    // eslint-disable-next-line react-hooks/exhaustive-deps
+                }, [s.settingsAgentId]);
+                if (agent === null || agent === undefined)
+                    return null;
+                const valid = name.trim() !== '';
+                async function save() {
+                    if (working || valid === false)
+                        return;
+                    setWorking(true);
+                    setErr(null);
+                    try {
+                        await botsCall('update', { id: agent.id, profile: { name: name.trim(), description: desc.trim() } });
+                        if (agent.isGroup !== true && wsLoaded === true) {
+                            const list = paths.split(/[,,]/).map((x) => x.trim()).filter((x) => x !== '');
+                            await botsCall('workspaceSet', {
+                                agentId: agent.id,
+                                workspaceRoot: root.trim() === '' ? null : root.trim(),
+                                allowPaths: list,
+                            });
+                        }
+                        patch({ settingsAgentId: null });
+                        await refreshAgents();
+                        return;
+                    }
+                    catch (e2) {
+                        setErr(String(e2?.message ?? e2));
+                    }
+                    setWorking(false);
+                }
+                return e('div', {
+                    className: 'dbs-modalBackdrop',
+                    onClick: () => { if (working === false)
+                        patch({ settingsAgentId: null }); },
+                }, e('div', {
+                    className: 'dbs-modalCard', role: 'dialog', 'aria-modal': true,
+                    'aria-label': t('chat.settings.title'),
+                    onClick: (ev) => { ev.stopPropagation(); },
+                }, e('div', { className: 'dbs-modalTitleRow' }, e('span', { className: 'dbs-modalTitle' }, t('chat.settings.title')), e(Button, {
+                    variant: 'ghost', size: 'sm', title: t('action.close'), 'aria-label': t('action.close'),
+                    disabled: working,
+                    icon: Ico('IconCloseOutline16', { size: 16 }),
+                    onClick: () => patch({ settingsAgentId: null }),
+                })), e('div', { className: 'dbs-modalBody' }, e('div', { className: 'dbs-setLabel' }, t('chat.settings.name')), e(Input, {
+                    value: name, autoFocus: true, disabled: working,
+                    onChange: (ev) => setName(ev.target.value),
+                }), isGroup === false
+                    ? e('div', null, e('div', { className: 'dbs-setLabel' }, t('chat.settings.desc')), e(Input, {
+                        value: desc, disabled: working,
+                        onChange: (ev) => setDesc(ev.target.value),
+                    }), e('div', { className: 'dbs-setLabel', style: { marginTop: 12, fontWeight: 600 } }, t('chat.settings.workspace')), e('div', { className: 'dbs-setLabel' }, t('chat.settings.root')), e(Input, {
+                        value: root, disabled: working || wsLoaded === false,
+                        placeholder: t('chat.settings.rootPh'),
+                        onChange: (ev) => setRoot(ev.target.value),
+                    }), e('div', { className: 'dbs-setLabel' }, t('chat.settings.paths')), e(Input, {
+                        value: paths, disabled: working || wsLoaded === false,
+                        placeholder: t('chat.settings.pathsPh'),
+                        onChange: (ev) => setPaths(ev.target.value),
+                    }), e('div', { className: 'dbs-meta', style: { marginTop: 8 } }, t('chat.settings.hint')))
+                    : null, err !== null
+                    ? e('div', { className: 'dbs-error', onClick: () => { setErr(null); } }, err)
+                    : null), e('div', { className: 'dbs-modalFooter' }, e(Button, {
+                    variant: 'ghost', size: 'sm', disabled: working,
+                    onClick: () => patch({ settingsAgentId: null }),
+                }, t('action.cancel')), e(Button, {
+                    variant: 'primary', size: 'sm', disabled: valid === false || working,
+                    onClick: () => void save(),
+                }, working === true ? t('action.saving') : t('action.save')))));
+            }
             /** Delete confirmation modal: same system-dialog chrome as CreateModal. */
             function ConfirmDeleteModal() {
                 const s = useStore();
@@ -2151,6 +2379,8 @@
                     layers.push(e(CreateModal, { key: 'create' }));
                 if (s.manageMembers !== null)
                     layers.push(e(ManageMembersModal, { key: 'manage-members' }));
+                if (s.settingsAgentId !== null)
+                    layers.push(e(AgentSettingsModal, { key: 'agent-settings' }));
                 if (s.confirmDelete !== null)
                     layers.push(e(ConfirmDeleteModal, { key: 'confirm-delete' }));
                 return layers.length === 0 ? null : e('div', null, layers);

package/lib/index.js

@@ -19,8 +19,9 @@
  * @module dsh-bots
  */
 import { createRequire } from 'node:module';
-import { dirname, join } from 'node:path';
-import { appendFileSync, realpathSync } from 'node:fs';
+import { dirname, extname, join, resolve, sep } from 'node:path';
+import { appendFileSync, readFileSync, realpathSync, statSync } from 'node:fs';
+import { spawn } from 'node:child_process';
 import { pathToFileURL } from 'node:url';
 import { callGateway, discover, expandHome, nextNonce, normalizeAgents, readDiscovery, trimAgent, trimEntry } from './gateway.js';
 import { GatewaySseClient, SseRingBuffer } from './sse.js';
@@ -284,6 +285,51 @@ export class BotsRemote extends TypertRemoteService {
         });
         return trimAgent(updated?.agent ?? updated);
     }
+    /**
+     * Resolve a bot-written path against the media allowlist: only files inside
+     * the gateway data dir (agent dirs, box-workspace, swarm blackboard…) may
+     * be served or opened — the workbench must never become a disk-wide file
+     * reader. Symlinks resolve before the check so escapes fail closed.
+     */
+    resolveMediaPath(raw) {
+        const p = String(raw ?? '').trim();
+        if (p === '')
+            throw new Error('path is required');
+        const root = realpathSync(expandHome(this.cfg.dataDir));
+        let resolved = resolve(expandHome(p));
+        try {
+            resolved = realpathSync(resolved);
+        }
+        catch { /* missing → prefix-check the literal path */ }
+        if (resolved !== root && !resolved.startsWith(root + sep)) {
+            throw new Error('path is outside the gateway data dir: ' + resolved);
+        }
+        return { resolved, ext: extname(resolved).toLowerCase() };
+    }
+    /** Inline-preview support: read a bot-written image as base64 for a data URL. */
+    async readImage(request) {
+        const { resolved, ext } = this.resolveMediaPath(request?.path);
+        const mime = {
+            '.png': 'image/png', '.jpg': 'image/jpeg', '.jpeg': 'image/jpeg', '.gif': 'image/gif',
+            '.webp': 'image/webp', '.bmp': 'image/bmp', '.svg': 'image/svg+xml',
+        }[ext];
+        if (mime === undefined)
+            throw new Error('not a supported image: ' + ext);
+        const stat = statSync(resolved);
+        if (!stat.isFile())
+            throw new Error('not a file: ' + resolved);
+        if (stat.size > 8 * 1024 * 1024)
+            throw new Error('image exceeds the 8MB preview cap (' + stat.size + ' bytes)');
+        return { mime, dataBase64: readFileSync(resolved).toString('base64'), sizeBytes: stat.size };
+    }
+    /** Open a bot-written file with the desktop default app (macOS `open`). */
+    async openFile(request) {
+        const { resolved } = this.resolveMediaPath(request?.path);
+        statSync(resolved); // missing → honest error instead of a silent no-op
+        const cmd = process.platform === 'darwin' ? 'open' : 'xdg-open';
+        spawn(cmd, [resolved], { detached: true, stdio: 'ignore' }).unref();
+        return { opened: true };
+    }
     async update(request) {
         const updated = await callGateway(this.cfg.dataDir, 'updateAgent', {
             id: request?.id,
@@ -493,7 +539,7 @@ export class BotsRemote extends TypertRemoteService {
 }
 for (const m of [
     'gatewayInfo', 'list', 'workspaces', 'sessions',
-    'create', 'createGroup', 'setGroupMembers', 'update', 'remove', 'send', 'interrupt', 'transcriptTail', 'markRead', 'diag',
+    'create', 'createGroup', 'setGroupMembers', 'update', 'remove', 'send', 'interrupt', 'readImage', 'openFile', 'transcriptTail', 'markRead', 'diag',
     'mcpServers', 'mcpTools', 'mcpAdd', 'mcpRemove', 'mcpRefresh', 'mcpExecute',
     'workspaceList', 'workspaceGet', 'workspaceSet',
     'eventsSince', 'sseState',

package/lib/types/index.d.ts

@@ -92,6 +92,27 @@ export declare class BotsRemote extends TypertRemoteService {
         id?: string;
         memberIds?: string[];
     } | null): Promise<AgentInfo | null>;
+    /**
+     * Resolve a bot-written path against the media allowlist: only files inside
+     * the gateway data dir (agent dirs, box-workspace, swarm blackboard…) may
+     * be served or opened — the workbench must never become a disk-wide file
+     * reader. Symlinks resolve before the check so escapes fail closed.
+     */
+    private resolveMediaPath;
+    /** Inline-preview support: read a bot-written image as base64 for a data URL. */
+    readImage(request: {
+        path?: string;
+    } | null): Promise<{
+        mime: string;
+        dataBase64: string;
+        sizeBytes: number;
+    }>;
+    /** Open a bot-written file with the desktop default app (macOS `open`). */
+    openFile(request: {
+        path?: string;
+    } | null): Promise<{
+        opened: boolean;
+    }>;
     update(request: {
         id?: string;
         profile?: Record<string, unknown>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-bots",
-  "version": "0.2.11",
+  "version": "0.2.13",
   "description": "Multi-bot workbench for DeepSeek Harness: bridges the sdk-bots orchestration gateway (group chats, single bots) into the dsh web shell with official-styled UI.",
   "type": "module",
   "main": "lib/index.js",