dsh-caduceus 0.5.1 → 0.7.1

package/README.md

@@ -15,7 +15,7 @@
 - **One scope, one session** — p2p, topic, and group-per-user sessions are kept separate.
 - **Visible titles** — generated from the first prompt and shown on the turn card.
 - **One card per turn** — status and answer live in the same card, edited in place; the final answer is not a second message.
-- **11 commands** — `/new`, `/sessions`, `/rename`, `/resume`, `/adopt`, `/status`, `/stop`, `/doctor`, `/selfcheck`, `/persona`, `/help`.
+- **12 commands** — `/new`, `/sessions`, `/rename`, `/resume`, `/adopt`, `/status`, `/stop`, `/doctor`, `/selfcheck`, `/persona`, `/whoami`, `/help`.
 - **Persona** — `SOUL.md` is synced into the `AGENTS.md` block, automatically at startup.
 - **Observability** — two-stage self-check, `/doctor`, and in-chat degradation warnings.
 
@@ -90,6 +90,11 @@ onlyBuiltDependencies:
 | `images` | `true` | Accept image messages and attach them to the agent prompt |
 | `files` | `true` | Accept file messages (durable attachment or saved to cwd) |
 | `maxAttachmentBytes` | `20971520` | Per-attachment download limit (20 MiB) |
+| `sendMedia` | `true` | Send `MEDIA:/path` outputs from the agent back to Feishu |
+| `maxSendFileBytes` | `31457280` | Outbound file limit (30 MiB) |
+| `maxSendImageBytes` | `10485760` | Outbound image limit (10 MiB) |
+| `mediaRoots` | `[]` | Allowed roots for outbound paths (empty = session cwd) |
+| `admins` | `[]` | Admin open-id allowlist; empty disables access control |
 
 ## Commands
 
@@ -105,6 +110,7 @@ onlyBuiltDependencies:
 | `/doctor [--json]` | Health report: runtime / Feishu / persona / session / storage / versions |
 | `/selfcheck` | Re-run both self-check stages and print every item |
 | `/persona [show\|sync]` | Show or sync the SOUL persona block |
+| `/whoami` | Show your open_id, current chat/topic, and admin/guest role |
 | `/help` | Command table |
 
 ## Troubleshooting

package/README.zh.md

@@ -15,7 +15,7 @@
 - **一个 scope 一个会话** — 私聊、话题、普通群按发送者隔离。
 - **标题可见** — 由第一条 prompt 生成，显示在回合卡上。
 - **每回合一张卡** — 状态与答案在同一张卡里，原地编辑；终稿不再另发一条消息。
-- **11 条命令** — `/new`、`/sessions`、`/rename`、`/resume`、`/adopt`、`/status`、`/stop`、`/doctor`、`/selfcheck`、`/persona`、`/help`。
+- **12 条命令** — `/new`、`/sessions`、`/rename`、`/resume`、`/adopt`、`/status`、`/stop`、`/doctor`、`/selfcheck`、`/persona`、`/whoami`、`/help`。
 - **人格** — `SOUL.md` 同步到 `AGENTS.md` 的标记块，启动时自动执行。
 - **可观测性** — 两阶段自检、`/doctor`、对话内的降级提示。
 
@@ -89,6 +89,11 @@ onlyBuiltDependencies:
 | `images` | `true` | 接收图片消息并作为附件交给 agent |
 | `files` | `true` | 接收文件消息（附件服务或落到 cwd） |
 | `maxAttachmentBytes` | `20971520` | 单个附件下载上限（20 MiB） |
+| `sendMedia` | `true` | 把 agent 的 `MEDIA:/path` 产物发回飞书 |
+| `maxSendFileBytes` | `31457280` | 发送文件上限（30 MiB） |
+| `maxSendImageBytes` | `10485760` | 发送图片上限（10 MiB） |
+| `mediaRoots` | `[]` | 允许发送的目录（空=会话 cwd） |
+| `admins` | `[]` | 管理员 open_id 白名单；空=关闭访问控制 |
 
 ## 命令
 
@@ -104,6 +109,7 @@ onlyBuiltDependencies:
 | `/doctor [--json]` | 体检报告：运行时 / 飞书 / 人格 / 会话 / 存储 / 版本 |
 | `/selfcheck` | 立即重跑两阶段自检并输出逐项明细 |
 | `/persona [show\|sync]` | 查看或同步 SOUL 人格块 |
+| `/whoami` | 显示你的 open_id、当前会话与身份 |
 | `/help` | 命令表 |
 
 ## Troubleshooting（故障排查）

package/dist/bridge/bridge.js

@@ -17,15 +17,16 @@
  * @module dsh-caduceus/bridge/bridge
  */
 import { createUserMessage } from '@deepseek-ai/dsh-llm';
-import { mkdirSync, writeFileSync } from 'node:fs';
+import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { planSlashLine } from '../commands/dispatch.js';
-import { helpText } from '../commands/parse.js';
+import { helpText, parseCommand } from '../commands/parse.js';
 import { evaluateGate, logGate } from '../gate.js';
 import { silentLogger } from '../logger.js';
 import { formatScopeLine, sessionIdTimestamp, sessionTimeLabel, shortSessionId, } from '../observability.js';
 import { buildDoctorReport, renderDoctorJson, renderDoctorText, } from '../doctor.js';
 import { writeOwnership } from '../ownership.js';
+import { extractMediaMarkers, resolveMedia } from '../media.js';
 import { finalCard, finalCardPlainText, progressCard, } from '../render/cards.js';
 import { CardStream, systemClock } from '../render/stream.js';
 import { mintSessionId, scopeKey, SCOPE_KEY_SEPARATOR } from '../session-key.js';
@@ -180,8 +181,27 @@ export class Bridge {
         }
         if (!decision.accept)
             return;
+        if (!this.#isAdmin(message.senderOpenId) && !this.#isPublicCommand(message.text)) {
+            const state = this.#stateFor(message);
+            state.lastInboundMessageId = message.messageId;
+            state.ownerOpenId = message.senderOpenId;
+            this.#logger.info(`gate drop: not-admin sender=${message.senderOpenId.slice(0, 12) || '-'}`);
+            await this.#replyText(state, '访客无执行权限。');
+            return;
+        }
         await this.#queue.run(scopeKey(message.chatType, message.chatId, message.threadId, message.senderOpenId, this.#config.groupSessionsPerUser), () => this.#processInbound(message));
     }
+    #isAdmin(openId) {
+        const admins = this.#config.admins ?? [];
+        return admins.length === 0 || admins.includes(openId);
+    }
+    /** `/help` and `/whoami` are safe for any sender (no execution, no session). */
+    #isPublicCommand(text) {
+        const command = parseCommand(text);
+        return (command.kind === 'help' ||
+            command.kind === 'whoami' ||
+            (command.kind === 'usage' && (command.command === 'help' || command.command === 'whoami')));
+    }
     /** Feed one dsh session event into the render/status layer. */
     async handleSessionEvent(session, event) {
         const key = this.#scopeBySession.get(String(session.id));
@@ -409,6 +429,13 @@ export class Bridge {
                 await this.#replyText(state, result.text);
                 return;
             }
+            case 'whoami': {
+                const openId = state.ownerOpenId ?? '';
+                const identity = this.#isAdmin(openId) ? '管理员' : '访客';
+                const topic = state.threadId === undefined ? '' : `[话题 ${state.threadId}]`;
+                await this.#replyText(state, `你的 open_id：${openId}\n当前会话：${state.chatId}${topic}\n身份：${identity}`);
+                return;
+            }
             case 'help': {
                 await this.#replyText(state, helpText());
                 return;
@@ -583,9 +610,11 @@ export class Bridge {
         // but re-apply to guarantee /status never disagrees with the final card.
         state.status.apply(event);
         const snapshot = state.status.get();
-        const body = state.lastOutput.trim().length > 0
+        const rawBody = state.lastOutput.trim().length > 0
             ? state.lastOutput
             : `本轮已结束（${finalStateLabel}）。`;
+        const outbound = this.#planOutboundMedia(state, rawBody);
+        const body = outbound.body;
         const finalInput = this.#finalCardInput(state, snapshot, body, finalState, finalStateLabel);
         const stream = state.progress;
         const messageId = stream?.messageId;
@@ -611,6 +640,7 @@ export class Bridge {
                 await this.#finalFallback(state, finalInput, error);
             }
         }
+        await this.#sendOutboundMedia(state, outbound.entries);
         if (shouldNotifyTerminal(kind)) {
             const notice = terminalNotice(kind, snapshot.errorMessage);
             if (notice !== undefined)
@@ -619,6 +649,60 @@ export class Bridge {
         await this.#finishReactions(state, kind);
         state.lastOutput = '';
     }
+    /** Extract MEDIA markers, validate paths, and annotate the final card body. */
+    #planOutboundMedia(state, rawBody) {
+        if (this.#config.sendMedia === false)
+            return { body: rawBody, entries: [] };
+        const parsed = extractMediaMarkers(rawBody);
+        if (parsed.paths.length === 0)
+            return { body: parsed.text, entries: [] };
+        const cwd = this.#sessionMap.getCwd(state.key) ?? this.#config.defaultCwd;
+        const roots = this.#config.mediaRoots?.length ? this.#config.mediaRoots : [cwd];
+        const entries = [];
+        const notes = [];
+        for (const path of parsed.paths) {
+            const resolved = resolveMedia(path, {
+                roots,
+                maxFileBytes: this.#config.maxSendFileBytes ?? 30 * 1024 * 1024,
+                maxImageBytes: this.#config.maxSendImageBytes ?? 10 * 1024 * 1024,
+            });
+            if (!resolved.ok) {
+                notes.push(`📎 ${resolved.name}：未发送（${resolved.reason}）`);
+                continue;
+            }
+            entries.push({ path: resolved.path, name: resolved.name, image: resolved.image });
+            notes.push(`📎 ${resolved.name} × 1`);
+        }
+        const body = parsed.text.length === 0 ? notes.join('\n') : `${parsed.text}\n\n${notes.join('\n')}`;
+        return { body, entries };
+    }
+    /** Upload and reply each validated file individually; one failure never stops the rest. */
+    async #sendOutboundMedia(state, entries) {
+        if (entries.length === 0)
+            return;
+        const replyTo = state.lastInboundMessageId;
+        if (replyTo === undefined) {
+            this.#logger.warn('media send skipped: no inbound message to reply to');
+            return;
+        }
+        const threadOptions = state.threadId === undefined ? {} : { threadId: state.threadId };
+        for (const entry of entries) {
+            try {
+                const bytes = readFileSync(entry.path);
+                if (entry.image) {
+                    const imageKey = await this.#transport.uploadImage(bytes);
+                    await this.#transport.reply(state.chatId, replyTo, { kind: 'image', imageKey }, threadOptions);
+                }
+                else {
+                    const fileKey = await this.#transport.uploadFile(entry.name, bytes);
+                    await this.#transport.reply(state.chatId, replyTo, { kind: 'file', fileKey, fileName: entry.name }, threadOptions);
+                }
+            }
+            catch (error) {
+                this.#logger.warn(`media send failed for ${entry.name}: ${errorMessage(error)}`);
+            }
+        }
+    }
     #finalCardInput(state, snapshot, body, finalState, finalStateLabel) {
         const sessionTitle = this.#titleOf(state)?.trim() ?? state.title;
         return {
@@ -1371,8 +1455,10 @@ export class Bridge {
         });
     }
     async #sendNewCard(state, card) {
-        if (state.lastInboundMessageId !== undefined) {
-            return this.#transport.reply(state.chatId, state.lastInboundMessageId, { kind: 'card', card }, state.threadId === undefined ? {} : { threadId: state.threadId });
+        // A topic must receive a thread reply; a normal chat must get a plain card
+        // message (quoting the user's message creates a fake "topic" UI).
+        if (state.threadId !== undefined && state.lastInboundMessageId !== undefined) {
+            return this.#transport.reply(state.chatId, state.lastInboundMessageId, { kind: 'card', card }, { threadId: state.threadId });
         }
         return this.#transport.sendCard(state.chatId, card);
     }
@@ -1390,10 +1476,11 @@ export class Bridge {
         if (text.length === 0)
             return;
         try {
-            if (state.lastInboundMessageId !== undefined) {
+            if (state.threadId !== undefined && state.lastInboundMessageId !== undefined) {
                 await this.#transport.reply(state.chatId, state.lastInboundMessageId, { kind: 'text', text }, { threadId: state.threadId });
             }
             else {
+                // Normal chat: a fresh message, not a quoted "topic reply".
                 await this.#transport.sendText(state.chatId, text);
             }
         }

package/dist/bridge/types.d.ts

@@ -114,6 +114,14 @@ export interface BridgeConfig {
     readonly files?: boolean;
     /** Per-attachment byte cap (default 20 MiB). */
     readonly maxAttachmentBytes?: number;
+    /** Send MEDIA:/path outputs back to Feishu (default true). */
+    readonly sendMedia?: boolean;
+    readonly maxSendFileBytes?: number;
+    readonly maxSendImageBytes?: number;
+    /** Allowed roots for outbound MEDIA paths; empty = session cwd. */
+    readonly mediaRoots?: readonly string[];
+    /** Admin allowlist; empty disables access control (default). */
+    readonly admins?: readonly string[];
 }
 /** Everything the bridge needs; unit tests provide fakes for every seam. */
 export interface BridgeOptions {

package/dist/commands/parse.d.ts

@@ -1,5 +1,5 @@
 /** Commands dsh-caduceus owns. Keep in sync with README's command table. */
-export declare const COMMAND_NAMES: readonly ["new", "sessions", "rename", "resume", "adopt", "selfcheck", "doctor", "stop", "status", "persona", "help"];
+export declare const COMMAND_NAMES: readonly ["new", "sessions", "rename", "resume", "adopt", "selfcheck", "doctor", "stop", "status", "persona", "whoami", "help"];
 export type CommandName = (typeof COMMAND_NAMES)[number];
 export interface CommandSpec {
     readonly name: CommandName;
@@ -36,6 +36,8 @@ export type ParsedCommand = {
 } | {
     readonly kind: 'persona';
     readonly action: PersonaAction;
+} | {
+    readonly kind: 'whoami';
 } | {
     readonly kind: 'help';
 } | {

package/dist/commands/parse.js

@@ -11,7 +11,7 @@
  */
 import { stripLeadingMentions } from '../mentions.js';
 /** Commands dsh-caduceus owns. Keep in sync with README's command table. */
-export const COMMAND_NAMES = ['new', 'sessions', 'rename', 'resume', 'adopt', 'selfcheck', 'doctor', 'stop', 'status', 'persona', 'help'];
+export const COMMAND_NAMES = ['new', 'sessions', 'rename', 'resume', 'adopt', 'selfcheck', 'doctor', 'stop', 'status', 'persona', 'whoami', 'help'];
 /** Command metadata; `helpText()` and the README command table both derive from it. */
 export const COMMAND_SPECS = [
     { name: 'new', usage: '/new', description: '为当前聊天/话题新建会话，旧会话保留' },
@@ -24,6 +24,7 @@ export const COMMAND_SPECS = [
     { name: 'stop', usage: '/stop', description: '中断当前正在运行的一轮' },
     { name: 'status', usage: '/status', description: '显示本会话的运行状态、步数与起止时间' },
     { name: 'persona', usage: '/persona [show|sync]', description: '查看或同步 SOUL 人格块' },
+    { name: 'whoami', usage: '/whoami', description: '显示你的 open_id、当前会话与身份' },
     { name: 'help', usage: '/help', description: '显示命令表' },
 ];
 function usageResult(command, reason) {
@@ -63,6 +64,8 @@ export function parseCommand(raw) {
             return rest === '' ? { kind: 'stop' } : usageResult('stop', '/stop 不接受参数');
         case 'status':
             return rest === '' ? { kind: 'status' } : usageResult('status', '/status 不接受参数');
+        case 'whoami':
+            return rest === '' ? { kind: 'whoami' } : usageResult('whoami', '/whoami 不接受参数');
         case 'help':
             return { kind: 'help' };
         case 'rename':

package/dist/config.d.ts

@@ -41,6 +41,16 @@ export interface GatewayConfig {
     readonly files?: boolean;
     /** Per-attachment byte cap (default 20 MiB). */
     readonly maxAttachmentBytes?: number;
+    /** Send MEDIA:/path outputs back to Feishu (default true). */
+    readonly sendMedia?: boolean;
+    /** Outbound file size limit (default 30 MiB). */
+    readonly maxSendFileBytes?: number;
+    /** Outbound image size limit (default 10 MiB). */
+    readonly maxSendImageBytes?: number;
+    /** Allowed roots for MEDIA paths; empty = session cwd only. */
+    readonly mediaRoots?: readonly string[];
+    /** Admin open-id allowlist; empty disables access control (default). */
+    readonly admins?: readonly string[];
 }
 /** Schemastery schema for the `caduceus-gateway` entry. */
 export declare const Config: z<Schemastery.ObjectS<NoInfer<{
@@ -67,6 +77,11 @@ export declare const Config: z<Schemastery.ObjectS<NoInfer<{
     images: z<boolean, boolean, "plain">;
     files: z<boolean, boolean, "plain">;
     maxAttachmentBytes: z<number, number, "plain">;
+    sendMedia: z<boolean, boolean, "plain">;
+    maxSendFileBytes: z<number, number, "plain">;
+    maxSendImageBytes: z<number, number, "plain">;
+    mediaRoots: z<string[], string[], "plain">;
+    admins: z<string[], string[], "plain">;
 }>>, Schemastery.ObjectT<NoInfer<{
     appId: z<string, string, "plain">;
     appSecret: z<string, string, "plain">;
@@ -91,6 +106,11 @@ export declare const Config: z<Schemastery.ObjectS<NoInfer<{
     images: z<boolean, boolean, "plain">;
     files: z<boolean, boolean, "plain">;
     maxAttachmentBytes: z<number, number, "plain">;
+    sendMedia: z<boolean, boolean, "plain">;
+    maxSendFileBytes: z<number, number, "plain">;
+    maxSendImageBytes: z<number, number, "plain">;
+    mediaRoots: z<string[], string[], "plain">;
+    admins: z<string[], string[], "plain">;
 }>>, "plain">;
 /** Default card patch throttle: half of Feishu's 5 QPS budget. */
 export declare const DEFAULT_CARD_THROTTLE_MS = 400;
@@ -108,6 +128,10 @@ export declare const DEFAULT_AGENT_PRESET = "standard";
 export declare const DEFAULT_IMAGES = true;
 export declare const DEFAULT_FILES = true;
 export declare const DEFAULT_MAX_ATTACHMENT_BYTES: number;
+/** Default outbound media switches/limits. */
+export declare const DEFAULT_SEND_MEDIA = true;
+export declare const DEFAULT_MAX_SEND_FILE_BYTES: number;
+export declare const DEFAULT_MAX_SEND_IMAGE_BYTES: number;
 /** Default message reactions. */
 export declare const DEFAULT_REACTIONS = true;
 export declare const DEFAULT_REACTION_ON_START = "OnIt";
@@ -119,6 +143,11 @@ export declare const DEFAULT_APPROVAL_POLICY: ApprovalPolicy;
 export declare const DEFAULT_APPROVAL_CARD = true;
 export declare const DEFAULT_QUESTION_CARD = true;
 export declare const DEFAULT_INTERACTIVE_TIMEOUT_MS = 300000;
+/**
+ * Startup warning for access control (empty admin list = disabled).
+ * Exported so the log line stays testable without mounting the plugin.
+ */
+export declare function accessControlWarning(admins: readonly string[]): string | undefined;
 export interface ResolvedGatewayConfig {
     readonly credentials?: {
         readonly appId: string;

package/dist/config.js

@@ -35,6 +35,11 @@ export const Config = z.object({
     images: z.boolean().required(false),
     files: z.boolean().required(false),
     maxAttachmentBytes: z.natural().min(1).required(false),
+    sendMedia: z.boolean().required(false),
+    maxSendFileBytes: z.natural().min(1).required(false),
+    maxSendImageBytes: z.natural().min(1).required(false),
+    mediaRoots: z.array(z.string()).required(false),
+    admins: z.array(z.string()).required(false),
 });
 /** Default card patch throttle: half of Feishu's 5 QPS budget. */
 export const DEFAULT_CARD_THROTTLE_MS = 400;
@@ -52,6 +57,10 @@ export const DEFAULT_AGENT_PRESET = 'standard';
 export const DEFAULT_IMAGES = true;
 export const DEFAULT_FILES = true;
 export const DEFAULT_MAX_ATTACHMENT_BYTES = 20 * 1024 * 1024;
+/** Default outbound media switches/limits. */
+export const DEFAULT_SEND_MEDIA = true;
+export const DEFAULT_MAX_SEND_FILE_BYTES = 30 * 1024 * 1024;
+export const DEFAULT_MAX_SEND_IMAGE_BYTES = 10 * 1024 * 1024;
 /** Default message reactions. */
 export const DEFAULT_REACTIONS = true;
 export const DEFAULT_REACTION_ON_START = 'OnIt';
@@ -63,6 +72,13 @@ export const DEFAULT_APPROVAL_POLICY = 'ask';
 export const DEFAULT_APPROVAL_CARD = true;
 export const DEFAULT_QUESTION_CARD = true;
 export const DEFAULT_INTERACTIVE_TIMEOUT_MS = 300_000;
+/**
+ * Startup warning for access control (empty admin list = disabled).
+ * Exported so the log line stays testable without mounting the plugin.
+ */
+export function accessControlWarning(admins) {
+    return admins.length === 0 ? 'access control disabled (no admins configured)' : undefined;
+}
 function firstNonEmpty(...values) {
     for (const value of values) {
         if (value !== undefined && value.length > 0)
@@ -96,6 +112,11 @@ export function resolveGatewayConfig(config = {}, env = process.env, cwd = proce
         images: config.images ?? DEFAULT_IMAGES,
         files: config.files ?? DEFAULT_FILES,
         maxAttachmentBytes: config.maxAttachmentBytes ?? DEFAULT_MAX_ATTACHMENT_BYTES,
+        sendMedia: config.sendMedia ?? DEFAULT_SEND_MEDIA,
+        maxSendFileBytes: config.maxSendFileBytes ?? DEFAULT_MAX_SEND_FILE_BYTES,
+        maxSendImageBytes: config.maxSendImageBytes ?? DEFAULT_MAX_SEND_IMAGE_BYTES,
+        mediaRoots: config.mediaRoots ?? [],
+        admins: config.admins ?? [],
     };
     return {
         ...(appId === undefined || appSecret === undefined ? {} : { credentials: { appId, appSecret } }),

package/dist/doctor.d.ts

@@ -57,6 +57,11 @@ export interface DoctorInputs {
         readonly env?: HomeEnv;
     };
     readonly session: DoctorSessionInfo;
+    /** Access-control state (`admins` allowlist). */
+    readonly access?: {
+        readonly enabled: boolean;
+        readonly adminCount: number;
+    };
     readonly storage: {
         readonly mapVersion?: number;
         readonly mapWritable?: boolean;

package/dist/doctor.js

@@ -116,6 +116,14 @@ export async function buildDoctorReport(inputs) {
                 detail: `preset=${presetText}，工具 ${toolsText}，${relativeAge(lastTurnInput.at, now)}`,
             };
         });
+    const accessItem = inputs.access === undefined
+        ? undefined
+        : await safeItem('runtime', 'access', '访问控制', () => ({
+            mark: inputs.access?.enabled === true ? 'ok' : 'skip',
+            detail: inputs.access?.enabled === true
+                ? `开启（${inputs.access.adminCount} 人）`
+                : '关闭（未配置 admins）',
+        }));
     const titleService = await safeItem('runtime', 'session-title', '标题服务', () => {
         if (inputs.runtime.sessionTitleService === undefined)
             return { mark: 'skip', detail: '不可用' };
@@ -249,6 +257,7 @@ export async function buildDoctorReport(inputs) {
                 tools,
                 sessionTools,
                 ...(lastTurnItem === undefined ? [] : [lastTurnItem]),
+                ...(accessItem === undefined ? [] : [accessItem]),
                 titleService,
                 agentsService,
             ],

package/dist/index.js

@@ -16,7 +16,7 @@ import { dirname, join } from 'node:path';
 import { backfillSessionOwnership, scanSessionDirs } from './backfill.js';
 import { Bridge } from './bridge/bridge.js';
 import { runHarnessCommand } from './commands/harness.js';
-import { Config, resolveGatewayConfig } from './config.js';
+import { Config, accessControlWarning, resolveGatewayConfig, } from './config.js';
 import { FileLogger } from './file-logger.js';
 import { defaultLogPath } from './home.js';
 import { adaptLogger, teeLoggers } from './logger.js';
@@ -140,6 +140,9 @@ export function apply(ctx, config = {}) {
         busyMode: resolved.bridge.busyMode,
     }));
     logger.info(`agent preset=${resolved.agentPreset}`);
+    const accessWarning = accessControlWarning(resolved.bridge.admins ?? []);
+    if (accessWarning !== undefined)
+        logger.warn(accessWarning);
     const selfCheck = new SelfChecker({
         logger,
         getAgentPresets: () => ctx.get('agentPresets'),

package/dist/media.d.ts

@@ -0,0 +1,27 @@
+export interface MediaMarkerResult {
+    /** Answer text with every MEDIA marker line removed. */
+    readonly text: string;
+    /** Absolute paths in marker order. */
+    readonly paths: string[];
+}
+/** Strip one-line `MEDIA:/abs/path` markers; other lines stay untouched. */
+export declare function extractMediaMarkers(text: string): MediaMarkerResult;
+export declare function isImagePath(path: string): boolean;
+export interface MediaLimits {
+    readonly roots: readonly string[];
+    readonly maxFileBytes: number;
+    readonly maxImageBytes: number;
+}
+export type MediaResolution = {
+    readonly ok: true;
+    readonly path: string;
+    readonly name: string;
+    readonly bytes: number;
+    readonly image: boolean;
+} | {
+    readonly ok: false;
+    readonly name: string;
+    readonly reason: string;
+};
+/** Resolve and validate one marker path (absolute, inside roots, size limit). */
+export declare function resolveMedia(path: string, limits: MediaLimits): MediaResolution;

package/dist/media.js

@@ -0,0 +1,68 @@
+/**
+ * `MEDIA:<absolute path>` markers in the agent's final answer, plus the safety
+ * boundary for sending local files back to Feishu.
+ *
+ * @module dsh-caduceus/media
+ */
+import { realpathSync, statSync } from 'node:fs';
+import { basename, extname, isAbsolute, sep } from 'node:path';
+const MEDIA_LINE = /^\s*MEDIA:(\S.*?)\s*$/;
+/** Strip one-line `MEDIA:/abs/path` markers; other lines stay untouched. */
+export function extractMediaMarkers(text) {
+    const kept = [];
+    const paths = [];
+    for (const line of text.split('\n')) {
+        const match = MEDIA_LINE.exec(line);
+        if (match !== null) {
+            const path = match[1].trim();
+            if (path.length > 0)
+                paths.push(path);
+            continue;
+        }
+        kept.push(line);
+    }
+    return { text: kept.join('\n').trim(), paths };
+}
+const IMAGE_EXTENSIONS = new Set(['.png', '.jpg', '.jpeg', '.webp', '.gif']);
+export function isImagePath(path) {
+    return IMAGE_EXTENSIONS.has(extname(path).toLowerCase());
+}
+/** Resolve and validate one marker path (absolute, inside roots, size limit). */
+export function resolveMedia(path, limits) {
+    const name = basename(path) || path;
+    if (!isAbsolute(path))
+        return { ok: false, name, reason: '仅支持绝对路径' };
+    let real;
+    try {
+        real = realpathSync(path);
+    }
+    catch {
+        return { ok: false, name, reason: '文件不存在' };
+    }
+    const realRoots = [];
+    for (const root of limits.roots) {
+        try {
+            realRoots.push(realpathSync(root));
+        }
+        catch {
+            // A missing root simply cannot authorize anything.
+        }
+    }
+    const inside = realRoots.some((root) => real === root || real.startsWith(root.endsWith(sep) ? root : `${root}${sep}`));
+    if (!inside)
+        return { ok: false, name, reason: '路径不在允许目录内' };
+    let stat;
+    try {
+        stat = statSync(real);
+    }
+    catch {
+        return { ok: false, name, reason: '文件不存在' };
+    }
+    if (!stat.isFile())
+        return { ok: false, name, reason: '不是普通文件' };
+    const image = isImagePath(real);
+    const max = image ? limits.maxImageBytes : limits.maxFileBytes;
+    if (stat.size > max)
+        return { ok: false, name, reason: '超过大小限制' };
+    return { ok: true, path: real, name, bytes: stat.size, image };
+}

package/dist/transport/feishu-api.d.ts

@@ -10,14 +10,14 @@
 import type { CardAction, FeishuCard, InboundMessage } from './types.js';
 export interface CreateMessageInput {
     readonly chatId: string;
-    readonly msgType: 'text' | 'interactive';
+    readonly msgType: 'text' | 'interactive' | 'file' | 'image';
     /** Serialized `msg_type` content (JSON string). */
     readonly content: string;
     readonly uuid?: string;
 }
 export interface ReplyMessageInput {
     readonly messageId: string;
-    readonly msgType: 'text' | 'interactive';
+    readonly msgType: 'text' | 'interactive' | 'file' | 'image';
     readonly content: string;
     /** Post the reply inside the message's topic (`reply_in_thread`). */
     readonly replyInThread: boolean;
@@ -34,6 +34,10 @@ export interface FeishuApi {
     addReaction(messageId: string, emojiType: string): Promise<string>;
     /** Remove one reaction previously added by this bot. */
     removeReaction(messageId: string, reactionId: string): Promise<void>;
+    /** Upload one file and return its Feishu file_key. */
+    uploadFile(fileName: string, bytes: Uint8Array): Promise<string>;
+    /** Upload one image message and return its Feishu image_key. */
+    uploadImage(bytes: Uint8Array): Promise<string>;
     /** Download a message resource (image/file), enforcing a byte limit. */
     downloadResource(messageId: string, fileKey: string, type: 'image' | 'file', maxBytes: number): Promise<{
         readonly bytes: Uint8Array;

package/dist/transport/lark.d.ts

@@ -42,6 +42,8 @@ export declare class LarkFeishuApi implements FeishuApi {
     }>;
     addReaction(messageId: string, emojiType: string): Promise<string>;
     removeReaction(messageId: string, reactionId: string): Promise<void>;
+    uploadFile(fileName: string, bytes: Uint8Array): Promise<string>;
+    uploadImage(bytes: Uint8Array): Promise<string>;
     downloadResource(messageId: string, fileKey: string, type: 'image' | 'file', maxBytes: number): Promise<{
         readonly bytes: Uint8Array;
         readonly contentType?: string;

package/dist/transport/lark.js

@@ -166,6 +166,35 @@ export class LarkFeishuApi {
         }));
         this.assertOk(response, 'im.v1.message.reaction.delete');
     }
+    async uploadFile(fileName, bytes) {
+        const response = (await this.client.im.v1.file.create({
+            data: {
+                file_type: 'stream',
+                file_name: fileName,
+                file: Buffer.from(bytes),
+            },
+        }));
+        this.assertOk(response, 'im.v1.file.create');
+        const fileKey = response.data?.file_key;
+        if (fileKey === undefined || fileKey.length === 0) {
+            throw new FeishuApiError('feishu im.v1.file.create returned no file_key', -1);
+        }
+        return fileKey;
+    }
+    async uploadImage(bytes) {
+        const response = (await this.client.im.v1.image.create({
+            data: {
+                image_type: 'message',
+                image: Buffer.from(bytes),
+            },
+        }));
+        this.assertOk(response, 'im.v1.image.create');
+        const imageKey = response.data?.image_key;
+        if (imageKey === undefined || imageKey.length === 0) {
+            throw new FeishuApiError('feishu im.v1.image.create returned no image_key', -1);
+        }
+        return imageKey;
+    }
     async downloadResource(messageId, fileKey, type, maxBytes) {
         const response = await this.client.im.v1.messageResource.get({
             params: { type },

package/dist/transport/normalize.js

@@ -88,7 +88,9 @@ export function normalizeMessageEvent(raw, botOpenId) {
     if (senderType !== 'user')
         return undefined;
     const message = raw.message;
-    const threadId = firstNonEmpty(message.thread_id, message.root_id);
+    // Only a real thread_id makes a topic. In p2p, root_id can equal the
+    // message id; treating it as threadId produced bogus "topic replies".
+    const threadId = firstNonEmpty(message.thread_id);
     const rootId = firstNonEmpty(message.root_id);
     const mentions = (message.mentions ?? [])
         .map((mention) => mention.id?.open_id)

package/dist/transport/reliable.d.ts

@@ -34,6 +34,8 @@ export declare class ReliableTransport implements Transport {
     sendCard(chatId: string, card: FeishuCard, options?: SendOptions): Promise<SentMessage>;
     addReaction(messageId: string, emojiType: string): Promise<string>;
     removeReaction(messageId: string, reactionId: string): Promise<void>;
+    uploadFile(fileName: string, bytes: Uint8Array): Promise<string>;
+    uploadImage(bytes: Uint8Array): Promise<string>;
     downloadResource(messageId: string, fileKey: string, type: 'image' | 'file', maxBytes: number): Promise<{
         readonly bytes: Uint8Array;
         readonly contentType?: string;

package/dist/transport/reliable.js

@@ -106,6 +106,12 @@ export class ReliableTransport {
     removeReaction(messageId, reactionId) {
         return this.api.removeReaction(messageId, reactionId);
     }
+    uploadFile(fileName, bytes) {
+        return this.api.uploadFile(fileName, bytes);
+    }
+    uploadImage(bytes) {
+        return this.api.uploadImage(bytes);
+    }
     downloadResource(messageId, fileKey, type, maxBytes) {
         return this.api.downloadResource(messageId, fileKey, type, maxBytes);
     }
@@ -115,8 +121,18 @@ export class ReliableTransport {
     }
     async reply(chatId, messageId, payload, options = {}) {
         const uuid = options.uuid ?? this.uuidFactory();
-        const msgType = payload.kind === 'text' ? 'text' : 'interactive';
-        const content = payload.kind === 'text' ? textPayload(payload.text) : cardPayload(payload.card);
+        const msgType = payload.kind === 'text'
+            ? 'text'
+            : payload.kind === 'card'
+                ? 'interactive'
+                : payload.kind;
+        const content = payload.kind === 'text'
+            ? textPayload(payload.text)
+            : payload.kind === 'card'
+                ? cardPayload(payload.card)
+                : payload.kind === 'file'
+                    ? JSON.stringify({ file_key: payload.fileKey })
+                    : JSON.stringify({ image_key: payload.imageKey });
         const replyInThread = options.threadId !== undefined && options.threadId.length > 0;
         const kind = payload.kind === 'card' ? '卡片' : '消息';
         try {

package/dist/transport/types.d.ts

@@ -109,6 +109,13 @@ export type ReplyPayload = {
 } | {
     readonly kind: 'card';
     readonly card: FeishuCard;
+} | {
+    readonly kind: 'file';
+    readonly fileKey: string;
+    readonly fileName: string;
+} | {
+    readonly kind: 'image';
+    readonly imageKey: string;
 };
 export interface SendOptions {
     /** Idempotency key; the same key may succeed only once per hour on Feishu. */
@@ -134,6 +141,10 @@ export interface Transport {
     addReaction(messageId: string, emojiType: string): Promise<string>;
     /** Remove one reaction previously added by this bot. */
     removeReaction(messageId: string, reactionId: string): Promise<void>;
+    /** Upload one file and return its Feishu file_key. */
+    uploadFile(fileName: string, bytes: Uint8Array): Promise<string>;
+    /** Upload one image message and return its Feishu image_key. */
+    uploadImage(bytes: Uint8Array): Promise<string>;
     /** Download a message resource (image/file), enforcing a byte limit. */
     downloadResource(messageId: string, fileKey: string, type: 'image' | 'file', maxBytes: number): Promise<{
         readonly bytes: Uint8Array;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-caduceus",
-  "version": "0.5.1",
+  "version": "0.7.1",
   "description": "Feishu/Lark surface plugin for DeepSeek Harness (dsh): one topic per session, SOUL persona sync, streaming process cards, /status and /doctor.",
   "type": "module",
   "main": "./dist/index.js",