dsh-device-fleet 0.1.0-dev.17 → 0.1.0-dev.19

package/README.md

@@ -11,7 +11,7 @@ DeepSeek Harness 的设备联邦插件：把登录同一账号、且都安装本
 - ✅ **Room 逻辑层（dev.8，单机模拟）**：`room_create` / `room_add_local` / `room_send` / `room_messages` / `room_status` / `room_task_*` / `room_close`；本地真实 agent 参与者、寻址唤醒、Room Board 串行交接；单机仿真验证通过
 - ✅ **审批面板 UI（dev.12，已验证）**：Host `/device-fleet/approvals` HTTP 数据面 + Client 入口在 Settings 上方、居中审批对话框（允许一次/15 分钟/拒绝）；用户点击「允许」后 Host 列表清空，端到端闭环
 - ✅ **Fleet 控制台（dev.13，Phase A）**：Host `/device-fleet/overview`、`/rooms`、`/rooms/:id`；Room 持久化到 `$DSH_HOME/device-fleet/rooms.json` 并 rehydrate（插件重载不丢房间）；Client `sidebar.panellist` + `main` 面板，设备/房间/审批三 Tab
-- ⏳ Phase B 配置页（即时生效，无需重启）、Phase C 房间/配对交互、Phase D SSE/通知/i18n/a11y
+- ✅ Phase B 配置页（即时生效，无需重启）、Phase C 房间/配对/审批交互（dev.18）\n- ⏳ Phase D SSE/通知/i18n/a11y
 
 ## 安装（开发版）
 

package/client.js

@@ -247,6 +247,17 @@ window.__ModuleLoader__.load({
       }
     };
 
+    const postJson = async (url, body) => {
+      const response = await fetch(url, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json', accept: 'application/json' },
+        body: JSON.stringify(body ?? {}),
+      });
+      const data = await response.json().catch(() => ({}));
+      if (!response.ok) throw new Error(data.error ?? 'HTTP ' + response.status);
+      return data;
+    };
+
     function FleetIcon({ size = 20, active = false }) {
       return h(
         'svg',
@@ -275,6 +286,14 @@ window.__ModuleLoader__.load({
       const [roomDetail, setRoomDetail] = useState(null);
       const [roomError, setRoomError] = useState('');
       const [error, setError] = useState('');
+      const [actionStatus, setActionStatus] = useState('');
+      const [inviteCode, setInviteCode] = useState('');
+      const [connectHost, setConnectHost] = useState('192.168.137.1');
+      const [connectPort, setConnectPort] = useState(0);
+      const [sendText, setSendText] = useState('');
+      const [sendTo, setSendTo] = useState([]);
+      const [taskTitle, setTaskTitle] = useState('');
+      const [taskOwner, setTaskOwner] = useState('');
 
       useEffect(() => {
         let disposed = false;
@@ -339,6 +358,54 @@ window.__ModuleLoader__.load({
         setOverview((current) => (current ? { ...current, approvals: (current.approvals ?? []).filter((item) => item.id !== id) } : current));
       };
 
+      const runAction = async (label, action) => {
+        setActionStatus(label + '…');
+        try {
+          await action();
+          setActionStatus(label + '成功');
+        } catch (problem) {
+          setActionStatus(label + '失败：' + String(problem.message ?? problem));
+        }
+      };
+      const sendRoomMessage = () =>
+        runAction('发送消息', async () => {
+          if (!selectedRoom) throw new Error('请先选择房间');
+          if (sendText.trim() === '') throw new Error('消息不能为空');
+          await postJson('/device-fleet/room/send', { roomId: selectedRoom, to: sendTo, text: sendText });
+          setSendText('');
+        });
+      const addRoomTask = () =>
+        runAction('添加任务', async () => {
+          if (!selectedRoom) throw new Error('请先选择房间');
+          if (taskTitle.trim() === '') throw new Error('任务标题不能为空');
+          await postJson('/device-fleet/room/task', { roomId: selectedRoom, action: 'add', title: taskTitle, owner: taskOwner });
+          setTaskTitle('');
+        });
+      const updateRoomTask = (id, status) =>
+        runAction('更新任务', async () => {
+          await postJson('/device-fleet/room/task', { roomId: selectedRoom, action: 'update', id, status });
+        });
+      const closeCurrentRoom = () =>
+        runAction('关闭房间', async () => {
+          await postJson('/device-fleet/room/close', { roomId: selectedRoom });
+          setSelectedRoom(null);
+        });
+      const removeRoomMember = (memberId) =>
+        runAction('移除成员', async () => {
+          await postJson('/device-fleet/room/member/remove', { roomId: selectedRoom, memberId });
+        });
+      const createInviteCode = () =>
+        runAction('生成邀请码', async () => {
+          const data = await postJson('/device-fleet/pair/invite');
+          setInviteCode(data.code ?? '');
+        });
+      const connectPeer = () =>
+        runAction('连接设备', async () => {
+          const port = Number(connectPort) || overview?.direct?.port || 0;
+          const data = await postJson('/device-fleet/pair/connect', { host: connectHost, port });
+          setActionStatus('已连接 ' + String(data.result?.deviceId ?? ''));
+        });
+
       const tabs = [
         ['devices', '设备'],
         ['rooms', '房间'],
@@ -349,6 +416,7 @@ window.__ModuleLoader__.load({
         { style: { display: 'flex', alignItems: 'center', gap: 12, flexWrap: 'wrap', marginBottom: 12 } },
         h('strong', { style: { fontSize: 15 } }, '设备联邦'),
         overview ? pill('本机 ' + (overview.name ?? '') + ' · ' + overview.pluginVersion, 'muted') : null,
+        actionStatus ? h('span', { style: { fontSize: 12, opacity: 0.7 } }, actionStatus) : null,
         h('span', { style: { flex: 1 } }),
         ...tabs.map(([id, label]) =>
           h(
@@ -409,6 +477,45 @@ window.__ModuleLoader__.load({
                 ),
               )
             : null,
+          h('div', { style: cardStyle },
+            h('div', { style: sectionTitle }, '配对与连接'),
+            h('div', { style: { display: 'flex', gap: 8, alignItems: 'center', flexWrap: 'wrap' } },
+              smallButton('生成邀请码', () => void createInviteCode(), 'allow'),
+              inviteCode
+                ? h('button', {
+                    type: 'button',
+                    onClick: () => {
+                      try {
+                        void navigator.clipboard?.writeText(inviteCode)
+                      } catch {
+                        /* ignore */
+                      }
+                    },
+                    style: { background: 'transparent', border: 'none', color: 'var(--dsw-alias-accent, #2f6fed)', cursor: 'pointer', fontSize: 12 },
+                  }, '复制')
+                : null,
+            ),
+            inviteCode
+              ? h('pre', { style: { fontSize: 11, fontFamily: 'ui-monospace, monospace', whiteSpace: 'pre-wrap', wordBreak: 'break-all', background: 'var(--dsw-alias-bg-layer-2, #262626)', padding: 8, borderRadius: 6, maxHeight: 140, overflow: 'auto' } }, inviteCode)
+              : null,
+            h('div', { style: { display: 'flex', gap: 8, alignItems: 'center', marginTop: 10, flexWrap: 'wrap' } },
+              h('input', {
+                type: 'text',
+                value: connectHost,
+                onChange: (event) => setConnectHost(event.target.value),
+                placeholder: 'host',
+                style: { ...controlStyleWidth(180) },
+              }),
+              h('input', {
+                type: 'number',
+                value: connectPort || overview?.direct?.port || 0,
+                onChange: (event) => setConnectPort(Number(event.target.value || 0)),
+                placeholder: 'port',
+                style: { ...controlStyleWidth(110) },
+              }),
+              smallButton('连接', () => void connectPeer(), 'normal'),
+            ),
+          ),
         );
       } else if (tab === 'rooms') {
         body = h(
@@ -441,58 +548,150 @@ window.__ModuleLoader__.load({
                   ),
                 ),
           ),
-          h('div', { style: { flex: '2 1 420px', minWidth: 320 } }, selectedRoom ? (roomError && !roomDetail ? h('div', { style: { opacity: 0.7, fontSize: 12 } }, '房间加载失败：' + roomError) : renderRoomDetail(roomDetail)) : h('div', { style: { opacity: 0.65, fontSize: 12 } }, '选择一个房间查看成员、时间线与看板。')),
+          h('div', { style: { flex: '2 1 420px', minWidth: 320 } }, selectedRoom ? (roomError && !roomDetail ? h('div', { style: { opacity: 0.7, fontSize: 12 } }, '房间加载失败：' + roomError) : renderRoomDetail(roomDetail, {
+            sendText,
+            setSendText,
+            sendTo,
+            setSendTo,
+            sendRoomMessage,
+            taskTitle,
+            setTaskTitle,
+            taskOwner,
+            setTaskOwner,
+            addRoomTask,
+            updateRoomTask,
+            closeCurrentRoom,
+            removeRoomMember,
+          })) : h('div', { style: { opacity: 0.65, fontSize: 12 } }, '选择一个房间查看成员、时间线与看板。')),
         );
       } else {
         const approvals = overview.approvals ?? [];
+        const history = overview.approvalHistory ?? [];
         body = h(
           'div',
-          { style: cardStyle },
-          h('div', { style: sectionTitle }, '待审批请求（' + approvals.length + '）'),
-          approvals.length === 0
-            ? h('div', { style: { opacity: 0.7, fontSize: 12 } }, '暂无待审批请求')
-            : approvals.map((item) =>
-                h('div', { key: item.id, style: { borderTop: '1px solid var(--dsw-alias-border, #333)', padding: '9px 0' } },
-                  h('div', { style: { fontWeight: 600 } }, (item.capability || 'tool') + (item.tool ? ' / ' + item.tool : '')),
-                  h('div', { style: { opacity: 0.75, fontSize: 12 } }, '来自 ' + item.fromDeviceId + ' · ' + Math.max(0, Math.round(item.expiresInMs / 1000)) + 's 后超时'),
-                  item.reason ? h('div', { style: { opacity: 0.7, fontSize: 12 } }, item.reason) : null,
-                  h('div', { style: { display: 'flex', gap: 6, marginTop: 5, flexWrap: 'wrap' } },
-                    smallButton('允许一次', () => decide(item.id, 'approve'), 'allow'),
-                    smallButton('允许 15 分钟', () => decide(item.id, 'approve', 'ttl'), 'allow'),
-                    smallButton('拒绝', () => decide(item.id, 'deny'), 'deny'),
+          null,
+          h('div', { style: cardStyle },
+            h('div', { style: sectionTitle }, '待审批请求（' + approvals.length + '）'),
+            approvals.length === 0
+              ? h('div', { style: { opacity: 0.7, fontSize: 12 } }, '暂无待审批请求')
+              : approvals.map((item) =>
+                  h('div', { key: item.id, style: { borderTop: '1px solid var(--dsw-alias-border, #333)', padding: '9px 0' } },
+                    h('div', { style: { fontWeight: 600 } }, (item.capability || 'tool') + (item.tool ? ' / ' + item.tool : '')),
+                    h('div', { style: { opacity: 0.75, fontSize: 12 } }, '来自 ' + item.fromDeviceId + ' · ' + Math.max(0, Math.round(item.expiresInMs / 1000)) + 's 后超时'),
+                    item.reason ? h('div', { style: { opacity: 0.7, fontSize: 12 } }, item.reason) : null,
+                    h('div', { style: { display: 'flex', gap: 6, marginTop: 5, flexWrap: 'wrap' } },
+                      smallButton('允许一次', () => decide(item.id, 'approve'), 'allow'),
+                      smallButton('允许 15 分钟', () => decide(item.id, 'approve', 'ttl'), 'allow'),
+                      smallButton('拒绝', () => decide(item.id, 'deny'), 'deny'),
+                    ),
                   ),
                 ),
-              ),
+          ),
+          h('div', { style: cardStyle },
+            h('div', { style: sectionTitle }, '审批历史（最近 ' + history.length + ' 条）'),
+            history.length === 0
+              ? h('div', { style: { opacity: 0.7, fontSize: 12 } }, '暂无历史')
+              : history.slice(0, 20).map((item) =>
+                  h('div', { key: item.id, style: { display: 'flex', gap: 8, alignItems: 'center', padding: '4px 0', fontSize: 12, borderTop: '1px solid var(--dsw-alias-border, #333)' } },
+                    pill(item.outcome, item.outcome === 'approved' ? 'ok' : 'muted'),
+                    h('span', { style: { flex: 1 } }, (item.capability || 'tool') + (item.tool ? ' / ' + item.tool : '') + ' · ' + item.fromDeviceId),
+                    h('span', { style: { opacity: 0.55 } }, fmtTime(item.resolvedAt)),
+                  ),
+                ),
+          ),
         );
       }
 
       return h('div', { style: { padding: '14px 16px', height: '100%', overflow: 'auto', boxSizing: 'border-box' } }, header, body);
     }
 
-    function renderRoomDetail(detail) {
+    function renderRoomDetail(detail, ctl) {
       if (!detail) return h('div', { style: { opacity: 0.65, fontSize: 12 } }, '加载房间…');
+      const memberIds = detail.members.map((member) => member.memberId);
+      const recipientIds = Array.isArray(ctl.sendTo) && ctl.sendTo.length > 0 ? ctl.sendTo : memberIds.filter((id) => id.startsWith('host:'));
       return h(
         'div',
         null,
+        h('div', { style: { display: 'flex', alignItems: 'center', gap: 8, marginBottom: 8 } },
+          h('div', { style: { ...sectionTitle, margin: 0, flex: 1 } }, '房间 ' + detail.roomId.slice(-8)),
+          smallButton('关闭房间', () => void ctl.closeCurrentRoom(), 'deny'),
+        ),
         h('div', { style: cardStyle },
           h('div', { style: sectionTitle }, '成员'),
           ...detail.members.map((member) =>
-            h('div', { key: member.memberId, style: { padding: '3px 0', fontSize: 12 } },
+            h('div', { key: member.memberId, style: { display: 'flex', alignItems: 'center', gap: 8, padding: '3px 0', fontSize: 12 } },
               pill(member.role, member.role === 'host' ? 'ok' : 'muted'),
-              member.name + ' · ' + member.memberId,
+              h('span', { style: { flex: 1 } }, member.name + ' · ' + member.memberId),
+              member.role === 'host' ? null : smallButton('移除', () => void ctl.removeRoomMember(member.memberId), 'deny'),
+            ),
+          ),
+        ),
+        h('div', { style: cardStyle },
+          h('div', { style: sectionTitle }, '发消息（以用户身份）'),
+          h('div', { style: { display: 'flex', flexWrap: 'wrap', gap: '4px 14px', marginBottom: 6 } },
+            ...detail.members.map((member) =>
+              h('label', { key: member.memberId, style: { display: 'flex', alignItems: 'center', gap: 5, fontSize: 12 } },
+                h('input', {
+                  type: 'checkbox',
+                  checked: recipientIds.includes(member.memberId),
+                  onChange: (event) => {
+                    ctl.setSendTo((current) => {
+                      const base = current.length > 0 ? current : recipientIds
+                      return event.target.checked ? [...new Set([...base, member.memberId])] : base.filter((id) => id !== member.memberId)
+                    })
+                  },
+                }),
+                member.name,
+              ),
             ),
           ),
+          h('textarea', {
+            value: ctl.sendText,
+            onChange: (event) => ctl.setSendText(event.target.value),
+            rows: 2,
+            placeholder: '发送给房间成员（默认为 host）',
+            style: { width: '100%', boxSizing: 'border-box', padding: '6px 8px', borderRadius: 6, border: '1px solid var(--dsw-alias-border-l1, #333)', background: 'var(--dsw-alias-bg-layer-2, #262626)', color: 'inherit', fontSize: 12, resize: 'vertical', fontFamily: 'inherit' },
+          }),
+          h('div', { style: { display: 'flex', gap: 8, alignItems: 'center', marginTop: 6 } },
+            h('span', { style: { flex: 1 } }),
+            smallButton('发送', () => void ctl.sendRoomMessage(), 'allow'),
+          ),
         ),
         h('div', { style: cardStyle },
           h('div', { style: sectionTitle }, '看板（' + detail.tasks.length + '）'),
           detail.tasks.length === 0
             ? h('div', { style: { opacity: 0.7, fontSize: 12 } }, '暂无任务')
             : detail.tasks.map((task) =>
-                h('div', { key: task.id, style: { padding: '4px 0', fontSize: 12 } },
+                h('div', { key: task.id, style: { display: 'flex', alignItems: 'center', gap: 8, padding: '4px 0', fontSize: 12 } },
                   pill(task.status, task.status === 'done' ? 'ok' : 'muted'),
-                  task.title + ' · owner ' + task.owner + (task.dependsOn.length ? ' · deps ' + task.dependsOn.length : ''),
+                  h('span', { style: { flex: 1 } }, task.title + ' · owner ' + task.owner + (task.dependsOn.length ? ' · deps ' + task.dependsOn.length : '')),
+                  h('select', {
+                    value: task.status,
+                    onChange: (event) => void ctl.updateRoomTask(task.id, event.target.value),
+                    style: { height: 24, borderRadius: 5, border: '1px solid var(--dsw-alias-border-l1, #333)', background: 'var(--dsw-alias-bg-layer-2, #262626)', color: 'inherit', fontSize: 11 },
+                  },
+                    ...['pending', 'running', 'done', 'blocked'].map((status) => h('option', { key: status, value: status }, status)),
+                  ),
                 ),
               ),
+          h('div', { style: { display: 'flex', gap: 6, alignItems: 'center', marginTop: 8, flexWrap: 'wrap' } },
+            h('input', {
+              type: 'text',
+              value: ctl.taskTitle,
+              onChange: (event) => ctl.setTaskTitle(event.target.value),
+              placeholder: '新任务标题',
+              style: { ...controlStyleWidth(180), height: 26, fontSize: 12 },
+            }),
+            h('select', {
+              value: ctl.taskOwner,
+              onChange: (event) => ctl.setTaskOwner(event.target.value),
+              style: { ...controlStyleWidth(180), height: 26, fontSize: 12 },
+            },
+              h('option', { value: '' }, '选择 owner'),
+              ...detail.members.map((member) => h('option', { key: member.memberId, value: member.memberId }, member.name)),
+            ),
+            smallButton('添加任务', () => void ctl.addRoomTask(), 'allow'),
+          ),
         ),
         h('div', { style: cardStyle },
           h('div', { style: sectionTitle }, '时间线'),
@@ -531,6 +730,7 @@ window.__ModuleLoader__.load({
       fontSize: 13,
       outline: 'none',
     }
+    const controlStyleWidth = (width) => ({ ...controlStyle, width })
     const selectStyle = {
       ...controlStyle,
       appearance: 'none',

package/docs/notes/dev-release.md

@@ -39,19 +39,19 @@ dsh plugin --profile desktop add dsh-device-fleet@dev
 - 邀请里新增 `endpoints`（创建者的局域网/热点 IPv4 + direct 端口），加入方重启后自动向这些地址回连，绕开组播发现失败；
 - 新增 `fleet_status`（deviceId/直连端口/发现/连接/roster/hints）与 `fleet_connect(host, port)`（手动直连，成功后会从握手学到对端 deviceId）；
 - `fleet_list` 仍是本地视图；配对成功后双方 roster 会自动固定对端公钥。
-## 0.1.0-dev.16（稳定化）
+## 0.1.0-dev.18（稳定化）
 
 - 直连端口可固定（profile `direct.port`），插件重载不再换端口；
 - 连接断开后自动重试已知地址（不再只在启动时试一次）；
 - `fleet_connect` 手动地址会持久化到 `peer-hints.json`，重启后继续回连；
 - 新增 `fleet_delegate`（dev.5）：目标设备用 `SubagentProvider` + `delivery:'caller'` 跑 agent 并返回最终结果。
-## 0.1.0-dev.16（审批收件箱，逻辑层）
+## 0.1.0-dev.18（审批收件箱，逻辑层）
 
 - 新增 `ApprovalInbox`：ask 档请求排队、超时 fail-closed、approve（once/ttl）/deny、关闭时全部失败关闭；
 - 直调与委派的 ask 档改为等待本机收件箱结果（不再一律拒绝）；
 - 新工具：`fleet_approvals` / `fleet_approve` / `fleet_deny`；`fleet_simulate_request`（仅 `approvals.simulation: true`）用于本机无第二台设备时演练流程；
 - 审批面板（Client UI）与通知尚未实现，当前通过工具/后续 UI 应答。
-## 0.1.0-dev.16（Room 逻辑层，本机模拟）
+## 0.1.0-dev.18（Room 逻辑层，本机模拟）
 
 - `RoomService`：当前会话升级为 Room Host；本地模拟参与者（真实 DSH session/agent）；
 - 寻址消息：`room_send` 只唤醒被点名成员，Host 会话写权威 `room/message` 事件；
@@ -59,35 +59,48 @@ dsh plugin --profile desktop add dsh-device-fleet@dev
 - Room Board：`room_task_add/update/list`，`dependsOn` 串行交接（前置完成时唤醒下一个 owner），无依赖任务并行不受影响；
 - 工具：`room_create / room_add_local / room_remove_member / room_send / room_messages / room_status / room_task_* / room_close`；
 - 远程参与者传输与 Client UI 未做（下一步）。
-## 0.1.0-dev.16（审批面板 UI，第一版）
+## 0.1.0-dev.18（审批面板 UI，第一版）
 
 - Host 新增本地 HTTP 数据面：GET `/device-fleet/approvals`、POST `/device-fleet/approvals/decide`（仅本机 web 载体，决策仍走 ApprovalInbox）；
 - Client half：`client.js` 闭包工厂，注册 `shell.overlay` 浮动「Fleet 审批」按钮 + 面板，轮询待审批列表，支持允许一次 / 允许 15 分钟 / 拒绝；
 - package.json 增加 `dsh.client` 与 `./client` 导出；`files` 增加 client.js；
 - Client 视觉验证需要刷新页面；当前无浏览器控制，仅验证了 bundle 语法与 Host 路由注册。
-## 0.1.0-dev.16（审批入口不遮挡）
+## 0.1.0-dev.18（审批入口不遮挡）
 
 - 触发按钮从右下角浮动改为 `sidebar.footer.action`（设置旁边），不再遮挡任务列表/内容面板；
 - 审批 inbox 改为点击后居中的模态对话框（带遮罩，Esc/点遮罩关闭）；
 - 轮询在 Client apply 中启动并由 ctx.effect 清理；待审批数量作为按钮徽标；
 - 已实测：面板点击「允许」后 Host `fleet_approvals` 清空。
-## 0.1.0-dev.16（Phase B：运行时配置 + 配置页）
+## 0.1.0-dev.18（Phase B：运行时配置 + 配置页）
 
 - `RuntimeConfig`：profile patch 为 base，UI 修改写入 `$DSH_HOME/device-fleet/config-overrides.json`，apply 时合并并持久化；
 - 保存即生效：policy/execution/approvals/deviceName/promptSection/autoApproveAsk 直接更新运行时对象；direct/discovery/relay 通过 `FleetNode.reconfigure()` 原地重启网络监听（不重启插件/DSH）；`dataDir` 只读；
 - Host：`GET /device-fleet/config`、`POST /device-fleet/config`（校验/清洗后应用）；
 - Client：注册 `plugins.row.config`（key `dsh-device-fleet#device-fleet`）与 `plugins.bundle.config`（key `dsh-device-fleet`），配置页含设备/网络、执行上下文、Tool Policy、审批与提示四组表单；
 - 单测 18/18、网络 9/9。
-## 0.1.0-dev.16（配置页 DSH 化改版）
+## 0.1.0-dev.18（配置页 DSH 化改版）
 
 - Host 新增 `GET /device-fleet/options`：本机地址、可用 preset 列表、shell 工具、subagent providers、工作目录候选；
 - 配置保存前会 ensure 工作目录存在（Device Fleet 工作区自动创建）；
 - 配置页重做：行式布局（label 左/控件右）、DSH token 配色、分组标题、去掉多余说明文字与 dataDir 展示；
 - 下拉化：直连地址、局域网发现、Relay 模式、工作目录（工作区/默认/DSH 主目录/自定义）、Agent Preset、Shell、委派 Provider、7 项能力权限、开关项；
 - 仍保留文本输入：设备名称、端口、超时、根目录/工具列表、自定义工作目录与 Relay 地址。
-## 0.1.0-dev.16（房间详情与配置页修复）
+## 0.1.0-dev.18（房间详情与配置页修复）
 
 - 房间详情接口从 prefix 路由改为精确路由 `GET /device-fleet/room?id=...`，修复控制台一直「加载房间…」；客户端加载失败时显示错误文案；
 - 配置页宽行改为「标签在上、控件在下」，修复根目录等标签竖排换行；
 - 保存按钮改为固定品牌蓝底白字，修复按钮看起来空白；
-- 「允许的原始工具」改为「免审批即用的工具」：从 Host options 拉取本机真实工具清单，以复选框选择（不再手输工具名）。
+- 「允许的原始工具」改为「免审批即用的工具」：从 Host options 拉取本机真实工具清单，以复选框选择（不再手输工具名）。
+## 0.1.0-dev.18（原始工具遵循 DSH 审批）
+
+- 移除「免审批即用的工具」白名单；raw tool 调用不再由插件 allowlist 决定；
+- `policy.capabilities.tool` 默认 `auto`：完全走 DSH 工具流水线（target Session 的 pre-execute policy + approval seam）；`deny` 禁用 raw tools，`ask` 在 DSH 前加一层本机审批；
+- 新增 `approval/request` 监听：Execution Slot 里 DSH 需要审批的工具调用会转到本设备审批收件箱（面板可处理），不需要审批的工具直接执行；
+- 旧配置里 `tool: deny` + 空 allowedTools 自动迁移为 `auto`；
+- 配置页移除工具复选框列表，「原始工具（遵循 DSH 审批）」保留 自动/询问/拒绝 下拉。
+## 0.1.0-dev.18（Phase C：交互动作）
+
+- Room 用户动作：以用户身份发消息（选择收件人）、看板任务添加/状态更新、关闭房间、移除成员；
+- 设备动作：生成/复制邀请码、手动地址连接（host+port）；
+- 审批历史：ApprovalInbox 记录最近 50 条已决请求（approved/denied/expired/closed），Console 审批 Tab 展示历史；
+- 新增 Host 动作路由：`/room/send`、`/room/task`、`/room/close`、`/room/member/remove`、`/pair/invite`、`/pair/connect`、`/approvals/history`。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-device-fleet",
-  "version": "0.1.0-dev.17",
+  "version": "0.1.0-dev.19",
   "description": "DeepSeek Harness device fleet: enroll devices, direct-call remote tools, shared Rooms with lazy-woken agents, and delegated subagents across devices.",
   "type": "module",
   "main": "src/plugin/index.js",

package/src/host/approval-inbox.js

@@ -20,14 +20,38 @@ function summarizeArgs(args) {
 }
 
 export class ApprovalInbox extends EventEmitter {
-  constructor({ ttlMs = 60_000, maxPending = 50, now = Date.now } = {}) {
+  constructor({ ttlMs = 60_000, maxPending = 50, historyLimit = 50, now = Date.now } = {}) {
     super()
     this.ttlMs = ttlMs
     this.maxPending = maxPending
+    this.historyLimit = historyLimit
     this.now = now
     this.closed = false
     /** @type {Map<string, any>} */
     this.pending = new Map()
+    /** @type {any[]} */
+    this.historyEntries = []
+  }
+
+  record(entry, outcome, extra = {}) {
+    this.historyEntries.unshift({
+      id: entry.id,
+      fromDeviceId: entry.fromDeviceId,
+      capability: entry.capability,
+      tool: entry.tool,
+      reason: entry.reason,
+      argsSummary: entry.argsSummary,
+      createdAt: entry.createdAt,
+      resolvedAt: this.now(),
+      outcome,
+      ...extra,
+    })
+    if (this.historyEntries.length > this.historyLimit) this.historyEntries.length = this.historyLimit
+  }
+
+  /** Recently resolved requests (newest first). */
+  history() {
+    return this.historyEntries.map((entry) => ({ ...entry }))
   }
 
   /**
@@ -89,6 +113,7 @@ export class ApprovalInbox extends EventEmitter {
     if (!entry) throw Object.assign(new Error(`unknown approval request: ${String(id)}`), { code: 'unknown-request' })
     const chosen = APPROVAL_SCOPES.includes(scope) ? scope : 'once'
     entry.resolve({ approved: true, scope: chosen })
+    this.record(entry, 'approved', { scope: chosen })
     this.emit('approved', { ...this.summary(entry), scope: chosen })
     return { ...this.summary(entry), scope: chosen }
   }
@@ -97,6 +122,7 @@ export class ApprovalInbox extends EventEmitter {
     const entry = this.settle(id, 'denied')
     if (!entry) throw Object.assign(new Error(`unknown approval request: ${String(id)}`), { code: 'unknown-request' })
     entry.resolve({ approved: false, reason })
+    this.record(entry, 'denied', { reason })
     this.emit('denied', { ...this.summary(entry), reason })
     return { ...this.summary(entry), reason }
   }
@@ -108,6 +134,7 @@ export class ApprovalInbox extends EventEmitter {
     this.pending.delete(id)
     clearTimeout(entry.timer)
     entry.resolve({ approved: false, reason: 'approval-timeout' })
+    this.record(entry, 'expired')
     this.emit('expired', this.summary(entry))
   }
 
@@ -128,6 +155,7 @@ export class ApprovalInbox extends EventEmitter {
       clearTimeout(entry.timer)
       entry.status = 'closed'
       entry.resolve({ approved: false, reason: 'inbox-closed' })
+      this.record(entry, 'closed')
     }
     this.pending.clear()
     this.emit('closed')

package/src/host/ui-web.js

@@ -1,5 +1,7 @@
-// Read-model HTTP surface for the Fleet console (dev.13): device overview,
-// room list and room detail. The approval routes stay in approval-web.js.
+// Read/action HTTP surface for the Fleet console: device overview, room list and
+// detail, room user actions, pairing actions, and approval history.
+const MAX_BODY_BYTES = 128 * 1024
+
 function json(res, status, value) {
   res.statusCode = status
   res.setHeader('content-type', 'application/json; charset=utf-8')
@@ -7,75 +9,118 @@ function json(res, status, value) {
   res.end(JSON.stringify(value))
 }
 
-function pathOf(request) {
+async function readJsonBody(req) {
+  const chunks = []
+  let size = 0
+  for await (const chunk of req) {
+    size += chunk.length
+    if (size > MAX_BODY_BYTES) throw Object.assign(new Error('request body is too large'), { code: 'body-too-large' })
+    chunks.push(chunk)
+  }
+  if (chunks.length === 0) return {}
   try {
-    return new URL(request.url ?? '/', 'http://local').pathname
+    return JSON.parse(Buffer.concat(chunks).toString('utf8'))
   } catch {
-    return '/'
+    throw Object.assign(new Error('request body must be JSON'), { code: 'bad-json' })
   }
 }
 
+function statusFor(error) {
+  if (error?.code === 'unknown-room') return 404
+  return ['bad-request', 'bad-json', 'body-too-large', 'readonly', 'unknown-member', 'unknown-task'].includes(error?.code)
+    ? 400
+    : 500
+}
+
+function actionRoute(webServer, path, method, run) {
+  return webServer.register({
+    kind: 'exact',
+    path,
+    handler: async (req, res) => {
+      if (req.method !== method) return json(res, 405, { error: 'method not allowed' })
+      try {
+        const body = method === 'POST' ? await readJsonBody(req) : {}
+        json(res, 200, (await run(body, req)) ?? { ok: true })
+      } catch (error) {
+        json(res, statusFor(error), { error: String(error?.message ?? error), code: error?.code ?? 'error' })
+      }
+    },
+  })
+}
+
 /**
  * @param {object} options
  * @param {object} options.webServer ctx.webServer
  * @param {object} options.inbox ApprovalInbox
  * @param {object} options.rooms RoomService
  * @param {() => object} options.getOverview
- * @returns {() => void} disposer
+ * @param {object} [options.actions] UI actions (room send/task/close, pairing)
  */
-export function registerUiRoutes({ webServer, inbox, rooms, getOverview, logger = null }) {
+export function registerUiRoutes({ webServer, inbox, rooms, getOverview, actions = null, logger = null }) {
   if (!webServer?.register || !rooms) return () => {}
   const disposers = []
   disposers.push(
-    webServer.register({
-      kind: 'exact',
-      path: '/device-fleet/overview',
-      handler: async (req, res) => {
-        if (req.method !== 'GET') return json(res, 405, { error: 'method not allowed' })
-        try {
-          json(res, 200, { ...getOverview(), approvals: inbox?.list?.() ?? [] })
-        } catch (error) {
-          logger?.warn?.(`[device-fleet] overview failed: ${String(error?.message ?? error)}`)
-          json(res, 500, { error: 'internal error' })
-        }
-      },
+    actionRoute(webServer, '/device-fleet/overview', 'GET', async () => ({
+      ...getOverview(),
+      approvals: inbox?.list?.() ?? [],
+      approvalHistory: inbox?.history?.() ?? [],
+    })),
+  )
+  disposers.push(
+    actionRoute(webServer, '/device-fleet/rooms', 'GET', async () => ({ rooms: rooms.list() })),
+  )
+  disposers.push(
+    actionRoute(webServer, '/device-fleet/room', 'GET', async (_body, req) => {
+      let roomId = ''
+      try {
+        roomId = new URL(req.url ?? '/', 'http://local').searchParams.get('id') ?? ''
+      } catch {
+        roomId = ''
+      }
+      if (roomId === '') throw Object.assign(new Error('room id is required'), { code: 'bad-request' })
+      return { room: rooms.detail(roomId, { limit: 100 }) }
+    }),
+  )
+  disposers.push(
+    actionRoute(webServer, '/device-fleet/room/send', 'POST', async (body) => {
+      if (!actions?.sendRoomMessage) throw Object.assign(new Error('room actions are unavailable'), { code: 'unsupported' })
+      return { ok: true, result: await actions.sendRoomMessage(body ?? {}) }
+    }),
+  )
+  disposers.push(
+    actionRoute(webServer, '/device-fleet/room/task', 'POST', async (body) => {
+      if (!actions?.roomTask) throw Object.assign(new Error('room actions are unavailable'), { code: 'unsupported' })
+      return { ok: true, result: await actions.roomTask(body ?? {}) }
+    }),
+  )
+  disposers.push(
+    actionRoute(webServer, '/device-fleet/room/close', 'POST', async (body) => {
+      if (!actions?.closeRoom) throw Object.assign(new Error('room actions are unavailable'), { code: 'unsupported' })
+      return { ok: true, result: await actions.closeRoom(body ?? {}) }
+    }),
+  )
+  disposers.push(
+    actionRoute(webServer, '/device-fleet/room/member/remove', 'POST', async (body) => {
+      if (!actions?.removeMember) throw Object.assign(new Error('room actions are unavailable'), { code: 'unsupported' })
+      return { ok: true, result: await actions.removeMember(body ?? {}) }
     }),
   )
   disposers.push(
-    webServer.register({
-      kind: 'exact',
-      path: '/device-fleet/rooms',
-      handler: async (req, res) => {
-        if (req.method !== 'GET') return json(res, 405, { error: 'method not allowed' })
-        try {
-          json(res, 200, { rooms: rooms.list() })
-        } catch (error) {
-          json(res, 500, { error: String(error?.message ?? error) })
-        }
-      },
+    actionRoute(webServer, '/device-fleet/pair/invite', 'POST', async () => {
+      if (!actions?.createInvite) throw Object.assign(new Error('pairing actions are unavailable'), { code: 'unsupported' })
+      return { ok: true, code: await actions.createInvite() }
     }),
   )
   disposers.push(
-    webServer.register({
-      kind: 'exact',
-      path: '/device-fleet/room',
-      handler: async (req, res) => {
-        if (req.method !== 'GET') return json(res, 405, { error: 'method not allowed' })
-        let roomId = ''
-        try {
-          roomId = new URL(req.url ?? '/', 'http://local').searchParams.get('id') ?? ''
-        } catch {
-          roomId = ''
-        }
-        if (roomId === '') return json(res, 400, { error: 'room id is required' })
-        try {
-          json(res, 200, { room: rooms.detail(roomId, { limit: 100 }) })
-        } catch (error) {
-          json(res, error?.code === 'unknown-room' ? 404 : 500, { error: String(error?.message ?? error), code: error?.code ?? 'error' })
-        }
-      },
+    actionRoute(webServer, '/device-fleet/pair/connect', 'POST', async (body) => {
+      if (!actions?.connectAddress) throw Object.assign(new Error('pairing actions are unavailable'), { code: 'unsupported' })
+      return { ok: true, result: await actions.connectAddress(body ?? {}) }
     }),
   )
+  disposers.push(
+    actionRoute(webServer, '/device-fleet/approvals/history', 'GET', async () => ({ history: inbox?.history?.() ?? [] })),
+  )
+  if (logger) logger.debug?.('[device-fleet] UI action routes registered')
   return () => {
     for (const dispose of disposers) dispose()
   }

package/src/plugin/index.js

@@ -278,6 +278,7 @@ export function apply(ctx, profileConfig) {
       },
     }
   }
+  let pairingRef = null
   if (webServer) {
     ctx.effect(() => registerApprovalRoutes({ webServer, inbox, logger }))
     ctx.effect(() =>
@@ -299,16 +300,55 @@ export function apply(ctx, profileConfig) {
         logger,
       }),
     )
+    const uiActions = {
+      async sendRoomMessage({ roomId, to, text } = {}) {
+        if (typeof roomId !== 'string' || roomId === '') throw Object.assign(new Error('roomId is required'), { code: 'bad-request' })
+        const memberIds = rooms.status(roomId).members.map((member) => member.memberId)
+        const recipients = Array.isArray(to) && to.length > 0 ? to : memberIds.filter((id) => id.startsWith('host:'))
+        const result = await rooms.send({ roomId, from: { kind: 'user' }, to: recipients, text })
+        return { roomId, ...result }
+      },
+      async roomTask({ roomId, action, ...rest } = {}) {
+        if (typeof roomId !== 'string' || roomId === '') throw Object.assign(new Error('roomId is required'), { code: 'bad-request' })
+        if (action === 'add') {
+          return rooms.addTask({ roomId, title: rest.title, owner: rest.owner, dependsOn: rest.dependsOn ?? [], description: rest.description ?? '' })
+        }
+        if (action === 'update') {
+          return rooms.updateTask({ roomId, id: rest.id, status: rest.status, note: rest.note })
+        }
+        throw Object.assign(new Error('action must be add or update'), { code: 'bad-request' })
+      },
+      closeRoom: ({ roomId, reason } = {}) => rooms.close({ roomId, reason: reason ?? 'closed by user' }),
+      removeMember: ({ roomId, memberId, reason } = {}) => rooms.removeMember({ roomId, memberId, reason: reason ?? 'removed by user' }),
+      createInvite: async () => {
+        if (!pairingRef?.invite) throw Object.assign(new Error('pairing is unavailable'), { code: 'unsupported' })
+        return pairingRef.invite()
+      },
+      connectAddress: async ({ host, port } = {}) => {
+        if (typeof host !== 'string' || !Number.isInteger(port) || port <= 0) {
+          throw Object.assign(new Error('host and port are required'), { code: 'bad-request' })
+        }
+        const peer = await node.connectAddress(host, port)
+        try {
+          savePeerHint(state, { host, port })
+        } catch {
+          /* best effort */
+        }
+        return { deviceId: peer.deviceId, name: peer.name ?? 'device' }
+      },
+    }
     ctx.effect(() =>
       registerUiRoutes({
         webServer,
         inbox,
         rooms,
         logger,
+        actions: uiActions,
         getOverview: () => ({
           ...(node.status?.() ?? {}),
           rooms: rooms.list(),
           approvals: inbox.list(),
+          approvalHistory: inbox.history?.() ?? [],
         }),
       }),
     )
@@ -441,6 +481,7 @@ export function apply(ctx, profileConfig) {
       writePendingEnrollment(state, code)
     },
   }
+  pairingRef = pairing
   const handlers = createFleetHandlers({
     node,
     client,