dsh-email 0.3.3 → 0.4.0

package/README.md

@@ -120,7 +120,7 @@ dsh plugin --profile web add dsh-email
 
 - **授权码就是你的邮箱钥匙**。它写在本机（profile 的 `cordis.patch.yml` 或 `settings.yaml`），请勿提交到任何 Git 仓库；更推荐用环境变量 `DSH_EMAIL_PASSWORD`。
 - `email_send` 默认走 DSH 审批通道：每次发信都显示「发送邮件给 xx，主题「xx」」，你批准才发出。没有审批通道的环境（如无 UI 的 headless）会**直接拒绝发信**，这是安全默认。
-- 注意：会话处于 **Full Access（完全访问）** 模式时，harness 会把审批策略置为 never，`email_send` 会被**静默拒绝**（不弹框）。想发信请把访问模式切回 Read Only 或 Write。
+- 会话处于 **Full Access（完全访问）** 模式时，harness 的审批策略是 never（不弹任何确认框）——`email_send` 会**被拦截并给出明确提示**。两条出路：① 把访问模式切回 Read Only / Write；② 关闭 `sendApproval`（设置页勾掉「发信前确认」），即显式声明自行承担风险。
 - 本插件不做任何联网上报，凭证只在内存中用于连接你的邮箱服务器。
 
 ## 已知限制（v0.3）
@@ -138,7 +138,7 @@ dsh plugin --profile web add dsh-email
 ```sh
 pnpm install
 pnpm run build   # tsc → lib/
-pnpm test        # 构建 + node --test（配置/解析/注册与审批门，34 个用例，无需真实邮箱）
+pnpm test        # 构建 + node --test（配置/解析/注册与审批门，37 个用例，无需真实邮箱）
 ```
 
 ## 协议

package/lib/index.js

@@ -164,6 +164,20 @@ function renderFolders(value) {
 function renderAttachment(value) {
     return oneText('账号 ' + value.account + ' 已下载附件 "' + value.filename + '"（' + value.contentType + '，' + value.size + ' 字节）到：\n' + value.path + '\n可用 read 工具读取该文件。');
 }
+/**
+ * Best-effort read of the session's effective approval policy. Duck-typed on
+ * the permission-presets seam; any drift or absence yields undefined and the
+ * gate falls back to the plain ask flow.
+ */
+function effectiveApprovalPolicy(ctx, exec) {
+    try {
+        const preset = ctx.get?.('permissionPresets')?.current?.(exec?.agent?.session?.events);
+        return typeof preset?.approval === 'string' ? preset.approval : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
 function fingerprintSettings(settings) {
     return JSON.stringify({
         accounts: [...settings.accounts.entries()].map(([name, account]) => [name, account]),
@@ -278,7 +292,7 @@ export function apply(ctx, config = {}) {
     });
     ctx.tools.register({
         name: 'email_send',
-        description: 'Send an email from a configured account, optionally with file attachments (absolute paths, or relative to the dsh process cwd). Sending first asks the user for approval (recipient, subject and attachment count are shown) unless sendApproval is disabled; never invent recipients or content without the user\'s instruction.',
+        description: 'Send an email from a configured account, optionally with file attachments (absolute paths, or relative to the dsh process cwd). Sending asks the user for approval (recipient, subject and attachment count are shown) unless sendApproval is disabled; in Full Access mode the approval policy never asks, so the send is refused with an explanation instead. Never invent recipients or content without the user\'s instruction.',
         parameters: compileParameters({
             to: { type: 'string', required: true, description: 'Recipient(s), comma-separated' },
             subject: { type: 'string', required: true, description: 'Email subject' },
@@ -358,6 +372,15 @@ export function apply(ctx, config = {}) {
         const args = (exec.args ?? {});
         const attachCount = Array.isArray(args.attachments) ? args.attachments.length : 0;
         const reason = '发送邮件给 ' + args.to + '，主题「' + args.subject + '」' + (attachCount > 0 ? '，附件 ' + attachCount + ' 个' : '');
+        // Full Access (approval policy 'never') rejects asks before any answerer
+        // runs, so surface the actionable explanation instead of a misleading
+        // "the user rejected" failure.
+        if (effectiveApprovalPolicy(ctx, exec) === 'never') {
+            return {
+                kind: 'deny',
+                reason: 'email_send 需要确认，但当前会话处于 Full Access（审批策略 never），不会弹出确认框。两条路：① 把访问模式切回 Read Only 或 Write 再发；② 在设置页关闭「发信前确认」（sendApproval: false），自行承担风险。',
+            };
+        }
         return { kind: 'ask', reason };
     }, { prepend: true });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-email",
-  "version": "0.3.3",
+  "version": "0.4.0",
   "description": "IMAP/SMTP email tools for DeepSeek Harness: list, read, search and send mail, with QQ/163/126/Sina/Aliyun/Gmail/Outlook/iCloud presets.",
   "type": "module",
   "main": "lib/index.js",