dsh-email 0.3.3 → 0.4.1

package/README.md

@@ -120,7 +120,7 @@ dsh plugin --profile web add dsh-email
 
 - **授权码就是你的邮箱钥匙**。它写在本机（profile 的 `cordis.patch.yml` 或 `settings.yaml`），请勿提交到任何 Git 仓库；更推荐用环境变量 `DSH_EMAIL_PASSWORD`。
 - `email_send` 默认走 DSH 审批通道：每次发信都显示「发送邮件给 xx，主题「xx」」，你批准才发出。没有审批通道的环境（如无 UI 的 headless）会**直接拒绝发信**，这是安全默认。
-- 注意：会话处于 **Full Access（完全访问）** 模式时，harness 会把审批策略置为 never，`email_send` 会被**静默拒绝**（不弹框）。想发信请把访问模式切回 Read Only 或 Write。
+- 会话处于 **Full Access（完全访问）** 模式时，harness 的审批策略是 never（不弹任何确认框）——`email_send` 会**被拦截并给出明确提示**。两条出路：① 把访问模式切回 Read Only / Write；② 关闭 `sendApproval`（设置页勾掉「发信前确认」），即显式声明自行承担风险。
 - 本插件不做任何联网上报，凭证只在内存中用于连接你的邮箱服务器。
 
 ## 已知限制（v0.3）
@@ -138,7 +138,7 @@ dsh plugin --profile web add dsh-email
 ```sh
 pnpm install
 pnpm run build   # tsc → lib/
-pnpm test        # 构建 + node --test（配置/解析/注册与审批门，34 个用例，无需真实邮箱）
+pnpm test        # 构建 + node --test（配置/解析/注册与审批门，38 个用例，无需真实邮箱）
 ```
 
 ## 协议

package/lib/index.js

@@ -278,7 +278,7 @@ export function apply(ctx, config = {}) {
     });
     ctx.tools.register({
         name: 'email_send',
-        description: 'Send an email from a configured account, optionally with file attachments (absolute paths, or relative to the dsh process cwd). Sending first asks the user for approval (recipient, subject and attachment count are shown) unless sendApproval is disabled; never invent recipients or content without the user\'s instruction.',
+        description: 'Send an email from a configured account, optionally with file attachments (absolute paths, or relative to the dsh process cwd). Sending asks the user for approval (recipient, subject and attachment count are shown) unless sendApproval is disabled; in Full Access mode the approval policy never asks, so the send is refused with an explanation instead. Never invent recipients or content without the user\'s instruction.',
         parameters: compileParameters({
             to: { type: 'string', required: true, description: 'Recipient(s), comma-separated' },
             subject: { type: 'string', required: true, description: 'Email subject' },
@@ -358,7 +358,34 @@ export function apply(ctx, config = {}) {
         const args = (exec.args ?? {});
         const attachCount = Array.isArray(args.attachments) ? args.attachments.length : 0;
         const reason = '发送邮件给 ' + args.to + '，主题「' + args.subject + '」' + (attachCount > 0 ? '，附件 ' + attachCount + ' 个' : '');
-        return { kind: 'ask', reason };
+        // Gate-owned approval: we run the approval round-trip ourselves so the
+        // denial reason is always honest and actionable — including the Full
+        // Access case where the harness policy answers 'rejected' without ever
+        // showing a dialog.
+        const approval = ctx.get('approval');
+        if (approval === undefined) {
+            return {
+                kind: 'deny',
+                reason: 'email_send 需要确认，但当前环境没有审批通道（如 headless）。如确定安全，可在配置中设置 sendApproval: false 后直接发送。',
+            };
+        }
+        const outcome = await approval.request({
+            agent: exec.agent,
+            toolName: exec.name,
+            callId: exec.callId,
+            reason,
+            signal: exec.signal,
+        });
+        if (outcome === 'allowed-once')
+            return next();
+        if (outcome === 'cancelled')
+            return { kind: 'deny', reason: '发信确认被取消，邮件未发送。' };
+        if (outcome === 'unavailable')
+            return { kind: 'deny', reason: '发信确认不可用（没有可用的审批界面），邮件未发送。' };
+        return {
+            kind: 'deny',
+            reason: '发信未获批准：要么你拒绝了，要么当前会话处于 Full Access（审批策略 never，不会弹框）。若在 Full Access：切到 Read Only / Write 再发，或关闭 sendApproval（自行承担风险）。',
+        };
     }, { prepend: true });
 }
 export { PROVIDER_NAMES, EMAIL_PASSWORD_ENV } from './config.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-email",
-  "version": "0.3.3",
+  "version": "0.4.1",
   "description": "IMAP/SMTP email tools for DeepSeek Harness: list, read, search and send mail, with QQ/163/126/Sina/Aliyun/Gmail/Outlook/iCloud presets.",
   "type": "module",
   "main": "lib/index.js",