dsh-hooks 0.2.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 PeterBon
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,125 @@
+# dsh-hooks
+
+Config-driven lifecycle hooks plugin for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) (dsh).
+
+Declare `event -> command` hooks directly in your profile's `cordis.patch.yml` — like Codex CLI / OpenCode hooks, but for dsh. No plugin code required.
+
+[中文文档](README.zh.md) | [Design](#design) | [Feishu example](examples/notify-feishu.mjs)
+
+## Install
+
+```sh
+dsh plugin --profile web add github:PeterBon/dsh-hooks
+```
+
+Restart `dsh web`.
+
+## Configure
+
+Add a config block to your profile's `cordis.patch.yml`:
+
+```yaml
+- id: dsh-hooks
+  name: dsh-hooks
+  config:
+    hooks:
+      - on: 'turn/end'
+        when: 'completed'            # optional: only completed turns
+        run: 'node examples/notify-feishu.mjs'
+        timeoutMs: 10000             # optional, default 10000
+      - on: 'approval/asked'
+        run: 'powershell -Command "Write-Output approval-requested >> hooks.log"'
+```
+
+## Events (v1)
+
+| Event | When it fires | Useful context |
+| --- | --- | --- |
+| `turn/start` | A turn begins | session id, turn |
+| `turn/end` | A turn ends (`completed` / `error` / `aborted` / `blocked` / `max-tokens` / `interrupted`) | reason, turn, duration |
+| `approval/asked` | A tool call requests user approval | tool name, call id, reason |
+| `agent/created` | An agent is published | session id |
+| `agent/disposed` | An agent leaves the registry | session id |
+| `agent/error` | The agent loop reports an error | error text |
+| `agent/status` | Agent status transition | status |
+
+The `when` filter for `turn/end` matches the `reason.kind` value (`completed`, `error`, …). Hooks for other events run unconditionally.
+
+## Command execution
+
+- Each matching hook spawns `run` through the platform shell, **fire-and-forget**: failures only `console.warn`, never retried, never block the agent loop.
+- Context is passed via **environment variables** (no shell injection through data):
+
+| Variable | Meaning |
+| --- | --- |
+| `DSH_HOOK_EVENT` | event type, e.g. `turn/end` |
+| `DSH_HOOK_SESSION_ID` | session id |
+| `DSH_HOOK_SESSION_NAME` | readable session title (latest `session/title` log event, or first human prompt) |
+| `DSH_HOOK_TURN` | turn number (turn events) |
+| `DSH_HOOK_REASON` | turn end reason kind |
+| `DSH_HOOK_TOOL` | tool name (approval events) |
+| `DSH_HOOK_CALL_ID` | tool call id (approval events) |
+| `DSH_HOOK_DURATION_MS` | turn duration ms (turn/end) |
+| `DSH_HOOK_STATUS` | agent status (`agent/status`) |
+| `DSH_HOOK_ERROR` | error text (`agent/error`, and the failure message on `turn/end` error) |
+| `DSH_HOOK_CONTENT` | the turn's final assistant text (turn events) |
+| `DSH_HOOK_TIMESTAMP` | ISO timestamp |
+
+- `{{var}}` placeholders inside `run` are substituted from the same context, e.g. `run: 'echo {{DSH_HOOK_SESSION_ID}} >> log.txt'`.
+
+## Feishu notification example
+
+The fastest path is the one-shot setup CLI — it creates the Feishu app for you via a QR-code scan and writes all hook config:
+
+```sh
+dsh-hooks feishu-setup                 # default profile: web
+dsh-hooks feishu-setup --profile work  # another profile
+dsh-hooks feishu-test                  # send a test card with the stored credentials
+```
+
+`feishu-setup` prints a QR code (and opens it in your browser), waits for you to scan it with Feishu, then creates an app named 「DSH 通知机器人」 with message-send permission and writes:
+
+| File | Purpose |
+| --- | --- |
+| `~/.dsh/dsh-hooks/feishu-config.json` | app id/secret + your open_id as the notification target (0600, never committed); `result_max_chars` sets the card content truncation (default 300) |
+| `~/.dsh/dsh-hooks/notify-feishu.mjs` | stable copy of the notify script the hooks reference |
+| `~/.dsh/profiles/<profile>/cordis.patch.yml` | dsh-hooks block: `turn/end` (completed/error/aborted) + `approval/asked` + `agent/error` card hooks |
+
+Restart `dsh web` afterwards — you will get cards when turns finish, approvals are asked, or the agent errors.
+
+### Manual configuration
+
+Prefer wiring it by hand? See [`examples/notify-feishu.mjs`](examples/notify-feishu.mjs) — a zero-dependency script that posts turn-completion / approval notices through the Feishu **app API** (works without a group custom bot). Configure it like:
+
+```yaml
+- id: dsh-hooks
+  name: dsh-hooks
+  config:
+    hooks:
+      - on: 'turn/end'
+        when: 'completed'
+        run: 'node D:/path/to/examples/notify-feishu.mjs'
+      - on: 'approval/asked'
+        run: 'node D:/path/to/examples/notify-feishu.mjs --approval'
+```
+
+with `DSH_HOOKS_FEISHU_APP_ID` / `DSH_HOOKS_FEISHU_APP_SECRET` / `DSH_HOOKS_FEISHU_TO` in the process environment (never in config files).
+
+## Security
+
+Hooks execute arbitrary commands with the dsh process privileges. Only configure commands you trust. Secrets belong in environment variables or the dsh credential store — never in `cordis.patch.yml`.
+
+## Design
+
+Follows the dsh plugin conventions: `dsh.bundle.patch` mounts the plugin row, the plugin listens to the durable `session/event` firehose plus agent lifecycle events, and emissions are irreversible side effects that compensate rather than block (failures warn, never retry).
+
+## Development
+
+```sh
+pnpm install
+pnpm run check     # typecheck + test + build
+```
+
+## License
+
+MIT

package/README.zh.md

@@ -0,0 +1,125 @@
+# dsh-hooks
+
+[DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)（dsh）的配置驱动生命周期 hooks 插件。
+
+直接在 profile 的 `cordis.patch.yml` 里声明「事件 → 命令」——就像 Codex CLI / OpenCode 的 hooks，但属于 dsh。不需要写插件代码。
+
+[English](README.md) | [设计](#设计) | [飞书示例](examples/notify-feishu.mjs)
+
+## 安装
+
+```sh
+dsh plugin --profile web add github:PeterBon/dsh-hooks
+```
+
+重启 `dsh web` 生效。
+
+## 配置
+
+在你的 profile 的 `cordis.patch.yml` 里添加配置块：
+
+```yaml
+- id: dsh-hooks
+  name: dsh-hooks
+  config:
+    hooks:
+      - on: 'turn/end'
+        when: 'completed'            # 可选：只在回合正常完成时触发
+        run: 'node examples/notify-feishu.mjs'
+        timeoutMs: 10000             # 可选，默认 10000
+      - on: 'approval/asked'
+        run: 'powershell -Command "Add-Content hooks.log approval-requested"'
+```
+
+## 事件（v1）
+
+| 事件 | 触发时机 | 有用上下文 |
+| --- | --- | --- |
+| `turn/start` | 回合开始 | 会话 id、回合号 |
+| `turn/end` | 回合结束（`completed` / `error` / `aborted` / `blocked` / `max-tokens` / `interrupted`） | reason、回合号、耗时 |
+| `approval/asked` | 工具调用请求用户审批 | 工具名、调用 id、原因 |
+| `agent/created` | Agent 发布 | 会话 id |
+| `agent/disposed` | Agent 离开注册表 | 会话 id |
+| `agent/error` | Agent 循环报错 | 错误文本 |
+| `agent/status` | Agent 状态切换 | 状态 |
+
+`turn/end` 的 `when` 匹配结束原因（`completed`、`error`…）；其他事件的 hook 无条件执行。
+
+## 命令执行
+
+- 每个命中的 hook 通过系统 shell 执行 `run`，**fire-and-forget**：失败只 `console.warn`，绝不重试、绝不阻塞 agent 循环。
+- 上下文通过**环境变量**传递（数据不拼接进 shell 字符串，防注入）：
+
+| 变量 | 含义 |
+| --- | --- |
+| `DSH_HOOK_EVENT` | 事件类型，如 `turn/end` |
+| `DSH_HOOK_SESSION_ID` | 会话 id |
+| `DSH_HOOK_SESSION_NAME` | 会话可读标题（最新 `session/title` 日志事件，或首个用户消息回退） |
+| `DSH_HOOK_TURN` | 回合号（回合事件） |
+| `DSH_HOOK_REASON` | 回合结束原因 |
+| `DSH_HOOK_TOOL` | 工具名（审批事件） |
+| `DSH_HOOK_CALL_ID` | 工具调用 id（审批事件） |
+| `DSH_HOOK_DURATION_MS` | 回合耗时毫秒（turn/end） |
+| `DSH_HOOK_STATUS` | Agent 状态（agent/status） |
+| `DSH_HOOK_ERROR` | 错误文本（agent/error，以及 turn/end 出错时的失败详情） |
+| `DSH_HOOK_CONTENT` | 该回合最后一段助手回复文本（回合事件） |
+| `DSH_HOOK_TIMESTAMP` | ISO 时间戳 |
+
+- `run` 里的 `{{变量}}` 占位符会从同一上下文替换，例如 `run: 'echo {{DSH_HOOK_SESSION_ID}} >> log.txt'`。
+
+## 飞书通知示例
+
+最快的方式是一步到位的 setup CLI——扫码自动创建飞书应用并写好全部 hook 配置：
+
+```sh
+dsh-hooks feishu-setup                 # 默认 profile：web
+dsh-hooks feishu-setup --profile work  # 指定其他 profile
+dsh-hooks feishu-test                  # 用已存凭据发送测试卡片验证
+```
+
+`feishu-setup` 会打印二维码（并在浏览器中打开），等你用飞书扫码后，自动创建名为「DSH 通知机器人」的应用（带消息发送权限），并写入：
+
+| 文件 | 用途 |
+| --- | --- |
+| `~/.dsh/dsh-hooks/feishu-config.json` | app id/secret 与你的 open_id（通知目标），权限 0600，严禁提交；`result_max_chars` 控制卡片内容截断长度（默认 300） |
+| `~/.dsh/dsh-hooks/notify-feishu.mjs` | hook 引用的通知脚本稳定副本 |
+| `~/.dsh/profiles/<profile>/cordis.patch.yml` | dsh-hooks 配置块：`turn/end`（completed/error/aborted）+ `approval/asked` + `agent/error` 卡片 hook |
+
+完成后重启 `dsh web`——回合结束、请求审批、agent 出错时就会收到卡片通知。
+
+### 手动配置
+
+想自己接线？见 [`examples/notify-feishu.mjs`](examples/notify-feishu.mjs)——零依赖脚本，通过飞书**应用 API**（不需要群自定义机器人）发送回合完成 / 审批通知。配置示例：
+
+```yaml
+- id: dsh-hooks
+  name: dsh-hooks
+  config:
+    hooks:
+      - on: 'turn/end'
+        when: 'completed'
+        run: 'node D:/path/to/examples/notify-feishu.mjs'
+      - on: 'approval/asked'
+        run: 'node D:/path/to/examples/notify-feishu.mjs --approval'
+```
+
+同时在 dsh 进程环境中提供 `DSH_HOOKS_FEISHU_APP_ID` / `DSH_HOOKS_FEISHU_APP_SECRET` / `DSH_HOOKS_FEISHU_TO`（绝不能写进配置文件）。
+
+## 安全
+
+Hook 会以 dsh 进程的权限执行任意命令，只配置你信任的命令。Secret 放环境变量或 dsh 凭据存储——永远不要写进 `cordis.patch.yml`。
+
+## 设计
+
+遵循 dsh 插件约定：`dsh.bundle.patch` 挂载插件行；插件监听持久 `session/event` firehose 与 agent 生命周期事件；发射是不可逆副作用，补偿而非阻塞（失败仅警告、绝不重试）。
+
+## 开发
+
+```sh
+pnpm install
+pnpm run check     # typecheck + test + build
+```
+
+## License
+
+MIT

package/bin/dsh-hooks.mjs

@@ -0,0 +1,312 @@
+#!/usr/bin/env node
+/**
+ * dsh-hooks CLI — Feishu notification setup, zero manual app creation.
+ *
+ * Commands:
+ *   dsh-hooks feishu-setup [--profile <name>]   scan a QR code to create a
+ *                                               Feishu bot app automatically
+ *                                               (official registerApp flow),
+ *                                               write credentials + hook
+ *                                               config, then send a welcome
+ *                                               card to the scanning user.
+ *   dsh-hooks feishu-test                      verify credentials and send a
+ *                                               test card to the configured
+ *                                               target.
+ *
+ * The setup writes:
+ *   ~/.dsh/dsh-hooks/feishu-config.json        app_id/app_secret/target (0600)
+ *   ~/.dsh/profiles/<name>/cordis.patch.yml    dsh-hooks config block with
+ *                                              turn/end + approval/asked +
+ *                                              agent/error card hooks
+ *
+ * Requires Node >= 22. Dependencies: @larksuiteoapi/node-sdk (registerApp),
+ * qrcode (terminal QR), yaml (patch merge). Credentials never enter argv or
+ * the environment beyond the setup process itself.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync, chmodSync } from 'node:fs'
+import { spawn } from 'node:child_process'
+import { homedir } from 'node:os'
+import { join } from 'node:path'
+import { registerApp } from '@larksuiteoapi/node-sdk'
+import QRCode from 'qrcode'
+import YAML from 'yaml'
+import { run as notifyRun } from '../examples/notify-feishu.mjs'
+
+const CONFIG_DIR = join(homedir(), '.dsh', 'dsh-hooks')
+export const CONFIG_PATH = join(CONFIG_DIR, 'feishu-config.json')
+
+/** Open a URL in the default browser (best-effort, never throws). */
+export function openInBrowser(url) {
+  return new Promise((resolve) => {
+    const command =
+      process.platform === 'darwin'
+        ? { executable: 'open', args: [url] }
+        : process.platform === 'win32'
+          ? { executable: 'cmd', args: ['/c', 'start', '', url] }
+          : { executable: 'xdg-open', args: [url] }
+    const child = spawn(command.executable, command.args, { detached: true, stdio: 'ignore' })
+    child.on('error', () => resolve(undefined))
+    child.on('spawn', () => {
+      child.unref()
+      resolve(undefined)
+    })
+  })
+}
+
+/** Profile patch file for a profile name. */
+export function patchPath(profile) {
+  return join(homedir(), '.dsh', 'profiles', profile, 'cordis.patch.yml')
+}
+
+/** Which hooks the setup installs into the profile. */
+export function setupHooks(scriptPath) {
+  return [
+    { on: 'turn/end', when: 'completed', run: `node ${JSON.stringify(scriptPath)}`, timeoutMs: 30000 },
+    { on: 'turn/end', when: 'error', run: `node ${JSON.stringify(scriptPath)}`, timeoutMs: 30000 },
+    { on: 'turn/end', when: 'aborted', run: `node ${JSON.stringify(scriptPath)}`, timeoutMs: 30000 },
+    { on: 'approval/asked', run: `node ${JSON.stringify(scriptPath)} --approval`, timeoutMs: 30000 },
+    { on: 'agent/error', run: `node ${JSON.stringify(scriptPath)}`, timeoutMs: 30000 },
+  ]
+}
+
+/** Absolute path of the shipped notify script (where it lives now). */
+export function notifyScriptPath() {
+  return new URL('../examples/notify-feishu.mjs', import.meta.url).pathname.replace(/^\/([A-Za-z]:)/, '$1')
+}
+
+/**
+ * Resolve the stable notify-script location hooks should reference.
+ * The npx cache (where this CLI often runs from) is ephemeral, so the
+ * setup copies the zero-dependency script next to feishu-config.json:
+ * ~/.dsh/dsh-hooks/notify-feishu.mjs. Re-copies on every setup so the
+ * stable copy tracks the installed CLI version.
+ */
+export function stableScriptPath(paths = {}) {
+  return paths.notifyScript ?? join(CONFIG_DIR, 'notify-feishu.mjs')
+}
+
+/**
+ * Write the credential file with 0600 perms (owner-only), matching the
+ * feishu-notify security posture: secrets stay out of the repo and argv.
+ */
+export function writeConfig(configPath, { appId, appSecret, targetType = 'open_id', targetId, resultMaxChars = 300 }) {
+  mkdirSync(join(configPath, '..'), { recursive: true, mode: 0o700 })
+  const doc = JSON.stringify(
+    {
+      app_id: appId,
+      app_secret: appSecret,
+      target_type: targetType,
+      target_id: targetId,
+      result_max_chars: resultMaxChars,
+    },
+    null,
+    2,
+  )
+  writeFileSync(configPath, doc + '\n', 'utf8')
+  try {
+    chmodSync(configPath, 0o600)
+  } catch {
+    // Windows: ACL-based protection; the file lives under the user profile.
+  }
+}
+
+/**
+ * Merge the dsh-hooks config block into a profile's cordis.patch.yml:
+ * existing dsh-hooks entries keep unrelated config and get their hooks
+ * replaced with `setupHooks`; other entries stay untouched. Idempotent.
+ */
+export function mergePatchYaml(existingText, { scriptPath }) {
+  let entries
+  try {
+    entries = YAML.parse(existingText || '[]\n')
+  } catch {
+    throw new Error('profile 的 cordis.patch.yml 解析失败，请先修复该文件')
+  }
+  if (!Array.isArray(entries)) throw new Error('cordis.patch.yml 顶层必须是 YAML 数组')
+
+  const hooks = setupHooks(scriptPath)
+  let found = false
+  for (const entry of entries) {
+    if (entry && typeof entry === 'object' && entry.id === 'dsh-hooks') {
+      entry.name = 'dsh-hooks'
+      entry.config = { hooks }
+      found = true
+      break
+    }
+  }
+  if (!found) entries.push({ id: 'dsh-hooks', name: 'dsh-hooks', config: { hooks } })
+  return YAML.stringify(entries)
+}
+
+/**
+ * Full setup flow. `deps` is injectable for tests:
+ *   registerAppFn — the official registerApp (default)
+ *   print/printErr — output sinks
+ *   openUrl — browser opener (no-op by default in tests)
+ *   paths — { configPath, patchFile, notifyScript }
+ * Returns the created app facts (without the secret in logs).
+ */
+export async function setupFeishu({
+  profile = 'web',
+  registerAppFn = registerApp,
+  print = console.log,
+  printErr = console.error,
+  openUrl = openInBrowser,
+  paths = {},
+} = {}) {
+  const configPath = paths.configPath ?? CONFIG_PATH
+  const patchFile = paths.patchFile ?? patchPath(profile)
+  const notifyScript = stableScriptPath(paths)
+
+  print('dsh-hooks feishu-setup')
+  print('1/4 正在生成飞书「一键创建应用」二维码…')
+
+  const result = await registerAppFn({
+    source: 'dsh-hooks',
+    createOnly: true,
+    appPreset: {
+      name: 'DSH 通知机器人',
+      desc: 'DeepSeek Harness 会话事件通知（dsh-hooks）',
+    },
+    addons: {
+      preset: false,
+      scopes: {
+        tenant: ['im:message:send_as_bot'],
+      },
+    },
+    onQRCodeReady: (authorization) => {
+      print('')
+      print(`请用飞书扫码（${authorization.expireIn} 秒内有效），或在浏览器打开：`)
+      print(authorization.url)
+      try {
+        QRCode.toString(authorization.url, { type: 'terminal', small: true }, (err, qr) => {
+          if (!err) print(qr)
+        })
+      } catch {
+        // Terminal QR is best-effort; the URL above always works.
+      }
+      // Never let a browser-opener failure break the scan flow.
+      void Promise.resolve(openUrl(authorization.url)).catch(() => undefined)
+    },
+  })
+
+  const appId = result.client_id
+  const appSecret = result.client_secret
+  const ownerOpenId = result.user_info?.open_id
+  if (!appId || !appSecret) throw new Error('扫码创建未完成，未拿到应用凭证')
+  if (!ownerOpenId) throw new Error('扫码结果缺少 open_id，请重试')
+
+  print('')
+  print(`2/4 应用创建成功：${appId}（机器人将私聊通知你）`)
+
+  writeConfig(configPath, {
+    appId,
+    appSecret,
+    targetType: 'open_id',
+    targetId: ownerOpenId,
+    resultMaxChars: 300,
+  })
+  print(`3/4 凭据已写入 ${configPath}（权限 0600，勿提交到仓库）`)
+
+  // Copy the notify script to its stable location so hooks never
+  // reference the ephemeral npx cache.
+  if (!paths.notifyScript) {
+    mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 })
+    writeFileSync(notifyScript, readFileSync(notifyScriptPath(), 'utf8'), 'utf8')
+  }
+
+  const existing = existsSync(patchFile) ? readFileSync(patchFile, 'utf8') : '[]\n'
+  const merged = mergePatchYaml(existing, { scriptPath: notifyScript })
+  writeFileSync(patchFile, merged, 'utf8')
+  print(`4/4 hook 配置已写入 ${patchFile}`)
+
+  print('发送欢迎卡片验证…')
+  try {
+    await notifyRun({
+      appId,
+      appSecret,
+      to: ownerOpenId,
+      event: 'agent/created',
+      sessionId: 'dsh-hooks-setup',
+      cwd: process.cwd(),
+      timestamp: new Date().toISOString(),
+    })
+    print('✅ 欢迎卡片已发送。请重启 dsh web 使 hooks 生效。')
+  } catch (error) {
+    printErr(`⚠ 欢迎卡片发送失败（配置已就绪，可稍后用 feishu-test 重试）：${error instanceof Error ? error.message : String(error)}`)
+  }
+
+  return { appId, ownerOpenId }
+}
+
+/** Test credentials and send a test card to the configured target. */
+export async function testFeishu({ print = console.log, paths = {} } = {}) {
+  const configPath = paths.configPath ?? CONFIG_PATH
+  if (!existsSync(configPath)) {
+    throw new Error(`未找到配置文件 ${configPath}，请先运行 feishu-setup`)
+  }
+  let file
+  try {
+    file = JSON.parse(readFileSync(configPath, 'utf8'))
+  } catch {
+    throw new Error(`配置文件 ${configPath} 解析失败，请重新运行 feishu-setup`)
+  }
+  if (!file.app_id || !file.app_secret || !file.target_id) {
+    throw new Error('配置文件不完整，请重新运行 feishu-setup')
+  }
+  await notifyRun({
+    appId: file.app_id,
+    appSecret: file.app_secret,
+    to: file.target_id,
+    event: 'agent/status',
+    status: 'connected',
+    sessionId: 'feishu-test',
+    cwd: process.cwd(),
+    timestamp: new Date().toISOString(),
+  })
+  print('✅ 测试卡片已发送')
+}
+
+const [, , command, ...args] = process.argv
+
+function cliArgs(args) {
+  const opts = {}
+  for (let i = 0; i < args.length; i++) {
+    if (args[i] === '--profile') opts.profile = args[++i]
+  }
+  return opts
+}
+
+function isDirectRun() {
+  try {
+    return process.argv[1] !== undefined && import.meta.url === new URL(`file:///${process.argv[1].replace(/\\/g, '/')}`).href
+  } catch {
+    return false
+  }
+}
+
+function runCli() {
+  if (command === 'feishu-setup') {
+    const { profile } = cliArgs(args)
+    setupFeishu({ profile: profile ?? 'web' })
+      .then(() => process.exit(0))
+      .catch((error) => {
+        console.error(`✗ ${error instanceof Error ? error.message : String(error)}`)
+        process.exit(1)
+      })
+  } else if (command === 'feishu-test') {
+    testFeishu()
+      .then(() => process.exit(0))
+      .catch((error) => {
+        console.error(`✗ ${error instanceof Error ? error.message : String(error)}`)
+        process.exit(1)
+      })
+  } else {
+    console.error(`用法:
+  dsh-hooks feishu-setup [--profile <name>]   扫码创建飞书通知机器人并自动配置
+  dsh-hooks feishu-test                       验证配置并发送测试卡片`)
+    process.exit(command === '--help' || command === 'help' || command === undefined ? 0 : 1)
+  }
+}
+
+if (isDirectRun()) runCli()

package/cordis.patch.yml

@@ -0,0 +1,7 @@
+# Mount the dsh-hooks plugin in any DSH profile that installs this package.
+# `insert` adds this plugin's row; `name` resolves through the profile's
+# node_modules. Hook definitions live in the profile's own cordis.patch.yml
+# config block (see README.zh.md), not here.
+- insert:
+    - id: dsh-hooks
+      name: dsh-hooks