dsh-lark-agent 0.1.1 → 0.2.0

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 dsh-larkbot contributors
+Copyright (c) 2026 dsh-lark-agent contributors
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -1,16 +1,16 @@
-<img src="https://raw.githubusercontent.com/Nirvana-Jie/dsh-larkbot/main/assets/plugin-icon.png" width="80" align="right" alt="dsh-larkbot icon">
+<img src="https://raw.githubusercontent.com/Nirvana-Jie/dsh-lark-agent/main/assets/plugin-icon.png" width="80" align="right" alt="dsh-lark-agent icon">
 
-# dsh-larkbot
+# dsh-lark-agent
 
-[中文](https://github.com/Nirvana-Jie/dsh-larkbot/blob/main/README_zh.md)
+[中文](https://github.com/Nirvana-Jie/dsh-lark-agent/blob/main/README_zh.md)
 
 [![npm version](https://img.shields.io/npm/v/dsh-lark-agent)](https://www.npmjs.com/package/dsh-lark-agent)
 
 **Reach your [DeepSeek Harness](https://www.deepseek.com/harness/) assistant from Feishu / Lark when you're away from your computer.**
 
-dsh-larkbot (npm package [`dsh-lark-agent`](https://www.npmjs.com/package/dsh-lark-agent)) adds a Feishu / Lark private chat to a running DeepSeek Harness: hand off tasks, talk through plans, and pick up earlier topics from your phone. Feishu gets its own sessions and never takes over chats already open in the desktop app or on the web.
+dsh-lark-agent adds a Feishu / Lark private chat to a running DeepSeek Harness: hand off tasks, talk through plans, and pick up earlier topics from your phone. Feishu gets its own sessions and never takes over chats already open in the desktop app or on the web.
 
-[![dsh-larkbot illustrated walkthrough (Feishu chat redrawn with demo data, not a screen recording): from the Harness settings page into a Feishu private chat that returns chart and form cards](https://raw.githubusercontent.com/Nirvana-Jie/dsh-larkbot/main/assets/readme/intro.gif)](https://github.com/Nirvana-Jie/dsh-larkbot/blob/main/assets/readme/intro.mp4)
+[![dsh-lark-agent illustrated walkthrough (Feishu chat redrawn with demo data, not a screen recording): from the Harness settings page into a Feishu private chat that returns chart and form cards](https://raw.githubusercontent.com/Nirvana-Jie/dsh-lark-agent/main/assets/readme/intro.gif)](https://github.com/Nirvana-Jie/dsh-lark-agent/blob/main/assets/readme/intro.mp4)
 
 ## Install / Update
 
@@ -30,7 +30,7 @@ Before you start:
 
 In the sidebar, open **插件 → 添加插件** (Plugins → Add plugin), enter `dsh-lark-agent`, click **安装** (Install), then **立即启用** (Enable now). Restart if the app asks.
 
-<img src="https://raw.githubusercontent.com/Nirvana-Jie/dsh-larkbot/main/assets/readme/desktop-install-02.jpg" width="720" alt="The Add plugin dialog in the DeepSeek Harness desktop app">
+<img src="https://raw.githubusercontent.com/Nirvana-Jie/dsh-lark-agent/main/assets/readme/desktop-install-02.jpg" width="720" alt="The Add plugin dialog in the DeepSeek Harness desktop app">
 
 ### Install with the `dsh` CLI
 
@@ -53,7 +53,7 @@ Then restart `dsh web`.
 
 ### Update
 
-1. On the Feishu settings page, click **暂停连接** (pause) and back up as described in [Upgrade](https://github.com/Nirvana-Jie/dsh-larkbot/blob/main/DEVELOPMENT.md#升级).
+1. On the Feishu settings page, click **暂停连接** (pause) and back up as described in [Upgrade](https://github.com/Nirvana-Jie/dsh-lark-agent/blob/main/DEVELOPMENT.md#升级).
 2. Desktop app: the Add plugin dialog says third-party plugins must be uninstalled before a new version is installed, so uninstall `dsh-lark-agent` on the Plugins page and add it again (this in-app upgrade hasn't been tested end to end yet; an earlier source build is listed as `dsh-larkbot`). CLI: run `dsh plugin --profile web update dsh-lark-agent@latest`, then restart `dsh web`.
 3. Click **恢复连接** (resume) and check that the bot replies.
 
@@ -72,7 +72,11 @@ The Feishu entry works only while the host is online: not when the app is closed
 
 | In Feishu, you… | The assistant… |
 | --- | --- |
-| Send a request | Shows a `Typing` reaction while it works (on by default for new bots), then replies in segments |
+| Send a request | Works on it with Harness's own tools (web search, reading pages, workspace files and more), streaming the reply live into one card, with its thinking and tool steps folded inside |
+| Ask for something that needs your OK | Sends a confirmation card: tap **允许一次** (allow once) or **拒绝** (deny); no answer within 5 minutes means it won't run |
+| Get asked to choose by Harness | Sends a choice card: tap an option, or fill it in and submit |
+| Use `/permission`, or 权限模式 in the model settings card | Switches between read-only, workspace edits and full access, like the app's permission selector; full access stops asking |
+| Ask for the result file | Sends files from its workspace straight to the chat |
 | Say "lead with the conclusion from now on" | Remembers the preference |
 | Keep chatting, or use `/sessions`, `/new` | Continues the topic, returns to an earlier one, or starts fresh |
 | Ask for a bar chart of some numbers | Replies with a native Feishu chart card |
@@ -80,14 +84,14 @@ The Feishu entry works only while the host is online: not when the app is closed
 | Ask for an architecture diagram or a report | Creates a Feishu doc (with a whiteboard for diagrams) shared read-only with you alone; in App `0.2.1-rc.2`, opening that Feishu session in the app also shows a local preview |
 | Use `/model`, `/thinking` | Switches between the host's configured models and thinking depth |
 
-By default it answers only your own private chat. Sessions and memory stay on the computer running Harness; messages pass through Feishu and your model provider.
+By default it answers only your own private chat. In that chat the assistant is your Harness itself: the tools it can use and the actions that need your confirmation follow the permission settings on your computer. Sessions and memory stay on the computer running Harness; messages pass through Feishu and your model provider.
 
 ## Good to know
 
-- **More docs**: commands, privacy, upgrades, the chat bottom menu, team deployment and troubleshooting are in [DEVELOPMENT.md](https://github.com/Nirvana-Jie/dsh-larkbot/blob/main/DEVELOPMENT.md) (Chinese).
+- **More docs**: commands, privacy, upgrades, the chat bottom menu, team deployment and troubleshooting are in [DEVELOPMENT.md](https://github.com/Nirvana-Jie/dsh-lark-agent/blob/main/DEVELOPMENT.md) (Chinese).
 - **Compatibility**: verified with PC App `0.2.1-rc.2` and `dsh` CLI / Web `0.1.1-rc.2`; other versions, platforms and tenants are not yet verified.
 - **Language**: the settings page, the bot's built-in messages (`/help`, status text, card buttons, bottom menu) and the intro video are in Chinese.
 
 ## License
 
-[MIT](https://github.com/Nirvana-Jie/dsh-larkbot/blob/main/LICENSE). DeepSeek and Feishu / Lark brand assets belong to their owners and are not covered by the MIT license; this is an independent open-source plugin, not an official product.
+[MIT](https://github.com/Nirvana-Jie/dsh-lark-agent/blob/main/LICENSE). DeepSeek and Feishu / Lark brand assets belong to their owners and are not covered by the MIT license; this is an independent open-source plugin, not an official product.

package/dist/bot-menu.d.ts

@@ -6,6 +6,7 @@ export declare const BOT_MENU_COMMANDS: Readonly<{
     readonly 'dsh.sessions': "/sessions";
     readonly 'dsh.model': "/model";
     readonly 'dsh.thinking': "/thinking";
+    readonly 'dsh.permission': "/permission";
 }>;
 export type BotMenuCommand = (typeof BOT_MENU_COMMANDS)[keyof typeof BOT_MENU_COMMANDS];
 export declare function botMenuCommand(eventKey: unknown): BotMenuCommand | undefined;

package/dist/bot-menu.js

@@ -6,6 +6,8 @@ export const BOT_MENU_COMMANDS = Object.freeze({
     'dsh.sessions': '/sessions',
     'dsh.model': '/model',
     'dsh.thinking': '/thinking',
+    // Optional: not in the default five-node menu; an owner may add it under 设置.
+    'dsh.permission': '/permission',
 });
 export function botMenuCommand(eventKey) {
     if (typeof eventKey !== 'string' || !Object.hasOwn(BOT_MENU_COMMANDS, eventKey))

package/dist/bot-service.js

@@ -13,6 +13,7 @@ import { DirectChatsStore } from './direct-chats.js';
 import { ModelPreferencesStore } from './model-preferences.js';
 import { ArtifactStore } from './artifacts.js';
 import { LarkArtifactPublisher } from './artifact-publisher.js';
+import { PermissionPreferencesStore } from './permission-preferences.js';
 /** A failed close is still an owned service, never a disposable startup error. */
 export class BotServiceStartError extends Error {
     service;
@@ -36,6 +37,7 @@ export async function createBotService(ctx, config, onHealth = () => undefined,
             SessionStore.open(config.stateDir), MemoryStore.open(config.stateDir),
             config.cardInteractions ? CardActions.open(config.stateDir, JSON.stringify([config.profile, config.botOpenId])) : undefined,
             DirectChatsStore.open(config.stateDir), ModelPreferencesStore.open(config.stateDir), ArtifactStore.open(config.stateDir),
+            PermissionPreferencesStore.open(config.stateDir),
         ];
         // An opener may create signing state: finish all openers before releasing
         // ownership after a sibling fails, so no old writer outlives the lock.
@@ -43,7 +45,7 @@ export async function createBotService(ctx, config, onHealth = () => undefined,
         const failed = openedStores.find(result => result.status === 'rejected');
         if (failed?.status === 'rejected')
             throw failed.reason;
-        const [sessions, memories, actions, directChats, modelPreferences, artifacts] = await Promise.all(openingStores);
+        const [sessions, memories, actions, directChats, modelPreferences, artifacts, permissionPreferences] = await Promise.all(openingStores);
         if (startup?.directChat) {
             const { openId, chatId } = startup.directChat;
             if (!config.users.some(user => user.openId === openId && user.direct))
@@ -59,7 +61,7 @@ export async function createBotService(ctx, config, onHealth = () => undefined,
             ? new LarkCli({ profile: config.profile, executable: config.executable, eventKey: 'application.bot.menu_v6' }) : undefined;
         const progressTransport = config.loadingReaction
             ? new LarkCli({ profile: config.profile, executable: config.executable, commandTimeoutMs: 5_000 }) : undefined;
-        const bridge = new BotBridge(config, new DshRuntime(ctx), transport, ledger, { sessions, memories, actions, directChats, modelPreferences, artifacts }, event => console.info(`[im-larkbot] ${JSON.stringify(event)}`), progressTransport, new LarkArtifactPublisher(config.profile, config.botOpenId, { executable: config.executable }));
+        const bridge = new BotBridge(config, new DshRuntime(ctx), transport, ledger, { sessions, memories, actions, directChats, modelPreferences, artifacts, permissionPreferences }, event => console.info(`[im-larkbot] ${JSON.stringify(event)}`), progressTransport, new LarkArtifactPublisher(config.profile, config.botOpenId, { executable: config.executable }));
         let stopped = false, started = false, healthy = false;
         const readiness = { messages: false, cards: !callbacks, menu: !menu };
         let stopping;

package/dist/bridge.d.ts

@@ -1,5 +1,5 @@
 import type { BotConfig } from './config.js';
-import type { AgentPolicy, RuntimeSession, ModelSelection, ModelCatalog } from './dsh-runtime.js';
+import type { AgentPolicy, RuntimeSession, ModelSelection, ModelCatalog, PermissionOption } from './dsh-runtime.js';
 import type { MessageLedger } from './ledger.js';
 import { type MemoryStore } from './memory-store.js';
 import { type SessionStore } from './session-store.js';
@@ -7,6 +7,7 @@ import type { CardActions } from './card-actions.js';
 import { type ReplyPayload } from './replies.js';
 import { type ProgressTransport } from './progress.js';
 import { type ModelPreferencesStore } from './model-preferences.js';
+import type { PermissionPreferencesStore } from './permission-preferences.js';
 import type { ArtifactStore } from './artifacts.js';
 import type { ArtifactPublisher } from './artifact-publisher.js';
 export interface Runtime {
@@ -14,6 +15,7 @@ export interface Runtime {
     resume(policy: AgentPolicy, id: string): Promise<RuntimeSession>;
     catalog?(): Promise<ModelCatalog>;
     resolveModelSelection?(selection?: ModelSelection): Promise<ModelSelection>;
+    permissionOptions?(): PermissionOption[];
 }
 export interface BotState {
     sessions: Pick<SessionStore, 'current' | 'list' | 'add' | 'activate' | 'archive' | 'rename' | 'touch'> & Partial<Pick<SessionStore, 'rebindNative'>>;
@@ -25,6 +27,7 @@ export interface BotState {
         record(openId: string, chatId: string): Promise<void>;
     };
     artifacts?: Pick<ArtifactStore, 'add' | 'get' | 'list' | 'claimPublish' | 'publication' | 'submit'>;
+    permissionPreferences?: Pick<PermissionPreferencesStore, 'get' | 'set'>;
 }
 export interface Transport {
     reply(messageId: string, text: string, options: {
@@ -50,6 +53,18 @@ export interface Transport {
         idempotencyKey: string;
     }): Promise<string>;
     updateFeedback?(messageId: string, payload: ReplyPayload): Promise<void>;
+    createCardEntity?(card: Record<string, unknown>): Promise<string>;
+    replyCardEntity?(messageId: string, cardId: string, options: {
+        idempotencyKey: string;
+        inThread: boolean;
+    }): Promise<void>;
+    streamCardText?(cardId: string, elementId: string, content: string, sequence: number): Promise<void>;
+    updateCardEntity?(cardId: string, card: Record<string, unknown>, sequence: number): Promise<void>;
+    replyFile?(messageId: string, path: string, options: {
+        idempotencyKey: string;
+        inThread: boolean;
+        image: boolean;
+    }): Promise<void>;
 }
 export type Audit = (event: {
     stage: string;
@@ -76,12 +91,29 @@ export declare class BotBridge {
     private readonly failedDisposals;
     private cardActionsReady;
     private readonly progress;
+    private readonly interactions;
+    private liveUnavailableUntil;
     constructor(config: BotConfig, runtime: Runtime, transport: Transport, ledger: MessageLedger, state: BotState, audit?: Audit, progressTransport?: ProgressTransport, artifactPublisher?: ArtifactPublisher | undefined);
     setCardActionsReady(ready: boolean): void;
     private parseIncoming;
     accept(raw: unknown): Promise<void>;
     private acceptMessage;
     private process;
+    /** Whether this message's reply streams into a live card, which makes the typing reaction redundant. */
+    private streams;
+    private liveTransport;
+    private canInteract;
+    private issueAction;
+    /** Ask the owner about one Harness approval. Anything but an explicit allow denies the call. */
+    private approve;
+    /** Ask the owner a Harness question. Without an answer the host gets an error and continues. */
+    private ask;
+    private waitForAnswer;
+    private openInteraction;
+    private closeInteraction;
+    private answerInteraction;
+    /** Send files the host's delivery tool presented, from this user's workspace only. */
+    private deliverFiles;
     private commandFeedback;
     private context;
     private sessionContext;
@@ -90,6 +122,15 @@ export declare class BotBridge {
     private bindRestoredSession;
     private unload;
     private command;
+    private harness;
+    /** The host's presets, from the live session when there is one. Undefined when the host offers none. */
+    private permissionView;
+    /** What this chat runs: the live session's preset, else the chat's saved choice. */
+    private permissionChoice;
+    /** Owner-only: switch this private chat's Harness permission preset, like the App's selector. */
+    private permissionCommand;
+    /** Bring a newly opened harness session to the chat's saved permission preset. */
+    private applyPermission;
     private modelState;
     private modelCommand;
     private commandPanel;