dsh-lark-agent 0.1.2 → 0.2.0

package/README.md

@@ -72,7 +72,11 @@ The Feishu entry works only while the host is online: not when the app is closed
 
 | In Feishu, you… | The assistant… |
 | --- | --- |
-| Send a request | Shows a `Typing` reaction while it works (on by default for new bots), then replies in segments |
+| Send a request | Works on it with Harness's own tools (web search, reading pages, workspace files and more), streaming the reply live into one card, with its thinking and tool steps folded inside |
+| Ask for something that needs your OK | Sends a confirmation card: tap **允许一次** (allow once) or **拒绝** (deny); no answer within 5 minutes means it won't run |
+| Get asked to choose by Harness | Sends a choice card: tap an option, or fill it in and submit |
+| Use `/permission`, or 权限模式 in the model settings card | Switches between read-only, workspace edits and full access, like the app's permission selector; full access stops asking |
+| Ask for the result file | Sends files from its workspace straight to the chat |
 | Say "lead with the conclusion from now on" | Remembers the preference |
 | Keep chatting, or use `/sessions`, `/new` | Continues the topic, returns to an earlier one, or starts fresh |
 | Ask for a bar chart of some numbers | Replies with a native Feishu chart card |
@@ -80,7 +84,7 @@ The Feishu entry works only while the host is online: not when the app is closed
 | Ask for an architecture diagram or a report | Creates a Feishu doc (with a whiteboard for diagrams) shared read-only with you alone; in App `0.2.1-rc.2`, opening that Feishu session in the app also shows a local preview |
 | Use `/model`, `/thinking` | Switches between the host's configured models and thinking depth |
 
-By default it answers only your own private chat. Sessions and memory stay on the computer running Harness; messages pass through Feishu and your model provider.
+By default it answers only your own private chat. In that chat the assistant is your Harness itself: the tools it can use and the actions that need your confirmation follow the permission settings on your computer. Sessions and memory stay on the computer running Harness; messages pass through Feishu and your model provider.
 
 ## Good to know
 

package/dist/bot-menu.d.ts

@@ -6,6 +6,7 @@ export declare const BOT_MENU_COMMANDS: Readonly<{
     readonly 'dsh.sessions': "/sessions";
     readonly 'dsh.model': "/model";
     readonly 'dsh.thinking': "/thinking";
+    readonly 'dsh.permission': "/permission";
 }>;
 export type BotMenuCommand = (typeof BOT_MENU_COMMANDS)[keyof typeof BOT_MENU_COMMANDS];
 export declare function botMenuCommand(eventKey: unknown): BotMenuCommand | undefined;

package/dist/bot-menu.js

@@ -6,6 +6,8 @@ export const BOT_MENU_COMMANDS = Object.freeze({
     'dsh.sessions': '/sessions',
     'dsh.model': '/model',
     'dsh.thinking': '/thinking',
+    // Optional: not in the default five-node menu; an owner may add it under 设置.
+    'dsh.permission': '/permission',
 });
 export function botMenuCommand(eventKey) {
     if (typeof eventKey !== 'string' || !Object.hasOwn(BOT_MENU_COMMANDS, eventKey))

package/dist/bot-service.js

@@ -13,6 +13,7 @@ import { DirectChatsStore } from './direct-chats.js';
 import { ModelPreferencesStore } from './model-preferences.js';
 import { ArtifactStore } from './artifacts.js';
 import { LarkArtifactPublisher } from './artifact-publisher.js';
+import { PermissionPreferencesStore } from './permission-preferences.js';
 /** A failed close is still an owned service, never a disposable startup error. */
 export class BotServiceStartError extends Error {
     service;
@@ -36,6 +37,7 @@ export async function createBotService(ctx, config, onHealth = () => undefined,
             SessionStore.open(config.stateDir), MemoryStore.open(config.stateDir),
             config.cardInteractions ? CardActions.open(config.stateDir, JSON.stringify([config.profile, config.botOpenId])) : undefined,
             DirectChatsStore.open(config.stateDir), ModelPreferencesStore.open(config.stateDir), ArtifactStore.open(config.stateDir),
+            PermissionPreferencesStore.open(config.stateDir),
         ];
         // An opener may create signing state: finish all openers before releasing
         // ownership after a sibling fails, so no old writer outlives the lock.
@@ -43,7 +45,7 @@ export async function createBotService(ctx, config, onHealth = () => undefined,
         const failed = openedStores.find(result => result.status === 'rejected');
         if (failed?.status === 'rejected')
             throw failed.reason;
-        const [sessions, memories, actions, directChats, modelPreferences, artifacts] = await Promise.all(openingStores);
+        const [sessions, memories, actions, directChats, modelPreferences, artifacts, permissionPreferences] = await Promise.all(openingStores);
         if (startup?.directChat) {
             const { openId, chatId } = startup.directChat;
             if (!config.users.some(user => user.openId === openId && user.direct))
@@ -59,7 +61,7 @@ export async function createBotService(ctx, config, onHealth = () => undefined,
             ? new LarkCli({ profile: config.profile, executable: config.executable, eventKey: 'application.bot.menu_v6' }) : undefined;
         const progressTransport = config.loadingReaction
             ? new LarkCli({ profile: config.profile, executable: config.executable, commandTimeoutMs: 5_000 }) : undefined;
-        const bridge = new BotBridge(config, new DshRuntime(ctx), transport, ledger, { sessions, memories, actions, directChats, modelPreferences, artifacts }, event => console.info(`[im-larkbot] ${JSON.stringify(event)}`), progressTransport, new LarkArtifactPublisher(config.profile, config.botOpenId, { executable: config.executable }));
+        const bridge = new BotBridge(config, new DshRuntime(ctx), transport, ledger, { sessions, memories, actions, directChats, modelPreferences, artifacts, permissionPreferences }, event => console.info(`[im-larkbot] ${JSON.stringify(event)}`), progressTransport, new LarkArtifactPublisher(config.profile, config.botOpenId, { executable: config.executable }));
         let stopped = false, started = false, healthy = false;
         const readiness = { messages: false, cards: !callbacks, menu: !menu };
         let stopping;

package/dist/bridge.d.ts

@@ -1,5 +1,5 @@
 import type { BotConfig } from './config.js';
-import type { AgentPolicy, RuntimeSession, ModelSelection, ModelCatalog } from './dsh-runtime.js';
+import type { AgentPolicy, RuntimeSession, ModelSelection, ModelCatalog, PermissionOption } from './dsh-runtime.js';
 import type { MessageLedger } from './ledger.js';
 import { type MemoryStore } from './memory-store.js';
 import { type SessionStore } from './session-store.js';
@@ -7,6 +7,7 @@ import type { CardActions } from './card-actions.js';
 import { type ReplyPayload } from './replies.js';
 import { type ProgressTransport } from './progress.js';
 import { type ModelPreferencesStore } from './model-preferences.js';
+import type { PermissionPreferencesStore } from './permission-preferences.js';
 import type { ArtifactStore } from './artifacts.js';
 import type { ArtifactPublisher } from './artifact-publisher.js';
 export interface Runtime {
@@ -14,6 +15,7 @@ export interface Runtime {
     resume(policy: AgentPolicy, id: string): Promise<RuntimeSession>;
     catalog?(): Promise<ModelCatalog>;
     resolveModelSelection?(selection?: ModelSelection): Promise<ModelSelection>;
+    permissionOptions?(): PermissionOption[];
 }
 export interface BotState {
     sessions: Pick<SessionStore, 'current' | 'list' | 'add' | 'activate' | 'archive' | 'rename' | 'touch'> & Partial<Pick<SessionStore, 'rebindNative'>>;
@@ -25,6 +27,7 @@ export interface BotState {
         record(openId: string, chatId: string): Promise<void>;
     };
     artifacts?: Pick<ArtifactStore, 'add' | 'get' | 'list' | 'claimPublish' | 'publication' | 'submit'>;
+    permissionPreferences?: Pick<PermissionPreferencesStore, 'get' | 'set'>;
 }
 export interface Transport {
     reply(messageId: string, text: string, options: {
@@ -50,6 +53,18 @@ export interface Transport {
         idempotencyKey: string;
     }): Promise<string>;
     updateFeedback?(messageId: string, payload: ReplyPayload): Promise<void>;
+    createCardEntity?(card: Record<string, unknown>): Promise<string>;
+    replyCardEntity?(messageId: string, cardId: string, options: {
+        idempotencyKey: string;
+        inThread: boolean;
+    }): Promise<void>;
+    streamCardText?(cardId: string, elementId: string, content: string, sequence: number): Promise<void>;
+    updateCardEntity?(cardId: string, card: Record<string, unknown>, sequence: number): Promise<void>;
+    replyFile?(messageId: string, path: string, options: {
+        idempotencyKey: string;
+        inThread: boolean;
+        image: boolean;
+    }): Promise<void>;
 }
 export type Audit = (event: {
     stage: string;
@@ -76,12 +91,29 @@ export declare class BotBridge {
     private readonly failedDisposals;
     private cardActionsReady;
     private readonly progress;
+    private readonly interactions;
+    private liveUnavailableUntil;
     constructor(config: BotConfig, runtime: Runtime, transport: Transport, ledger: MessageLedger, state: BotState, audit?: Audit, progressTransport?: ProgressTransport, artifactPublisher?: ArtifactPublisher | undefined);
     setCardActionsReady(ready: boolean): void;
     private parseIncoming;
     accept(raw: unknown): Promise<void>;
     private acceptMessage;
     private process;
+    /** Whether this message's reply streams into a live card, which makes the typing reaction redundant. */
+    private streams;
+    private liveTransport;
+    private canInteract;
+    private issueAction;
+    /** Ask the owner about one Harness approval. Anything but an explicit allow denies the call. */
+    private approve;
+    /** Ask the owner a Harness question. Without an answer the host gets an error and continues. */
+    private ask;
+    private waitForAnswer;
+    private openInteraction;
+    private closeInteraction;
+    private answerInteraction;
+    /** Send files the host's delivery tool presented, from this user's workspace only. */
+    private deliverFiles;
     private commandFeedback;
     private context;
     private sessionContext;
@@ -90,6 +122,15 @@ export declare class BotBridge {
     private bindRestoredSession;
     private unload;
     private command;
+    private harness;
+    /** The host's presets, from the live session when there is one. Undefined when the host offers none. */
+    private permissionView;
+    /** What this chat runs: the live session's preset, else the chat's saved choice. */
+    private permissionChoice;
+    /** Owner-only: switch this private chat's Harness permission preset, like the App's selector. */
+    private permissionCommand;
+    /** Bring a newly opened harness session to the chat's saved permission preset. */
+    private applyPermission;
     private modelState;
     private modelCommand;
     private commandPanel;