dsh-lark-agent 0.1.2 → 0.2.0

package/dist/permission-preferences.js

@@ -0,0 +1,169 @@
+import { randomUUID } from 'node:crypto';
+import { constants } from 'node:fs';
+import { chmod, lstat, mkdir, open, rename, unlink } from 'node:fs/promises';
+import { join, resolve } from 'node:path';
+/** Safe for chat replies: no identity keys, paths or I/O details. */
+export class PermissionPreferencesError extends Error {
+    code;
+    constructor(code) {
+        super({
+            INVALID_INPUT: '权限设置参数无效，请重新打开权限模式后选择。',
+            CAPACITY: '权限设置数量已达到上限，已有设置会保留。',
+            CORRUPT: '权限设置无法安全读取，请管理员检查本地状态文件；已有记录未被清空。',
+            WRITE_FAILED: '权限设置未能保存，请稍后重试。',
+            UNAVAILABLE: '权限设置的保存结果未能确认，请管理员检查后重新启动。',
+        }[code]);
+        this.code = code;
+        this.name = 'PermissionPreferencesError';
+    }
+}
+const FILE_NAME = 'permission-preferences.json';
+const MAX_ENTRIES = 10_000;
+const MAX_FILE_BYTES = 4 * 1024 * 1024;
+const PRESET = /^[a-z][a-z0-9-]{0,39}$/;
+const KEY = (value) => typeof value === 'string' && value.length > 0 && value.length <= 512
+    && !/[\u0000-\u001f\u007f]/.test(value);
+function snapshot(context) {
+    if (!context || typeof context !== 'object' || !KEY(context.ownerKey) || !KEY(context.conversationKey)) {
+        throw new PermissionPreferencesError('INVALID_INPUT');
+    }
+    return { ownerKey: context.ownerKey, conversationKey: context.conversationKey };
+}
+function parse(value) {
+    const input = value;
+    if (!input || typeof input !== 'object' || Object.keys(input).some(key => key !== 'version' && key !== 'entries')
+        || input.version !== 1 || !Array.isArray(input.entries) || input.entries.length > MAX_ENTRIES)
+        throw new Error();
+    const seen = new Set();
+    const entries = input.entries.map((raw) => {
+        const row = raw;
+        if (!row || typeof row !== 'object' || Array.isArray(row) || Object.keys(row).some(key => !['ownerKey', 'conversationKey', 'preset'].includes(key))
+            || typeof row.preset !== 'string' || !PRESET.test(row.preset))
+            throw new Error();
+        const context = snapshot(row);
+        const identity = JSON.stringify([context.ownerKey, context.conversationKey]);
+        if (seen.has(identity))
+            throw new Error();
+        seen.add(identity);
+        return { ...context, preset: row.preset };
+    });
+    return { version: 1, entries };
+}
+/**
+ * The permission preset a private chat chose in Feishu. It applies to that
+ * chat's sessions only; the host's own default for other sessions is untouched.
+ * One bot process owns this store under its state-directory lock.
+ */
+export class PermissionPreferencesStore {
+    directory;
+    document = { version: 1, entries: [] };
+    tail = Promise.resolve();
+    uncertain = false;
+    constructor(directory) {
+        this.directory = directory;
+    }
+    static async open(directory) {
+        if (typeof directory !== 'string' || !directory.trim() || directory.includes('\0'))
+            throw new PermissionPreferencesError('INVALID_INPUT');
+        const store = new PermissionPreferencesStore(resolve(directory));
+        try {
+            await mkdir(store.directory, { recursive: true, mode: 0o700 });
+            const info = await lstat(store.directory);
+            if (!info.isDirectory() || info.isSymbolicLink())
+                throw new Error();
+            await chmod(store.directory, 0o700);
+            const path = join(store.directory, FILE_NAME);
+            let file;
+            try {
+                file = await lstat(path);
+            }
+            catch (error) {
+                if (error.code === 'ENOENT')
+                    return store;
+                throw error;
+            }
+            if (!file.isFile() || file.isSymbolicLink() || file.size > MAX_FILE_BYTES)
+                throw new Error();
+            const handle = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+            try {
+                const actual = await handle.stat();
+                if (!actual.isFile() || actual.dev !== file.dev || actual.ino !== file.ino || actual.size > MAX_FILE_BYTES)
+                    throw new Error();
+                const text = new TextDecoder('utf-8', { fatal: true }).decode(await handle.readFile());
+                if (Buffer.byteLength(text) !== actual.size)
+                    throw new Error();
+                store.document = parse(JSON.parse(text));
+                await handle.chmod(0o600);
+            }
+            finally {
+                await handle.close();
+            }
+            return store;
+        }
+        catch {
+            throw new PermissionPreferencesError('CORRUPT');
+        }
+    }
+    async get(context) {
+        const identity = snapshot(context);
+        await this.tail;
+        if (this.uncertain)
+            throw new PermissionPreferencesError('UNAVAILABLE');
+        return this.document.entries.find(entry => entry.ownerKey === identity.ownerKey && entry.conversationKey === identity.conversationKey)?.preset;
+    }
+    async set(context, preset) {
+        const identity = snapshot(context);
+        if (typeof preset !== 'string' || !PRESET.test(preset))
+            throw new PermissionPreferencesError('INVALID_INPUT');
+        const job = this.tail.then(async () => {
+            if (this.uncertain)
+                throw new PermissionPreferencesError('UNAVAILABLE');
+            const previous = this.document.entries.find(entry => entry.ownerKey === identity.ownerKey && entry.conversationKey === identity.conversationKey);
+            if (previous?.preset === preset)
+                return;
+            if (!previous && this.document.entries.length >= MAX_ENTRIES)
+                throw new PermissionPreferencesError('CAPACITY');
+            const value = { ...identity, preset };
+            const entries = previous ? this.document.entries.map(entry => entry === previous ? value : entry) : [...this.document.entries, value];
+            const draft = { version: 1, entries };
+            await this.persist(draft);
+            this.document = draft;
+        });
+        this.tail = job.catch(() => undefined);
+        return job;
+    }
+    async persist(document) {
+        const content = JSON.stringify(document) + '\n';
+        if (Buffer.byteLength(content) > MAX_FILE_BYTES)
+            throw new PermissionPreferencesError('CAPACITY');
+        const temporary = join(this.directory, `permission-preferences.${randomUUID()}.tmp`);
+        let publicationAttempted = false;
+        try {
+            const handle = await open(temporary, 'wx', 0o600);
+            try {
+                await handle.writeFile(content, 'utf8');
+                await handle.sync();
+            }
+            finally {
+                await handle.close();
+            }
+            // A rejected rename may leave publication uncertain; never overwrite from stale memory afterwards.
+            publicationAttempted = true;
+            await rename(temporary, join(this.directory, FILE_NAME));
+            const directory = await open(this.directory, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+            try {
+                await directory.sync();
+            }
+            finally {
+                await directory.close();
+            }
+        }
+        catch {
+            if (publicationAttempted)
+                this.uncertain = true;
+            await unlink(temporary).catch(() => undefined);
+            throw new PermissionPreferencesError(publicationAttempted ? 'UNAVAILABLE' : 'WRITE_FAILED');
+        }
+    }
+}
+//# sourceMappingURL=permission-preferences.js.map

package/dist/presentation.d.ts

@@ -55,9 +55,16 @@ export type PresentationDraft = DraftBase & ({
     kind: 'form';
     content: FormContent;
 });
+/** A file the host's own delivery tool presented; the path is absolute and not yet validated for upload. */
+export interface DeliveredFile {
+    path: string;
+    description: string;
+}
 export interface TurnResult {
     text: string;
     artifacts: PresentationDraft[];
+    reasoning?: string;
+    files?: DeliveredFile[];
 }
 export declare const PRESENT_TOOL = "lark_present";
 export declare const PRESENTATION_GUIDE = "\u9700\u8981\u56FE\u8868\u3001\u6D41\u7A0B\u56FE\u3001\u957F\u62A5\u544A\u6216\u6536\u96C6\u9009\u9879\u65F6\uFF0C\u53EF\u4EE5\u8C03\u7528 lark_present\u3002\u666E\u901A\u804A\u5929\u548C\u4EE3\u7801\u89E3\u91CA\u76F4\u63A5\u7528\u6587\u5B57\u3002\u5DE5\u5177\u53EA\u51C6\u5907\u5F53\u524D\u804A\u5929\u7684\u5C55\u793A\u5185\u5BB9\uFF0C\u4E0D\u6267\u884C HTML/JavaScript\uFF0C\u4E0D\u8BFB\u53D6\u6587\u4EF6\uFF0C\u4E0D\u6269\u5927\u4EFB\u4F55\u4EBA\u7684\u6743\u9650\u3002\u56FE\u8868\u6570\u636E\u5FC5\u987B\u6765\u81EA\u7528\u6237\u6216\u5DF2\u6838\u5B9E\u7684\u8D44\u6599\uFF1B\u793A\u4F8B\u6570\u636E\u5FC5\u987B\u5728\u6807\u9898\u6216\u6458\u8981\u6807\u660E\u201C\u793A\u4F8B\u201D\u3002\u8868\u5355\u53EA\u6536\u96C6\u5B8C\u6210\u5F53\u524D\u4EFB\u52A1\u5FC5\u9700\u7684\u666E\u901A\u4FE1\u606F\uFF0C\u4E0D\u7D22\u53D6\u5BC6\u7801\u3001\u5BC6\u94A5\u6216\u5176\u4ED6\u654F\u611F\u51ED\u636E\u3002\u4E0D\u8981\u91CD\u590D\u8F93\u51FA\u5DF2\u63D0\u4EA4\u5DE5\u5177\u7684\u6574\u4EFD\u5185\u5BB9\uFF0C\u4E5F\u4E0D\u8981\u58F0\u79F0\u5DF2\u521B\u5EFA\u4E91\u6587\u6863\u6216\u94FE\u63A5\uFF1B\u4EE5\u7CFB\u7EDF\u6700\u7EC8\u5C55\u793A\u7ED3\u679C\u4E3A\u51C6\u3002\u4FEE\u6539\u5DF2\u5C55\u793A\u4F5C\u54C1\u65F6\uFF0C\u53EA\u4F7F\u7528\u5F53\u524D\u804A\u5929\u63D0\u4F9B\u7684\u4F5C\u54C1 ID \u4F5C\u4E3A replaces\uFF0C\u4FDD\u7559\u539F\u7248\u3002";

package/dist/replies.d.ts

@@ -41,6 +41,11 @@ export interface ReplyPanel {
  * Text messages understand native mentions even inside Markdown code fences.
  */
 export declare function safePlainText(text: string): string;
+/** Model text for a card markdown element, with platform extensions made inert. */
+export declare function cardMarkdown(text: string): string;
+/** Top-level blocks split at blank lines outside code fences, for cutting long text without breaking Markdown. */
+export declare function markdownBlocks(text: string): string[];
+export declare function plainLabel(text: string, limit: number): string;
 /** Trusted application panels only. Model strings never choose components or callback values. */
 export declare function renderPanel(panel: ReplyPanel): ReplyPayload;
 /** Select presentation without asking the model to generate arbitrary card JSON. */

package/dist/replies.js

@@ -130,7 +130,15 @@ function markdown(text) {
         blocks.push(block);
     return { text: output, balanced: !fence, blocks };
 }
-function plainLabel(text, limit) {
+/** Model text for a card markdown element, with platform extensions made inert. */
+export function cardMarkdown(text) {
+    return markdown(text).text;
+}
+/** Top-level blocks split at blank lines outside code fences, for cutting long text without breaking Markdown. */
+export function markdownBlocks(text) {
+    return markdown(text).blocks;
+}
+export function plainLabel(text, limit) {
     return pointSlice(text.replace(/<[^>]*>/g, '').replace(/[\u0000-\u001f\u007f-\u009f]/g, ' ')
         .replace(/!?(\[([^\]]+)\])\([^)]*\)/g, '$2').replace(/[`*#_~]/g, '').replace(/\s+/g, ' ').trim(), limit);
 }

package/dist/rich-scopes.d.ts

@@ -1,3 +1,7 @@
 /** Default document/board capabilities, authorized at registration. Bot-only; no broad drive access. */
 export declare const DOCUMENT_SCOPES: readonly ["application:application:self_manage", "docx:document:create", "docx:document:write_only", "docx:document:readonly", "board:whiteboard:node:create", "board:whiteboard:node:read", "docs:permission.setting:write_only", "docs:permission.setting:read", "docs:permission.member:create", "docs:permission.member:retrieve", "im:resource:upload"];
+/** Lets a harness-mode private chat stream its reply, reasoning and tool progress into one card. */
+export declare const STREAMING_SCOPE = "cardkit:card:write";
 export declare function documentScopesReady(scopes: readonly string[], diagram?: boolean): boolean;
+/** Everything the owner-confirmed "default permissions" step grants: documents, boards and streaming replies. */
+export declare function defaultScopesReady(scopes: readonly string[]): boolean;

package/dist/rich-scopes.js

@@ -2,6 +2,8 @@
 export const DOCUMENT_SCOPES = ['application:application:self_manage', 'docx:document:create', 'docx:document:write_only', 'docx:document:readonly',
     'board:whiteboard:node:create', 'board:whiteboard:node:read', 'docs:permission.setting:write_only',
     'docs:permission.setting:read', 'docs:permission.member:create', 'docs:permission.member:retrieve', 'im:resource:upload'];
+/** Lets a harness-mode private chat stream its reply, reasoning and tool progress into one card. */
+export const STREAMING_SCOPE = 'cardkit:card:write';
 export function documentScopesReady(scopes, diagram = true) {
     const granted = new Set(scopes);
     const groups = [
@@ -12,4 +14,8 @@ export function documentScopesReady(scopes, diagram = true) {
     ];
     return groups.every(group => group.some(scope => granted.has(scope)));
 }
+/** Everything the owner-confirmed "default permissions" step grants: documents, boards and streaming replies. */
+export function defaultScopesReady(scopes) {
+    return documentScopesReady(scopes) && scopes.includes(STREAMING_SCOPE);
+}
 //# sourceMappingURL=rich-scopes.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-lark-agent",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "description": "Reach your DeepSeek Harness assistant from Feishu / Lark: a dsh plugin built on the official Lark CLI",
   "keywords": [
     "deepseek",