dsh-lark-agent 0.1.2 → 0.3.0

package/README.md

@@ -16,7 +16,7 @@ dsh-lark-agent adds a Feishu / Lark private chat to a running DeepSeek Harness:
 
 Before you start:
 
-- DeepSeek Harness is running, can chat, and has a default model selected: PC App `0.2.1-rc.2`, or Web / `dsh` CLI `0.1.1-rc.2`.
+- DeepSeek Harness is running, can chat, and has a default model selected: PC App `0.2.1-rc.3` (`0.2.1-rc.2` also works), or Web / `dsh` CLI `0.1.1-rc.2`.
 - The official Lark CLI is installed on the same machine **before** you enable the plugin (needs Node.js / npm):
 
   ```sh
@@ -72,20 +72,24 @@ The Feishu entry works only while the host is online: not when the app is closed
 
 | In Feishu, you… | The assistant… |
 | --- | --- |
-| Send a request | Shows a `Typing` reaction while it works (on by default for new bots), then replies in segments |
+| Send a request | Works on it with Harness's own tools (web search, reading pages, workspace files and more), streaming the reply live into one card; its thinking and tool steps are folded inside, step by step as in the app, and the card ends with the model, thinking depth and permission mode it used |
+| Ask for something that needs your OK | Sends a confirmation card: tap **允许一次** (allow once) or **拒绝** (deny); no answer within 5 minutes means it won't run |
+| Get asked to choose by Harness | Sends a choice card: tap an option, or fill it in and submit |
+| Use `/permission`, or **设置 → 权限模式** (Settings → Permission mode) in the bottom menu | Switches between read-only, workspace edits and full access, like the app's permission selector; full access stops asking. The card you tap updates in place and turns green when done |
+| Ask for the result file | Sends files from its workspace straight to the chat |
 | Say "lead with the conclusion from now on" | Remembers the preference |
 | Keep chatting, or use `/sessions`, `/new` | Continues the topic, returns to an earlier one, or starts fresh |
 | Ask for a bar chart of some numbers | Replies with a native Feishu chart card |
 | Ask it to let you pick between options first | Sends a form card and continues once you submit |
-| Ask for an architecture diagram or a report | Creates a Feishu doc (with a whiteboard for diagrams) shared read-only with you alone; in App `0.2.1-rc.2`, opening that Feishu session in the app also shows a local preview |
-| Use `/model`, `/thinking` | Switches between the host's configured models and thinking depth |
+| Ask for an architecture diagram or a report | Creates a Feishu doc (with a whiteboard for diagrams) shared read-only with you alone; in App `0.2.1-rc.2` / `rc.3`, opening that Feishu session in the app also shows a local preview |
+| Use `/model`, `/thinking` | Switches between the host's configured models and thinking depth, in sync with Harness on your computer (App `0.2.1-rc.2` / `rc.3`) |
 
-By default it answers only your own private chat. Sessions and memory stay on the computer running Harness; messages pass through Feishu and your model provider.
+By default it answers only your own private chat. In that chat the assistant is your Harness itself: the tools it can use and the actions that need your confirmation follow the permission settings on your computer. Sessions and memory stay on the computer running Harness; messages pass through Feishu and your model provider.
 
 ## Good to know
 
 - **More docs**: commands, privacy, upgrades, the chat bottom menu, team deployment and troubleshooting are in [DEVELOPMENT.md](https://github.com/Nirvana-Jie/dsh-lark-agent/blob/main/DEVELOPMENT.md) (Chinese).
-- **Compatibility**: verified with PC App `0.2.1-rc.2` and `dsh` CLI / Web `0.1.1-rc.2`; other versions, platforms and tenants are not yet verified.
+- **Compatibility**: fully verified with PC App `0.2.1-rc.2` and `dsh` CLI / Web `0.1.1-rc.2`. PC App `0.2.1-rc.3` passes the real-host contract tests, and the plugin loads and connects on it (first-time QR setup on rc.3 is not tested yet). Other versions, platforms and tenants are not yet verified.
 - **Language**: the settings page, the bot's built-in messages (`/help`, status text, card buttons, bottom menu) and the intro video are in Chinese.
 
 ## License

package/dist/bot-menu.d.ts

@@ -6,6 +6,7 @@ export declare const BOT_MENU_COMMANDS: Readonly<{
     readonly 'dsh.sessions': "/sessions";
     readonly 'dsh.model': "/model";
     readonly 'dsh.thinking': "/thinking";
+    readonly 'dsh.permission': "/permission";
 }>;
 export type BotMenuCommand = (typeof BOT_MENU_COMMANDS)[keyof typeof BOT_MENU_COMMANDS];
 export declare function botMenuCommand(eventKey: unknown): BotMenuCommand | undefined;
@@ -19,7 +20,8 @@ export interface BotMenuNode {
 }
 /**
  * Public Application Ability PATCH payload. Publishing is a separate admin action.
- * Five flat nodes fit both documented floating-menu limit variants.
+ * Three top-level nodes with three children fit both documented floating-menu
+ * limit variants (at most five per level and ten in all).
  * Text actions cannot separate a friendly label from the text they send.
  */
 export declare function buildBotMenuAbility(): {

package/dist/bot-menu.js

@@ -6,6 +6,7 @@ export const BOT_MENU_COMMANDS = Object.freeze({
     'dsh.sessions': '/sessions',
     'dsh.model': '/model',
     'dsh.thinking': '/thinking',
+    'dsh.permission': '/permission',
 });
 export function botMenuCommand(eventKey) {
     if (typeof eventKey !== 'string' || !Object.hasOwn(BOT_MENU_COMMANDS, eventKey))
@@ -14,7 +15,8 @@ export function botMenuCommand(eventKey) {
 }
 /**
  * Public Application Ability PATCH payload. Publishing is a separate admin action.
- * Five flat nodes fit both documented floating-menu limit variants.
+ * Three top-level nodes with three children fit both documented floating-menu
+ * limit variants (at most five per level and ten in all).
  * Text actions cannot separate a friendly label from the text they send.
  */
 export function buildBotMenuAbility() {
@@ -24,6 +26,7 @@ export function buildBotMenuAbility() {
                 { menu_id: 'dsh_settings', sort: 2, default_name: '设置', menu_content_type: 3 },
                 { menu_id: 'dsh_model', parent_menu_id: 'dsh_settings', sort: 0, default_name: '模型', menu_content_type: 2, event_key: 'dsh.model' },
                 { menu_id: 'dsh_thinking', parent_menu_id: 'dsh_settings', sort: 1, default_name: '思考深度', menu_content_type: 2, event_key: 'dsh.thinking' },
+                { menu_id: 'dsh_permission', parent_menu_id: 'dsh_settings', sort: 2, default_name: '权限模式', menu_content_type: 2, event_key: 'dsh.permission' },
             ] } };
 }
 /** Pure review/export plan: this module never invokes an API or changes an app. */

package/dist/bot-service.js

@@ -13,6 +13,7 @@ import { DirectChatsStore } from './direct-chats.js';
 import { ModelPreferencesStore } from './model-preferences.js';
 import { ArtifactStore } from './artifacts.js';
 import { LarkArtifactPublisher } from './artifact-publisher.js';
+import { PermissionPreferencesStore } from './permission-preferences.js';
 /** A failed close is still an owned service, never a disposable startup error. */
 export class BotServiceStartError extends Error {
     service;
@@ -36,6 +37,7 @@ export async function createBotService(ctx, config, onHealth = () => undefined,
             SessionStore.open(config.stateDir), MemoryStore.open(config.stateDir),
             config.cardInteractions ? CardActions.open(config.stateDir, JSON.stringify([config.profile, config.botOpenId])) : undefined,
             DirectChatsStore.open(config.stateDir), ModelPreferencesStore.open(config.stateDir), ArtifactStore.open(config.stateDir),
+            PermissionPreferencesStore.open(config.stateDir),
         ];
         // An opener may create signing state: finish all openers before releasing
         // ownership after a sibling fails, so no old writer outlives the lock.
@@ -43,7 +45,7 @@ export async function createBotService(ctx, config, onHealth = () => undefined,
         const failed = openedStores.find(result => result.status === 'rejected');
         if (failed?.status === 'rejected')
             throw failed.reason;
-        const [sessions, memories, actions, directChats, modelPreferences, artifacts] = await Promise.all(openingStores);
+        const [sessions, memories, actions, directChats, modelPreferences, artifacts, permissionPreferences] = await Promise.all(openingStores);
         if (startup?.directChat) {
             const { openId, chatId } = startup.directChat;
             if (!config.users.some(user => user.openId === openId && user.direct))
@@ -59,7 +61,7 @@ export async function createBotService(ctx, config, onHealth = () => undefined,
             ? new LarkCli({ profile: config.profile, executable: config.executable, eventKey: 'application.bot.menu_v6' }) : undefined;
         const progressTransport = config.loadingReaction
             ? new LarkCli({ profile: config.profile, executable: config.executable, commandTimeoutMs: 5_000 }) : undefined;
-        const bridge = new BotBridge(config, new DshRuntime(ctx), transport, ledger, { sessions, memories, actions, directChats, modelPreferences, artifacts }, event => console.info(`[im-larkbot] ${JSON.stringify(event)}`), progressTransport, new LarkArtifactPublisher(config.profile, config.botOpenId, { executable: config.executable }));
+        const bridge = new BotBridge(config, new DshRuntime(ctx), transport, ledger, { sessions, memories, actions, directChats, modelPreferences, artifacts, permissionPreferences }, event => console.info(`[im-larkbot] ${JSON.stringify(event)}`), progressTransport, new LarkArtifactPublisher(config.profile, config.botOpenId, { executable: config.executable }));
         let stopped = false, started = false, healthy = false;
         const readiness = { messages: false, cards: !callbacks, menu: !menu };
         let stopping;

package/dist/bridge.d.ts

@@ -1,5 +1,5 @@
 import type { BotConfig } from './config.js';
-import type { AgentPolicy, RuntimeSession, ModelSelection, ModelCatalog } from './dsh-runtime.js';
+import type { AgentPolicy, RuntimeSession, ModelSelection, ModelCatalog, PermissionOption } from './dsh-runtime.js';
 import type { MessageLedger } from './ledger.js';
 import { type MemoryStore } from './memory-store.js';
 import { type SessionStore } from './session-store.js';
@@ -7,6 +7,7 @@ import type { CardActions } from './card-actions.js';
 import { type ReplyPayload } from './replies.js';
 import { type ProgressTransport } from './progress.js';
 import { type ModelPreferencesStore } from './model-preferences.js';
+import type { PermissionPreferencesStore } from './permission-preferences.js';
 import type { ArtifactStore } from './artifacts.js';
 import type { ArtifactPublisher } from './artifact-publisher.js';
 export interface Runtime {
@@ -14,6 +15,11 @@ export interface Runtime {
     resume(policy: AgentPolicy, id: string): Promise<RuntimeSession>;
     catalog?(): Promise<ModelCatalog>;
     resolveModelSelection?(selection?: ModelSelection): Promise<ModelSelection>;
+    permissionOptions?(): PermissionOption[];
+    /** Harness sessions share their model choice with the App (see RuntimeSession.sharesModelSelection). */
+    sharesModelSelection?(): boolean;
+    /** Make a choice the App's default for new sessions, as the App's model selector does. */
+    saveDefaultModel?(selection: ModelSelection): Promise<void>;
 }
 export interface BotState {
     sessions: Pick<SessionStore, 'current' | 'list' | 'add' | 'activate' | 'archive' | 'rename' | 'touch'> & Partial<Pick<SessionStore, 'rebindNative'>>;
@@ -25,6 +31,7 @@ export interface BotState {
         record(openId: string, chatId: string): Promise<void>;
     };
     artifacts?: Pick<ArtifactStore, 'add' | 'get' | 'list' | 'claimPublish' | 'publication' | 'submit'>;
+    permissionPreferences?: Pick<PermissionPreferencesStore, 'get' | 'set'>;
 }
 export interface Transport {
     reply(messageId: string, text: string, options: {
@@ -50,6 +57,18 @@ export interface Transport {
         idempotencyKey: string;
     }): Promise<string>;
     updateFeedback?(messageId: string, payload: ReplyPayload): Promise<void>;
+    createCardEntity?(card: Record<string, unknown>): Promise<string>;
+    replyCardEntity?(messageId: string, cardId: string, options: {
+        idempotencyKey: string;
+        inThread: boolean;
+    }): Promise<void>;
+    streamCardText?(cardId: string, elementId: string, content: string, sequence: number): Promise<void>;
+    updateCardEntity?(cardId: string, card: Record<string, unknown>, sequence: number): Promise<void>;
+    replyFile?(messageId: string, path: string, options: {
+        idempotencyKey: string;
+        inThread: boolean;
+        image: boolean;
+    }): Promise<void>;
 }
 export type Audit = (event: {
     stage: string;
@@ -76,12 +95,41 @@ export declare class BotBridge {
     private readonly failedDisposals;
     private cardActionsReady;
     private readonly progress;
+    private readonly interactions;
+    private liveUnavailableUntil;
     constructor(config: BotConfig, runtime: Runtime, transport: Transport, ledger: MessageLedger, state: BotState, audit?: Audit, progressTransport?: ProgressTransport, artifactPublisher?: ArtifactPublisher | undefined);
     setCardActionsReady(ready: boolean): void;
     private parseIncoming;
     accept(raw: unknown): Promise<void>;
     private acceptMessage;
     private process;
+    /** The model, thinking depth and permission mode a reply runs with, by name. */
+    private settingsLine;
+    /** Whether this message's reply streams into a live card, which makes the typing reaction redundant. */
+    private streams;
+    private liveTransport;
+    private canInteract;
+    private issueAction;
+    /** Ask the owner about one Harness approval. Anything but an explicit allow denies the call. */
+    private approve;
+    /** Ask the owner a Harness question. Without an answer the host gets an error and continues. */
+    private ask;
+    private waitForAnswer;
+    private openInteraction;
+    private closeInteraction;
+    private answerInteraction;
+    /** Send files the host's delivery tool presented, from this user's workspace only. */
+    private deliverFiles;
+    /** A private-chat click on a settings or topic panel, which can update the clicked card. */
+    private inPlace;
+    /**
+     * Run a panel click and show its progress and result on the clicked card. That
+     * card exists, so a failed progress frame never holds back the result, and an
+     * unconfirmed update is never followed by another message.
+     */
+    private panelInPlace;
+    /** Redraw a stale card with the current state, without running its command. */
+    private refreshPanel;
     private commandFeedback;
     private context;
     private sessionContext;
@@ -90,8 +138,30 @@ export declare class BotBridge {
     private bindRestoredSession;
     private unload;
     private command;
+    private harness;
+    /**
+     * The owner's harness chat on the App host shares model and thinking depth
+     * with the App, like any App session; an administrator's fixed route does not.
+     */
+    private sharedModel;
+    /** Record what an opened session runs as the chat's copy: the first capture, or a shared session's own record. */
+    private mirrorModel;
+    /** The host's presets, from the live session when there is one. Undefined when the host offers none. */
+    private permissionView;
+    /** What this chat runs: the live session's preset, else the chat's saved choice. */
+    private permissionChoice;
+    /** Owner-only: switch this private chat's Harness permission preset, like the App's selector. */
+    private permissionCommand;
+    /** Bring a newly opened harness session to the chat's choice, or a new one without a choice to the App's default. */
+    private applyPermission;
+    /** A preset changed in the App on this chat's live session becomes the chat's choice, so new sessions keep it. */
+    private adoptPermission;
     private modelState;
     private modelCommand;
+    /**
+     * The management card for a command. `card` describes a click being shown on
+     * its own card: the switch in flight, its refusal, or a refresh of a stale card.
+     */
     private commandPanel;
     private reply;
     private artifactContext;