dsh-lark-agent 0.1.2 → 0.3.0

package/dist/card-actions.js

@@ -5,7 +5,7 @@ import { join } from 'node:path';
 const TTL_MS = 24 * 60 * 60 * 1000;
 const MAX_TOKEN_LENGTH = 3000;
 const HEX_ID = /^[a-f0-9]{12}$/;
-const COMMAND = /^(?:\/(?:help|status|sessions|memory|new|model|thinking|results)|\/(?:model|thinking) (?:use [a-f0-9]{16}|page [0-9]{1,4})|\/memory (?:global|chat|show [a-f0-9]{12})|\/(?:resume|forget|result|publish|answer) [a-f0-9]{12})$/;
+const COMMAND = /^(?:\/(?:help|status|sessions|memory|new|model|thinking|results)|\/(?:model|thinking) (?:use [a-f0-9]{16}|page [0-9]{1,4})|\/memory (?:global|chat|show [a-f0-9]{12})|\/(?:resume|forget|result|publish|answer|approve|deny|reply) [a-f0-9]{12}|\/choose [a-f0-9]{12} [0-9]{1,2}|\/permission(?: use [a-z][a-z0-9-]{0,39})?)$/;
 const PAYLOAD_KEYS = ['version', 'namespace', 'issuedAt', 'expiresAt', 'nonce', 'binding'];
 const BINDING_KEYS = ['ownerId', 'chatId', 'chatType', 'threadId', 'sourceMessageId', 'command', 'expectedSessionId', 'expectedModelRevision'];
 function record(value) {

package/dist/client.cjs

@@ -531,8 +531,8 @@ function ConnectionCard({ api }) {
       ] }),
       /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "lark-connected-row", children: [
         /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: "\u6587\u6863\u4E0E\u753B\u677F" }),
-          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { children: snapshot.capabilities.documents ? "\u5DF2\u542F\u7528 \xB7 \u79C1\u804A\u4F5C\u54C1\u4EC5\u4F9B\u672C\u4EBA\u67E5\u770B" : "\u628A\u590D\u6742\u65B9\u6848\u6574\u7406\u6210\u53EF\u6253\u5F00\u7684\u6587\u6863\u548C\u56FE\u793A" })
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: "\u5B9E\u65F6\u56DE\u590D\u3001\u6587\u6863\u4E0E\u753B\u677F" }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { children: snapshot.capabilities.documents ? "\u5DF2\u542F\u7528 \xB7 \u56DE\u590D\u5B9E\u65F6\u663E\u793A\uFF0C\u79C1\u804A\u4F5C\u54C1\u4EC5\u4F9B\u672C\u4EBA\u67E5\u770B" : "\u5B9E\u65F6\u663E\u793A\u56DE\u590D\u548C\u601D\u8003\u8FC7\u7A0B\uFF0C\u5E76\u628A\u590D\u6742\u65B9\u6848\u6574\u7406\u6210\u6587\u6863\u548C\u56FE\u793A" })
         ] }),
         !snapshot.capabilities.documents && !snapshot.documentSetup && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { className: "lark-secondary", disabled, onClick: () => void mutate("enable-documents"), children: "\u8865\u5145\u9ED8\u8BA4\u6743\u9650" })
       ] }),
@@ -540,7 +540,7 @@ function ConnectionCard({ api }) {
         /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { children: snapshot.documentSetup.message }),
         snapshot.documentSetup.phase === "preparing" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "lark-spinner", "aria-label": "\u6B63\u5728\u51C6\u5907\u6388\u6743" }),
         snapshot.documentSetup.qr && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "lark-qr", children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("img", { src: snapshot.documentSetup.qr.image, alt: "\u6587\u6863\u4E0E\u753B\u677F\u8865\u5145\u6388\u6743\u4E8C\u7EF4\u7801" }) }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "lark-qr", children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("img", { src: snapshot.documentSetup.qr.image, alt: "\u9ED8\u8BA4\u6743\u9650\u8865\u5145\u6388\u6743\u4E8C\u7EF4\u7801" }) }),
           /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { children: snapshot.documentSetup.qr.expiresAt <= now ? "\u4E8C\u7EF4\u7801\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u53D6\u6D88\u540E\u91CD\u8BD5\u3002" : "\u626B\u7801\u786E\u8BA4\u540E\u81EA\u52A8\u5B8C\u6210\uFF0C\u804A\u5929\u8FDE\u63A5\u7EE7\u7EED\u4FDD\u6301\u3002" }),
           snapshot.documentSetup.qr.expiresAt > now && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(External, { url: snapshot.documentSetup.qr.url, children: "\u6253\u5F00\u98DE\u4E66\u6388\u6743" })
         ] }),

package/dist/config.d.ts

@@ -4,6 +4,12 @@ export interface UserPolicy {
     groupChats: string[];
     cwd: string;
     allowedTools: string[];
+    /**
+     * 'harness': this user's private chat is a channel into an ordinary Harness
+     * session, with the host's prompt, tools and approvals. Group chats always
+     * use the restricted assistant and allowedTools.
+     */
+    directMode: 'harness' | 'restricted';
 }
 export interface BotConfig {
     profile: string;
@@ -26,6 +32,8 @@ export interface BotConfig {
     cardInteractions: boolean;
     loadingReaction: boolean;
     botMenu: boolean;
+    /** Stream harness-mode private replies into a CardKit card (needs cardkit:card:write). */
+    streamingCards: boolean;
 }
 export declare function parseConfig(value: unknown, baseDir?: string): BotConfig;
 export declare function loadConfig(path: string): Promise<BotConfig>;

package/dist/config.js

@@ -45,11 +45,13 @@ export function parseConfig(value, baseDir = process.cwd()) {
         const allowedTools = strings(user.allowedTools ?? [], 'user.allowedTools');
         if (allowedTools.some(t => !/^[a-zA-Z0-9_.:-]+$/.test(t) || t === 'run_code'))
             throw new Error('allowedTools requires exact tool names; run_code and wildcards are forbidden');
+        if (user.directMode !== undefined && user.directMode !== 'harness' && user.directMode !== 'restricted')
+            throw new Error('user.directMode must be harness or restricted');
         return {
             openId: id(user.openId, 'ou', 'user.openId'),
             direct: user.direct === true,
             groupChats: strings(user.groupChats ?? [], 'user.groupChats').map(v => id(v, 'oc', 'group chat')),
-            cwd: resolve(cwd), allowedTools,
+            cwd: resolve(cwd), allowedTools, directMode: user.directMode ?? 'restricted',
         };
     });
     if (new Set(users.map(u => u.openId)).size !== users.length)
@@ -62,6 +64,8 @@ export function parseConfig(value, baseDir = process.cwd()) {
         throw new Error('loadingReaction must be boolean');
     if (data.botMenu !== undefined && typeof data.botMenu !== 'boolean')
         throw new Error('botMenu must be boolean');
+    if (data.streamingCards !== undefined && typeof data.streamingCards !== 'boolean')
+        throw new Error('streamingCards must be boolean');
     return {
         profile, botOpenId: id(data.botOpenId, 'ou', 'botOpenId'),
         executable: string(data.executable ?? 'lark-cli', 'executable'),
@@ -69,7 +73,8 @@ export function parseConfig(value, baseDir = process.cwd()) {
         provider: data.provider === undefined ? undefined : string(data.provider, 'provider'),
         model: data.model === undefined ? undefined : string(data.model, 'model'),
         users,
-        turnTimeoutMs: integer(data.turnTimeoutMs, 120_000, 1000, 1_800_000, 'turnTimeoutMs'),
+        // A harness-mode chat does research and tool work, and may wait minutes for an approval.
+        turnTimeoutMs: integer(data.turnTimeoutMs, users.some(user => user.directMode === 'harness') ? 900_000 : 120_000, 1000, 1_800_000, 'turnTimeoutMs'),
         idleTimeoutMs: integer(data.idleTimeoutMs, 1_800_000, 1000, 86_400_000, 'idleTimeoutMs'),
         maxSessions: integer(data.maxSessions, 100, 1, 1000, 'maxSessions'),
         maxSessionsPerUser: integer(data.maxSessionsPerUser, 10, 1, 100, 'maxSessionsPerUser'),
@@ -82,6 +87,7 @@ export function parseConfig(value, baseDir = process.cwd()) {
         cardInteractions: data.cardInteractions === true,
         loadingReaction: data.loadingReaction === true,
         botMenu: data.botMenu === true,
+        streamingCards: data.streamingCards === true,
     };
 }
 export async function loadConfig(path) {

package/dist/dsh-runtime.d.ts

@@ -24,6 +24,75 @@ export interface AgentPolicy {
     reasoningEffort?: string;
     memory?: MemoryAccess;
     presentation?: boolean;
+    /**
+     * 'harness' keeps the host's own prompt, tools and approval policy, so the
+     * chat is just another channel into the session. Only an owner's private
+     * chat may use it; every other conversation stays 'restricted'.
+     */
+    mode?: 'harness' | 'restricted';
+}
+/** Live presentation data for one turn. The completed turn result stays authoritative. */
+export type TurnStreamEvent = {
+    type: 'attempt';
+} | {
+    type: 'discard';
+} | {
+    type: 'reasoning';
+    text: string;
+} | {
+    type: 'text';
+    text: string;
+} | {
+    type: 'tool';
+    callId: string;
+    name: string;
+    detail?: string;
+    code?: boolean;
+} | {
+    type: 'tool-done';
+    callId: string;
+    ok: boolean;
+    exitCode?: number;
+};
+export interface ApprovalPrompt {
+    toolName: string;
+    reason?: string;
+    detail?: string;
+}
+export interface UserQuestion {
+    id: string;
+    question: string;
+    header?: string;
+    options: Array<{
+        label: string;
+        description?: string;
+    }>;
+    multiSelect: boolean;
+    detail?: string;
+}
+export interface QuestionAnswer {
+    id: string;
+    selected: string[];
+    custom?: string;
+}
+/** A host permission preset, such as read-only, workspace-write or full access. */
+export interface PermissionOption {
+    id: string;
+    name: string;
+    description?: string;
+}
+/** defaultPreset is the App's choice for new sessions, when it is one of the options. */
+export interface PermissionState {
+    current: string;
+    options: PermissionOption[];
+    defaultPreset?: string;
+}
+/** One turn's channel hooks. A harness-mode session asks its owner through them. */
+export interface TurnObserver {
+    stream?(event: TurnStreamEvent): void;
+    /** Resolve true to allow this one call. Rejection or failure denies it. */
+    approve?(prompt: ApprovalPrompt, signal: AbortSignal): Promise<boolean>;
+    ask?(questions: UserQuestion[], signal: AbortSignal): Promise<QuestionAnswer[]>;
 }
 /** Complete chat-owned choice. No credential or provider endpoint belongs here. */
 export interface ModelSelection {
@@ -53,15 +122,29 @@ export interface RuntimeSession {
     run(text: string, signal: AbortSignal, context?: {
         memoryText?: string;
         artifactsText?: string;
-    }): Promise<string | TurnResult>;
+    }, observer?: TurnObserver): Promise<string | TurnResult>;
     checkpoint(): Promise<void>;
     cancel(): void;
     dispose(): Promise<void>;
     modelSelection?(): ModelSelection;
-    /** Call only after the bridge validates and durably saves the complete choice. */
+    /**
+     * Call only after the bridge validates and durably saves the complete choice.
+     * In a session that shares its model with the App it is recorded in the
+     * session itself, so checkpoint before confirming it.
+     */
     setModelSelection?(next: ModelSelection): void;
+    /**
+     * True when this session decides its model like the App's own sessions: its
+     * latest pick (from Feishu or the App), else its last request's model, else
+     * the host default. The App then shows and changes the same choice.
+     */
+    sharesModelSelection?: boolean;
+    /** Harness sessions on a host with permission presets; undefined otherwise. */
+    permissionState?(): PermissionState | undefined;
+    /** Switch this session's permission preset, as the App's own selector does. */
+    setPermission?(id: string): void;
 }
-export type RuntimeErrorCode = 'SETUP_FAILED' | 'RESTORE_FAILED' | 'SESSION_IN_USE' | 'PERSISTENCE_FAILED' | 'TURN_FAILED' | 'CANCELLED' | 'OUTPUT_LIMIT' | 'BUSY' | 'DISPOSED' | 'MODEL_UNAVAILABLE' | 'INVALID_MODEL_SELECTION';
+export type RuntimeErrorCode = 'SETUP_FAILED' | 'RESTORE_FAILED' | 'SESSION_IN_USE' | 'PERSISTENCE_FAILED' | 'TURN_FAILED' | 'CANCELLED' | 'OUTPUT_LIMIT' | 'BUSY' | 'DISPOSED' | 'MODEL_UNAVAILABLE' | 'INVALID_MODEL_SELECTION' | 'MODEL_NOT_SAVED' | 'PERMISSION_UNAVAILABLE';
 /** Safe to show to a chat user: never contains a provider, tool, or host error. */
 export declare class DshRuntimeError extends Error {
     readonly code: RuntimeErrorCode;
@@ -87,6 +170,14 @@ export declare class DshRuntime {
     resolveModelSelection(selection?: ModelSelection, signal?: AbortSignal): Promise<ModelSelection>;
     private effectiveSelection;
     create(policy: AgentPolicy): Promise<RuntimeSession>;
+    /** The host's selectable permission presets, for a chat that has no live session yet. */
+    permissionOptions(): PermissionOption[];
+    /** Whether harness sessions here share their model choice with the App (see RuntimeSession.sharesModelSelection). */
+    sharesModelSelection(): boolean;
+    /** Make a choice the App's default for new sessions, as the App's own model selector does. */
+    saveDefaultModel(selection: ModelSelection): Promise<void>;
+    /** The preset a stored session runs on: its current projection, else its header. */
+    private recordedPreset;
     resume(policy: AgentPolicy, sessionId: string): Promise<RuntimeSession>;
     private build;
 }