dsh-lark-agent 0.1.2 → 0.3.0

package/dist/onboarding/controller.js

@@ -8,7 +8,7 @@ import { LarkCli } from '../lark-cli.js';
 import { LockHeldError } from '../lock.js';
 import { BOT_SCOPES, CARD_SCOPE, LarkPlatformError } from './lark-platform.js';
 import { createChallenge, PairingError, waitForPairing } from './pairing.js';
-import { documentScopesReady } from '../rich-scopes.js';
+import { defaultScopesReady } from '../rich-scopes.js';
 const restoreDelay = (attempt) => Math.min(10 * 60_000, 5_000 * 2 ** Math.min(attempt, 10));
 const messages = {
     idle: '把助手带到飞书，先用飞书确认创建。',
@@ -167,7 +167,7 @@ export class ConnectionController {
             this.documentJob = this.deps.platform.inspect(record.profile, aborter.signal).then(inspection => {
                 if (!aborter.signal.aborted && !this.closed && this.record?.appId === record.appId) {
                     if (inspection.appId === record.appId && (!record.botOpenId || inspection.botOpenId === record.botOpenId)) {
-                        this.documentsReady = inspection.scopeStatus === 'verified' && documentScopesReady(inspection.grantedScopes);
+                        this.documentsReady = inspection.scopeStatus === 'verified' && defaultScopesReady(inspection.grantedScopes);
                     }
                 }
             }).catch(() => { })
@@ -202,13 +202,13 @@ export class ConnectionController {
                 if (this.documentJob)
                     return this.snapshot();
                 const record = this.record, aborter = this.documentAborter = new AbortController();
-                this.documentSetup = { phase: 'preparing', message: '正在准备文档与画板授权，聊天连接继续保持。' };
+                this.documentSetup = { phase: 'preparing', message: '正在准备默认权限授权，聊天连接继续保持。' };
                 this.documentJob = this.deps.platform.enableDocuments(record.profile, info => {
                     const url = officialDestination(info.url), expiresAt = Date.now() + info.expireIn * 1000;
                     void (this.deps.qr ?? (url => QRCode.toDataURL(url, { width: 256, margin: 2 })))(url).then(image => {
                         if (aborter.signal.aborted || this.closed || this.documentAborter !== aborter)
                             return;
-                        this.documentSetup = { phase: 'scanning', message: '用飞书扫码补充文档与画板权限，无需重新创建或配对机器人。', qr: { url, image, expiresAt } };
+                        this.documentSetup = { phase: 'scanning', message: '用飞书扫码补充实时回复、文档与画板权限，无需重新创建或配对机器人。', qr: { url, image, expiresAt } };
                     }).catch(() => { if (!aborter.signal.aborted) {
                         this.documentSetup = { phase: 'error', message: '二维码未能生成，请重试。' };
                         aborter.abort();
@@ -352,7 +352,7 @@ export class ConnectionController {
         this.assertCurrent(signal);
         let record = this.record;
         let inspection = await this.deps.platform.inspect(record.profile, signal);
-        this.documentsReady = inspection.scopeStatus === 'verified' && documentScopesReady(inspection.grantedScopes);
+        this.documentsReady = inspection.scopeStatus === 'verified' && defaultScopesReady(inspection.grantedScopes);
         this.assertCurrent(signal);
         if (inspection.appId !== record.appId || (record.botOpenId && inspection.botOpenId && record.botOpenId !== inspection.botOpenId)) {
             throw new SetupError('机器人身份发生变化，请断开后重新绑定。', false);
@@ -442,8 +442,10 @@ export class ConnectionController {
         const cwd = join(directory, 'workspace');
         await mkdir(cwd, { recursive: true, mode: 0o700 });
         return parseConfig({ profile: record.profile, botOpenId: record.botOpenId, stateDir: join(directory, 'state'),
-            executable: this.deps.executable ?? 'lark-cli', users: [{ openId: record.ownerOpenId, direct: true,
-                    groupChats: [], cwd, allowedTools: [] }], cardInteractions: record.cards, loadingReaction: record.loading, botMenu: this.menuReady }, directory);
+            executable: this.deps.executable ?? 'lark-cli', users: [{ openId: record.ownerOpenId, direct: true, directMode: 'harness',
+                    groupChats: [], cwd, allowedTools: [] }], cardInteractions: record.cards, loadingReaction: record.loading, botMenu: this.menuReady,
+            // Without the CardKit scope a live card cannot be created and replies fall back to ordinary messages.
+            streamingCards: true }, directory);
     }
     async bind(message, signal) {
         this.assertCurrent(signal);

package/dist/onboarding/lark-platform.js

@@ -1,6 +1,6 @@
 import { spawn } from 'node:child_process';
 import { BOT_MENU_EVENT } from '../bot-menu.js';
-import { DOCUMENT_SCOPES, documentScopesReady } from '../rich-scopes.js';
+import { DOCUMENT_SCOPES, STREAMING_SCOPE, defaultScopesReady } from '../rich-scopes.js';
 export class LarkPlatformError extends Error {
     code;
     constructor(code) {
@@ -197,7 +197,7 @@ export class LarkPlatform {
                 appPreset: { name: request.name, desc: request.description ?? '在飞书中与 dsh 个人助手对话' },
                 addons: {
                     preset: false,
-                    scopes: { tenant: [...new Set([...BOT_SCOPES, ...SETUP_SCOPES, ...DOCUMENT_SCOPES, ...(request.cardInteractions ? [CARD_SCOPE] : []),
+                    scopes: { tenant: [...new Set([...BOT_SCOPES, ...SETUP_SCOPES, ...DOCUMENT_SCOPES, STREAMING_SCOPE, ...(request.cardInteractions ? [CARD_SCOPE] : []),
                                 ...(request.loadingReaction ? [REACTION_SCOPE] : [])])] },
                     events: { items: { tenant: ['im.message.receive_v1', BOT_MENU_EVENT] } },
                     ...(request.cardInteractions ? { callbacks: { items: ['card.action.trigger'] } } : {}),
@@ -250,10 +250,10 @@ export class LarkPlatform {
             if (current.appId !== selected.appId)
                 fail('APP_MISMATCH');
             // Another host may already have completed the upgrade; never ask for another scan just to refresh UI state.
-            if (current.scopeStatus === 'verified' && documentScopesReady(current.grantedScopes))
+            if (current.scopeStatus === 'verified' && defaultScopesReady(current.grantedScopes))
                 return;
             const result = await this.registrar({ source: 'dsh-larkbot', appId: selected.appId, signal,
-                addons: { preset: false, scopes: { tenant: [...DOCUMENT_SCOPES] } },
+                addons: { preset: false, scopes: { tenant: [...DOCUMENT_SCOPES, STREAMING_SCOPE] } },
                 onQRCodeReady: info => {
                     checkSignal(signal);
                     let url;
@@ -274,7 +274,7 @@ export class LarkPlatform {
             if (result.client_id !== selected.appId || (result.user_info?.tenant_brand && result.user_info.tenant_brand !== selected.brand))
                 fail('APP_MISMATCH');
             const inspection = await this.inspect(profile, signal);
-            if (inspection.appId !== selected.appId || inspection.scopeStatus !== 'verified' || !documentScopesReady(inspection.grantedScopes))
+            if (inspection.appId !== selected.appId || inspection.scopeStatus !== 'verified' || !defaultScopesReady(inspection.grantedScopes))
                 fail('MISSING_SCOPE');
         }
         catch (error) {

package/dist/permission-controls.d.ts

@@ -0,0 +1,20 @@
+import type { PermissionOption } from './dsh-runtime.js';
+import type { ReplyAction, ReplyPanel } from './replies.js';
+/** What the chat shows: the effective preset when a session is live, else the chat's saved choice. */
+export interface PermissionView {
+    options: PermissionOption[];
+    current?: string;
+}
+/** Where the card is: idle, switching to an option, switched, refused with a reason, or refreshed with a notice. */
+export interface PanelState {
+    changed?: boolean;
+    pending?: string;
+    error?: string;
+    notice?: string;
+}
+/** Presets that let Harness act without asking get a second confirmation. */
+export declare const unattended: (id: string) => boolean;
+export declare function permissionStateText(view: PermissionView): string;
+type Issue = (label: string, command: string, primary: boolean, confirm?: ReplyAction['confirm']) => ReplyAction | undefined;
+export declare function permissionPanel(view: PermissionView, issue: Issue, state?: PanelState): ReplyPanel;
+export {};

package/dist/permission-controls.js

@@ -0,0 +1,37 @@
+/** Presets that let Harness act without asking get a second confirmation. */
+export const unattended = (id) => /full|danger|auto/.test(id);
+function currentName(view) {
+    if (!view.current)
+        return '跟随电脑上的默认设置';
+    return optionName(view, view.current) ?? '自定义（在电脑上调整过）';
+}
+const optionName = (view, id) => view.options.find(option => option.id === id)?.name;
+export function permissionStateText(view) {
+    return `当前权限模式：${currentName(view)}。\n可选：${view.options.map(option => option.name).join('、')}。只影响这个私聊里的对话。`;
+}
+export function permissionPanel(view, issue, state = {}) {
+    const actions = [];
+    for (const option of view.options) {
+        const current = option.id === view.current;
+        // While a switch runs nothing is clickable; afterwards the current option is shown, not offered.
+        if (state.pending || current) {
+            actions.push({ label: `${option.id === state.pending ? '⏳ ' : current ? '✓ ' : ''}${option.name}`, value: {}, disabled: true });
+            continue;
+        }
+        const action = issue(option.name, `/permission use ${option.id}`, false, unattended(option.id) ? { title: `切换到「${option.name}」？`,
+            text: '之后 Harness 执行命令、修改文件都不再询问，在飞书发一句话就能直接操作这台电脑。随时可以切回。' } : undefined);
+        if (action)
+            actions.push(action);
+    }
+    const pendingName = state.pending ? optionName(view, state.pending) ?? state.pending : undefined;
+    const status = state.error ? { text: state.error, tone: 'error' }
+        : pendingName ? { text: `正在切换到「${pendingName}」…`, tone: 'pending' }
+            : state.changed ? { text: `已切换到「${currentName(view)}」`, tone: 'success' }
+                : { text: state.notice ? `${state.notice}\n当前：${currentName(view)}` : `当前：${currentName(view)}` };
+    return { title: state.changed && !state.error ? '权限模式已更新' : '权限模式', subtitle: '只影响这个私聊里的对话',
+        tone: status.tone ?? 'normal', status, summary: status.text,
+        sections: view.options.filter(option => option.description).map(option => ({ title: option.name, text: option.description })),
+        actions, actionColumns: 1,
+        note: state.pending ? '完成后会在这张卡片上更新，无需重复点击。' : '需要确认的操作由这里的模式决定；电脑上其他会话和默认设置不受影响。' };
+}
+//# sourceMappingURL=permission-controls.js.map

package/dist/permission-preferences.d.ts

@@ -0,0 +1,26 @@
+/** Both keys must be derived by the bridge from the verified sender and chat. */
+export interface PermissionPreferenceContext {
+    ownerKey: string;
+    conversationKey: string;
+}
+/** Safe for chat replies: no identity keys, paths or I/O details. */
+export declare class PermissionPreferencesError extends Error {
+    readonly code: 'INVALID_INPUT' | 'CAPACITY' | 'CORRUPT' | 'WRITE_FAILED' | 'UNAVAILABLE';
+    constructor(code: 'INVALID_INPUT' | 'CAPACITY' | 'CORRUPT' | 'WRITE_FAILED' | 'UNAVAILABLE');
+}
+/**
+ * The permission preset a private chat chose in Feishu. It applies to that
+ * chat's sessions only; the host's own default for other sessions is untouched.
+ * One bot process owns this store under its state-directory lock.
+ */
+export declare class PermissionPreferencesStore {
+    private readonly directory;
+    private document;
+    private tail;
+    private uncertain;
+    private constructor();
+    static open(directory: string): Promise<PermissionPreferencesStore>;
+    get(context: PermissionPreferenceContext): Promise<string | undefined>;
+    set(context: PermissionPreferenceContext, preset: string): Promise<void>;
+    private persist;
+}

package/dist/permission-preferences.js

@@ -0,0 +1,169 @@
+import { randomUUID } from 'node:crypto';
+import { constants } from 'node:fs';
+import { chmod, lstat, mkdir, open, rename, unlink } from 'node:fs/promises';
+import { join, resolve } from 'node:path';
+/** Safe for chat replies: no identity keys, paths or I/O details. */
+export class PermissionPreferencesError extends Error {
+    code;
+    constructor(code) {
+        super({
+            INVALID_INPUT: '权限设置参数无效，请重新打开权限模式后选择。',
+            CAPACITY: '权限设置数量已达到上限，已有设置会保留。',
+            CORRUPT: '权限设置无法安全读取，请管理员检查本地状态文件；已有记录未被清空。',
+            WRITE_FAILED: '权限设置未能保存，请稍后重试。',
+            UNAVAILABLE: '权限设置的保存结果未能确认，请管理员检查后重新启动。',
+        }[code]);
+        this.code = code;
+        this.name = 'PermissionPreferencesError';
+    }
+}
+const FILE_NAME = 'permission-preferences.json';
+const MAX_ENTRIES = 10_000;
+const MAX_FILE_BYTES = 4 * 1024 * 1024;
+const PRESET = /^[a-z][a-z0-9-]{0,39}$/;
+const KEY = (value) => typeof value === 'string' && value.length > 0 && value.length <= 512
+    && !/[\u0000-\u001f\u007f]/.test(value);
+function snapshot(context) {
+    if (!context || typeof context !== 'object' || !KEY(context.ownerKey) || !KEY(context.conversationKey)) {
+        throw new PermissionPreferencesError('INVALID_INPUT');
+    }
+    return { ownerKey: context.ownerKey, conversationKey: context.conversationKey };
+}
+function parse(value) {
+    const input = value;
+    if (!input || typeof input !== 'object' || Object.keys(input).some(key => key !== 'version' && key !== 'entries')
+        || input.version !== 1 || !Array.isArray(input.entries) || input.entries.length > MAX_ENTRIES)
+        throw new Error();
+    const seen = new Set();
+    const entries = input.entries.map((raw) => {
+        const row = raw;
+        if (!row || typeof row !== 'object' || Array.isArray(row) || Object.keys(row).some(key => !['ownerKey', 'conversationKey', 'preset'].includes(key))
+            || typeof row.preset !== 'string' || !PRESET.test(row.preset))
+            throw new Error();
+        const context = snapshot(row);
+        const identity = JSON.stringify([context.ownerKey, context.conversationKey]);
+        if (seen.has(identity))
+            throw new Error();
+        seen.add(identity);
+        return { ...context, preset: row.preset };
+    });
+    return { version: 1, entries };
+}
+/**
+ * The permission preset a private chat chose in Feishu. It applies to that
+ * chat's sessions only; the host's own default for other sessions is untouched.
+ * One bot process owns this store under its state-directory lock.
+ */
+export class PermissionPreferencesStore {
+    directory;
+    document = { version: 1, entries: [] };
+    tail = Promise.resolve();
+    uncertain = false;
+    constructor(directory) {
+        this.directory = directory;
+    }
+    static async open(directory) {
+        if (typeof directory !== 'string' || !directory.trim() || directory.includes('\0'))
+            throw new PermissionPreferencesError('INVALID_INPUT');
+        const store = new PermissionPreferencesStore(resolve(directory));
+        try {
+            await mkdir(store.directory, { recursive: true, mode: 0o700 });
+            const info = await lstat(store.directory);
+            if (!info.isDirectory() || info.isSymbolicLink())
+                throw new Error();
+            await chmod(store.directory, 0o700);
+            const path = join(store.directory, FILE_NAME);
+            let file;
+            try {
+                file = await lstat(path);
+            }
+            catch (error) {
+                if (error.code === 'ENOENT')
+                    return store;
+                throw error;
+            }
+            if (!file.isFile() || file.isSymbolicLink() || file.size > MAX_FILE_BYTES)
+                throw new Error();
+            const handle = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+            try {
+                const actual = await handle.stat();
+                if (!actual.isFile() || actual.dev !== file.dev || actual.ino !== file.ino || actual.size > MAX_FILE_BYTES)
+                    throw new Error();
+                const text = new TextDecoder('utf-8', { fatal: true }).decode(await handle.readFile());
+                if (Buffer.byteLength(text) !== actual.size)
+                    throw new Error();
+                store.document = parse(JSON.parse(text));
+                await handle.chmod(0o600);
+            }
+            finally {
+                await handle.close();
+            }
+            return store;
+        }
+        catch {
+            throw new PermissionPreferencesError('CORRUPT');
+        }
+    }
+    async get(context) {
+        const identity = snapshot(context);
+        await this.tail;
+        if (this.uncertain)
+            throw new PermissionPreferencesError('UNAVAILABLE');
+        return this.document.entries.find(entry => entry.ownerKey === identity.ownerKey && entry.conversationKey === identity.conversationKey)?.preset;
+    }
+    async set(context, preset) {
+        const identity = snapshot(context);
+        if (typeof preset !== 'string' || !PRESET.test(preset))
+            throw new PermissionPreferencesError('INVALID_INPUT');
+        const job = this.tail.then(async () => {
+            if (this.uncertain)
+                throw new PermissionPreferencesError('UNAVAILABLE');
+            const previous = this.document.entries.find(entry => entry.ownerKey === identity.ownerKey && entry.conversationKey === identity.conversationKey);
+            if (previous?.preset === preset)
+                return;
+            if (!previous && this.document.entries.length >= MAX_ENTRIES)
+                throw new PermissionPreferencesError('CAPACITY');
+            const value = { ...identity, preset };
+            const entries = previous ? this.document.entries.map(entry => entry === previous ? value : entry) : [...this.document.entries, value];
+            const draft = { version: 1, entries };
+            await this.persist(draft);
+            this.document = draft;
+        });
+        this.tail = job.catch(() => undefined);
+        return job;
+    }
+    async persist(document) {
+        const content = JSON.stringify(document) + '\n';
+        if (Buffer.byteLength(content) > MAX_FILE_BYTES)
+            throw new PermissionPreferencesError('CAPACITY');
+        const temporary = join(this.directory, `permission-preferences.${randomUUID()}.tmp`);
+        let publicationAttempted = false;
+        try {
+            const handle = await open(temporary, 'wx', 0o600);
+            try {
+                await handle.writeFile(content, 'utf8');
+                await handle.sync();
+            }
+            finally {
+                await handle.close();
+            }
+            // A rejected rename may leave publication uncertain; never overwrite from stale memory afterwards.
+            publicationAttempted = true;
+            await rename(temporary, join(this.directory, FILE_NAME));
+            const directory = await open(this.directory, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+            try {
+                await directory.sync();
+            }
+            finally {
+                await directory.close();
+            }
+        }
+        catch {
+            if (publicationAttempted)
+                this.uncertain = true;
+            await unlink(temporary).catch(() => undefined);
+            throw new PermissionPreferencesError(publicationAttempted ? 'UNAVAILABLE' : 'WRITE_FAILED');
+        }
+    }
+}
+//# sourceMappingURL=permission-preferences.js.map

package/dist/presentation.d.ts

@@ -55,9 +55,16 @@ export type PresentationDraft = DraftBase & ({
     kind: 'form';
     content: FormContent;
 });
+/** A file the host's own delivery tool presented; the path is absolute and not yet validated for upload. */
+export interface DeliveredFile {
+    path: string;
+    description: string;
+}
 export interface TurnResult {
     text: string;
     artifacts: PresentationDraft[];
+    reasoning?: string;
+    files?: DeliveredFile[];
 }
 export declare const PRESENT_TOOL = "lark_present";
 export declare const PRESENTATION_GUIDE = "\u9700\u8981\u56FE\u8868\u3001\u6D41\u7A0B\u56FE\u3001\u957F\u62A5\u544A\u6216\u6536\u96C6\u9009\u9879\u65F6\uFF0C\u53EF\u4EE5\u8C03\u7528 lark_present\u3002\u666E\u901A\u804A\u5929\u548C\u4EE3\u7801\u89E3\u91CA\u76F4\u63A5\u7528\u6587\u5B57\u3002\u5DE5\u5177\u53EA\u51C6\u5907\u5F53\u524D\u804A\u5929\u7684\u5C55\u793A\u5185\u5BB9\uFF0C\u4E0D\u6267\u884C HTML/JavaScript\uFF0C\u4E0D\u8BFB\u53D6\u6587\u4EF6\uFF0C\u4E0D\u6269\u5927\u4EFB\u4F55\u4EBA\u7684\u6743\u9650\u3002\u56FE\u8868\u6570\u636E\u5FC5\u987B\u6765\u81EA\u7528\u6237\u6216\u5DF2\u6838\u5B9E\u7684\u8D44\u6599\uFF1B\u793A\u4F8B\u6570\u636E\u5FC5\u987B\u5728\u6807\u9898\u6216\u6458\u8981\u6807\u660E\u201C\u793A\u4F8B\u201D\u3002\u8868\u5355\u53EA\u6536\u96C6\u5B8C\u6210\u5F53\u524D\u4EFB\u52A1\u5FC5\u9700\u7684\u666E\u901A\u4FE1\u606F\uFF0C\u4E0D\u7D22\u53D6\u5BC6\u7801\u3001\u5BC6\u94A5\u6216\u5176\u4ED6\u654F\u611F\u51ED\u636E\u3002\u4E0D\u8981\u91CD\u590D\u8F93\u51FA\u5DF2\u63D0\u4EA4\u5DE5\u5177\u7684\u6574\u4EFD\u5185\u5BB9\uFF0C\u4E5F\u4E0D\u8981\u58F0\u79F0\u5DF2\u521B\u5EFA\u4E91\u6587\u6863\u6216\u94FE\u63A5\uFF1B\u4EE5\u7CFB\u7EDF\u6700\u7EC8\u5C55\u793A\u7ED3\u679C\u4E3A\u51C6\u3002\u4FEE\u6539\u5DF2\u5C55\u793A\u4F5C\u54C1\u65F6\uFF0C\u53EA\u4F7F\u7528\u5F53\u524D\u804A\u5929\u63D0\u4F9B\u7684\u4F5C\u54C1 ID \u4F5C\u4E3A replaces\uFF0C\u4FDD\u7559\u539F\u7248\u3002";

package/dist/replies.d.ts

@@ -17,11 +17,21 @@ export interface ReplyAction {
         title: string;
         text: string;
     };
+    /** Shown but not clickable, such as the current choice or every option while a switch runs. */
+    disabled?: boolean;
 }
+/** normal: blue; pending: a switch is running; success: green; error: red; muted: closed or expired. */
+export type PanelTone = 'normal' | 'pending' | 'success' | 'error' | 'muted';
 export interface ReplyPanel {
     title: string;
     summary: string;
     subtitle?: string;
+    tone?: PanelTone;
+    /** One highlighted line under the header: the current choice, a running switch, or its result. */
+    status?: {
+        text: string;
+        tone?: PanelTone;
+    };
     metrics?: {
         label: string;
         value: string;
@@ -41,6 +51,11 @@ export interface ReplyPanel {
  * Text messages understand native mentions even inside Markdown code fences.
  */
 export declare function safePlainText(text: string): string;
+/** Model text for a card markdown element, with platform extensions made inert. */
+export declare function cardMarkdown(text: string): string;
+/** Top-level blocks split at blank lines outside code fences, for cutting long text without breaking Markdown. */
+export declare function markdownBlocks(text: string): string[];
+export declare function plainLabel(text: string, limit: number): string;
 /** Trusted application panels only. Model strings never choose components or callback values. */
 export declare function renderPanel(panel: ReplyPanel): ReplyPayload;
 /** Select presentation without asking the model to generate arbitrary card JSON. */

package/dist/replies.js

@@ -130,7 +130,15 @@ function markdown(text) {
         blocks.push(block);
     return { text: output, balanced: !fence, blocks };
 }
-function plainLabel(text, limit) {
+/** Model text for a card markdown element, with platform extensions made inert. */
+export function cardMarkdown(text) {
+    return markdown(text).text;
+}
+/** Top-level blocks split at blank lines outside code fences, for cutting long text without breaking Markdown. */
+export function markdownBlocks(text) {
+    return markdown(text).blocks;
+}
+export function plainLabel(text, limit) {
     return pointSlice(text.replace(/<[^>]*>/g, '').replace(/[\u0000-\u001f\u007f-\u009f]/g, ' ')
         .replace(/!?(\[([^\]]+)\])\([^)]*\)/g, '$2').replace(/[`*#_~]/g, '').replace(/\s+/g, ' ').trim(), limit);
 }
@@ -149,15 +157,27 @@ const column = (elements, extra = {}) => ({
     tag: 'column', width: 'weighted', weight: 1, direction: 'vertical',
     vertical_spacing: '4px', padding: '0px', margin: '0px', elements, ...extra,
 });
+const TONES = {
+    normal: { header: 'blue', background: 'grey-50', icon: 'info_outlined', color: 'grey' },
+    pending: { header: 'wathet', background: 'blue-50', icon: 'loading_outlined', color: 'blue' },
+    success: { header: 'green', background: 'green-50', icon: 'done_outlined', color: 'green' },
+    error: { header: 'red', background: 'red-50', icon: 'warning_outlined', color: 'red' },
+    muted: { header: 'grey', background: 'grey-50', icon: 'time_outlined', color: 'grey' },
+};
 /** Trusted application panels only. Model strings never choose components or callback values. */
 export function renderPanel(panel) {
     const metrics = (panel.metrics ?? []).filter(metric => metric.label.trim() || metric.value.trim());
-    const fallbackText = safePlainText([panel.title, panel.subtitle,
+    const fallbackText = safePlainText([panel.title, panel.subtitle, panel.status?.text,
         ...metrics.map(metric => [`${metric.label}：${metric.value}`, metric.note].filter(Boolean).join('\n')),
         ...panel.sections.map(section => [section.title, section.text].filter(Boolean).join('\n')), panel.note]
         .filter(Boolean).join('\n\n'));
     const elements = [];
     const actions = panel.actions ?? [];
+    if (panel.status?.text.trim()) {
+        const tone = TONES[panel.status.tone ?? 'normal'];
+        elements.push({ tag: 'column_set', flex_mode: 'none', margin: '0px', columns: [column([{ ...md(panel.status.text),
+                        icon: { tag: 'standard_icon', token: tone.icon, color: tone.color } }], { background_style: tone.background, padding: '8px 12px 8px 12px' })] });
+    }
     for (let start = 0; start < metrics.length; start += 2) {
         elements.push({ tag: 'column_set', flex_mode: 'none', horizontal_spacing: '8px', margin: '0px',
             columns: metrics.slice(start, start + 2).map(metric => column([
@@ -198,8 +218,8 @@ export function renderPanel(panel) {
     for (let start = 0; start < actions.length; start += actionColumns) {
         elements.push({ tag: 'column_set', flex_mode: panel.actionColumns ? 'none' : 'flow', horizontal_spacing: '8px', margin: '0px', columns: actions.slice(start, start + actionColumns).map(action => column([
                 { tag: 'button', text: title(plainLabel(action.label, panel.actionColumns === 1 ? 64 : 24)), type: action.primary ? 'primary' : 'default', width: 'fill', margin: '0px',
-                    behaviors: [{ type: 'callback', value: { ...action.value } }],
-                    ...(action.confirm ? {
+                    ...(action.disabled ? { disabled: true } : { behaviors: [{ type: 'callback', value: { ...action.value } }] }),
+                    ...(action.confirm && !action.disabled ? {
                         icon: { tag: 'standard_icon', token: 'warning_outlined' },
                         confirm: { title: title(plainLabel(action.confirm.title, 80)), text: title(plainLabel(action.confirm.text, 300)) },
                     } : {}),
@@ -214,9 +234,10 @@ export function renderPanel(panel) {
         return { kind: 'text', text: fallbackText };
     const card = {
         schema: '2.0',
-        config: { compact_width: false, width_mode: 'default', enable_forward: false, enable_forward_interaction: false,
+        // Shared from the start, so a click can update this same card in place.
+        config: { update_multi: true, compact_width: false, width_mode: 'default', enable_forward: false, enable_forward_interaction: false,
             enable_markdown_autolink: false, summary: { content: summary } },
-        header: { template: 'blue', title: title(plainLabel(panel.title, 80)), padding: '10px 16px 10px 16px',
+        header: { template: TONES[panel.tone ?? 'normal'].header, title: title(plainLabel(panel.title, 80)), padding: '10px 16px 10px 16px',
             ...(panel.subtitle?.trim() ? { subtitle: title(safePlainText(panel.subtitle)), vertical_spacing: '4px' } : {}) },
         body: { direction: 'vertical', vertical_spacing: '8px', padding: '12px 16px 12px 16px', elements },
     };

package/dist/rich-scopes.d.ts

@@ -1,3 +1,7 @@
 /** Default document/board capabilities, authorized at registration. Bot-only; no broad drive access. */
 export declare const DOCUMENT_SCOPES: readonly ["application:application:self_manage", "docx:document:create", "docx:document:write_only", "docx:document:readonly", "board:whiteboard:node:create", "board:whiteboard:node:read", "docs:permission.setting:write_only", "docs:permission.setting:read", "docs:permission.member:create", "docs:permission.member:retrieve", "im:resource:upload"];
+/** Lets a harness-mode private chat stream its reply, reasoning and tool progress into one card. */
+export declare const STREAMING_SCOPE = "cardkit:card:write";
 export declare function documentScopesReady(scopes: readonly string[], diagram?: boolean): boolean;
+/** Everything the owner-confirmed "default permissions" step grants: documents, boards and streaming replies. */
+export declare function defaultScopesReady(scopes: readonly string[]): boolean;

package/dist/rich-scopes.js

@@ -2,6 +2,8 @@
 export const DOCUMENT_SCOPES = ['application:application:self_manage', 'docx:document:create', 'docx:document:write_only', 'docx:document:readonly',
     'board:whiteboard:node:create', 'board:whiteboard:node:read', 'docs:permission.setting:write_only',
     'docs:permission.setting:read', 'docs:permission.member:create', 'docs:permission.member:retrieve', 'im:resource:upload'];
+/** Lets a harness-mode private chat stream its reply, reasoning and tool progress into one card. */
+export const STREAMING_SCOPE = 'cardkit:card:write';
 export function documentScopesReady(scopes, diagram = true) {
     const granted = new Set(scopes);
     const groups = [
@@ -12,4 +14,8 @@ export function documentScopesReady(scopes, diagram = true) {
     ];
     return groups.every(group => group.some(scope => granted.has(scope)));
 }
+/** Everything the owner-confirmed "default permissions" step grants: documents, boards and streaming replies. */
+export function defaultScopesReady(scopes) {
+    return documentScopesReady(scopes) && scopes.includes(STREAMING_SCOPE);
+}
 //# sourceMappingURL=rich-scopes.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-lark-agent",
-  "version": "0.1.2",
+  "version": "0.3.0",
   "description": "Reach your DeepSeek Harness assistant from Feishu / Lark: a dsh plugin built on the official Lark CLI",
   "keywords": [
     "deepseek",
@@ -73,13 +73,13 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "4.0.1 || 4.0.5",
-    "@deepseek-ai/dsh-agent": "0.1.1-rc.2 || 0.2.1-rc.2",
-    "@deepseek-ai/dsh-llm": "0.1.1-rc.2 || 0.2.1-rc.2",
-    "@deepseek-ai/dsh-session": "0.1.1-rc.2 || 0.2.1-rc.2",
-    "@deepseek-ai/dsh-system-prompt": "0.1.1-rc.2 || 0.2.1-rc.2",
-    "@deepseek-ai/dsh-tools": "0.1.1-rc.2 || 0.2.1-rc.2",
+    "@deepseek-ai/dsh-agent": "0.1.1-rc.2 || 0.2.1-rc.2 || 0.2.1-rc.3",
+    "@deepseek-ai/dsh-llm": "0.1.1-rc.2 || 0.2.1-rc.2 || 0.2.1-rc.3",
+    "@deepseek-ai/dsh-session": "0.1.1-rc.2 || 0.2.1-rc.2 || 0.2.1-rc.3",
+    "@deepseek-ai/dsh-system-prompt": "0.1.1-rc.2 || 0.2.1-rc.2 || 0.2.1-rc.3",
+    "@deepseek-ai/dsh-tools": "0.1.1-rc.2 || 0.2.1-rc.2 || 0.2.1-rc.3",
     "@deepseek-ai/schemastery": "3.18.1 || 3.18.5",
-    "@deepseek-ai/dsh-session-persistence": "0.1.1-rc.2 || 0.2.1-rc.2"
+    "@deepseek-ai/dsh-session-persistence": "0.1.1-rc.2 || 0.2.1-rc.2 || 0.2.1-rc.3"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.1",