dsh-lark-agent 0.4.0 → 0.5.0

package/dist/onboarding/agents.js

@@ -0,0 +1,100 @@
+import { realpath, stat } from 'node:fs/promises';
+import { isAbsolute } from 'node:path';
+import { SetupError } from './controller.js';
+import { SettingsStore } from './settings-store.js';
+import { ffmpegAvailable } from '../media-input.js';
+const controls = /[\u0000-\u001f\u007f-\u009f\u202a-\u202e\u2066-\u2069]/u;
+export const defaultAgentSettings = { label: '', agentPreset: '', workspace: '', imageInput: true, voiceInput: false };
+export function parseAgentSettings(raw) {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        throw new Error('Invalid agent settings');
+    const data = raw;
+    for (const [key, limit] of [['label', 80], ['agentPreset', 200], ['workspace', 4096]]) {
+        const value = data[key];
+        if (typeof value !== 'string' || value.length > limit || value !== value.trim() || controls.test(value))
+            throw new Error('Invalid agent settings');
+    }
+    if (typeof data.imageInput !== 'boolean' || typeof data.voiceInput !== 'boolean'
+        || (data.workspace && !isAbsolute(data.workspace)))
+        throw new Error('Invalid agent settings');
+    return { label: data.label, agentPreset: data.agentPreset, workspace: data.workspace,
+        imageInput: data.imageInput, voiceInput: data.voiceInput };
+}
+export function agentSettingsStore(directory) {
+    return new SettingsStore(directory, 'agent.json', parseAgentSettings);
+}
+/** A metadata-only catalog; no plugin definitions, paths, provider endpoints or secrets. */
+export async function agentCatalog(ctx) {
+    const service = ctx.get('agentPresets');
+    const available = typeof service?.list === 'function' && typeof service.resolve === 'function' && typeof service.mount === 'function';
+    const catalog = { presets: [], presetsAvailable: available, model: '跟随宿主模型',
+        imagesAvailable: typeof ctx.get('attachments')?.saveImages === 'function',
+        voiceAvailable: await ffmpegAvailable() };
+    const display = (value, limit) => typeof value === 'string' && !controls.test(value) ? value.slice(0, limit) : '';
+    if (available) {
+        const rows = await service.list();
+        if (!Array.isArray(rows) || rows.length > 200)
+            throw new SetupError('Agent 预设列表暂时不可用，请检查宿主设置。');
+        catalog.presets = rows.filter(row => typeof row.id === 'string' && row.id.length > 0 && row.id.length <= 200 && !controls.test(row.id))
+            .map(row => ({ id: row.id, name: display(row.name, 200) || row.id,
+            ...(display(row.description, 600) ? { description: display(row.description, 600) } : {}), available: !row.broken }));
+        try {
+            catalog.defaultPreset = (await service.resolve()).id;
+        }
+        catch { /* An explicit working preset is still selectable. */ }
+    }
+    const selection = ctx.get('agentDefaultModel')?.currentSelection?.();
+    if (display(selection?.model, 200))
+        catalog.model = display(selection?.model, 200);
+    catalog.modelImages = 'unknown';
+    const llm = ctx.get('llm');
+    if (selection?.provider && selection.model && typeof llm?.resolveModelInfo === 'function') {
+        const aborter = new AbortController();
+        let timer;
+        try {
+            // Adapter metadata only. No test message, Agent creation or tool execution.
+            const info = await Promise.race([
+                llm.resolveModelInfo(selection.provider, selection.model, aborter.signal),
+                new Promise(resolve => { timer = setTimeout(() => { aborter.abort(); resolve(undefined); }, 3000); }),
+            ]);
+            if (Array.isArray(info?.inputModalities))
+                catalog.modelImages = info.inputModalities.includes('image') ? 'supported' : 'unsupported';
+        }
+        catch { /* Missing metadata is shown as unknown, and checked again for the actual chat model at admission. */ }
+        finally {
+            clearTimeout(timer);
+            aborter.abort();
+        }
+    }
+    return catalog;
+}
+export async function validateAgentSettings(ctx, settings) {
+    const next = parseAgentSettings(settings);
+    if (next.agentPreset) {
+        const presets = ctx.get('agentPresets');
+        if (typeof presets?.resolve !== 'function' || typeof presets.mount !== 'function')
+            throw new SetupError('当前宿主不支持选择 Agent 预设。');
+        try {
+            const resolved = await presets.resolve(next.agentPreset);
+            if (resolved.id !== next.agentPreset || resolved.broken)
+                throw new Error();
+        }
+        catch {
+            throw new SetupError('这个 Agent 预设已不可用，请刷新后重新选择。');
+        }
+    }
+    if (next.workspace) {
+        try {
+            next.workspace = await realpath(next.workspace);
+            if (!(await stat(next.workspace)).isDirectory())
+                throw new Error();
+        }
+        catch {
+            throw new SetupError('工作区必须是这台设备上已有的文件夹。');
+        }
+    }
+    if (next.voiceInput && !await ffmpegAvailable())
+        throw new SetupError('请先在宿主设备安装 FFmpeg，再启用语音输入。');
+    return next;
+}
+//# sourceMappingURL=agents.js.map

package/dist/onboarding/controller.d.ts

@@ -3,9 +3,9 @@ import { type BotService } from '../bot-service.js';
 import { LarkPlatform } from './lark-platform.js';
 import { ConnectionStore } from './store.js';
 import { waitForPairing } from './pairing.js';
-import type { ConnectionEndpoint, ConnectionProfile, ConnectionSnapshot } from './protocol.js';
+import type { AgentSettings, ConnectionEndpoint, ConnectionProfile, ConnectionSnapshot } from './protocol.js';
 export interface OnboardingDependencies {
-    platform: Pick<LarkPlatform, 'listProfiles' | 'registerNew' | 'saveNewProfile' | 'inspect' | 'configureAndPublish'> & Partial<Pick<LarkPlatform, 'enableDocuments'>>;
+    platform: Pick<LarkPlatform, 'listProfiles' | 'registerNew' | 'saveNewProfile' | 'inspect' | 'configureAndPublish'> & Partial<Pick<LarkPlatform, 'enableDocuments' | 'enableInput'>>;
     store: ConnectionStore;
     checkRuntime(): void;
     start(config: BotConfig, signal: AbortSignal, onHealth: (ready: boolean) => void, pairedChat?: {
@@ -19,6 +19,10 @@ export interface OnboardingDependencies {
     executable?: string;
     /** Delay before automatic restore attempt `attempt` (0-based) of an enabled connection. */
     retryDelay?: (attempt: number) => number;
+    validateAgent?: (settings: AgentSettings) => Promise<AgentSettings>;
+    reserveApp?: (appId: string) => void;
+    /** Release former reservations only after the replacement record is durable. */
+    commitApp?: (appId: string) => void;
 }
 export declare class SetupError extends Error {
     readonly retryable: boolean;
@@ -39,20 +43,27 @@ export declare class ConnectionController {
     private unsafeStop;
     private menuReady;
     private documentsReady;
+    private imagesReady;
+    private voiceReady;
     /** Menu entries the published app lacks; the owner adds them in the developer console. */
     private menuMissing;
     private documentSetup?;
     private documentJob?;
+    private inputSetup?;
     private documentAborter?;
     private candidate?;
     private commands;
     private retryTimer?;
     private retryAttempts;
+    private settings;
+    private readonly settingsStore;
+    private settingsFailed;
     constructor(deps: OnboardingDependencies);
     snapshot(): ConnectionSnapshot;
     private phase;
     private action;
     private consoleUrl;
+    private inspectCapabilities;
     private assertCurrent;
     private save;
     private launch;
@@ -68,6 +79,8 @@ export declare class ConnectionController {
     command(endpoint: Exclude<ConnectionEndpoint, 'profiles' | 'status'>, payload: unknown): Promise<ConnectionSnapshot>;
     private create;
     private check;
+    private botDirectory;
+    private defaultWorkspace;
     private config;
     private bind;
     private start;

package/dist/onboarding/controller.js

@@ -5,11 +5,14 @@ import QRCode from 'qrcode';
 import { parseConfig } from '../config.js';
 import { BotServiceStartError } from '../bot-service.js';
 import { LarkCli } from '../lark-cli.js';
-import { LockHeldError } from '../lock.js';
+import { acquireLock, LockHeldError } from '../lock.js';
 import { BOT_SCOPES, CARD_SCOPE, LarkPlatformError } from './lark-platform.js';
 import { createChallenge, PairingError, waitForPairing } from './pairing.js';
 import { defaultScopesReady } from '../rich-scopes.js';
 import { missingBotMenuEntries } from '../bot-menu.js';
+import { agentSettingsStore, defaultAgentSettings, parseAgentSettings } from './agents.js';
+import { SessionStore } from '../session-store.js';
+import { MEDIA_RESOURCE_SCOPE, mediaScopes } from '../media-scopes.js';
 const restoreDelay = (attempt) => Math.min(10 * 60_000, 5_000 * 2 ** Math.min(attempt, 10));
 const messages = {
     idle: '把助手带到飞书，先用飞书确认创建。',
@@ -76,27 +79,37 @@ export class ConnectionController {
     unsafeStop = false;
     menuReady = false;
     documentsReady = false;
+    imagesReady = false;
+    voiceReady = false;
     /** Menu entries the published app lacks; the owner adds them in the developer console. */
     menuMissing = [];
     documentSetup;
     documentJob;
+    inputSetup;
     documentAborter;
     candidate;
     commands = Promise.resolve();
     retryTimer;
     retryAttempts = 0;
+    settings = { ...defaultAgentSettings };
+    settingsStore;
+    settingsFailed = false;
     constructor(deps) {
         this.deps = deps;
+        this.settingsStore = agentSettingsStore(deps.store.directory);
     }
     snapshot() {
         return structuredClone({ ...this.state,
-            capabilities: { ...this.state.capabilities, documents: this.documentsReady }, ...(this.documentSetup ? { documentSetup: this.documentSetup } : {}),
+            agent: { ...this.settings, workspaceDisplay: this.settings.workspace || this.defaultWorkspace() || '连接后自动创建独立工作区',
+                editable: !this.closed && !this.service && !this.job && !this.documentJob && !this.record?.enabled && !this.unsafeStop && !this.settingsFailed },
+            capabilities: { ...this.state.capabilities, documents: this.documentsReady, images: this.imagesReady, voice: this.voiceReady }, ...(this.documentSetup ? { documentSetup: this.documentSetup } : {}),
+            ...(this.inputSetup ? { inputSetup: this.inputSetup } : {}),
             ...(this.record && this.menuMissing.length ? { menu: { missing: this.menuMissing, url: this.consoleUrl() } } : {}) });
     }
     phase(phase, message = messages[phase]) {
         this.state = { phase, message, busy: ['creating', 'configuring', 'starting'].includes(phase),
             capabilities: { cards: this.record?.cards ?? true, loading: this.record?.loading ?? true },
-            ...(this.record ? { bot: { name: '我的 dsh 助手', appId: this.record.appId,
+            ...(this.record ? { bot: { name: this.settings.label || '我的 dsh 助手', appId: this.record.appId,
                     url: `https://applink.${this.record.brand === 'lark' ? 'larksuite.com' : 'feishu.cn'}/client/bot/open?appId=${this.record.appId}` } } : {}) };
     }
     action(message = messages.action_required) {
@@ -107,9 +120,19 @@ export class ConnectionController {
     consoleUrl() {
         return `https://open.${this.record?.brand === 'lark' ? 'larksuite.com' : 'feishu.cn'}/app/${this.record.appId}`;
     }
+    inspectCapabilities(inspection) {
+        this.documentsReady = inspection.scopeStatus === 'verified' && defaultScopesReady(inspection.grantedScopes);
+        this.imagesReady = inspection.scopeStatus === 'verified' && inspection.grantedScopes.includes(MEDIA_RESOURCE_SCOPE);
+        this.voiceReady = inspection.scopeStatus === 'verified' && mediaScopes('voice').every(scope => inspection.grantedScopes.includes(scope));
+        this.menuMissing = missingBotMenuEntries(inspection.menuEventKeys ?? []);
+    }
     assertCurrent(signal) { signal.throwIfAborted(); if (this.closed)
         throw new SetupError('连接设置已关闭。'); }
-    async save(record) { await this.deps.store.write(record); this.record = record; }
+    async save(record) {
+        await this.deps.store.write(record);
+        this.record = record;
+        this.deps.commitApp?.(record.appId);
+    }
     launch(work) {
         this.clearRetry();
         const generation = ++this.generation;
@@ -156,9 +179,11 @@ export class ConnectionController {
     }
     clearRetry() { clearTimeout(this.retryTimer); this.retryTimer = undefined; }
     async initialize() {
+        this.settings = await this.settingsStore.read() ?? { ...defaultAgentSettings };
         this.record = await this.deps.store.read(); // Corrupt durable state fails closed.
         if (!this.record)
             return;
+        this.deps.reserveApp?.(this.record.appId);
         if (this.record.enabled && this.record.ownerOpenId) {
             this.phase('configuring');
             this.launch(signal => this.check(signal, false));
@@ -171,8 +196,7 @@ export class ConnectionController {
             this.documentJob = this.deps.platform.inspect(record.profile, aborter.signal).then(inspection => {
                 if (!aborter.signal.aborted && !this.closed && this.record?.appId === record.appId) {
                     if (inspection.appId === record.appId && (!record.botOpenId || inspection.botOpenId === record.botOpenId)) {
-                        this.documentsReady = inspection.scopeStatus === 'verified' && defaultScopesReady(inspection.grantedScopes);
-                        this.menuMissing = missingBotMenuEntries(inspection.menuEventKeys ?? []);
+                        this.inspectCapabilities(inspection);
                     }
                 }
             }).catch(() => { })
@@ -192,20 +216,112 @@ export class ConnectionController {
         const result = this.commands.then(async () => {
             if (this.closed)
                 throw new SetupError('连接设置已关闭。');
+            if (this.settingsFailed)
+                throw new SetupError('Agent 设置保存结果未能确认，请重启宿主后重新读取。');
             if (this.unsafeStop)
                 throw new SetupError('连接未能安全停止，请检查并关闭原实例。为防止重复处理，当前连接锁已保留。');
             const data = payload && typeof payload === 'object' && !Array.isArray(payload) ? payload : {};
-            if (endpoint === 'cancel-documents') {
+            if (endpoint === 'update-agent') {
+                if (this.service || this.job || this.documentJob || this.record?.enabled)
+                    throw new SetupError('请先暂停这个机器人的连接，再修改 Agent 设置。');
+                let next;
+                try {
+                    next = parseAgentSettings(data);
+                }
+                catch {
+                    throw new SetupError('Agent 设置格式不正确，请检查名称、预设和工作区。');
+                }
+                if (next.voiceInput && !this.settings.voiceInput && !this.voiceReady)
+                    throw new SetupError('请先开通并检查这个机器人的飞书语音权限，再启用语音转文字。');
+                if (next.imageInput && !this.settings.imageInput && !this.imagesReady)
+                    throw new SetupError('请先开通并检查这个机器人的飞书图片权限，再启用图片识别。');
+                if (this.deps.validateAgent)
+                    next = await this.deps.validateAgent(next);
+                // Existing native logs keep their original workspace even when new topics move.
+                const oldWorkspace = this.settings.workspace || this.defaultWorkspace();
+                if (oldWorkspace && next.workspace !== this.settings.workspace) {
+                    const stateDir = join(this.botDirectory(), 'state');
+                    const release = await acquireLock(stateDir);
+                    try {
+                        await (await SessionStore.open(stateDir)).pinWorkspace(oldWorkspace);
+                    }
+                    finally {
+                        await release();
+                    }
+                }
+                try {
+                    await this.settingsStore.write(next);
+                }
+                catch {
+                    this.settingsFailed = true;
+                    throw new SetupError('Agent 设置未能可靠保存，请重启宿主后重新读取。');
+                }
+                this.settings = next;
+                if (this.state.bot)
+                    this.state.bot.name = next.label || '我的 dsh 助手';
+                return this.snapshot();
+            }
+            if (endpoint === 'cancel-documents' || endpoint === 'cancel-input') {
                 await this.cancelDocuments();
                 return this.snapshot();
             }
+            if (endpoint === 'enable-input') {
+                if (data.kind !== 'images' && data.kind !== 'voice')
+                    throw new SetupError('不支持的消息输入类型。');
+                const kind = data.kind;
+                if (!this.record?.verified || !this.record.ownerOpenId || this.job || !this.deps.platform.enableInput)
+                    throw new SetupError('请先连接并确认本人，再开通消息输入权限。');
+                if (kind === 'images' ? this.imagesReady : this.voiceReady)
+                    return this.snapshot();
+                if (this.documentJob) {
+                    if (this.inputSetup?.kind === kind)
+                        return this.snapshot();
+                    throw new SetupError('请先完成或取消当前的权限检查与授权。');
+                }
+                const record = this.record, aborter = this.documentAborter = new AbortController();
+                const feature = kind === 'images' ? '图片' : '语音';
+                this.inputSetup = { kind, phase: 'preparing', message: `正在准备${feature}权限授权。` };
+                this.documentJob = this.deps.platform.enableInput(record.profile, kind, info => {
+                    const url = officialDestination(info.url), expiresAt = Date.now() + info.expireIn * 1000;
+                    void (this.deps.qr ?? (url => QRCode.toDataURL(url, { width: 256, margin: 2 })))(url).then(image => {
+                        if (aborter.signal.aborted || this.closed || this.documentAborter !== aborter)
+                            return;
+                        this.inputSetup = { kind, phase: 'scanning', message: `用飞书扫码为这个机器人开通${feature}权限，完成后再勾选并保存输入设置。`, qr: { url, image, expiresAt } };
+                    }).catch(() => { if (!aborter.signal.aborted) {
+                        this.inputSetup = { kind, phase: 'error', message: '二维码未能生成，请重试。' };
+                        aborter.abort();
+                    } });
+                }, aborter.signal, record.appId).then(async () => {
+                    if (aborter.signal.aborted || this.closed)
+                        return;
+                    const inspection = await this.deps.platform.inspect(record.profile, aborter.signal);
+                    if (aborter.signal.aborted || this.closed || this.record?.appId !== record.appId)
+                        return;
+                    if (inspection.appId !== record.appId || inspection.botOpenId !== record.botOpenId)
+                        throw new SetupError('机器人身份发生变化，请断开后重新绑定。', false);
+                    this.inspectCapabilities(inspection);
+                    if (!(kind === 'images' ? this.imagesReady : this.voiceReady))
+                        throw new SetupError('飞书权限尚未生效，请确认审批和发布完成后重新检查连接。');
+                    this.inputSetup = undefined;
+                }).catch(error => {
+                    if (!aborter.signal.aborted && !this.closed)
+                        this.inputSetup = { kind, phase: 'error', message: errorMessage(error) };
+                }).finally(() => { if (this.documentAborter === aborter) {
+                    this.documentJob = undefined;
+                    this.documentAborter = undefined;
+                } });
+                return this.snapshot();
+            }
             if (endpoint === 'enable-documents') {
                 if (!this.record?.verified || !this.record.ownerOpenId || this.job || !this.deps.platform.enableDocuments)
                     throw new SetupError('请先连接并确认本人，再补充默认权限。');
                 if (this.documentsReady)
                     return this.snapshot();
-                if (this.documentJob)
+                if (this.documentJob) {
+                    if (this.inputSetup)
+                        throw new SetupError('请先完成或取消当前的消息输入授权。');
                     return this.snapshot();
+                }
                 const record = this.record, aborter = this.documentAborter = new AbortController();
                 this.documentSetup = { phase: 'preparing', message: '正在准备默认权限授权，聊天连接继续保持。' };
                 this.documentJob = this.deps.platform.enableDocuments(record.profile, info => {
@@ -277,6 +393,7 @@ export class ConnectionController {
                     if (!profile)
                         throw new SetupError('没有找到这个机器人，请刷新列表。');
                     this.assertCurrent(signal);
+                    this.deps.reserveApp?.(profile.appId);
                     const previous = this.record?.profile === name && this.record.appId === profile.appId
                         && this.record.brand === profile.brand ? this.record : undefined;
                     await this.save({ schema: 1, profile: name, appId: profile.appId, brand: profile.brand,
@@ -311,9 +428,23 @@ export class ConnectionController {
                 if (this.service) {
                     if (!this.record.verified || !this.record.enabled)
                         throw new SetupError('本人验证尚未完成，请先安全停止连接后重新配对。');
+                    if (endpoint === 'recheck' && !this.documentJob) {
+                        const inspection = await this.deps.platform.inspect(this.record.profile, new AbortController().signal);
+                        if (inspection.appId !== this.record.appId || inspection.botOpenId !== this.record.botOpenId)
+                            throw new SetupError('机器人身份发生变化，请断开后重新绑定。', false);
+                        this.inspectCapabilities(inspection);
+                    }
                     this.phase(this.service.ready() ? 'connected' : 'starting', this.service.ready() ? messages.connected : '正在重新连接飞书。');
                     return this.snapshot();
                 }
+                if (endpoint === 'recheck' && this.record.verified && !this.record.enabled) {
+                    const inspection = await this.deps.platform.inspect(this.record.profile, new AbortController().signal);
+                    if (inspection.appId !== this.record.appId || inspection.botOpenId !== this.record.botOpenId)
+                        throw new SetupError('机器人身份发生变化，请断开后重新绑定。', false);
+                    this.inspectCapabilities(inspection);
+                    this.phase('paused');
+                    return this.snapshot();
+                }
                 this.deps.checkRuntime();
                 this.retryAttempts = 0;
                 this.phase('configuring');
@@ -345,6 +476,7 @@ export class ConnectionController {
             } });
         this.assertCurrent(signal);
         this.phase('configuring');
+        this.deps.reserveApp?.(registration.appId);
         await this.deps.platform.saveNewProfile(profile, registration, signal);
         this.assertCurrent(signal);
         await this.save({ schema: 1, profile, appId: registration.appId, brand: registration.brand,
@@ -357,8 +489,7 @@ export class ConnectionController {
         this.assertCurrent(signal);
         let record = this.record;
         let inspection = await this.deps.platform.inspect(record.profile, signal);
-        this.documentsReady = inspection.scopeStatus === 'verified' && defaultScopesReady(inspection.grantedScopes);
-        this.menuMissing = missingBotMenuEntries(inspection.menuEventKeys ?? []);
+        this.inspectCapabilities(inspection);
         this.assertCurrent(signal);
         if (inspection.appId !== record.appId || (record.botOpenId && inspection.botOpenId && record.botOpenId !== inspection.botOpenId)) {
             throw new SetupError('机器人身份发生变化，请断开后重新绑定。', false);
@@ -395,6 +526,7 @@ export class ConnectionController {
                 if (inspection.appId !== record.appId || (record.botOpenId && inspection.botOpenId && record.botOpenId !== inspection.botOpenId)) {
                     throw new SetupError('机器人身份发生变化，请断开后重新绑定。', false);
                 }
+                this.inspectCapabilities(inspection);
                 await this.save({ ...this.record, botOpenId: inspection.botOpenId ?? this.record.botOpenId,
                     creatorOpenId: this.record.creatorOpenId ?? inspection.creatorOpenId });
             }
@@ -439,17 +571,25 @@ export class ConnectionController {
         this.phase('confirming_owner');
         this.state.confirmation = { id: this.candidate.id, label: '已收到配对消息，请确认这是你刚发送的私聊。' };
     }
+    botDirectory() {
+        if (!this.record?.ownerOpenId)
+            return;
+        const identity = createHash('sha256').update(JSON.stringify([this.record.appId, this.record.ownerOpenId])).digest('hex').slice(0, 24);
+        return join(this.deps.store.directory, 'bots', identity);
+    }
+    defaultWorkspace() { const directory = this.botDirectory(); return directory ? join(directory, 'workspace') : ''; }
     async config() {
         const record = this.record;
         if (!record.ownerOpenId || !record.botOpenId)
             throw new SetupError('请先确认你的飞书身份。', false);
-        const identity = createHash('sha256').update(JSON.stringify([record.appId, record.ownerOpenId])).digest('hex').slice(0, 24);
-        const directory = join(this.deps.store.directory, 'bots', identity);
-        const cwd = join(directory, 'workspace');
+        const directory = this.botDirectory();
+        const cwd = this.settings.workspace || this.defaultWorkspace();
         await mkdir(cwd, { recursive: true, mode: 0o700 });
         return parseConfig({ profile: record.profile, botOpenId: record.botOpenId, stateDir: join(directory, 'state'),
             executable: this.deps.executable ?? 'lark-cli', users: [{ openId: record.ownerOpenId, direct: true, directMode: 'harness',
-                    groupChats: [], cwd, allowedTools: [] }], cardInteractions: record.cards, loadingReaction: record.loading, botMenu: this.menuReady,
+                    groupChats: [], cwd, allowedTools: [], ...(this.settings.agentPreset ? { agentPreset: this.settings.agentPreset } : {}) }],
+            imageInput: this.settings.imageInput, voiceInput: this.settings.voiceInput,
+            cardInteractions: record.cards, loadingReaction: record.loading, botMenu: this.menuReady,
             // Without the CardKit scope a live card cannot be created and replies fall back to ordinary messages.
             streamingCards: true }, directory);
     }
@@ -545,6 +685,7 @@ export class ConnectionController {
         this.documentJob = undefined;
         this.documentAborter = undefined;
         this.documentSetup = undefined;
+        this.inputSetup = undefined;
     }
     async dispose() {
         this.closed = true;

package/dist/onboarding/host.d.ts

@@ -1,6 +1,6 @@
 import type { Context } from '@deepseek-ai/cordis';
 import { ConnectionController } from './controller.js';
-import type { ConnectionResult } from './protocol.js';
+import type { ConnectionEndpoint, ConnectionResult, ConnectionSnapshot, AgentCatalog, ConnectionList } from './protocol.js';
 import { type Release } from './updates.js';
 interface Peer {
     principal?: {
@@ -21,7 +21,19 @@ export interface OwnerFetchRoutes {
         fetch(request: Request): Promise<Response>;
     }): () => void | Promise<void>;
 }
-type ConnectionControl = Pick<ConnectionController, 'snapshot' | 'profiles' | 'command'>;
+type ConnectionControl = {
+    snapshot(id?: string): ConnectionSnapshot;
+    profiles(signal?: AbortSignal, id?: string): ReturnType<ConnectionController['profiles']>;
+    command(endpoint: Exclude<ConnectionEndpoint, 'status' | 'profiles'>, payload: unknown, id?: string): Promise<ConnectionSnapshot>;
+    list?(): ConnectionList;
+    add?(): Promise<ConnectionList & {
+        selectedId: string;
+    }>;
+    remove?(id: string): Promise<ConnectionList & {
+        selectedId: string;
+    }>;
+    catalog?(): Promise<AgentCatalog>;
+};
 /** Settings stay readable, but inert, while another running host owns this connection directory. */
 export declare function lockedConnectionControl(): ConnectionControl;
 /** Legacy channels pin loopback; modern exact routes inherit the host's authenticated owner gate. */

package/dist/onboarding/host.js

@@ -6,13 +6,16 @@ import { delimiter, join, resolve } from 'node:path';
 import { createBotService, BotServiceStartError } from '../bot-service.js';
 import { checkRuntimeCompatibility } from '../dsh-runtime.js';
 import { acquireLock, LockHeldError } from '../lock.js';
-import { ConnectionController, SetupError } from './controller.js';
-import { ConnectionStore } from './store.js';
+import { SetupError } from './controller.js';
 import { LarkPlatform } from './lark-platform.js';
+import { ConnectionManager, validConnectionId } from './manager.js';
+import { agentCatalog, parseAgentSettings, validateAgentSettings } from './agents.js';
 import { npmLatest, UpdateCheck } from './updates.js';
 import { checkConnectionModel } from './model-check.js';
 const endpoints = new Set(['status', 'profiles', 'create', 'use-profile', 'recheck', 'cancel',
-    'renew-pairing', 'confirm-owner', 'pause', 'resume', 'disconnect', 'enable-documents', 'cancel-documents']);
+    'renew-pairing', 'confirm-owner', 'pause', 'resume', 'disconnect', 'enable-documents', 'cancel-documents', 'enable-input', 'cancel-input', 'update-agent']);
+const managerEndpoints = ['connections', 'add-connection', 'remove-connection', 'agent-catalog'];
+const allEndpoints = [...endpoints, ...managerEndpoints];
 const failure = (message) => ({ ok: false, error: { code: 'internal', message, details: {} } });
 class ConnectionRegistrationCleanupError extends Error {
 }
@@ -30,24 +33,48 @@ export function registerConnectionRpc(rpc, controller, ownerRoutes) {
     if (!legacy && rpc.handle.length !== 2)
         throw new SetupError('此 dsh 版本的连接接口尚未验证，请更新到支持的版本。');
     const dispatch = async (endpoint, payload, signal) => {
-        if (!endpoints.has(endpoint))
+        if (!allEndpoints.includes(endpoint))
             return failure('不支持的连接操作。');
         if (!payload || typeof payload !== 'object' || Array.isArray(payload))
             return failure('连接请求格式不正确。');
-        const allowed = endpoint === 'create' ? ['cards', 'loading'] : endpoint === 'use-profile' ? ['name'] : endpoint === 'confirm-owner' ? ['id'] : [];
+        const manager = managerEndpoints.includes(endpoint);
+        const allowed = [...(manager && endpoint !== 'remove-connection' ? [] : ['connectionId']), ...(endpoint === 'create' ? ['cards', 'loading'] : endpoint === 'use-profile' ? ['name'] : endpoint === 'confirm-owner' ? ['id']
+                : endpoint === 'update-agent' ? ['label', 'agentPreset', 'workspace', 'imageInput', 'voiceInput'] : endpoint === 'enable-input' ? ['kind'] : [])];
         const data = payload;
-        if (Object.keys(data).some(key => !allowed.includes(key)) || Object.values(data).some(value => !['boolean', 'string'].includes(typeof value) || (typeof value === 'string' && value.length > 200)))
+        if (Object.keys(data).some(key => !allowed.includes(key)) || Object.values(data).some(value => !['boolean', 'string'].includes(typeof value)) || Object.entries(data).some(([key, value]) => typeof value === 'string' && value.length > (key === 'workspace' ? 4096 : 200))
+            || (data.connectionId !== undefined && !validConnectionId(data.connectionId)))
             return failure('连接请求格式不正确。');
         if ((endpoint === 'create' && ['cards', 'loading'].some(key => data[key] !== undefined && typeof data[key] !== 'boolean'))
             || (endpoint === 'use-profile' && typeof data.name !== 'string')
-            || (endpoint === 'confirm-owner' && typeof data.id !== 'string'))
+            || (endpoint === 'confirm-owner' && typeof data.id !== 'string')
+            || (endpoint === 'enable-input' && data.kind !== 'images' && data.kind !== 'voice'))
             return failure('连接请求格式不正确。');
+        if (endpoint === 'update-agent') {
+            try {
+                parseAgentSettings(data);
+            }
+            catch {
+                return failure('Agent 设置格式不正确。');
+            }
+        }
         try {
+            if (endpoint === 'connections' && controller.list)
+                return { ok: true, value: controller.list() };
+            if (endpoint === 'add-connection' && controller.add)
+                return { ok: true, value: await controller.add() };
+            if (endpoint === 'remove-connection' && controller.remove && typeof data.connectionId === 'string')
+                return { ok: true, value: await controller.remove(data.connectionId) };
+            if (endpoint === 'agent-catalog' && controller.catalog)
+                return { ok: true, value: await controller.catalog() };
+            if (manager)
+                return failure('当前连接服务不支持机器人管理，请检查插件版本。');
+            const { connectionId, ...fields } = data;
             if (endpoint === 'status')
-                return { ok: true, value: controller.snapshot() };
+                return { ok: true, value: connectionId === undefined ? controller.snapshot() : controller.snapshot(connectionId) };
             if (endpoint === 'profiles')
-                return { ok: true, value: await controller.profiles(signal) };
-            return { ok: true, value: await controller.command(endpoint, payload) };
+                return { ok: true, value: await (connectionId === undefined ? controller.profiles(signal) : controller.profiles(signal, connectionId)) };
+            const command = endpoint;
+            return { ok: true, value: await (connectionId === undefined ? controller.command(command, fields) : controller.command(command, fields, connectionId)) };
         }
         catch (error) {
             return failure(error instanceof SetupError ? error.message : '连接操作暂时失败，请检查本机服务后重试。');
@@ -73,7 +100,7 @@ export function registerConnectionRpc(rpc, controller, ownerRoutes) {
                     throw new ConnectionRegistrationCleanupError('Connection routes could not be removed.');
             };
             try {
-                for (const endpoint of endpoints) {
+                for (const endpoint of allEndpoints) {
                     disposers.push(ownerRoutes.register({ path: `/api/larkbot/${endpoint}`, methods: ['POST'], requestBody: 'buffered',
                         async fetch(request) {
                             const envelope = await readConnectionEnvelope(request, `larkbot/${endpoint}`);
@@ -228,7 +255,8 @@ export async function applyOnboarding(ctx, options = {}) {
         return;
     }
     const executable = await findLarkExecutable(options.executable);
-    const controller = new ConnectionController({ store: new ConnectionStore(directory), platform: new LarkPlatform({ executable }), executable,
+    const controller = new ConnectionManager(directory, () => ({ platform: new LarkPlatform({ executable }), executable,
+        validateAgent: settings => validateAgentSettings(ctx, settings),
         checkRuntime: () => requireRuntime(ctx),
         preflight: (config, signal) => checkConnectionModel(ctx, config, signal),
         start: async (config, signal, health, pairedChat) => {
@@ -246,14 +274,15 @@ export async function applyOnboarding(ctx, options = {}) {
                 throw error;
             }
         },
-    });
+    }), () => agentCatalog(ctx));
     const installed = installedPackage();
     const updates = new UpdateCheck(installed?.version, options.latestRelease
         ?? (signal => installed ? npmLatest(installed.name, signal) : Promise.resolve(undefined)));
     const control = {
-        snapshot: () => withUpdate(controller.snapshot(), updates),
-        profiles: signal => controller.profiles(signal),
-        command: async (endpoint, payload) => withUpdate(await controller.command(endpoint, payload), updates),
+        snapshot: id => withUpdate(controller.snapshot(id), updates),
+        profiles: (signal, id) => controller.profiles(signal, id),
+        command: async (endpoint, payload, id) => withUpdate(await controller.command(endpoint, payload, id), updates),
+        list: () => controller.list(), add: () => controller.add(), remove: id => controller.remove(id), catalog: () => controller.catalog(),
     };
     let remove;
     try {

package/dist/onboarding/lark-platform.d.ts

@@ -1,4 +1,5 @@
 import type { registerApp as sdkRegisterApp } from '@larksuiteoapi/node-sdk';
+import { type MediaInputKind } from '../media-scopes.js';
 type RegisterAppOptions = Parameters<typeof sdkRegisterApp>[0];
 type RegisterAppResult = Awaited<ReturnType<typeof sdkRegisterApp>>;
 export type LarkBrand = 'feishu' | 'lark';
@@ -92,6 +93,11 @@ export declare class LarkPlatform {
         url: string;
         expireIn: number;
     }) => void, signal: AbortSignal): Promise<void>;
+    enableInput(profile: string, kind: MediaInputKind, onQRCode: (info: {
+        url: string;
+        expireIn: number;
+    }) => void, signal: AbortSignal, expectedAppId: string): Promise<void>;
+    private authorizeScopes;
     saveNewProfile(profile: string, app: RegisteredApp, signal?: AbortSignal): Promise<ProfileSummary>;
     private profile;
     private api;