xuym-codex-collab 0.4.1 → 0.4.2

package/README.md

@@ -22,6 +22,8 @@ codex-collab setup
 
 同一个真人可以拥有多个 Agent，每个 Agent 使用独立机器人、签名身份、业务 clone 和 Codex 对话。管理员在项目页点击“给自己增加机器人”，验证同一个企业微信账号后自动接入，无需下载包或填写包密码；给同事分配时仍使用加密接入包，同事可以领取多份。相同 userid 不会合并 Agent 权限，审核通知会指明应使用的机器人。
 
+机器人在企业微信后台设为多人可用并加入协作群后，已批准入队的成员可以 `@` 任意团队机器人的自然语言需求；未入队的群成员仍会被工具拒绝。普通成员可提交需求、创建任务和查询状态，审核与取消、完成等控制操作继续受原有身份权限限制。接入完成后，团队成员可直接互相派发，不必再改机器人配置。
+
 本机配置完成后，向导只要求在目标 Codex 对话发送一条指令，例如：
 
 ```text

package/apps/peer/wecom.mjs

@@ -37,10 +37,12 @@ export async function dispatchPeerWecom(frame, { service, config, reply }) {
   const sender = body.from?.userid;
   const owner = !!sender && sender === service.team.agents[service.agentId]?.wecom_userid;
   const admin = config.allow_admin_commands === true && !!sender && Object.values(service.team.agents).some((agent) => agent.role === 'admin' && agent.wecom_userid === sender);
+  const member = !!sender && Object.values(service.team.agents).some((agent) => agent.role === 'member' && agent.wecom_userid === sender);
   // Shared owners do not merge agent roles: the receiving bot selects its signer.
-  // Admins may dispatch/query via a member bot. Review mutations must be signed by
-  // the human reviewer's own identity, never by impersonating another member.
-  if (!owner && !(admin && ['create', 'status', 'natural'].includes(command?.action || 'natural'))) return false;
+  // Enrolled team members may submit work to any bot; review/control mutations
+  // still require the bot owner. Admin dispatch retains its explicit config gate.
+  const dispatchOnly = ['create', 'status', 'natural'].includes(command?.action || 'natural');
+  if (!owner && !(dispatchOnly && (member || admin))) return false;
   const key = `wecom:${body.chatid}:${body.msgid}`;
   let text;
   try {
@@ -57,7 +59,7 @@ export async function dispatchPeerWecom(frame, { service, config, reply }) {
       if (config.execution_mode !== 'desktop_poll') {
         await reply(frame, '自然语言任务需要绑定已有 Codex 对话，并启用 desktop_poll 轮询。'); return true;
       }
-      const request = await service.receiveRequest({ chatId: body.chatid, messageId: body.msgid, senderId: sender, content, allowAdmin: config.allow_admin_commands === true });
+      const request = await service.receiveRequest({ chatId: body.chatid, messageId: body.msgid, senderId: sender, content, allowAdmin: admin });
       text = request.state.task_id ? `该消息已创建任务 ${request.state.task_id}，不会重复创建。`
         : request.state.status === 'answered' ? '这条消息已处理。'
         : request.state.status === 'clarification' ? `需求 ${request.spec.id} 等待你补充说明，请查看群里的追问。`

package/docs/desktop-poll.md

@@ -138,7 +138,7 @@ sh test.sh 要通过，完成后在群里发总结。
 已有绑定不需要重新创建身份。先处理正在执行的任务，再对每个 Agent 用其**项目 MCP 实际使用的私有配置路径**操作：
 
 ```sh
-npm install --global xuym-codex-collab@0.4.1
+npm install --global xuym-codex-collab@0.4.2
 codex-collab stop /absolute/private-peer.json
 codex-collab refresh-project /absolute/private-peer.json
 codex-collab start /absolute/private-peer.json

package/docs/onboarding.md

@@ -32,6 +32,8 @@ codex-collab setup
 
 显示名称保存在本机和加密接入包中；团队签名和群协议仍用内部 Agent ID。真人通过自己的企业微信账号验证接入，以便核对审核权限；额外通知对象不会因此获得审核权限。
 
+机器人应在企业微信后台设为多人可用，并把实际协作成员加入可使用范围。平台允许使用后，工具还会核对发言人的 `userid` 是否属于已批准入队的成员；成员可以 `@` 任意团队机器人提交需求、创建任务或查询状态。审核、取消、完成等操作仍按任务和本人权限限制。未完成团队接入的群成员不能派发任务。
+
 机器人必须由一个本机 Runner 保持连接。同一个 Bot ID 不要同时运行旧服务、群发现命令和新 Runner。向导检查可识别的本机重复连接；其他电脑上的连接需由团队核实。
 
 ## 成员操作

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xuym-codex-collab",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "description": "Git-backed collaboration tools for Codex teams, with MCP, WeCom, and local runners.",
   "repository": {
     "type": "git",

package/packages/peer/inbox.mjs

@@ -9,8 +9,10 @@ const fields = (value, allowed) => value && typeof value === 'object' && !Array.
 export function validateInboxSpec(spec, team) {
   if (!fields(spec, ['schema_version', 'id', 'repo', 'target_agent', 'chat_id', 'sender_id', 'content', 'message_key', 'admin_dispatch']) || spec.schema_version !== 1 || !inboxIdPattern.test(spec.id || '') || spec.repo !== team.repo || !text(spec.target_agent, 64) || !/^[a-zA-Z0-9_-]+$/.test(spec.target_agent) || !Object.hasOwn(team.agents, spec.target_agent) || !text(spec.chat_id, 200) || !text(spec.sender_id, 200) || !text(spec.content, 4000) || !text(spec.message_key, 300) || typeof spec.admin_dispatch !== 'boolean' || spec.id !== `N-${digest([spec.target_agent, spec.message_key]).slice(0, 32).toUpperCase()}`) throw new Error('invalid natural-language inbox specification');
   const owner = team.agents[spec.target_agent].wecom_userid === spec.sender_id;
-  const admin = spec.admin_dispatch && Object.values(team.agents).some((agent) => agent.role === 'admin' && agent.wecom_userid === spec.sender_id);
-  if (!owner && !admin) throw new Denied('only the bot owner or an authorized team administrator may submit requests');
+  const senders = Object.values(team.agents).filter((agent) => agent.wecom_userid === spec.sender_id);
+  const member = senders.some((agent) => agent.role === 'member');
+  const admin = spec.admin_dispatch && senders.some((agent) => agent.role === 'admin');
+  if (!owner && !member && !admin) throw new Denied('only the bot owner or an enrolled team member may submit requests');
 }
 
 /** Append-only requests: only the receiving agent signs interpretation/replies. */

package/packages/peer/service.mjs

@@ -24,8 +24,10 @@ export class PeerService {
     const key = inboxMessageKey(this.agentId, chatId, messageId);
     return this.store.transactInbox(key, (requests) => {
       const owner = this.team.agents[this.agentId]?.wecom_userid === senderId;
-      const admin = allowAdmin && Object.values(this.team.agents).some((agent) => agent.role === 'admin' && agent.wecom_userid === senderId);
-      if (!senderId || !owner && !admin) throw new Denied('sender is not authorized for this bot');
+      const senderAgents = Object.values(this.team.agents).filter((agent) => agent.wecom_userid === senderId);
+      const member = senderAgents.some((agent) => agent.role === 'member');
+      const admin = allowAdmin && senderAgents.some((agent) => agent.role === 'admin');
+      if (!senderId || !owner && !member && !admin) throw new Denied('sender is not authorized for this bot');
       const referencedId = content.match(/\bN-[A-F0-9]{32}\b/)?.[0];
       const mine = requests.filter((request) => request.spec.target_agent === this.agentId && request.spec.chat_id === chatId && request.spec.sender_id === senderId);
       const waiting = mine.filter((request) => request.state.status === 'clarification');
@@ -41,8 +43,10 @@ export class PeerService {
       const original = event.type === 'received' ? request.spec.content : event.content;
       if (request.spec.chat_id !== chatId || request.spec.sender_id !== senderId || original !== content) throw new Conflict('group message ID already used with different content or sender');
       const owner = this.team.agents[this.agentId]?.wecom_userid === senderId;
-      const admin = allowAdmin && Object.values(this.team.agents).some((agent) => agent.role === 'admin' && agent.wecom_userid === senderId);
-      if (!owner && !admin) throw new Denied('sender is not authorized for this bot');
+      const senderAgents = Object.values(this.team.agents).filter((agent) => agent.wecom_userid === senderId);
+      const member = senderAgents.some((agent) => agent.role === 'member');
+      const admin = allowAdmin && senderAgents.some((agent) => agent.role === 'admin');
+      if (!owner && !member && !admin) throw new Denied('sender is not authorized for this bot');
     } });
   }
   async resolveRequest(id, expectedSeq, resolution, { defaultWorkflow } = {}) {

package/schemas/peer-inbox.schema.json

@@ -59,5 +59,5 @@
       "type": "boolean"
     }
   },
-  "$comment": "Runtime also verifies the repo and target against the pinned team, a deterministic request ID derived from target_agent and message_key, and bot-owner or allowed administrator authorization. The original group request is shared in Git; private Codex transcripts, bindings and credentials stay local."
+  "$comment": "Runtime also verifies the repo and target against the pinned team, a deterministic request ID derived from target_agent and message_key, and authorization by the bot owner, an enrolled team member, or an explicitly allowed administrator. The original group request is shared in Git; private Codex transcripts, bindings and credentials stay local."
 }