Repository navigation
Bot activity: safe tool summaries and effects #122
Description
Remaining outcome — reconciled 2026-09-30
Bounded avatar effect styles exist. Remaining: Host-owned tool-kind/safe detail projection, authorized bounded detail access and safe presentation. Raw tool payloads, credentials and reasoning stay excluded.
Feature Project
- Bot Activity & Avatar Presence
- Historical coordination [Retired] Orchestrator: V1.0 PersonaBot Activity、Presence 与 Output Events #119 is retired.
- Source spec: Spec: PersonaBot Activity Projection、共享 Avatar Presence 与 Output Events #118
- Product motion preference: UI Foundation: BotHarness motion preference（System / Reduce / Full） #128
- Composer activity region: UI Tracer: Channel composer island 与 PersonaBot activity region #129
What to build
在 Ticket #120 的通用 thinking/working presence 上增加 bounded tool-aware effects，并发布安全、版本化的 PersonaBot Activity Cordis Events。单一 tool kind 映射到 thinking-dots、searching、coding/editing、executing 或 generic-working；未知 kind 与并发不同 kind 均安全回退 generic-working。
需要完整 Tool arguments/result 的可信插件必须通过授权 Capability 使用 opaque reference 查询；事件只携带 identifiers、revision、source role、tool kind、可选 tool name、cause 与 provider-declared safe publicDetail。
Channel presentation
- Loading visuals 可参考 https://www.beautifului.dev/r/loading-state.json，但只作为 effect renderer，不拥有 loading truth。
- Thinking/collapsible visuals 可参考 https://www.beautifului.dev/r/thinking-state.json。
- sidebar avatar hover/focus 与 composer activity region 可显示一行安全摘要：activity label、可选 tool name/publicDetail、elapsed/active-source count。
- 点击或键盘展开后只显示安全 Activity trace/summary，不复制 DSH Session transcript，不显示 raw reasoning、arguments 或 results。
- DSH 原生 Session/Trajectory UI 继续负责可选的详细 Session 呈现；Channel 不是第二份 Session UI。
- UI Foundation: BotHarness motion preference（System / Reduce / Full） #128 Reduce motion 下把 dots/shimmer/search/coding motion 替换为静态 indicator + text；Full motion 才启用完整预设。
Acceptance criteria
- DSH ToolCallKind 到 bounded effect vocabulary 的映射有 exhaustive/fallback tests。
- 相同 tool kind 并发保持对应 effect；不同 tool kinds 聚合为 generic-working。
- Projection 更新后 exactly one process-local Cordis emit notification，事件 revision 与 snapshot 一致。
- 事件 contract tests 证明 raw arguments、raw results、secrets 与 private reasoning 不在 payload 中。
- 授权 consumer 可按 opaque reference 查询完整 detail；unauthorized/expired/unknown reference fail closed。
- sidebar 与 composer 同步展示 effect 和安全摘要；hover/focus/click/keyboard 均可访问。
- UI Foundation: BotHarness motion preference（System / Reduce / Full） #128 三态 motion preference 使用同一 effect vocabulary；Reduce 下无连续动画但状态信息完整。
- collapsible 只消费 revisioned Activity snapshot，不直接解析 Session log。
- fake plugin consumer 可观察事件而无需读取 UI 或解析 Session log。
Activity
[-]Tracer 3: Tool-aware effects 与安全 PersonaBot events[/-][+]Bot activity: safe tool summaries and effects[/+]62 remaining items
DoodleBears commentedon Oct 2, 2026
Agent work claim — authorized Tool detail Capability
codex/local/01a0e445-0c0f-70e1-bad4-fd99c8cfaa21(not a DSH Session)codex/122-authorized-tool-detaildocs(activity): capture real Tool detail capability evidence
style(activity): format consumer audit assertion
merge: preserve Overview Memory and Tool detail contracts
test(docs): include default-deny Activity Consumer setting
Merge latest Channel Bridge delivery into Tool detail Capability (#122)
perf(activity): use native live Session lookup for Tool details (#122)
feat(activity): authorize opaque Host Tool detail reads (#122) (#727)
DoodleBears commentedon Oct 2, 2026
Agent work outcome — #122 completed
codex/local/01a0e445-0c0f-70e1-bad4-fd99c8cfaa2112ff478ae42ba9e57dc08b46fb220426b666fc78.d6e69a1: full CI passed (run), 26 affected tests/typecheck/build passed; restarted real DSH native Tool -> committed reply -> idle and all seven native Host Consumer authorization/refusal assertions passed again.