Skip to content

feat: reliable employee activity notifications for runtime extensions - #193

Open
0YHR0 wants to merge 8 commits into
mainfrom
feat/business-activity-notifications
Open

0YHR0 wants to merge 8 commits into
mainfrom
feat/business-activity-notifications

Conversation

@0YHR0

@0YHR0 0YHR0 commented Oct 8, 2026 •

Copy link
Copy Markdown
Owner

Adds a bounded, trusted SDK hook for business activity notices. Commits an activity event with the exact business revision and routes opt-in Feishu delivery through existing employee identities. Validates tenant/company/object/revision provenance, withholds credential-like summaries, and preserves gates, UUID deduplication and bounded retries.

Adds generic conversational rendering for coordinated employee replies. The discussion topic/turn comes only from immutable pinned Run input; the card leads with the actual public output summary when content sync is enabled. Metadata remains secondary and audit-friendly. Ordinary handoffs are unchanged; started/failed events do not fabricate employee dialogue. Business notices also put public summaries before audit metadata.

Validation: 81 focused Feishu tests passed, one skipped; all required GitHub checks passed. Covers immutable provenance, invalid topic/turn fields, secrets, content opt-out and preservation of ordinary collaboration cards. No business-specific workflow, public callback, group ingress or API key added. Private extension qualification separately exercised real discussion cards and independent identity delivery; no private deployment details committed here.

Additional runtime boundaries:

  • Trusted in-process delegate resolution checks active configured identity and current persisted roles; no caller-controlled principal/role or public impersonation endpoint.
  • PRIVATE task notifications are suppressed by both ordinary notification and coordinated projection boundaries.
  • company_context.memory_mode=EXPLICIT keeps scheduling bindings while disabling automatic retrieval and capture. It grants no authority to read memory; trusted extensions must validate their own frozen knowledge selection.

The explicit-mode code qualification passed all required CI checks, including PostgreSQL integration, Compose E2E, unit coverage, quality and CodeQL. Model/memory setup guides now explain this mode in English and Chinese. No business-specific lyric rules or private deployment configuration added to core.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant