@lark-apaas/openclaw-scripts-diagnose-cli 0.1.14-alpha.1 → 0.1.14-alpha.10

package/dist/index.cjs

@@ -52,7 +52,7 @@ node_assert = __toESM(node_assert);
 * it terse and parseable.
 */
 function getVersion() {
-	return "0.1.14-alpha.1";
+	return "0.1.14-alpha.10";
 }
 //#endregion
 //#region src/rule-engine/base.ts
@@ -3367,9 +3367,9 @@ let FeishuPluginOpenclawUpgradeRule = class FeishuPluginOpenclawUpgradeRule exte
 	validate(ctx) {
 		const cc = resolveCompatContext(ctx);
 		if (!cc) return { pass: true };
-		if (!cc.recommendedOc) return { pass: true };
 		const { ocCur, recommendedOc, installed, isLegacy } = cc;
 		if (isForkPlugin(installed)) return validateForkPlugin(installed, ocCur, recommendedOc);
+		if (!recommendedOc) return { pass: true };
 		if (resolveUpgradeDirection(installed, ocCur, recommendedOc, isLegacy) !== "openclaw") return { pass: true };
 		return {
 			pass: false,
@@ -3397,19 +3397,17 @@ let FeishuPluginLarkUpgradeRule = class FeishuPluginLarkUpgradeRule extends Diag
 		if (!cc) return { pass: true };
 		const { ocCur, recommendedOc, installed, isLegacy } = cc;
 		if (isForkPlugin(installed)) return { pass: true };
-		if (!recommendedOc) {
-			if (isLegacy || !isVersionCompatible(installed, ocCur)) return {
-				pass: false,
-				action: "upgrade_lark",
-				message: `${buildCompatPrefix(installed, ocCur, isLegacy)}；建议升级飞书插件至兼容版本`
-			};
-			return { pass: true };
-		}
-		if (resolveUpgradeDirection(installed, ocCur, recommendedOc, isLegacy) !== "lark") return { pass: true };
+		if (!isLarkUpgradeNeededFromCC(cc)) return { pass: true };
+		const prefix = buildCompatPrefix(installed, ocCur, isLegacy);
+		if (!recommendedOc) return {
+			pass: false,
+			action: "upgrade_lark",
+			message: `${prefix}；建议升级飞书插件至兼容版本`
+		};
 		return {
 			pass: false,
 			action: "upgrade_lark",
-			message: `${buildCompatPrefix(installed, ocCur, isLegacy)}；当前 openclaw@${ocCur} 已达推荐版本，可直接升级飞书插件`
+			message: `${prefix}；当前 openclaw@${ocCur} 已达推荐版本，可直接升级飞书插件`
 		};
 	}
 };
@@ -3421,6 +3419,18 @@ FeishuPluginLarkUpgradeRule = __decorate([Rule({
 	level: "critical",
 	usesVars: ["recommendedOpenclawTag"]
 })], FeishuPluginLarkUpgradeRule);
+/**
+* Core predicate: returns true when the lark plugin needs upgrading for a
+* non-fork plugin, based on version compatibility with the current openclaw.
+*
+* Shared by FeishuPluginLarkUpgradeRule.validate and needsLarkUpgrade.
+* Callers must handle fork plugin cases before invoking this function.
+*/
+function isLarkUpgradeNeededFromCC(cc) {
+	const { ocCur, recommendedOc, installed, isLegacy } = cc;
+	if (!recommendedOc) return isLegacy || !isVersionCompatible(installed, ocCur);
+	return resolveUpgradeDirection(installed, ocCur, recommendedOc, isLegacy) === "lark";
+}
 function isForkPlugin(p) {
 	return p.scope != null && FORK_SCOPES.includes(p.scope);
 }
@@ -3459,14 +3469,16 @@ function describeCompatConstraint(entry, pluginVersion) {
 /**
 * @lark-apaas/openclaw-lark 豁免 VERSION_COMPAT_MAP，但仍要求 openclaw ≥ FORK_LARK_PLUGIN_MIN_OC_VERSION。
 * 其他 @lark-apaas scope 的 fork 插件继续无条件 pass。
+* recommendedOc 可为 undefined（doctor 模式），此时只检测最低版本要求，不指定目标升级版本。
 */
 function validateForkPlugin(installed, ocCur, recommendedOc) {
 	if (installed.fullName !== FORK_LARK_PLUGIN_FULL_NAME) return { pass: true };
 	if (compareCalVer(ocCur, FORK_LARK_PLUGIN_MIN_OC_VERSION) >= 0) return { pass: true };
+	const recommendation = recommendedOc ? `；将 openclaw 升级到 ${recommendedOc} 即可满足` : `；请升级 openclaw 至 ${FORK_LARK_PLUGIN_MIN_OC_VERSION} 或更高版本`;
 	return {
 		pass: false,
 		action: "upgrade_openclaw",
-		message: `飞书插件 ${describePlugin(installed)}（fork 版）要求 openclaw ≥ ${FORK_LARK_PLUGIN_MIN_OC_VERSION}，当前 openclaw@${ocCur} 低于此要求；将 openclaw 升级到 ${recommendedOc} 即可满足`
+		message: `飞书插件 ${describePlugin(installed)}（fork 版）要求 openclaw ≥ ${FORK_LARK_PLUGIN_MIN_OC_VERSION}，当前 openclaw@${ocCur} 低于此要求${recommendation}`
 	};
 }
 function describePlugin(p) {
@@ -3513,6 +3525,187 @@ function extractScopedNameFromSpec$1(spec) {
 	const at = spec.indexOf("@", 1);
 	return at === -1 ? spec : spec.slice(0, at);
 }
+/**
+* Returns true if the installed feishu plugin is version-incompatible with
+* the current openclaw (or is a legacy plugin that must be replaced).
+* Used by the upgrade_lark_needed rule and the upgrade-lark pre-check gate.
+*/
+function needsLarkUpgrade(ctx) {
+	const cc = resolveCompatContext(ctx);
+	if (!cc) return false;
+	const { ocCur, recommendedOc, installed } = cc;
+	if (isForkPlugin(installed)) {
+		if (recommendedOc) return false;
+		if (installed.fullName === FORK_LARK_PLUGIN_FULL_NAME) return compareCalVer(ocCur, FORK_LARK_PLUGIN_MIN_OC_VERSION) < 0;
+		return false;
+	}
+	return isLarkUpgradeNeededFromCC(cc);
+}
+//#endregion
+//#region src/channels-probe.ts
+const FEISHU_INVALID_CONFIG_MSG = "channels.feishu: invalid config: must NOT have additional properties";
+const CHANNEL_LINE_RE = /^-\s+Feishu\s+([^:]+):\s+(.+)$/;
+/**
+* Port of Python `_account_is_working` from the feishu-channel-success-rate skill.
+*
+* Strips colon-prefixed key:value bits (dm:, bot:, in:, out:, token:, allow:,
+* intents:, groups:, health:) and evaluates the canonical health formula.
+*/
+function accountIsWorking(bits) {
+	const bitTokens = /* @__PURE__ */ new Set();
+	let hasError = false;
+	let hasProbeFailed = false;
+	for (const raw of bits) {
+		const b = raw.trim();
+		if (!b) continue;
+		if (b.startsWith("error:")) {
+			hasError = true;
+			continue;
+		}
+		if (b === "probe failed") {
+			hasProbeFailed = true;
+			continue;
+		}
+		bitTokens.add(b.split(":")[0]);
+	}
+	if (!bitTokens.has("enabled") || !bitTokens.has("configured")) return false;
+	if (bitTokens.has("works")) return true;
+	if (bitTokens.has("running") && !hasError && !hasProbeFailed) return true;
+	return false;
+}
+/**
+* Parse the raw stdout of `openclaw channels status --probe`.
+* Port of Python `extract_channels_probe` from the feishu-channel-success-rate skill.
+*/
+function parseChannelsProbeOutput(text) {
+	const gatewayReachable = text.includes("Gateway reachable");
+	const feishuConfigInvalid = text.includes(FEISHU_INVALID_CONFIG_MSG);
+	const accounts = [];
+	let anyAccountWorking = false;
+	for (const line of text.split("\n")) {
+		const m = CHANNEL_LINE_RE.exec(line.trim());
+		if (!m) continue;
+		const [, acct, rest] = m;
+		const bits = rest.split(",").map((b) => b.trim());
+		const isWorking = accountIsWorking(bits);
+		if (isWorking) anyAccountWorking = true;
+		accounts.push({
+			id: acct.trim(),
+			bits,
+			isWorking,
+			raw: line.trim()
+		});
+	}
+	return {
+		gatewayReachable,
+		feishuConfigInvalid,
+		accounts,
+		anyAccountWorking
+	};
+}
+/**
+* Run `openclaw channels status --probe` and return a structured result.
+*
+* The command may exit non-zero when some bot accounts fail their probe — that
+* is still useful output.  We therefore try to parse stdout even when the
+* process exits with a non-zero code, falling back to an unavailable result
+* only when there is genuinely no output to parse.
+*
+* @param timeoutMs  Maximum wait time.  Default is 60 s because v2026.4.x
+*   lacks a per-request HTTP timeout and can block indefinitely.
+*/
+function runChannelsProbe(timeoutMs = 6e4) {
+	let stdout = "";
+	let stderrText = "";
+	let execError;
+	try {
+		stdout = (0, node_child_process.execSync)("openclaw channels status --probe", {
+			encoding: "utf-8",
+			timeout: timeoutMs,
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			]
+		});
+	} catch (e) {
+		const err = e;
+		const stdoutRaw = err.stdout;
+		stdout = typeof stdoutRaw === "string" ? stdoutRaw : stdoutRaw?.toString("utf-8") ?? "";
+		execError = err.message;
+		const stderrRaw = err.stderr;
+		stderrText = (typeof stderrRaw === "string" ? stderrRaw : stderrRaw?.toString("utf-8") ?? "").trim();
+		if (stderrText) console.error(`channels-probe: stderr from CLI: ${stderrText}`);
+	}
+	if (stdout.trim()) return {
+		available: true,
+		...parseChannelsProbeOutput(stdout)
+	};
+	return {
+		available: false,
+		gatewayReachable: false,
+		feishuConfigInvalid: stderrText.includes(FEISHU_INVALID_CONFIG_MSG),
+		accounts: [],
+		anyAccountWorking: false,
+		error: execError ?? "no output from openclaw channels status --probe"
+	};
+}
+//#endregion
+//#region src/rules/upgrade-lark-needed.ts
+/**
+* Detects the condition that warrants running `upgrade-lark`:
+*   - feishu plugin version incompatible with current openclaw, OR
+*   - openclaw channels status --probe reports feishu channel config invalid; AND
+*   - channels are not working.
+*
+* Both conditions must be true simultaneously. If version is compatible and
+* feishu config is valid, or channels are working, the rule passes (no action needed).
+*
+* feishuConfigInvalid is read from the channels probe output rather than running a
+* separate `openclaw status` call, since only `openclaw channels status --probe`
+* reliably surfaces the schema validation error.
+*
+* profile: experimental — runs only in full sweep mode, not in standard doctor.
+* level: silent — telemetry/sweep-only, does not trigger page-level repair UI.
+*/
+let UpgradeLarkNeededRule = class UpgradeLarkNeededRule extends DiagnoseRule {
+	validate(ctx) {
+		let versionIncompatible = false;
+		try {
+			versionIncompatible = needsLarkUpgrade(ctx);
+		} catch {
+			versionIncompatible = true;
+		}
+		let probeResult;
+		try {
+			probeResult = runChannelsProbe(6e4);
+		} catch {
+			probeResult = {
+				available: false,
+				gatewayReachable: false,
+				feishuConfigInvalid: false,
+				accounts: [],
+				anyAccountWorking: false
+			};
+		}
+		const feishuConfigInvalid = probeResult.feishuConfigInvalid;
+		if (!(versionIncompatible || feishuConfigInvalid)) return { pass: true };
+		if (probeResult.anyAccountWorking) return { pass: true };
+		return {
+			pass: false,
+			action: "upgrade_lark",
+			message: `飞书插件需要升级且 channels 不可用（版本不兼容=${versionIncompatible}, feishu配置无效=${feishuConfigInvalid}），建议执行 upgrade-lark 命令升级飞书插件`
+		};
+	}
+};
+UpgradeLarkNeededRule = __decorate([Rule({
+	key: "upgrade_lark_needed",
+	description: "检测飞书插件版本不兼容且 channels 不可用，判断是否需要执行 upgrade-lark 升级",
+	repairMode: "check-only",
+	level: "silent",
+	profile: "experimental",
+	usesVars: ["recommendedOpenclawTag"]
+})], UpgradeLarkNeededRule);
 //#endregion
 //#region src/rules/cleanup-install-backup-dirs.ts
 const DIR_PREFIX = ".openclaw-install-";
@@ -6236,23 +6429,6 @@ function reportError(params) {
 	} catch {}
 }
 //#endregion
-//#region ../../openclaw-slardar/lib/report-log.js
-function reportLog(params) {
-	try {
-		const extra = mergeLogExtra(buildTelemetryFields(params), {
-			event: params.event,
-			phase: params.phase,
-			status: params.status,
-			...params.extra
-		});
-		Slardar.sendLog?.({
-			content: params.message,
-			level: params.level ?? "info",
-			extra
-		});
-	} catch {}
-}
-//#endregion
 //#region src/install-cli.ts
 const LARK_CLI_NAME = "lark-cli";
 const AGENT_SKILLS_NAME = "agent-skills";
@@ -10149,109 +10325,6 @@ function finalize(results, aborted) {
 	};
 }
 //#endregion
-//#region src/channels-probe.ts
-const CHANNEL_LINE_RE = /^-\s+Feishu\s+([^:]+):\s+(.+)$/;
-/**
-* Port of Python `_account_is_working` from the feishu-channel-success-rate skill.
-*
-* Strips colon-prefixed key:value bits (dm:, bot:, in:, out:, token:, allow:,
-* intents:, groups:, health:) and evaluates the canonical health formula.
-*/
-function accountIsWorking(bits) {
-	const bitTokens = /* @__PURE__ */ new Set();
-	let hasError = false;
-	let hasProbeFailed = false;
-	for (const raw of bits) {
-		const b = raw.trim();
-		if (!b) continue;
-		if (b.startsWith("error:")) {
-			hasError = true;
-			continue;
-		}
-		if (b === "probe failed") {
-			hasProbeFailed = true;
-			continue;
-		}
-		bitTokens.add(b.split(":")[0]);
-	}
-	if (!bitTokens.has("enabled") || !bitTokens.has("configured")) return false;
-	if (bitTokens.has("works")) return true;
-	if (bitTokens.has("running") && !hasError && !hasProbeFailed) return true;
-	return false;
-}
-/**
-* Parse the raw stdout of `openclaw channels status --probe`.
-* Port of Python `extract_channels_probe` from the feishu-channel-success-rate skill.
-*/
-function parseChannelsProbeOutput(text) {
-	const gatewayReachable = text.includes("Gateway reachable");
-	const accounts = [];
-	let anyAccountWorking = false;
-	for (const line of text.split("\n")) {
-		const m = CHANNEL_LINE_RE.exec(line.trim());
-		if (!m) continue;
-		const [, acct, rest] = m;
-		const bits = rest.split(",").map((b) => b.trim());
-		const isWorking = accountIsWorking(bits);
-		if (isWorking) anyAccountWorking = true;
-		accounts.push({
-			id: acct.trim(),
-			bits,
-			isWorking,
-			raw: line.trim()
-		});
-	}
-	return {
-		gatewayReachable,
-		accounts,
-		anyAccountWorking
-	};
-}
-/**
-* Run `openclaw channels status --probe` and return a structured result.
-*
-* The command may exit non-zero when some bot accounts fail their probe — that
-* is still useful output.  We therefore try to parse stdout even when the
-* process exits with a non-zero code, falling back to an unavailable result
-* only when there is genuinely no output to parse.
-*
-* @param timeoutMs  Maximum wait time.  Default is 60 s because v2026.4.x
-*   lacks a per-request HTTP timeout and can block indefinitely.
-*/
-function runChannelsProbe(timeoutMs = 6e4) {
-	let stdout = "";
-	let execError;
-	try {
-		stdout = (0, node_child_process.execSync)("openclaw channels status --probe", {
-			encoding: "utf-8",
-			timeout: timeoutMs,
-			stdio: [
-				"ignore",
-				"pipe",
-				"pipe"
-			]
-		});
-	} catch (e) {
-		const err = e;
-		stdout = err.stdout ?? "";
-		execError = err.message;
-		const stderrRaw = err.stderr;
-		const stderr = (typeof stderrRaw === "string" ? stderrRaw : stderrRaw?.toString("utf-8") ?? "").trim();
-		if (stderr) console.error(`channels-probe: stderr from CLI: ${stderr}`);
-	}
-	if (stdout.trim()) return {
-		available: true,
-		...parseChannelsProbeOutput(stdout)
-	};
-	return {
-		available: false,
-		gatewayReachable: false,
-		accounts: [],
-		anyAccountWorking: false,
-		error: execError ?? "no output from openclaw channels status --probe"
-	};
-}
-//#endregion
 //#region src/innerapi/reportCliRun.ts
 /**
 * CLI-side client for studio_server's `openclaw.report_cli_run` inner
@@ -10331,7 +10404,7 @@ async function reportCliRun(opts) {
 //#region src/help.ts
 const BIN = "mclaw-diagnose";
 function versionBanner() {
-	return `v0.1.14-alpha.1`;
+	return `v0.1.14-alpha.10`;
 }
 const COMMANDS = [
 	{
@@ -10912,18 +10985,16 @@ function reportDoctorRunToSlardar(opts) {
 		}
 	});
 }
-/** Read the tail of a file, up to maxBytes. Returns empty string on any error. */
-function readFileTail(filePath, maxBytes = 4e3) {
+function readLogFile(filePath) {
 	try {
-		const content = node_fs.default.readFileSync(filePath, "utf-8");
-		if (content.length <= maxBytes) return content;
-		return `...(truncated — showing last ${maxBytes} chars)...\n` + content.slice(-maxBytes);
+		return node_fs.default.readFileSync(filePath, "utf-8");
 	} catch {
 		return "";
 	}
 }
 function reportUpgradeLarkToSlardar(opts) {
-	console.error(`[slardar] upgrade-lark reportTask scene=${opts.scene ?? ""} success=${opts.success} exitCode=${opts.exitCode ?? ""} rollbackOk=${opts.rollbackOk ?? ""}`);
+	console.error(`[slardar] upgrade_lark_run scene=${opts.scene ?? ""} success=${opts.success} exitCode=${opts.exitCode ?? ""} rollbackOk=${opts.rollbackOk ?? ""}`);
+	const logContent = readLogFile(opts.logFile);
 	reportTask({
 		eventName: "upgrade_lark_run",
 		durationMs: opts.durationMs,
@@ -10932,22 +11003,9 @@ function reportUpgradeLarkToSlardar(opts) {
 			scene: opts.scene ?? "",
 			exit_code: String(opts.exitCode ?? ""),
 			rollback_ok: opts.rollbackOk != null ? String(opts.rollbackOk) : "",
-			validation_error: (opts.validationError ?? "").slice(0, 200),
-			error_msg: (opts.error ?? "").slice(0, 200)
-		}
-	});
-	const logContent = readFileTail(opts.logFile);
-	console.error(`[slardar] upgrade_lark_detail logFile=${opts.logFile} contentLength=${logContent.length} sendLogAvailable=${typeof Slardar.sendLog}`);
-	reportLog({
-		event: "upgrade_lark_detail",
-		message: logContent || "(no log content)",
-		level: opts.success ? "info" : "error",
-		extra: {
-			log_file: opts.logFile,
-			scene: opts.scene ?? "",
-			success: String(opts.success),
-			exit_code: String(opts.exitCode ?? ""),
-			rollback_ok: opts.rollbackOk != null ? String(opts.rollbackOk) : ""
+			validation_error: opts.validationError ?? "",
+			error_msg: opts.error ?? "",
+			log_content: logContent
 		}
 	});
 }
@@ -10955,8 +11013,6 @@ function reportUpgradeLarkToSlardar(opts) {
 //#region src/upgrade-lark.ts
 /** Plugin directories under extensions/ that are backed up before upgrade */
 const FEISHU_PLUGIN_DIRS = ["openclaw-lark", "feishu-openclaw-plugin"];
-/** Version compat rule keys checked in the doctor output after install */
-const VERSION_COMPAT_RULE_KEYS = ["feishu_plugin_version_compat_lark", "feishu_plugin_version_compat_openclaw"];
 function backupFiles(opts) {
 	const { workspaceDir, configPath, backupDir, log } = opts;
 	try {
@@ -11058,28 +11114,6 @@ function countFeishuBots(configPath) {
 		return 0;
 	}
 }
-/**
-* Parse doctor stdout (first JSON line) and return an error string if any
-* version compat rule failed. Returns null on parse failure so a broken doctor
-* output does not block the install.
-*/
-function checkVersionCompatFromDoctorOutput(stdout, log) {
-	const firstLine = stdout.split("\n")[0]?.trim();
-	if (!firstLine) {
-		log("  doctor(compat): empty output, skipping version compat check");
-		return null;
-	}
-	try {
-		const report = JSON.parse(firstLine);
-		for (const outcome of report.results) if (VERSION_COMPAT_RULE_KEYS.includes(outcome.rule)) {
-			if (outcome.status === "failed" || outcome.status === "still-broken" || outcome.status === "error") return `version compat rule ${outcome.rule} ${outcome.status}: ${outcome.message ?? "(no message)"}`;
-		}
-		return null;
-	} catch (e) {
-		log(`  doctor(compat): failed to parse output — ${e.message}`);
-		return null;
-	}
-}
 /** Run channels probe, log results, and return the result. Never throws. */
 function probeChannels(label, log, timeoutMs) {
 	try {
@@ -11093,6 +11127,8 @@ function probeChannels(label, log, timeoutMs) {
 		log(`  ${label} channels probe threw: ${e.message}`);
 		return {
 			available: false,
+			gatewayReachable: false,
+			feishuConfigInvalid: false,
 			accounts: [],
 			anyAccountWorking: false
 		};
@@ -11117,10 +11153,64 @@ function runUpgradeLark(opts) {
 	log(`  configPath : ${configPath}`);
 	log(`${"=".repeat(60)}`);
 	log("");
-	log("── [1/8] 升级前状态快照 ──────────────────────────────────");
-	log(`before-state: botCount=${countFeishuBots(configPath)}`);
+	log("── [Pre-check A] channels probe（升级前）────────────────");
+	const beforeChannels = probeChannels("before", log, 6e4);
 	log("");
-	log("── [2/8] 文件备份 ────────────────────────────────────────");
+	log("── [Pre-check B] 版本兼容预检 ───────────────────────────");
+	let versionIncompatible = false;
+	try {
+		const rawConfig = node_fs.default.readFileSync(configPath, "utf-8");
+		versionIncompatible = needsLarkUpgrade({
+			config: loadJSON5().parse(rawConfig),
+			configPath,
+			vars: {},
+			providerDeps: {
+				usesMiaodaProvider: false,
+				usesMiaodaSecretProvider: false
+			}
+		});
+		log(`  version-compat pre-check: ${versionIncompatible ? "NEEDS_UPGRADE" : "ok"}`);
+	} catch (e) {
+		log(`  version-compat pre-check error: ${e.message} — treating as needs-upgrade`);
+		versionIncompatible = true;
+	}
+	const feishuConfigInvalid = beforeChannels.feishuConfigInvalid;
+	log(`  feishu config invalid  : ${feishuConfigInvalid}`);
+	log("");
+	log("── [Gate] 升级前置条件检查 ───────────────────────────────");
+	log(`  versionIncompatible    : ${versionIncompatible}`);
+	log(`  feishuConfigInvalid    : ${feishuConfigInvalid}`);
+	log(`  channels working before: ${beforeChannels.anyAccountWorking}`);
+	if (!(versionIncompatible || feishuConfigInvalid)) {
+		const reason = "version compatible and feishu channel config valid — upgrade not needed";
+		log(`  SKIP: ${reason}`);
+		log(`${"=".repeat(60)}`);
+		log("upgrade-lark skipped (pre-check gate)");
+		log(`${"=".repeat(60)}`);
+		return {
+			ok: true,
+			skipped: true,
+			skipReason: reason,
+			logFile
+		};
+	}
+	if (beforeChannels.anyAccountWorking) {
+		const reason = "channels are working — upgrade not needed (issue detected but system is functional)";
+		log(`  SKIP: ${reason}`);
+		log(`${"=".repeat(60)}`);
+		log("upgrade-lark skipped (pre-check gate)");
+		log(`${"=".repeat(60)}`);
+		return {
+			ok: true,
+			skipped: true,
+			skipReason: reason,
+			logFile
+		};
+	}
+	log(`  PROCEED: requiresLarkUpgrade=true (version=${versionIncompatible}, feishuConfig=${feishuConfigInvalid}) AND channels not working → running upgrade`);
+	log("");
+	log("── [1/6] 文件备份 ────────────────────────────────────────");
+	log(`before-state: botCount=${countFeishuBots(configPath)}`);
 	const backup = backupFiles(fsOpts);
 	if (!backup.ok) {
 		log(`ERROR: ${backup.error}`);
@@ -11133,10 +11223,7 @@ function runUpgradeLark(opts) {
 	log("backup: ok");
 	logVersionSnapshot("before-versions", snapshotVersions(cwd, log), log);
 	log("");
-	log("── [3/8] channels probe（升级前）────────────────────────");
-	const beforeChannels = probeChannels("before", log, 3e4);
-	log("");
-	log("── [4/8] 清理本地 openclaw shim ─────────────────────────");
+	log("── [2/6] 清理本地 openclaw shim ─────────────────────────");
 	const localOpenclawBin = node_path.default.join(cwd, "node_modules", ".bin", "openclaw");
 	if (node_fs.default.existsSync(localOpenclawBin)) try {
 		node_fs.default.rmSync(localOpenclawBin);
@@ -11146,7 +11233,7 @@ function runUpgradeLark(opts) {
 	}
 	else log(`  skipped: ${localOpenclawBin} (not found)`);
 	log("");
-	log("── [5/8] npx install (@larksuite/openclaw-lark-tools update) ──");
+	log("── [3/6] npx install (@larksuite/openclaw-lark-tools update) ──");
 	const npxResult = (0, node_child_process.spawnSync)("npx", [
 		"-y",
 		"@larksuite/openclaw-lark-tools",
@@ -11189,53 +11276,33 @@ function runUpgradeLark(opts) {
 		};
 	};
 	log("");
-	log("── [6/8] 插件安装检查 + 版本兼容校验 ───────────────────");
-	const larkExtDir = node_path.default.join(cwd, "extensions", "openclaw-lark");
-	const larkVersion = readPkgVersion(node_path.default.join(larkExtDir, "package.json"));
-	log(`  extensions/openclaw-lark: ${node_fs.default.existsSync(larkExtDir) ? "exists" : "missing"}, version=${larkVersion ?? "n/a"}`);
-	if (!node_fs.default.existsSync(larkExtDir)) return doRollback("extensions/openclaw-lark not found after install");
-	if (!larkVersion) return doRollback("extensions/openclaw-lark/package.json has no valid version after install");
-	log("  running doctor version compat check...");
-	const compatArgs = ["doctor"];
-	if (opts.scene) compatArgs.push(`--scene=${opts.scene}`);
-	const compatResult = (0, node_child_process.spawnSync)(process.execPath, [cliScript, ...compatArgs], {
-		cwd,
-		encoding: "utf-8",
-		stdio: [
-			"ignore",
-			"pipe",
-			"pipe"
-		],
-		timeout: 6e4,
-		env: process.env
-	});
-	if (compatResult.stdout?.trim()) log(`doctor(compat) stdout:\n${compatResult.stdout.trim()}`);
-	if (compatResult.stderr?.trim()) log(`doctor(compat) stderr:\n${compatResult.stderr.trim()}`);
-	log(`doctor(compat) exit: ${compatResult.status ?? "null"}${compatResult.error ? ` error: ${compatResult.error.message}` : ""}`);
-	const compatError = checkVersionCompatFromDoctorOutput(compatResult.stdout?.trim() ?? "", log);
-	if (compatError) return doRollback(compatError);
-	log("  version compat: ok");
+	log("── [4/5] 安装后诊断校验 ─────────────────────────────────");
 	logVersionSnapshot("after-versions", snapshotVersions(cwd, log), log);
+	let afterVersionIncompatible = false;
+	try {
+		const rawConfig = node_fs.default.readFileSync(configPath, "utf-8");
+		afterVersionIncompatible = needsLarkUpgrade({
+			config: loadJSON5().parse(rawConfig),
+			configPath,
+			vars: {},
+			providerDeps: {
+				usesMiaodaProvider: false,
+				usesMiaodaSecretProvider: false
+			}
+		});
+		log(`  version-compat post-check: ${afterVersionIncompatible ? "STILL_INCOMPATIBLE" : "ok"}`);
+	} catch (e) {
+		log(`  version-compat post-check error: ${e.message} — treating as still-incompatible`);
+		afterVersionIncompatible = true;
+	}
+	const afterChannels = probeChannels("after", log, 6e4);
+	log(`  feishu config invalid after: ${afterChannels.feishuConfigInvalid}`);
+	const stillNeedsUpgrade = (afterVersionIncompatible || afterChannels.feishuConfigInvalid) && !afterChannels.anyAccountWorking;
+	log(`  post-check: stillNeedsUpgrade=${stillNeedsUpgrade} (version=${afterVersionIncompatible}, feishuConfig=${afterChannels.feishuConfigInvalid}, channelsWorking=${afterChannels.anyAccountWorking})`);
+	if (stillNeedsUpgrade) return doRollback(`post-install diagnosis still shows anomaly: versionIncompatible=${afterVersionIncompatible}, feishuConfigInvalid=${afterChannels.feishuConfigInvalid}, anyAccountWorking=${afterChannels.anyAccountWorking}`);
+	log("  post-install diagnosis: ok (upgrade conditions resolved)");
 	log("");
-	log("── [7/8] channels probe（升级后）────────────────────────");
-	if (!probeChannels("after", log, 3e4).anyAccountWorking) {
-		if (!beforeChannels.anyAccountWorking) {
-			log("  channels: not working before or after install — pre-existing issue, skipping rollback");
-			return {
-				ok: false,
-				error: "channels probe: no working account (pre-existing issue, not caused by install)",
-				validationError: "channels probe: no working account (pre-existing)",
-				stdout: npxStdout,
-				stderr: npxStderr,
-				exitCode: npxExitCode,
-				logFile
-			};
-		}
-		return doRollback("channels probe: no working account after install (was working before)");
-	}
-	log("  channels: ok");
-	log("");
-	log("── [8/8] doctor --fix ────────────────────────────────────");
+	log("── [6/6] doctor --fix ────────────────────────────────────");
 	const fixArgs = ["doctor", "--fix"];
 	if (opts.scene) fixArgs.push(`--scene=${opts.scene}`);
 	const fixResult = (0, node_child_process.spawnSync)(process.execPath, [cliScript, ...fixArgs], {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-apaas/openclaw-scripts-diagnose-cli",
-  "version": "0.1.14-alpha.1",
+  "version": "0.1.14-alpha.10",
   "description": "CLI for OpenClaw config diagnose and repair with JSON5 support",
   "main": "dist/index.cjs",
   "bin": {