@lark-apaas/openclaw-scripts-diagnose-cli 0.1.15-alpha.3 → 0.1.15-alpha.4

package/dist/index.cjs

@@ -52,7 +52,7 @@ node_assert = __toESM(node_assert);
 * it terse and parseable.
 */
 function getVersion() {
-	return "0.1.15-alpha.3";
+	return "0.1.15-alpha.4";
 }
 //#endregion
 //#region src/rule-engine/base.ts
@@ -2520,345 +2520,6 @@ function upsertResourceConstrainedToolsBlock(content) {
 	return `${content}${content.length > 0 && !content.endsWith("\n") ? "\n\n" : "\n"}${RESOURCE_CONSTRAINED_TOOLS_BLOCK}\n`;
 }
 //#endregion
-//#region src/paths.ts
-/**
-* Central directory for all ephemeral diagnose/reset artifacts: task status
-* files (`reset-<taskId>.json`) and human-readable step logs
-* (`reset-<taskId>.log`). Having everything under one dir makes debugging a
-* stuck reset much easier — `ls /tmp/openclaw-diagnose/` shows every recent
-* run, and each run's log is right next to its state.
-*/
-const DIAGNOSE_DIR = "/tmp/openclaw-diagnose";
-function resetResultFile(taskId) {
-	return `${DIAGNOSE_DIR}/reset-${taskId}.json`;
-}
-function resetLogFile(taskId) {
-	return `${DIAGNOSE_DIR}/reset-${taskId}.log`;
-}
-/** Sandbox workspace root where openclaw config + agent state lives. */
-const WORKSPACE_DIR = "/home/gem/workspace/agent";
-/** File containing the provider key used by the openclaw miaoda provider. */
-const PROVIDER_FILE_PATH = "/home/gem/workspace/.force/openclaw/miaoda-provider-key";
-/** File containing the miaoda openclaw secrets JSON. */
-const SECRETS_FILE_PATH = "/home/gem/workspace/.force/openclaw/miaoda-openclaw-secrets.json";
-/** Absolute path to the openclaw config JSON. */
-const CONFIG_PATH = `${WORKSPACE_DIR}/openclaw.json`;
-/**
-* upgrade-lark 每次运行的日志文件路径，含时间戳便于按时间排序定位。
-* checkOnly=true 时文件名含 "-check" 后缀，便于与正式安装日志区分。
-*/
-function upgradeLarkLogFile(runId, checkOnly = false) {
-	const ts = (/* @__PURE__ */ new Date()).toISOString().slice(0, 19).replace(/:/g, "-");
-	return `${DIAGNOSE_DIR}/upgrade-lark${checkOnly ? "-check" : ""}-${ts}-${runId.slice(0, 8)}.log`;
-}
-//#endregion
-//#region src/lark-cli-init.ts
-const LARK_PLUGIN_NAMES$1 = ["openclaw-lark", "feishu-openclaw-plugin"];
-const PE_XML_TAG = "lark-cli-pe";
-const PE_PLACEHOLDER = `
-<${PE_XML_TAG}>
-**【强制要求 - 无例外】飞书所有操作必须先读 feishu-lark-cli skill。未读skill不得调用任何飞书工具，违者视为操作失误。**
-</${PE_XML_TAG}>
-`;
-function isLarkPluginInstalled(configPath) {
-	const extDir = getExtensionsDir(configPath);
-	return LARK_PLUGIN_NAMES$1.some((name) => {
-		try {
-			return node_fs.default.existsSync(node_path.default.join(extDir, name, "package.json"));
-		} catch {
-			return false;
-		}
-	});
-}
-function isLarkCliAvailable$2() {
-	try {
-		return (0, node_child_process.spawnSync)("lark-cli", ["--version"], {
-			encoding: "utf-8",
-			timeout: 5e3,
-			stdio: [
-				"ignore",
-				"pipe",
-				"ignore"
-			]
-		}).status === 0;
-	} catch {
-		return false;
-	}
-}
-function readConfig(configPath) {
-	try {
-		const raw = node_fs.default.readFileSync(configPath, "utf-8");
-		const parsed = loadJSON5().parse(raw);
-		return parsed != null && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
-	} catch {
-		return null;
-	}
-}
-/**
-* Resolve the feishu app secret for the given appId.
-*
-* Lookup order:
-*   1. channels.feishu.appSecret  (single-agent: feishu.appId === appId)
-*   2. channels.feishu.accounts[key].appSecret  (multi-agent: account.appId === appId)
-*
-* Value interpretation:
-*   - string  → use directly
-*   - object  → secret is managed by a provider; use `feishuAppSecret` param instead
-*
-* Returns null when the secret cannot be determined.
-*/
-function resolveAppSecret(appId, config, feishuAppSecret) {
-	const feishu = getNestedMap(config, "channels", "feishu");
-	if (!feishu) return null;
-	let rawSecret;
-	if (typeof feishu.appId === "string" && feishu.appId === appId) rawSecret = feishu.appSecret;
-	else {
-		const accounts = asRecord(feishu.accounts);
-		if (accounts) for (const [, val] of Object.entries(accounts)) {
-			const account = asRecord(val);
-			if (account?.appId === appId) {
-				rawSecret = account.appSecret ?? feishu.appSecret;
-				break;
-			}
-		}
-	}
-	if (typeof rawSecret === "string" && rawSecret) return rawSecret;
-	if (rawSecret != null && typeof rawSecret === "object") return feishuAppSecret ?? null;
-	return null;
-}
-/**
-* Resolve the agents.md path for the given appId from the openclaw config.
-*
-* Case 1: appId matches channels.feishu.appId (single-agent path)
-*   → WORKSPACE_DIR/AGENTS.md
-*
-* Case 2: appId found in channels.feishu.accounts (multi-agent path)
-*   → find account key where account.appId === appId
-*   → find binding where match.channel=feishu && match.accountId=that key
-*   → if agentId === 'main'  → WORKSPACE_DIR/agents.md
-*   → else find agent in agents.list by id → agent.workspace/agents.md
-*
-* Returns null when the path cannot be determined.
-*/
-function resolveAgentsMdPath(appId, config) {
-	const feishu = getNestedMap(config, "channels", "feishu");
-	if (!feishu) {
-		console.error("resolveAgentsMdPath: channels.feishu not found");
-		return null;
-	}
-	if (typeof feishu.appId === "string" && feishu.appId === appId) {
-		console.error(`resolveAgentsMdPath: case=single-agent feishu.appId=${feishu.appId}`);
-		return node_path.default.join(WORKSPACE_DIR, "workspace", "AGENTS.md");
-	}
-	const accounts = asRecord(feishu.accounts);
-	if (!accounts) {
-		console.error("resolveAgentsMdPath: feishu.accounts not found");
-		return null;
-	}
-	let accountId;
-	for (const [key, val] of Object.entries(accounts)) if (asRecord(val)?.appId === appId) {
-		accountId = key;
-		break;
-	}
-	if (!accountId) {
-		console.error(`resolveAgentsMdPath: no account found with appId=${appId} in feishu.accounts keys=[${Object.keys(accounts).join(",")}]`);
-		return null;
-	}
-	console.error(`resolveAgentsMdPath: found accountId=${accountId}`);
-	const bindings = Array.isArray(config.bindings) ? config.bindings : [];
-	let agentId;
-	for (const b of bindings) {
-		const binding = asRecord(b);
-		if (!binding) continue;
-		const match = asRecord(binding.match);
-		if (match?.channel === "feishu" && match?.accountId === accountId) {
-			if (typeof binding.agentId === "string") {
-				agentId = binding.agentId;
-				break;
-			}
-		}
-	}
-	if (!agentId) {
-		console.error(`resolveAgentsMdPath: no binding found for accountId=${accountId} in bindings(count=${bindings.length})`);
-		return null;
-	}
-	console.error(`resolveAgentsMdPath: found agentId=${agentId}`);
-	if (agentId === "main") {
-		console.error("resolveAgentsMdPath: case=multi-agent-main");
-		return node_path.default.join(WORKSPACE_DIR, "workspace", "AGENTS.md");
-	}
-	const agentsObj = asRecord(config.agents);
-	const list = Array.isArray(agentsObj?.list) ? agentsObj.list : [];
-	for (const a of list) {
-		const agent = asRecord(a);
-		if (agent?.id === agentId) {
-			const ws = typeof agent.workspace === "string" ? agent.workspace : node_path.default.join(WORKSPACE_DIR, "workspace");
-			console.error(`resolveAgentsMdPath: case=multi-agent-custom agentId=${agentId} workspace=${ws}`);
-			return node_path.default.join(ws, "AGENTS.md");
-		}
-	}
-	console.error(`resolveAgentsMdPath: agentId=${agentId} not found in agents.list(count=${list.length})`);
-	return null;
-}
-function appendPeToAgentsMd(agentsMdPath) {
-	const dir = node_path.default.dirname(agentsMdPath);
-	if (!node_fs.default.existsSync(dir)) node_fs.default.mkdirSync(dir, { recursive: true });
-	const existing = node_fs.default.existsSync(agentsMdPath) ? node_fs.default.readFileSync(agentsMdPath, "utf-8") : "";
-	if (existing.includes(`<lark-cli-pe>`)) {
-		console.error(`lark-cli-init: <${PE_XML_TAG}> already present in ${agentsMdPath}, skipping`);
-		return;
-	}
-	const sep = existing.length > 0 && !existing.endsWith("\n") ? "\n" : "";
-	node_fs.default.appendFileSync(agentsMdPath, `${sep}${PE_PLACEHOLDER}`, "utf-8");
-	console.error(`lark-cli-init: appended PE placeholder to ${agentsMdPath}`);
-}
-/**
-* Collect every Feishu bot appId declared in the openclaw config.
-* Covers both single-agent (channels.feishu.appId) and multi-agent
-* (channels.feishu.accounts[*].appId) layouts. Returns a deduplicated list.
-*/
-function collectFeishuAppIds(configPath) {
-	const config = readConfig(configPath ?? CONFIG_PATH);
-	if (!config) return [];
-	const feishu = getNestedMap(config, "channels", "feishu");
-	if (!feishu) return [];
-	const appIds = /* @__PURE__ */ new Set();
-	const topAppId = feishu.appId;
-	if (typeof topAppId === "string" && topAppId.trim()) appIds.add(topAppId.trim());
-	const accounts = asRecord(feishu.accounts);
-	if (accounts) for (const val of Object.values(accounts)) {
-		const appId = asRecord(val)?.appId;
-		if (typeof appId === "string" && appId.trim()) appIds.add(appId.trim());
-	}
-	return [...appIds];
-}
-function runLarkCliInit(opts) {
-	const configPath = opts.configPath ?? CONFIG_PATH;
-	if (!isLarkPluginInstalled(configPath)) {
-		console.error("lark-cli-init: skipping — openclaw-lark plugin not installed");
-		return {
-			ok: true,
-			skipped: true,
-			skipReason: "openclaw-lark plugin not installed"
-		};
-	}
-	if (!isLarkCliAvailable$2()) {
-		console.error("lark-cli-init: skipping — lark-cli command not found");
-		return {
-			ok: true,
-			skipped: true,
-			skipReason: "lark-cli command not found"
-		};
-	}
-	const config = readConfig(configPath);
-	if (!config) return {
-		ok: false,
-		error: `could not read config at ${configPath}`
-	};
-	const agentsMdPath = resolveAgentsMdPath(opts.appId, config);
-	console.error(`lark-cli-init: resolved agents.md path=${agentsMdPath ?? "(null)"}`);
-	if (!agentsMdPath) return {
-		ok: false,
-		error: `could not resolve agents.md path for appId=${opts.appId}`
-	};
-	const appSecret = resolveAppSecret(opts.appId, config, opts.feishuAppSecret);
-	if (!appSecret) return {
-		ok: false,
-		error: `could not resolve appSecret for appId=${opts.appId}`
-	};
-	console.error(`lark-cli-init: running lark-cli config init --name ${opts.appId} --app-id ${opts.appId} --brand feishu --app-secret-stdin --force-init`);
-	const initRes = (0, node_child_process.spawnSync)("lark-cli", [
-		"config",
-		"init",
-		"--name",
-		opts.appId,
-		"--app-id",
-		opts.appId,
-		"--brand",
-		"feishu",
-		"--app-secret-stdin",
-		"--force-init"
-	], {
-		stdio: [
-			"pipe",
-			"pipe",
-			"pipe"
-		],
-		encoding: "utf-8",
-		input: appSecret
-	});
-	const configInitStdout = initRes.stdout?.trim() || void 0;
-	const configInitStderr = initRes.stderr?.trim() || void 0;
-	if (configInitStdout) console.error(`lark-cli config init stdout: ${configInitStdout}`);
-	if (configInitStderr) console.error(`lark-cli config init stderr: ${configInitStderr}`);
-	if (initRes.error) return {
-		ok: false,
-		configInitStdout,
-		configInitStderr,
-		error: `lark-cli config init spawn error: ${initRes.error.message}`
-	};
-	if (initRes.status !== 0) return {
-		ok: false,
-		configInitExitCode: initRes.status ?? void 0,
-		configInitStdout,
-		configInitStderr,
-		error: `lark-cli config init exited with code ${initRes.status}`
-	};
-	appendPeToAgentsMd(agentsMdPath);
-	return {
-		ok: true,
-		configInitExitCode: 0,
-		agentsMdPath
-	};
-}
-//#endregion
-//#region src/rules/agents-md-lark-cli-pe.ts
-function isLarkCliAvailable$1() {
-	try {
-		return (0, node_child_process.spawnSync)("lark-cli", ["--version"], {
-			encoding: "utf-8",
-			timeout: 5e3,
-			stdio: [
-				"ignore",
-				"pipe",
-				"ignore"
-			]
-		}).status === 0;
-	} catch {
-		return false;
-	}
-}
-let AgentsMdLarkCliPeRule = class AgentsMdLarkCliPeRule extends DiagnoseRule {
-	validate(ctx) {
-		if (!isLarkCliAvailable$1()) return { pass: true };
-		const missingPath = collectExistingAgentsMdPaths(ctx).find((filePath) => {
-			return !node_fs.default.readFileSync(filePath, "utf-8").includes(`<${PE_XML_TAG}>`);
-		});
-		if (!missingPath) return { pass: true };
-		return {
-			pass: false,
-			message: `${missingPath} 中缺少 lark-cli-pe PE 内容，需要追加`
-		};
-	}
-	repair(ctx) {
-		if (!isLarkCliAvailable$1()) return;
-		for (const filePath of collectExistingAgentsMdPaths(ctx)) {
-			const content = node_fs.default.readFileSync(filePath, "utf-8");
-			if (content.includes(`<lark-cli-pe>`)) continue;
-			const sep = content.length > 0 && !content.endsWith("\n") ? "\n" : "";
-			node_fs.default.appendFileSync(filePath, `${sep}${PE_PLACEHOLDER}`, "utf-8");
-			console.error(`agents-md-lark-cli-pe: appended PE to ${filePath}`);
-		}
-	}
-};
-AgentsMdLarkCliPeRule = __decorate([Rule({
-	key: "agents_md_lark_cli_pe",
-	description: "检测各智能体 AGENTS.md 中是否缺失 lark-cli-pe PE 内容，lark-cli 存在时自动追加",
-	dependsOn: ["config_syntax_check"],
-	repairMode: "standard",
-	level: "silent"
-})], AgentsMdLarkCliPeRule);
-//#endregion
 //#region src/rules/miaoda-official-plugins-install-spec-unlock.ts
 /**
 * Official miaoda-side plugins that must track manifest — version-locked specs
@@ -2962,11 +2623,11 @@ function getAllow$1(config) {
 //#region src/rules/lark-plugin-allow.ts
 const LARK_PLUGIN = "openclaw-lark";
 const LEGACY_LARK_PLUGIN = "feishu-openclaw-plugin";
-const LARK_PLUGIN_NAMES = [LARK_PLUGIN, LEGACY_LARK_PLUGIN];
+const LARK_PLUGIN_NAMES$1 = [LARK_PLUGIN, LEGACY_LARK_PLUGIN];
 let LarkPluginAllowRule = class LarkPluginAllowRule extends DiagnoseRule {
 	validate(ctx) {
 		const allow = getAllow(ctx.config);
-		if (LARK_PLUGIN_NAMES.some((name) => allow.includes(name))) return { pass: true };
+		if (LARK_PLUGIN_NAMES$1.some((name) => allow.includes(name))) return { pass: true };
 		const installed = detectInstalledLarkPlugin(getExtensionsDir(ctx.configPath));
 		if (installed == null) return { pass: true };
 		return {
@@ -2985,7 +2646,7 @@ let LarkPluginAllowRule = class LarkPluginAllowRule extends DiagnoseRule {
 		const rawAllow = pluginsMap.allow;
 		const original = Array.isArray(rawAllow) ? rawAllow : [];
 		const stringAllow = original.filter((e) => typeof e === "string");
-		if (LARK_PLUGIN_NAMES.some((name) => stringAllow.includes(name))) return;
+		if (LARK_PLUGIN_NAMES$1.some((name) => stringAllow.includes(name))) return;
 		original.push(installed);
 		pluginsMap.allow = original;
 	}
@@ -3686,6 +3347,7 @@ function resolveUpgradeDirection(installed, ocCur, recommendedOc, isLegacy) {
 /** 提取公共前置上下文；任何前置条件不满足时返回 null（规则 pass）。 */
 function resolveCompatContext(ctx) {
 	const recommendedOc = ctx.vars.recommendedOpenclawTag;
+	if (!recommendedOc) return null;
 	const ocCur = getOcVersion();
 	if (!ocCur) return null;
 	const installed = getInstalledPlugin(ctx);
@@ -3708,7 +3370,6 @@ let FeishuPluginOpenclawUpgradeRule = class FeishuPluginOpenclawUpgradeRule exte
 		if (!cc) return { pass: true };
 		const { ocCur, recommendedOc, installed, isLegacy } = cc;
 		if (isForkPlugin(installed)) return validateForkPlugin(installed, ocCur, recommendedOc);
-		if (!recommendedOc) return { pass: true };
 		if (resolveUpgradeDirection(installed, ocCur, recommendedOc, isLegacy) !== "openclaw") return { pass: true };
 		return {
 			pass: false,
@@ -3734,19 +3395,13 @@ let FeishuPluginLarkUpgradeRule = class FeishuPluginLarkUpgradeRule extends Diag
 	validate(ctx) {
 		const cc = resolveCompatContext(ctx);
 		if (!cc) return { pass: true };
-		const { ocCur, recommendedOc, installed, isLegacy } = cc;
-		if (isForkPlugin(installed)) return { pass: true };
-		if (!isLarkUpgradeNeededFromCC(cc)) return { pass: true };
-		const prefix = buildCompatPrefix(installed, ocCur, isLegacy);
-		if (!recommendedOc) return {
-			pass: false,
-			action: "upgrade_lark",
-			message: `${prefix}；建议升级飞书插件至兼容版本`
-		};
+		const { ocCur, recommendedOc, installed, isLegacy } = cc;
+		if (isForkPlugin(installed)) return { pass: true };
+		if (resolveUpgradeDirection(installed, ocCur, recommendedOc, isLegacy) !== "lark") return { pass: true };
 		return {
 			pass: false,
 			action: "upgrade_lark",
-			message: `${prefix}；当前 openclaw@${ocCur} 已达推荐版本，可直接升级飞书插件`
+			message: `${buildCompatPrefix(installed, ocCur, isLegacy)}；当前 openclaw@${ocCur} 已达推荐版本，可直接升级飞书插件`
 		};
 	}
 };
@@ -3758,21 +3413,6 @@ FeishuPluginLarkUpgradeRule = __decorate([Rule({
 	level: "critical",
 	usesVars: ["recommendedOpenclawTag"]
 })], FeishuPluginLarkUpgradeRule);
-/**
-* 核心判断：非 fork 插件是否需要升级 lark，基于当前 openclaw 版本的兼容性。
-*
-* 被 FeishuPluginLarkUpgradeRule.validate 和 needsLarkUpgrade 共用。
-* 调用方需在调用前自行处理 fork 插件的情况（fork 插件不走本函数）。
-*
-* - 有 recommendedOc：走 resolveUpgradeDirection 判断方向是否为 'lark'
-* - 无 recommendedOc（doctor 无推荐版本）：legacy 插件直接需要升级；
-*   非 legacy 则检查当前版本是否在兼容表内
-*/
-function isLarkUpgradeNeededFromCC(cc) {
-	const { ocCur, recommendedOc, installed, isLegacy } = cc;
-	if (!recommendedOc) return isLegacy || !isVersionCompatible(installed, ocCur);
-	return resolveUpgradeDirection(installed, ocCur, recommendedOc, isLegacy) === "lark";
-}
 function isForkPlugin(p) {
 	return p.scope != null && FORK_SCOPES.includes(p.scope);
 }
@@ -3811,16 +3451,14 @@ function describeCompatConstraint(entry, pluginVersion) {
 /**
 * @lark-apaas/openclaw-lark 豁免 VERSION_COMPAT_MAP，但仍要求 openclaw ≥ FORK_LARK_PLUGIN_MIN_OC_VERSION。
 * 其他 @lark-apaas scope 的 fork 插件继续无条件 pass。
-* recommendedOc 可为 undefined（doctor 模式），此时只检测最低版本要求，不指定目标升级版本。
 */
 function validateForkPlugin(installed, ocCur, recommendedOc) {
 	if (installed.fullName !== FORK_LARK_PLUGIN_FULL_NAME) return { pass: true };
 	if (compareCalVer(ocCur, FORK_LARK_PLUGIN_MIN_OC_VERSION) >= 0) return { pass: true };
-	const recommendation = recommendedOc ? `；将 openclaw 升级到 ${recommendedOc} 即可满足` : `；请升级 openclaw 至 ${FORK_LARK_PLUGIN_MIN_OC_VERSION} 或更高版本`;
 	return {
 		pass: false,
 		action: "upgrade_openclaw",
-		message: `飞书插件 ${describePlugin(installed)}（fork 版）要求 openclaw ≥ ${FORK_LARK_PLUGIN_MIN_OC_VERSION}，当前 openclaw@${ocCur} 低于此要求${recommendation}`
+		message: `飞书插件 ${describePlugin(installed)}（fork 版）要求 openclaw ≥ ${FORK_LARK_PLUGIN_MIN_OC_VERSION}，当前 openclaw@${ocCur} 低于此要求；将 openclaw 升级到 ${recommendedOc} 即可满足`
 	};
 }
 function describePlugin(p) {
@@ -3867,26 +3505,6 @@ function extractScopedNameFromSpec$1(spec) {
 	const at = spec.indexOf("@", 1);
 	return at === -1 ? spec : spec.slice(0, at);
 }
-/**
-* 判断已安装的飞书插件是否与当前 openclaw 版本不兼容（或为需要替换的 legacy 插件）。
-* 被 upgrade-lark 前置检测门控（--check-only 和正式安装模式）调用。
-*/
-function needsLarkUpgrade(ctx) {
-	const cc = resolveCompatContext({
-		...ctx,
-		vars: {
-			...ctx.vars,
-			recommendedOpenclawTag: void 0
-		}
-	});
-	if (!cc) return false;
-	const { ocCur, installed } = cc;
-	if (isForkPlugin(installed)) {
-		if (installed.fullName === FORK_LARK_PLUGIN_FULL_NAME) return compareCalVer(ocCur, FORK_LARK_PLUGIN_MIN_OC_VERSION) < 0;
-		return false;
-	}
-	return isLarkUpgradeNeededFromCC(cc);
-}
 //#endregion
 //#region src/rules/cleanup-install-backup-dirs.ts
 const DIR_PREFIX = ".openclaw-install-";
@@ -3970,7 +3588,7 @@ function extractScopedNameFromSpec(spec) {
 	const at = spec.indexOf("@", 1);
 	return at === -1 ? spec : spec.slice(0, at);
 }
-function isLarkCliAvailable() {
+function isLarkCliAvailable$1() {
 	try {
 		return (0, node_child_process.spawnSync)(LARK_CLI_NAME$1, ["--version"], {
 			encoding: "utf-8",
@@ -4011,7 +3629,7 @@ function installLarkCliOnce(tag) {
 let LarkCliMissingForInstalledLarkPluginRule = class LarkCliMissingForInstalledLarkPluginRule extends DiagnoseRule {
 	validate(ctx) {
 		if (!isTargetForkPlugin(readInstalledLarkPlugin(ctx))) return { pass: true };
-		if (isLarkCliAvailable()) return { pass: true };
+		if (isLarkCliAvailable$1()) return { pass: true };
 		return {
 			pass: false,
 			message: `${FORK_PACKAGE_NAME}@${TARGET_VERSION} 已安装，但 lark-cli 不可用；将执行一次 lark-cli 安装`
@@ -4019,7 +3637,7 @@ let LarkCliMissingForInstalledLarkPluginRule = class LarkCliMissingForInstalledL
 	}
 	repair(ctx) {
 		if (!isTargetForkPlugin(readInstalledLarkPlugin(ctx))) return;
-		if (isLarkCliAvailable()) return;
+		if (isLarkCliAvailable$1()) return;
 		installLarkCliOnce(ctx.vars.recommendedOpenclawTag ?? TARGET_VERSION);
 	}
 };
@@ -4085,7 +3703,7 @@ let FeishuBotChannelConfigRule = class FeishuBotChannelConfigRule extends Diagno
 			if (!matchMap(secret, DEFAULT_FEISHU_APP_SECRET)) issues.push(`${label} appSecret is a provider-ref but not the canonical one`);
 		} else if (typeof secret === "string") {
 			if (secret !== larkApp.appSecret) issues.push(`${label} appSecret plaintext mismatch`);
-		} else issues.push(`${label} appSecret has unexpected type ${typeof secret}`);
+		} else issues.push(`${label} appSecret is missing or has unexpected type`);
 	}
 	repair(ctx) {
 		const larkApps = ctx.vars.larkApps;
@@ -4127,7 +3745,7 @@ let FeishuBotChannelConfigRule = class FeishuBotChannelConfigRule extends Diagno
 			if (!matchMap(secret, DEFAULT_FEISHU_APP_SECRET)) bot.appSecret = { ...DEFAULT_FEISHU_APP_SECRET };
 		} else if (typeof secret === "string") {
 			if (secret !== larkApp.appSecret) bot.appSecret = larkApp.appSecret;
-		}
+		} else bot.appSecret = larkApp.appSecret;
 	}
 };
 FeishuBotChannelConfigRule = __decorate([Rule({
@@ -4583,6 +4201,30 @@ function finalize$1(results, aborted) {
 	};
 }
 //#endregion
+//#region src/paths.ts
+/**
+* Central directory for all ephemeral diagnose/reset artifacts: task status
+* files (`reset-<taskId>.json`) and human-readable step logs
+* (`reset-<taskId>.log`). Having everything under one dir makes debugging a
+* stuck reset much easier — `ls /tmp/openclaw-diagnose/` shows every recent
+* run, and each run's log is right next to its state.
+*/
+const DIAGNOSE_DIR = "/tmp/openclaw-diagnose";
+function resetResultFile(taskId) {
+	return `${DIAGNOSE_DIR}/reset-${taskId}.json`;
+}
+function resetLogFile(taskId) {
+	return `${DIAGNOSE_DIR}/reset-${taskId}.log`;
+}
+/** Sandbox workspace root where openclaw config + agent state lives. */
+const WORKSPACE_DIR = "/home/gem/workspace/agent";
+/** File containing the provider key used by the openclaw miaoda provider. */
+const PROVIDER_FILE_PATH = "/home/gem/workspace/.force/openclaw/miaoda-provider-key";
+/** File containing the miaoda openclaw secrets JSON. */
+const SECRETS_FILE_PATH = "/home/gem/workspace/.force/openclaw/miaoda-openclaw-secrets.json";
+/** Absolute path to the openclaw config JSON. */
+const CONFIG_PATH = `${WORKSPACE_DIR}/openclaw.json`;
+//#endregion
 //#region src/run-log.ts
 let currentRunContext;
 /**
@@ -5156,6 +4798,266 @@ function installOne$1(pkg, tarball, homeBase) {
 	});
 }
 //#endregion
+//#region src/lark-cli-init.ts
+const LARK_PLUGIN_NAMES = ["openclaw-lark", "feishu-openclaw-plugin"];
+const PE_XML_TAG = "lark-cli-pe";
+const PE_PLACEHOLDER = `
+<${PE_XML_TAG}>
+**【强制要求 - 无例外】飞书所有操作必须先读 feishu-lark-cli skill。未读skill不得调用任何飞书工具，违者视为操作失误。**
+</${PE_XML_TAG}>
+`;
+function isLarkPluginInstalled(configPath) {
+	const extDir = getExtensionsDir(configPath);
+	return LARK_PLUGIN_NAMES.some((name) => {
+		try {
+			return node_fs.default.existsSync(node_path.default.join(extDir, name, "package.json"));
+		} catch {
+			return false;
+		}
+	});
+}
+function isLarkCliAvailable() {
+	try {
+		return (0, node_child_process.spawnSync)("lark-cli", ["--version"], {
+			encoding: "utf-8",
+			timeout: 5e3,
+			stdio: [
+				"ignore",
+				"pipe",
+				"ignore"
+			]
+		}).status === 0;
+	} catch {
+		return false;
+	}
+}
+function readConfig(configPath) {
+	try {
+		const raw = node_fs.default.readFileSync(configPath, "utf-8");
+		const parsed = loadJSON5().parse(raw);
+		return parsed != null && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
+	} catch {
+		return null;
+	}
+}
+/**
+* Resolve the feishu app secret for the given appId.
+*
+* Lookup order:
+*   1. channels.feishu.appSecret  (single-agent: feishu.appId === appId)
+*   2. channels.feishu.accounts[key].appSecret  (multi-agent: account.appId === appId)
+*
+* Value interpretation:
+*   - string  → use directly
+*   - object  → secret is managed by a provider; use `feishuAppSecret` param instead
+*
+* Returns null when the secret cannot be determined.
+*/
+function resolveAppSecret(appId, config, feishuAppSecret) {
+	const feishu = getNestedMap(config, "channels", "feishu");
+	if (!feishu) return null;
+	let rawSecret;
+	if (typeof feishu.appId === "string" && feishu.appId === appId) rawSecret = feishu.appSecret;
+	else {
+		const accounts = asRecord(feishu.accounts);
+		if (accounts) for (const [, val] of Object.entries(accounts)) {
+			const account = asRecord(val);
+			if (account?.appId === appId) {
+				rawSecret = account.appSecret ?? feishu.appSecret;
+				break;
+			}
+		}
+	}
+	if (typeof rawSecret === "string" && rawSecret) return rawSecret;
+	if (rawSecret != null && typeof rawSecret === "object") return feishuAppSecret ?? null;
+	return null;
+}
+/**
+* Resolve the agents.md path for the given appId from the openclaw config.
+*
+* Case 1: appId matches channels.feishu.appId (single-agent path)
+*   → WORKSPACE_DIR/AGENTS.md
+*
+* Case 2: appId found in channels.feishu.accounts (multi-agent path)
+*   → find account key where account.appId === appId
+*   → find binding where match.channel=feishu && match.accountId=that key
+*   → if agentId === 'main'  → WORKSPACE_DIR/agents.md
+*   → else find agent in agents.list by id → agent.workspace/agents.md
+*
+* Returns null when the path cannot be determined.
+*/
+function resolveAgentsMdPath(appId, config) {
+	const feishu = getNestedMap(config, "channels", "feishu");
+	if (!feishu) {
+		console.error("resolveAgentsMdPath: channels.feishu not found");
+		return null;
+	}
+	if (typeof feishu.appId === "string" && feishu.appId === appId) {
+		console.error(`resolveAgentsMdPath: case=single-agent feishu.appId=${feishu.appId}`);
+		return node_path.default.join(WORKSPACE_DIR, "workspace", "AGENTS.md");
+	}
+	const accounts = asRecord(feishu.accounts);
+	if (!accounts) {
+		console.error("resolveAgentsMdPath: feishu.accounts not found");
+		return null;
+	}
+	let accountId;
+	for (const [key, val] of Object.entries(accounts)) if (asRecord(val)?.appId === appId) {
+		accountId = key;
+		break;
+	}
+	if (!accountId) {
+		console.error(`resolveAgentsMdPath: no account found with appId=${appId} in feishu.accounts keys=[${Object.keys(accounts).join(",")}]`);
+		return null;
+	}
+	console.error(`resolveAgentsMdPath: found accountId=${accountId}`);
+	const bindings = Array.isArray(config.bindings) ? config.bindings : [];
+	let agentId;
+	for (const b of bindings) {
+		const binding = asRecord(b);
+		if (!binding) continue;
+		const match = asRecord(binding.match);
+		if (match?.channel === "feishu" && match?.accountId === accountId) {
+			if (typeof binding.agentId === "string") {
+				agentId = binding.agentId;
+				break;
+			}
+		}
+	}
+	if (!agentId) {
+		console.error(`resolveAgentsMdPath: no binding found for accountId=${accountId} in bindings(count=${bindings.length})`);
+		return null;
+	}
+	console.error(`resolveAgentsMdPath: found agentId=${agentId}`);
+	if (agentId === "main") {
+		console.error("resolveAgentsMdPath: case=multi-agent-main");
+		return node_path.default.join(WORKSPACE_DIR, "workspace", "AGENTS.md");
+	}
+	const agentsObj = asRecord(config.agents);
+	const list = Array.isArray(agentsObj?.list) ? agentsObj.list : [];
+	for (const a of list) {
+		const agent = asRecord(a);
+		if (agent?.id === agentId) {
+			const ws = typeof agent.workspace === "string" ? agent.workspace : node_path.default.join(WORKSPACE_DIR, "workspace");
+			console.error(`resolveAgentsMdPath: case=multi-agent-custom agentId=${agentId} workspace=${ws}`);
+			return node_path.default.join(ws, "AGENTS.md");
+		}
+	}
+	console.error(`resolveAgentsMdPath: agentId=${agentId} not found in agents.list(count=${list.length})`);
+	return null;
+}
+function appendPeToAgentsMd(agentsMdPath) {
+	const dir = node_path.default.dirname(agentsMdPath);
+	if (!node_fs.default.existsSync(dir)) node_fs.default.mkdirSync(dir, { recursive: true });
+	const existing = node_fs.default.existsSync(agentsMdPath) ? node_fs.default.readFileSync(agentsMdPath, "utf-8") : "";
+	if (existing.includes(`<${PE_XML_TAG}>`)) {
+		console.error(`lark-cli-init: <${PE_XML_TAG}> already present in ${agentsMdPath}, skipping`);
+		return;
+	}
+	const sep = existing.length > 0 && !existing.endsWith("\n") ? "\n" : "";
+	node_fs.default.appendFileSync(agentsMdPath, `${sep}${PE_PLACEHOLDER}`, "utf-8");
+	console.error(`lark-cli-init: appended PE placeholder to ${agentsMdPath}`);
+}
+/**
+* Collect every Feishu bot appId declared in the openclaw config.
+* Covers both single-agent (channels.feishu.appId) and multi-agent
+* (channels.feishu.accounts[*].appId) layouts. Returns a deduplicated list.
+*/
+function collectFeishuAppIds(configPath) {
+	const config = readConfig(configPath ?? CONFIG_PATH);
+	if (!config) return [];
+	const feishu = getNestedMap(config, "channels", "feishu");
+	if (!feishu) return [];
+	const appIds = /* @__PURE__ */ new Set();
+	const topAppId = feishu.appId;
+	if (typeof topAppId === "string" && topAppId.trim()) appIds.add(topAppId.trim());
+	const accounts = asRecord(feishu.accounts);
+	if (accounts) for (const val of Object.values(accounts)) {
+		const appId = asRecord(val)?.appId;
+		if (typeof appId === "string" && appId.trim()) appIds.add(appId.trim());
+	}
+	return [...appIds];
+}
+function runLarkCliInit(opts) {
+	const configPath = opts.configPath ?? CONFIG_PATH;
+	if (!isLarkPluginInstalled(configPath)) {
+		console.error("lark-cli-init: skipping — openclaw-lark plugin not installed");
+		return {
+			ok: true,
+			skipped: true,
+			skipReason: "openclaw-lark plugin not installed"
+		};
+	}
+	if (!isLarkCliAvailable()) {
+		console.error("lark-cli-init: skipping — lark-cli command not found");
+		return {
+			ok: true,
+			skipped: true,
+			skipReason: "lark-cli command not found"
+		};
+	}
+	const config = readConfig(configPath);
+	if (!config) return {
+		ok: false,
+		error: `could not read config at ${configPath}`
+	};
+	const agentsMdPath = resolveAgentsMdPath(opts.appId, config);
+	console.error(`lark-cli-init: resolved agents.md path=${agentsMdPath ?? "(null)"}`);
+	if (!agentsMdPath) return {
+		ok: false,
+		error: `could not resolve agents.md path for appId=${opts.appId}`
+	};
+	const appSecret = resolveAppSecret(opts.appId, config, opts.feishuAppSecret);
+	if (!appSecret) return {
+		ok: false,
+		error: `could not resolve appSecret for appId=${opts.appId}`
+	};
+	console.error(`lark-cli-init: running lark-cli config init --name ${opts.appId} --app-id ${opts.appId} --brand feishu --app-secret-stdin --force-init`);
+	const initRes = (0, node_child_process.spawnSync)("lark-cli", [
+		"config",
+		"init",
+		"--name",
+		opts.appId,
+		"--app-id",
+		opts.appId,
+		"--brand",
+		"feishu",
+		"--app-secret-stdin",
+		"--force-init"
+	], {
+		stdio: [
+			"pipe",
+			"pipe",
+			"pipe"
+		],
+		encoding: "utf-8",
+		input: appSecret
+	});
+	const configInitStdout = initRes.stdout?.trim() || void 0;
+	const configInitStderr = initRes.stderr?.trim() || void 0;
+	if (configInitStdout) console.error(`lark-cli config init stdout: ${configInitStdout}`);
+	if (configInitStderr) console.error(`lark-cli config init stderr: ${configInitStderr}`);
+	if (initRes.error) return {
+		ok: false,
+		configInitStdout,
+		configInitStderr,
+		error: `lark-cli config init spawn error: ${initRes.error.message}`
+	};
+	if (initRes.status !== 0) return {
+		ok: false,
+		configInitExitCode: initRes.status ?? void 0,
+		configInitStdout,
+		configInitStderr,
+		error: `lark-cli config init exited with code ${initRes.status}`
+	};
+	appendPeToAgentsMd(agentsMdPath);
+	return {
+		ok: true,
+		configInitExitCode: 0,
+		agentsMdPath
+	};
+}
+//#endregion
 //#region ../../openclaw-slardar/lib/client.js
 var import_index_cjs = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });
@@ -10390,139 +10292,6 @@ function finalize(results, aborted) {
 	};
 }
 //#endregion
-//#region src/channels-probe.ts
-const FEISHU_INVALID_CONFIG_MSG = "channels.feishu: invalid config: must NOT have additional properties";
-const CHANNEL_LINE_RE = /^-\s+Feishu\s+([^:]+):\s+(.+)$/;
-/**
-* 判断单个飞书账号是否处于"可用"状态。
-* 移植自 feishu-channel-success-rate skill 的 Python `_account_is_working`。
-*
-* 会先剥离 "key:value" 形式的 bit（dm:、bot:、in:、out:、token:、allow:、
-* intents:、groups:、health: 等），再按以下公式判断：
-*
-* @param ignoreProbeFailed  为 true 时忽略 "probe failed" bit，不视为失败。
-*   升级前置检测中传 true，因为 probe 失败通常反映网络状况而非配置问题。
-* @param gatewayReachable   为 false 时（gateway 尚未启动），只要 enabled+configured
-*   即视为可用；为 true 时还需要 running/works 且无 error: bit。
-*/
-function accountIsWorking(bits, ignoreProbeFailed = true, gatewayReachable = true) {
-	const bitTokens = /* @__PURE__ */ new Set();
-	let hasError = false;
-	let hasProbeFailed = false;
-	for (const raw of bits) {
-		const b = raw.trim();
-		if (!b) continue;
-		if (b.startsWith("error:")) {
-			hasError = true;
-			continue;
-		}
-		if (b === "probe failed") {
-			hasProbeFailed = true;
-			continue;
-		}
-		bitTokens.add(b.split(":")[0]);
-	}
-	if (!bitTokens.has("enabled") || !bitTokens.has("configured")) return false;
-	if (!gatewayReachable) return true;
-	if (bitTokens.has("works")) return true;
-	if (bitTokens.has("running") && !hasError && (ignoreProbeFailed || !hasProbeFailed)) return true;
-	return false;
-}
-/**
-* 解析 `openclaw channels status --probe` 的原始 stdout。
-* 移植自 feishu-channel-success-rate skill 的 Python `extract_channels_probe`。
-*/
-function parseChannelsProbeOutput(text, { ignoreProbeFailed = true } = {}) {
-	const gatewayReachable = text.includes("Gateway reachable");
-	const feishuConfigInvalid = text.includes(FEISHU_INVALID_CONFIG_MSG);
-	const accounts = [];
-	let anyAccountWorking = false;
-	for (const line of text.split("\n")) {
-		const m = CHANNEL_LINE_RE.exec(line.trim());
-		if (!m) continue;
-		const [, acct, rest] = m;
-		const bits = rest.split(",").map((b) => b.trim());
-		const isWorking = accountIsWorking(bits, ignoreProbeFailed, gatewayReachable);
-		if (isWorking) anyAccountWorking = true;
-		accounts.push({
-			id: acct.trim(),
-			bits,
-			isWorking,
-			raw: line.trim()
-		});
-	}
-	return {
-		gatewayReachable,
-		feishuConfigInvalid,
-		accounts,
-		anyAccountWorking
-	};
-}
-/**
-* 执行 `openclaw channels status --probe`，返回结构化结果。
-*
-* 部分 bot 账号 probe 失败时命令会以非零退出码退出，但 stdout 仍有可用内容。
-* 因此即使退出码非零，也尝试解析 stdout；只有真正没有任何输出时才返回 unavailable。
-*
-* @param timeoutMs         最长等待时长，默认 60 s。v2026.4.x 缺少单请求 HTTP 超时，
-*   可能无限阻塞，此超时是唯一保护。
-* @param ignoreProbeFailed 为 true 时，"probe failed" 账号仍计入"可用"。
-*   升级前置检测中应传 true，避免网络抖动导致误判为不可用。
-*/
-function runChannelsProbe(timeoutMs = 6e4, { ignoreProbeFailed = true } = {}) {
-	let stdout = "";
-	let stderrText = "";
-	let execError;
-	try {
-		stdout = (0, node_child_process.execSync)("openclaw channels status --probe", {
-			encoding: "utf-8",
-			timeout: timeoutMs,
-			stdio: [
-				"ignore",
-				"pipe",
-				"pipe"
-			]
-		});
-	} catch (e) {
-		const err = e;
-		const stdoutRaw = err.stdout;
-		stdout = typeof stdoutRaw === "string" ? stdoutRaw : stdoutRaw?.toString("utf-8") ?? "";
-		execError = err.message;
-		const stderrRaw = err.stderr;
-		stderrText = (typeof stderrRaw === "string" ? stderrRaw : stderrRaw?.toString("utf-8") ?? "").trim();
-		if (stderrText) console.error(`channels-probe: stderr from CLI: ${stderrText}`);
-	}
-	if (stdout.trim()) return {
-		available: true,
-		rawOutput: stdout.trim(),
-		...parseChannelsProbeOutput(stdout, { ignoreProbeFailed })
-	};
-	return {
-		available: false,
-		gatewayReachable: false,
-		feishuConfigInvalid: stderrText.includes(FEISHU_INVALID_CONFIG_MSG),
-		accounts: [],
-		anyAccountWorking: false,
-		error: execError ?? "no output from openclaw channels status --probe"
-	};
-}
-/**
-* 判断 channels probe 结果是否处于"仅一个 Feishu 默认账号、enabled 但未配置"的状态。
-*
-* 这是插件全新安装后的初始状态：npx 工具创建了一个默认账号占位，但用户尚未
-* 填写 AppID / Secret，因此账号显示为 enabled 但 not configured。
-* 此时 anyAccountWorking=false（configured 缺失），但安装本身是成功的。
-*
-* 用于安装后校验的补充分支：当安装前 channels 不可用，且安装后恰好处于此状态时，
-* 视为安装成功，不触发回滚。
-*/
-function isDefaultOnlyState(result) {
-	if (result.accounts.length !== 1) return false;
-	const acct = result.accounts[0];
-	const bitTokens = new Set(acct.bits.map((b) => b.trim().split(":")[0]));
-	return bitTokens.has("enabled") && !bitTokens.has("configured");
-}
-//#endregion
 //#region src/innerapi/reportCliRun.ts
 /**
 * CLI-side client for studio_server's `openclaw.report_cli_run` inner
@@ -10602,7 +10371,7 @@ async function reportCliRun(opts) {
 //#region src/help.ts
 const BIN = "mclaw-diagnose";
 function versionBanner() {
-	return `v0.1.15-alpha.3`;
+	return `v0.1.15-alpha.4`;
 }
 const COMMANDS = [
 	{
@@ -10889,63 +10658,6 @@ OPTIONS
 EXIT CODES
   0    Success or skipped (prerequisites not met).
   1    Secret/path unresolvable, lark-cli failed, or config unreadable.
-`
-	},
-	{
-		name: "upgrade-lark",
-		hidden: false,
-		summary: "Upgrade the Feishu/Lark plugin via @larksuite/openclaw-lark-tools",
-		help: `USAGE
-  ${BIN} upgrade-lark [--check] [--skip-restart] [--scene=<scene>] [--caller=<n>] [--trace-id=<id>]
-
-DESCRIPTION
-  Upgrades the Feishu/Lark plugin by running:
-    npx -y @larksuite/openclaw-lark-tools update --use-existing
-
-  Before the upgrade, a pre-check gate runs to verify the upgrade is needed:
-    - version incompatible OR feishu channel config invalid, AND
-    - no feishu account is currently working
-  If the gate is not triggered, the command skips with exit code 0.
-
-  Before the upgrade, the following files are backed up:
-    - openclaw.json
-    - extensions/openclaw-lark/  (if present)
-    - extensions/feishu-openclaw-plugin/  (if present)
-  After the upgrade, the result is validated:
-    - feishu.accounts bot count must not decrease
-    - gateway config structure must remain valid (port/mode/bind/auth/trustedProxies)
-  If the upgrade command fails, or validation fails, the backed-up files are
-  restored to roll back the changes.
-
-  After a successful upgrade, the openclaw service is restarted via
-    /opt/force/bin/openclaw_scripts/restart.sh
-  Pass --skip-restart to skip this step (e.g. when restart is handled externally).
-
-  Execution is logged to /tmp/openclaw-diagnose/upgrade-lark-<runId>.log.
-
-  Output is a single JSON object on stdout:
-    { "ok": true, "stdout": "...", "stderr": "...", "logFile": "..." }
-    { "ok": false, "error": "...", "stderr": "...", "exitCode": 1,
-      "rollbackOk": true, "validationError": "...", "logFile": "..." }
-
-  With --check:
-    { "ok": true, "skipped": true, "upgradeNeeded": false, "logFile": "..." }
-    { "ok": true, "skipped": true, "upgradeNeeded": true,  "logFile": "..." }  ← exit 1
-
-OPTIONS
-  --check            Diagnose only: run the pre-check gate and report whether
-                     upgrade is needed without installing. Exit 1 if needed.
-  --skip-restart     Skip the post-install service restart (default: restart).
-  --scene=<scene>    Telemetry label forwarded to Slardar only.
-                     Known values: PageUpgradeLark, etc. Custom strings accepted.
-  --caller=<name>    Optional metadata passed to innerapi.
-  --trace-id=<id>    Optional log-correlation id.
-
-EXIT CODES
-  0    Success: upgrade ran and all validations passed; or gate skipped upgrade.
-  1    Failure: npx error, validation failed, or git commit failed.
-       File rollback was attempted (see rollbackOk in the JSON output).
-       With --check: exit 1 means upgrade IS needed.
 `
 	},
 	{
@@ -10979,41 +10691,6 @@ EXAMPLES
   ${BIN} rules                         # all rules
   ${BIN} rules --rule=gateway          # single rule
   ${BIN} rules --rule=gateway --rule=feishu_channel  # multiple rules
-`
-	},
-	{
-		name: "channels-probe",
-		hidden: true,
-		summary: "Check feishu channel health via openclaw channels status --probe",
-		help: `USAGE
-  ${BIN} channels-probe [--timeout=<ms>]
-
-DESCRIPTION
-  Runs \`openclaw channels status --probe\` and returns a structured JSON
-  summary of whether the current environment's feishu channels are
-  configured and working correctly.
-
-  Output:
-    {
-      "available": true,
-      "gatewayReachable": true,
-      "accounts": [
-        { "id": "default", "bits": ["enabled","configured","running","works"],
-          "isWorking": true, "raw": "- Feishu default: ..." }
-      ],
-      "anyAccountWorking": true
-    }
-
-  An account is considered working when:
-    enabled ∧ configured ∧ ( works ∨ ( running ∧ no error: ∧ no probe failed ) )
-
-  "available": false means the CLI invocation itself failed (openclaw not
-  found, gateway unreachable, or no parseable output returned).
-
-OPTIONS
-  --timeout=<ms>   Max wait in milliseconds (default: 60000).  The probe
-                   can hang indefinitely on openclaw v2026.4.x due to a
-                   missing per-request HTTP timeout — set this accordingly.
 `
 	},
 	{
@@ -11188,446 +10865,6 @@ function reportDoctorRunToSlardar(opts) {
 		}
 	});
 }
-const LOG_PREFIX_RE = /^\[\d{4}-\d{2}-\d{2}T[\d:.]+Z\](?:\s+\[run=[^\]]+\])?\s*/;
-/**
-* 读取日志文件末尾最多 maxBytes 字节，过滤噪音后返回纯内容。
-* - 剥除每行的时间戳 + run tag 前缀
-* - 过滤纯分隔符行（全为 '='）
-* 日志头部为固定 banner，有价值的内容集中在末尾，从尾部截取。
-*/
-function readLogFileTail(filePath, maxBytes = 4e3) {
-	try {
-		const buf = node_fs.default.readFileSync(filePath);
-		let start = buf.length > maxBytes ? buf.length - maxBytes : 0;
-		while (start < buf.length && buf[start] !== 10) start++;
-		return buf.subarray(start > 0 ? start + 1 : 0).toString("utf-8").split("\n").map((line) => line.replace(LOG_PREFIX_RE, "")).filter((line) => !/^=+$/.test(line.trim())).join("\n").trim();
-	} catch {
-		return "";
-	}
-}
-/**
-* 向 Slardar 上报 upgrade-lark 运行结果（upgrade_lark_run 事件）。
-*
-* extraCategories 记录字符串维度：scene、exit_code、rollback_ok、
-* validation_error、error_msg、log_content（日志文件末尾 4000 字节，含关键结果）。
-*
-* extraMetrics 记录各阶段耗时（毫秒）；未执行的阶段上报 -1 作为哨兵值，
-* 便于在 Slardar 查询时区分"未运行"和"运行了 0ms"。
-*/
-function reportUpgradeLarkToSlardar(opts) {
-	console.error(`[slardar] upgrade_lark_run scene=${opts.scene ?? ""} checkOnly=${opts.checkOnly} success=${opts.success} exitCode=${opts.exitCode ?? ""} rollbackOk=${opts.rollbackOk ?? ""}`);
-	const t = opts.timing ?? {};
-	const logContent = readLogFileTail(opts.logFile);
-	reportTask({
-		eventName: "upgrade_lark_run",
-		durationMs: opts.durationMs,
-		status: opts.success ? "success" : "failed",
-		extraCategories: {
-			scene: opts.scene ?? "",
-			check_only: String(opts.checkOnly),
-			exit_code: String(opts.exitCode ?? ""),
-			rollback_ok: opts.rollbackOk != null ? String(opts.rollbackOk) : "",
-			validation_error: opts.validationError ?? "",
-			error_msg: opts.error ?? "",
-			log_content: logContent
-		},
-		extraMetrics: {
-			pre_probe_ms: t.preProbeMs ?? -1,
-			version_check_ms: t.versionCheckMs ?? -1,
-			backup_ms: t.backupMs ?? -1,
-			npx_install_ms: t.npxInstallMs ?? -1,
-			post_probe_ms: t.postProbeMs ?? -1,
-			doctor_fix_ms: t.doctorFixMs ?? -1
-		}
-	});
-}
-//#endregion
-//#region src/upgrade-lark.ts
-/** 升级前需备份的 extensions/ 下的插件目录 */
-const FEISHU_PLUGIN_DIRS = ["openclaw-lark", "feishu-openclaw-plugin"];
-function backupFiles(opts) {
-	const { workspaceDir, configPath, backupDir, log } = opts;
-	try {
-		node_fs.default.mkdirSync(backupDir, { recursive: true });
-		log(`backup dir: ${backupDir}`);
-		if (node_fs.default.existsSync(configPath)) {
-			const stat = node_fs.default.statSync(configPath);
-			node_fs.default.copyFileSync(configPath, node_path.default.join(backupDir, "openclaw.json"));
-			log(`  backed up: openclaw.json (${stat.size} bytes)`);
-		} else log(`  skipped: openclaw.json (not found)`);
-		node_fs.default.mkdirSync(node_path.default.join(backupDir, "extensions"), { recursive: true });
-		const extSrc = node_path.default.join(workspaceDir, "extensions");
-		for (const pluginDir of FEISHU_PLUGIN_DIRS) {
-			const src = node_path.default.join(extSrc, pluginDir);
-			if (node_fs.default.existsSync(src)) {
-				const dst = node_path.default.join(backupDir, "extensions", pluginDir);
-				node_fs.default.cpSync(src, dst, { recursive: true });
-				const version = readPkgVersion(node_path.default.join(src, "package.json"));
-				log(`  backed up: extensions/${pluginDir}${version ? ` (version: ${version})` : ""}`);
-			} else log(`  skipped: extensions/${pluginDir} (not found)`);
-		}
-		return { ok: true };
-	} catch (e) {
-		return {
-			ok: false,
-			error: `backup failed: ${e.message}`
-		};
-	}
-}
-function restoreFiles(opts) {
-	const { workspaceDir, configPath, backupDir, log } = opts;
-	try {
-		if (node_fs.default.existsSync(configPath)) {
-			node_fs.default.rmSync(configPath, { force: true });
-			log(`  deleted: openclaw.json`);
-		}
-		const extDst = node_path.default.join(workspaceDir, "extensions");
-		for (const pluginDir of FEISHU_PLUGIN_DIRS) {
-			const dst = node_path.default.join(extDst, pluginDir);
-			if (node_fs.default.existsSync(dst)) {
-				node_fs.default.rmSync(dst, {
-					recursive: true,
-					force: true
-				});
-				log(`  deleted: extensions/${pluginDir}`);
-			}
-		}
-		const configBackup = node_path.default.join(backupDir, "openclaw.json");
-		if (node_fs.default.existsSync(configBackup)) {
-			node_fs.default.copyFileSync(configBackup, configPath);
-			log(`  restored: openclaw.json`);
-		} else log(`  skipped restore: openclaw.json (not in backup — was not present before upgrade)`);
-		for (const pluginDir of FEISHU_PLUGIN_DIRS) {
-			const backupSrc = node_path.default.join(backupDir, "extensions", pluginDir);
-			if (node_fs.default.existsSync(backupSrc)) {
-				node_fs.default.cpSync(backupSrc, node_path.default.join(extDst, pluginDir), { recursive: true });
-				log(`  restored: extensions/${pluginDir}`);
-			} else log(`  skipped restore: extensions/${pluginDir} (not in backup — was not present before upgrade)`);
-		}
-		return true;
-	} catch (e) {
-		log(`  restore error: ${e.message}`);
-		return false;
-	}
-}
-function readPkgVersion(pkgPath) {
-	try {
-		const pkg = JSON.parse(node_fs.default.readFileSync(pkgPath, "utf-8"));
-		return typeof pkg.version === "string" ? pkg.version : null;
-	} catch {
-		return null;
-	}
-}
-function snapshotVersions(cwd, log) {
-	const ocResult = (0, node_child_process.spawnSync)("openclaw", ["--version"], {
-		cwd,
-		encoding: "utf-8",
-		stdio: [
-			"ignore",
-			"pipe",
-			"pipe"
-		],
-		timeout: 5e3
-	});
-	const ocRaw = (ocResult.stdout ?? "").trim() || (ocResult.stderr ?? "").trim();
-	const extDir = node_path.default.join(cwd, "extensions");
-	const larkPkg = node_path.default.join(extDir, "openclaw-lark", "package.json");
-	const feishuPkg = node_path.default.join(extDir, "feishu-openclaw-plugin", "package.json");
-	log(`  version-check paths: ${larkPkg} [${node_fs.default.existsSync(larkPkg) ? "exists" : "missing"}]`);
-	log(`  version-check paths: ${feishuPkg} [${node_fs.default.existsSync(feishuPkg) ? "exists" : "missing"}]`);
-	return {
-		openclaw: ocRaw || null,
-		openclawLark: readPkgVersion(larkPkg),
-		feishuOpenclawPlugin: readPkgVersion(feishuPkg)
-	};
-}
-function logVersionSnapshot(label, v, log) {
-	log(`${label}: openclaw=${v.openclaw ?? "n/a"} openclaw-lark=${v.openclawLark ?? "n/a"} feishu-openclaw-plugin=${v.feishuOpenclawPlugin ?? "n/a"}`);
-}
-function countFeishuBots(configPath) {
-	try {
-		const raw = node_fs.default.readFileSync(configPath, "utf-8");
-		const config = loadJSON5().parse(raw);
-		const accounts = getNestedMap(config, "channels", "feishu", "accounts");
-		if (accounts) return Object.keys(accounts).length;
-		const feishu = getNestedMap(config, "channels", "feishu");
-		return typeof feishu?.appId === "string" && feishu.appId ? 1 : 0;
-	} catch {
-		return 0;
-	}
-}
-/** 执行 channels probe 并将结果写入日志，从不抛出异常（异常时返回全零结果）。 */
-function probeChannels(label, log, timeoutMs) {
-	try {
-		const r = runChannelsProbe(timeoutMs);
-		log(`  ${label} available=${r.available} anyAccountWorking=${r.anyAccountWorking}`);
-		if (r.error) log(`  ${label} error: ${r.error}`);
-		if (r.gatewayReachable != null) log(`  ${label} gatewayReachable: ${r.gatewayReachable}`);
-		for (const acct of r.accounts ?? []) log(`  ${label} account ${acct.id}: isWorking=${acct.isWorking} bits=[${acct.bits.join(",")}]`);
-		if (r.rawOutput) log(`  ${label} raw output:\n${r.rawOutput}`);
-		return r;
-	} catch (e) {
-		log(`  ${label} channels probe threw: ${e.message}`);
-		return {
-			available: false,
-			gatewayReachable: false,
-			feishuConfigInvalid: false,
-			accounts: [],
-			anyAccountWorking: false
-		};
-	}
-}
-function runUpgradeLark(opts) {
-	const cwd = opts.cwd ?? "/home/gem/workspace/agent";
-	const configPath = opts.configPath ?? CONFIG_PATH;
-	const logFile = upgradeLarkLogFile(opts.runId, opts.checkOnly);
-	const log = makeLogger(logFile);
-	const fsOpts = {
-		workspaceDir: cwd,
-		configPath,
-		backupDir: node_path.default.join(opts.backupBaseDir ?? "/tmp/openclaw-diagnose", `upgrade-lark-backup-${opts.runId}`),
-		log
-	};
-	const cliScript = opts.cliScript ?? process.argv[1];
-	const statusCheckDelayMs = opts.statusCheckDelayMs ?? 5e3;
-	log(`${"=".repeat(60)}`);
-	log(`upgrade-lark started  runId=${opts.runId}`);
-	log(`  cwd        : ${cwd}`);
-	log(`  configPath : ${configPath}`);
-	log(`${"=".repeat(60)}`);
-	const timing = {};
-	log("");
-	log("── [Pre-check A] channels probe（升级前）────────────────");
-	const t_preProbeStart = Date.now();
-	const beforeChannels = probeChannels("before", log, 6e4);
-	timing.preProbeMs = Date.now() - t_preProbeStart;
-	log("");
-	log("── [Pre-check B] 版本兼容预检 ───────────────────────────");
-	let versionIncompatible = false;
-	const t_versionCheckStart = Date.now();
-	try {
-		const rawConfig = node_fs.default.readFileSync(configPath, "utf-8");
-		versionIncompatible = needsLarkUpgrade({
-			config: loadJSON5().parse(rawConfig),
-			configPath,
-			vars: {},
-			providerDeps: {
-				usesMiaodaProvider: false,
-				usesMiaodaSecretProvider: false
-			}
-		});
-		log(`  version-compat pre-check: ${versionIncompatible ? "NEEDS_UPGRADE" : "ok"}`);
-	} catch (e) {
-		log(`  version-compat pre-check error: ${e.message} — version signal unavailable`);
-	}
-	timing.versionCheckMs = Date.now() - t_versionCheckStart;
-	const feishuConfigInvalid = beforeChannels.feishuConfigInvalid;
-	log(`  feishu config invalid  : ${feishuConfigInvalid}`);
-	log("");
-	log("── [Gate] 升级前置条件检查 ───────────────────────────────");
-	log(`  versionIncompatible    : ${versionIncompatible}`);
-	log(`  feishuConfigInvalid    : ${feishuConfigInvalid}`);
-	log(`  channels working before: ${beforeChannels.anyAccountWorking}`);
-	if (!(versionIncompatible || feishuConfigInvalid)) {
-		const reason = "version compatible and feishu channel config valid — upgrade not needed";
-		log(`  SKIP: ${reason}`);
-		log(`${"=".repeat(60)}`);
-		log("upgrade-lark skipped (pre-check gate)");
-		log(`${"=".repeat(60)}`);
-		return {
-			ok: true,
-			skipped: true,
-			skipReason: reason,
-			upgradeNeeded: false,
-			timing,
-			logFile
-		};
-	}
-	if (beforeChannels.anyAccountWorking) {
-		const reason = "channels are working — upgrade not needed (issue detected but system is functional)";
-		log(`  SKIP: ${reason}`);
-		log(`${"=".repeat(60)}`);
-		log("upgrade-lark skipped (pre-check gate)");
-		log(`${"=".repeat(60)}`);
-		return {
-			ok: true,
-			skipped: true,
-			skipReason: reason,
-			upgradeNeeded: false,
-			timing,
-			logFile
-		};
-	}
-	log(`  PROCEED: requiresLarkUpgrade=true (version=${versionIncompatible}, feishuConfig=${feishuConfigInvalid}) AND channels not working → running upgrade`);
-	if (opts.checkOnly) {
-		log(`  --check 模式：需要升级 — 不执行安装，直接返回`);
-		log(`${"=".repeat(60)}`);
-		log("upgrade-lark check complete");
-		log(`${"=".repeat(60)}`);
-		return {
-			ok: true,
-			skipped: true,
-			skipReason: "check",
-			upgradeNeeded: true,
-			timing,
-			logFile
-		};
-	}
-	log("");
-	log("── [1/6] 文件备份 ────────────────────────────────────────");
-	log(`before-state: botCount=${countFeishuBots(configPath)}`);
-	const t_backupStart = Date.now();
-	const backup = backupFiles(fsOpts);
-	timing.backupMs = Date.now() - t_backupStart;
-	if (!backup.ok) {
-		log(`ERROR: ${backup.error}`);
-		return {
-			ok: false,
-			error: backup.error,
-			timing,
-			logFile
-		};
-	}
-	log("backup: ok");
-	logVersionSnapshot("before-versions", snapshotVersions(cwd, log), log);
-	log("");
-	log("── [2/6] 清理本地 openclaw shim ─────────────────────────");
-	const localOpenclawBin = node_path.default.join(cwd, "node_modules", ".bin", "openclaw");
-	if (node_fs.default.existsSync(localOpenclawBin)) try {
-		node_fs.default.rmSync(localOpenclawBin);
-		log(`  removed: ${localOpenclawBin}`);
-	} catch (e) {
-		log(`  WARN: failed to remove ${localOpenclawBin}: ${e.message}`);
-	}
-	else log(`  skipped: ${localOpenclawBin} (not found)`);
-	log("");
-	log("── [3/6] npx install (@larksuite/openclaw-lark-tools update) ──");
-	const t_npxStart = Date.now();
-	const npxResult = (0, node_child_process.spawnSync)("npx", [
-		"-y",
-		"@larksuite/openclaw-lark-tools",
-		"update"
-	], {
-		cwd,
-		encoding: "utf-8",
-		stdio: [
-			"ignore",
-			"pipe",
-			"pipe"
-		],
-		timeout: 12e4
-	});
-	timing.npxInstallMs = Date.now() - t_npxStart;
-	const npxStdout = npxResult.stdout?.trim() ?? "";
-	const npxStderr = npxResult.stderr?.trim() ?? "";
-	const npxExitCode = npxResult.status ?? 1;
-	if (npxStdout) log(`npx stdout:\n${npxStdout}`);
-	if (npxStderr) log(`npx stderr:\n${npxStderr}`);
-	log(`npx exit: ${npxExitCode}${npxResult.error ? ` error: ${npxResult.error.message}` : ""}`);
-	if (statusCheckDelayMs > 0) {
-		log("");
-		log(`── 等待 ${statusCheckDelayMs / 1e3}s（让 openclaw 服务完成重启） ─────────────`);
-		Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, statusCheckDelayMs);
-		log("wait done");
-	}
-	const doRollback = (reason) => {
-		log(`ERROR: ${reason}`);
-		const rollbackOk = restoreFiles(fsOpts);
-		log(`rollback: ${rollbackOk ? "ok" : "FAILED"}`);
-		return {
-			ok: false,
-			error: reason,
-			validationError: reason,
-			stdout: npxStdout,
-			stderr: npxStderr,
-			exitCode: npxExitCode,
-			rollbackOk,
-			timing,
-			logFile
-		};
-	};
-	log("");
-	log("── [4/5] 安装后诊断校验 ─────────────────────────────────");
-	logVersionSnapshot("after-versions", snapshotVersions(cwd, log), log);
-	let afterVersionIncompatible = false;
-	try {
-		const rawConfig = node_fs.default.readFileSync(configPath, "utf-8");
-		afterVersionIncompatible = needsLarkUpgrade({
-			config: loadJSON5().parse(rawConfig),
-			configPath,
-			vars: {},
-			providerDeps: {
-				usesMiaodaProvider: false,
-				usesMiaodaSecretProvider: false
-			}
-		});
-		log(`  version-compat post-check: ${afterVersionIncompatible ? "STILL_INCOMPATIBLE" : "ok"}`);
-	} catch (e) {
-		log(`  version-compat post-check error: ${e.message} — version signal unavailable`);
-	}
-	const t_postProbeStart = Date.now();
-	const afterChannels = probeChannels("after", log, 6e4);
-	timing.postProbeMs = Date.now() - t_postProbeStart;
-	log(`  feishu config invalid after: ${afterChannels.feishuConfigInvalid}`);
-	const stillNeedsUpgrade = (afterVersionIncompatible || afterChannels.feishuConfigInvalid) && !afterChannels.anyAccountWorking;
-	const isNewDefaultOnly = !beforeChannels.anyAccountWorking && isDefaultOnlyState(afterChannels);
-	log(`  post-check: stillNeedsUpgrade=${stillNeedsUpgrade} (version=${afterVersionIncompatible}, feishuConfig=${afterChannels.feishuConfigInvalid}, channelsWorking=${afterChannels.anyAccountWorking}) isNewDefaultOnly=${isNewDefaultOnly}`);
-	if (stillNeedsUpgrade && !isNewDefaultOnly) return doRollback(`post-install diagnosis still shows anomaly: versionIncompatible=${afterVersionIncompatible}, feishuConfigInvalid=${afterChannels.feishuConfigInvalid}, anyAccountWorking=${afterChannels.anyAccountWorking}`);
-	if (isNewDefaultOnly) log("  post-install diagnosis: ok (new default account — plugin installed, awaiting configuration)");
-	else log("  post-install diagnosis: ok (upgrade conditions resolved)");
-	log("");
-	log("── [6/6] doctor --fix ────────────────────────────────────");
-	const fixArgs = ["doctor", "--fix"];
-	if (opts.scene) fixArgs.push(`--scene=${opts.scene}`);
-	const t_doctorFixStart = Date.now();
-	const fixResult = (0, node_child_process.spawnSync)(process.execPath, [cliScript, ...fixArgs], {
-		cwd,
-		encoding: "utf-8",
-		stdio: [
-			"ignore",
-			"pipe",
-			"pipe"
-		],
-		timeout: 6e4,
-		env: process.env
-	});
-	timing.doctorFixMs = Date.now() - t_doctorFixStart;
-	if (fixResult.stdout?.trim()) log(`doctor(fix) stdout:\n${fixResult.stdout.trim()}`);
-	if (fixResult.stderr?.trim()) log(`doctor(fix) stderr:\n${fixResult.stderr.trim()}`);
-	log(`doctor(fix) exit: ${fixResult.status ?? "null"}${fixResult.error ? ` error: ${fixResult.error.message}` : ""}`);
-	log("");
-	log("── [7/7] 重启 openclaw 服务 ──────────────────────────────");
-	const restartScript = "/opt/force/bin/openclaw_scripts/restart.sh";
-	if (opts.skipRestart) log("  skipped: --skip-restart");
-	else if (node_fs.default.existsSync(restartScript)) {
-		const t_restart = Date.now();
-		const restartResult = (0, node_child_process.spawnSync)("bash", [restartScript], {
-			encoding: "utf-8",
-			stdio: [
-				"ignore",
-				"pipe",
-				"pipe"
-			],
-			timeout: 3e4
-		});
-		const restartMs = Date.now() - t_restart;
-		if (restartResult.stdout?.trim()) log(`  restart stdout:\n${restartResult.stdout.trim()}`);
-		if (restartResult.stderr?.trim()) log(`  restart stderr:\n${restartResult.stderr.trim()}`);
-		log(`  restart.sh exit: ${restartResult.status ?? "null"} (${restartMs}ms)${restartResult.error ? ` error: ${restartResult.error.message}` : ""}`);
-	} else log(`  skipped: ${restartScript} not found`);
-	log("");
-	log(`${"=".repeat(60)}`);
-	log("upgrade-lark completed successfully");
-	log(`${"=".repeat(60)}`);
-	return {
-		ok: true,
-		stdout: npxStdout,
-		stderr: npxStderr,
-		exitCode: npxExitCode,
-		timing,
-		logFile
-	};
-}
 //#endregion
 //#region src/index.ts
 const args = node_process.default.argv.slice(2);
@@ -12118,56 +11355,6 @@ async function main() {
 			if (!result.ok) node_process.default.exit(1);
 			break;
 		}
-		case "upgrade-lark": {
-			const checkOnly = args.includes("--check");
-			const skipRestart = args.includes("--skip-restart");
-			const result = runUpgradeLark({
-				runId: rc.runId,
-				scene,
-				checkOnly,
-				skipRestart
-			});
-			const upgradeDurationMs = Date.now() - t0;
-			console.log(JSON.stringify(result));
-			reportUpgradeLarkToSlardar({
-				scene,
-				checkOnly,
-				durationMs: upgradeDurationMs,
-				success: result.ok,
-				logFile: result.logFile,
-				exitCode: result.exitCode,
-				rollbackOk: result.rollbackOk,
-				validationError: result.validationError,
-				error: result.error,
-				timing: result.timing
-			});
-			try {
-				await reportCliRun({
-					command: "upgrade-lark",
-					runId: rc.runId,
-					version: getVersion(),
-					invocation: args.join(" "),
-					durationMs: upgradeDurationMs,
-					caller: rc.caller,
-					traceId: rc.traceId,
-					success: result.ok,
-					result,
-					error: result.ok ? void 0 : { message: result.error ?? "upgrade-lark failed" }
-				});
-			} catch (e) {
-				console.error(`[telemetry] reportCliRun failed: ${e.message}`);
-			}
-			if (!result.ok || checkOnly && result.upgradeNeeded) {
-				node_process.default.exitCode = 1;
-				return;
-			}
-			break;
-		}
-		case "channels-probe": {
-			const result = runChannelsProbe(getFlag(args, "timeout") ? Number(getFlag(args, "timeout")) : void 0);
-			console.log(JSON.stringify(result));
-			break;
-		}
 		default:
 			node_process.default.stderr.write(`Unknown command: ${mode}\n\n`);
 			node_process.default.stderr.write(formatTopLevelHelp(helpFlags.expert));