@parall/parel-channel 1.42.1 → 1.44.0

package/dist/channel-capability.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Channel-capability credential injection — the parel-native form of the
+ * feishu-cli broker (multi-channel-architecture-design §8.3).
+ *
+ * Bridges deliver the capability as a PATH pointer shim that mints a fresh
+ * short-lived tenant token per lark-cli invocation. In parel we control
+ * neither the sandbox PATH nor a bridge process — but we DO control the
+ * per-turn invocation context, which sandbox-e2b flattens into every exec's
+ * env. So the connector mints at emit time and injects the official
+ * LARKSUITE_CLI_* env set: bare `lark-cli` works ambiently for the whole
+ * turn (turn length ≪ token TTL ~2h), the app secret never leaves the
+ * platform, and revocation bites on the next emit's mint (403 → no env).
+ *
+ * The mint endpoint IS the gate (the platform re-evaluates connection state
+ * + flag on every request — the no-drift invariant), so the connector needs
+ * no declaration-plane fetch: a 403 is the revocation signal and is
+ * negative-cached briefly to keep a revoked grant from adding one 403 per
+ * turn.
+ */
+import type { ConnectorContext } from '@parel/plugin-sdk';
+/** Test hook: the cache is module-level state, so suites reset it between cases. */
+export declare function resetChannelCapabilityCache(): void;
+/**
+ * Returns the feishu-cli env set to spread into an envelope's invocation
+ * context, or null when the capability is not granted (or the mint degraded
+ * — a transient platform error must never block a dispatch emit).
+ */
+export declare function channelCapabilityEnv(ctx: ConnectorContext): Promise<Record<string, string> | null>;
+//# sourceMappingURL=channel-capability.d.ts.map

package/dist/channel-capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel-capability.d.ts","sourceRoot":"","sources":["../src/channel-capability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAkC1D,oFAAoF;AACpF,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AAcD;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,CA2CxC"}

package/dist/channel-capability.js

@@ -0,0 +1,81 @@
+import { parallApiUrl, parallOrgId, requireAgk } from './connect.js';
+const MINT_TIMEOUT_MS = 5_000;
+// Re-mint this long before the token expires so an env set injected at turn
+// start stays valid through a long turn's tail.
+const EXPIRY_SKEW_MS = 10 * 60 * 1000;
+// After a 403 (no grant / revoked / flag off), skip minting for this long —
+// revocation latency stays bounded while per-turn 403 noise does not.
+const DENIED_TTL_MS = 60 * 1000;
+// A GRANTED result is re-validated on the same cadence: the mint endpoint IS
+// the revocation gate, so a positive cache lasting the token TTL (~2h) would
+// extend revocation latency to hours. Re-minting is cheap (the platform
+// Redis-caches the exchanged token and re-evaluates the gate per request);
+// this cache only absorbs bursty emits within a conversation.
+const GRANTED_TTL_MS = 60 * 1000;
+// Per-connection cache. The plugin isolate is per-connection, so a plain
+// module map keyed by connectionId is effectively single-entry — the key
+// guards against isolate reuse across connections.
+const cache = new Map();
+/** Test hook: the cache is module-level state, so suites reset it between cases. */
+export function resetChannelCapabilityCache() {
+    cache.clear();
+}
+function envFromMint(minted) {
+    return {
+        LARKSUITE_CLI_APP_ID: minted.app_id,
+        LARKSUITE_CLI_BRAND: minted.brand || 'feishu',
+        LARKSUITE_CLI_TENANT_ACCESS_TOKEN: minted.token,
+        // Bot lock: the credential is the app's, not a human's — mirror the
+        // bridge shim's injection exactly (agent-core channel-exec).
+        LARKSUITE_CLI_DEFAULT_AS: 'bot',
+        LARKSUITE_CLI_STRICT_MODE: 'bot',
+    };
+}
+/**
+ * Returns the feishu-cli env set to spread into an envelope's invocation
+ * context, or null when the capability is not granted (or the mint degraded
+ * — a transient platform error must never block a dispatch emit).
+ */
+export async function channelCapabilityEnv(ctx) {
+    const key = ctx.connectionId;
+    const now = Date.now();
+    const hit = cache.get(key);
+    if (hit && hit.validUntil > now)
+        return hit.env;
+    try {
+        const res = await fetch(`${parallApiUrl(ctx)}/api/v1/orgs/${encodeURIComponent(parallOrgId(ctx))}/agents/me/channel-token`, {
+            method: 'POST',
+            headers: {
+                authorization: `Bearer ${requireAgk(ctx)}`,
+                'content-type': 'application/json',
+            },
+            body: JSON.stringify({ channel_type: 'feishu' }),
+            signal: AbortSignal.timeout(MINT_TIMEOUT_MS),
+        });
+        if (res.status === 403 || res.status === 404) {
+            // No grant (never had it / revoked / flag off) — or an old server
+            // without the endpoint. Same agent-facing outcome: no capability.
+            cache.set(key, { env: null, validUntil: now + DENIED_TTL_MS });
+            return null;
+        }
+        if (!res.ok) {
+            // Transient (5xx/502-mint-upstream): don't cache, don't block the emit.
+            return null;
+        }
+        const minted = (await res.json());
+        if (!minted?.token || !minted.app_id)
+            return null;
+        const env = envFromMint(minted);
+        const expiresAt = Date.parse(minted.expires_at);
+        // Bounded by BOTH the revalidation cadence (revocation latency) and the
+        // token's own remaining life (an injected env must outlive the turn).
+        const tokenBound = Number.isFinite(expiresAt) ? expiresAt - EXPIRY_SKEW_MS : now;
+        const validUntil = Math.max(now + 5_000, Math.min(now + GRANTED_TTL_MS, tokenBound));
+        cache.set(key, { env, validUntil });
+        return env;
+    }
+    catch {
+        // Network failure — degrade to "no env this turn"; the next emit retries.
+        return null;
+    }
+}

package/dist/channel-prompt.d.ts

@@ -16,15 +16,15 @@
  *
  * - The audience is OUTSIDE Parall — no prll:// refs, no internal cards or
  *   attachment links in the reply (dead links there).
- * - The reply goes out through the provider clip's `send_message` command.
- *   A parel agent invokes clips from its sandbox via the parall CLI, so the
- *   hint spells out the concrete `parall clip invoke …` command (agent-core
- *   leaves the invocation mechanism to the bridge's own clip tooling).
- * - Provider metadata is best-effort (the connection lookup can fail) —
- *   never instruct the agent to invoke a made-up clip alias.
+ * - Single-path reply (multi-channel-architecture-design §6): with the
+ *   feishu-cli capability granted, the reply goes out through the official
+ *   lark-cli — auth rides the turn's invocation context env
+ *   (channel-capability.ts), so bare `lark-cli` works in the sandbox.
+ *   Without the grant there is no outbound path and the hint says so (the
+ *   provider clip path is retired).
  * - When the inbound external message id is known, offer the in-thread reply
- *   form ({"message_id": …}) so threaded conversations aren't nudged toward
- *   new top-level messages.
+ *   form so threaded conversations aren't nudged toward new top-level
+ *   messages.
  */
 export interface PromptAttachment {
     id: string;
@@ -52,7 +52,7 @@ export interface ChatPromptArgs {
  */
 export declare function buildChatPrompt(args: ChatPromptArgs): string;
 export interface ChannelPromptArgs {
-    /** Provider name (= clip alias, e.g. "feishu"); undefined when unresolved. */
+    /** Provider name (e.g. "feishu"); undefined when unresolved. */
     provider?: string;
     /** Conversation shape as recorded on the ChannelConversation (dm/group). */
     conversationType?: string;
@@ -61,6 +61,13 @@ export interface ChannelPromptArgs {
     senderName: string;
     /** The inbound message text (raw, un-framed). */
     text: string;
+    /**
+     * Live capability grant: the turn's invocation context carries the minted
+     * LARKSUITE_CLI_* env, so bare `lark-cli` works in the sandbox and is THE
+     * reply path. False → outbound is disabled for this org (no grant); the
+     * hint says so instead of pointing at the retired provider clip.
+     */
+    cliCapable?: boolean;
 }
 export declare function buildChannelPrompt(args: ChannelPromptArgs): string;
 //# sourceMappingURL=channel-prompt.d.ts.map

package/dist/channel-prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"channel-prompt.d.ts","sourceRoot":"","sources":["../src/channel-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AASH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAClC;AAmBD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAU5D;AAED,MAAM,WAAW,iBAAiB;IAChC,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAkBlE"}
+{"version":3,"file":"channel-prompt.d.ts","sourceRoot":"","sources":["../src/channel-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AASH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAClC;AAmBD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAU5D;AAED,MAAM,WAAW,iBAAiB;IAChC,gEAAgE;IAChE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAkBlE"}

package/dist/channel-prompt.js

@@ -16,15 +16,15 @@
  *
  * - The audience is OUTSIDE Parall — no prll:// refs, no internal cards or
  *   attachment links in the reply (dead links there).
- * - The reply goes out through the provider clip's `send_message` command.
- *   A parel agent invokes clips from its sandbox via the parall CLI, so the
- *   hint spells out the concrete `parall clip invoke …` command (agent-core
- *   leaves the invocation mechanism to the bridge's own clip tooling).
- * - Provider metadata is best-effort (the connection lookup can fail) —
- *   never instruct the agent to invoke a made-up clip alias.
+ * - Single-path reply (multi-channel-architecture-design §6): with the
+ *   feishu-cli capability granted, the reply goes out through the official
+ *   lark-cli — auth rides the turn's invocation context env
+ *   (channel-capability.ts), so bare `lark-cli` works in the sandbox.
+ *   Without the grant there is no outbound path and the hint says so (the
+ *   provider clip path is retired).
  * - When the inbound external message id is known, offer the in-thread reply
- *   form ({"message_id": …}) so threaded conversations aren't nudged toward
- *   new top-level messages.
+ *   form so threaded conversations aren't nudged toward new top-level
+ *   messages.
  */
 function sanitizeMeta(value) {
     return value
@@ -85,16 +85,22 @@ export function buildChannelPrompt(args) {
     return lines.join('\n') + buildChannelReplyHint(args);
 }
 function buildChannelReplyHint(args) {
-    const target = JSON.stringify({
-        chat_id: args.externalConversationId || '<conversation id>',
-        text: '...',
-    });
-    const threadAlt = args.externalMessageId
-        ? ` To reply in-thread to this specific message, use '${JSON.stringify({ message_id: args.externalMessageId, text: '...' })}' instead.`
-        : '';
-    if (args.provider) {
-        const alias = args.provider;
-        return `\n<system-reminder>To reply, invoke the \`${alias}\` clip's \`send_message\` command from your sandbox: \`parall clip invoke ${alias} send_message '${target}'\` — your plain text output is NOT delivered to the external conversation.${threadAlt} The same clip's \`call\` command reaches the wider ${alias} API when needed.</system-reminder>`;
+    // Single-path routing (multi-channel-architecture-design §6/§8.3): with
+    // the feishu-cli grant, the minted LARKSUITE_CLI_* env rides this turn's
+    // invocation context, so the official lark-cli works ambiently in the
+    // sandbox and is THE reply path. Without the grant there is no outbound
+    // path — say so instead of pointing at the retired provider clip.
+    // cliCapable alone decides: the mint is feishu-specific, so a successful
+    // grant implies Feishu even when the cosmetic provider-label lookup failed.
+    if (args.cliCapable) {
+        const convRef = args.externalConversationId
+            ? `chat_id "${args.externalConversationId}"`
+            : 'the conversation id named in this event';
+        const threadAlt = args.externalMessageId
+            ? ` To reply threaded to this specific message, reference message_id "${args.externalMessageId}".`
+            : '';
+        return `\n<system-reminder>To reply, use the official Feishu CLI in your sandbox: send a message to ${convRef} with \`lark-cli im\` (see \`lark-cli im --help\` for send syntax; auth is provisioned in your environment — if lark-cli is missing, install it once with \`npm i -g @larksuite/cli\`).${threadAlt} lark-cli is the ONLY outbound path — your plain text output is NOT delivered to the external conversation.</system-reminder>`;
     }
-    return `\n<system-reminder>To reply, invoke your channel provider clip's \`send_message\` command from your sandbox: \`parall clip invoke <alias> send_message '${target}'\` (find the alias with \`parall clip list\`) — your plain text output is NOT delivered to the external conversation.${threadAlt} The same clip's \`call\` command reaches the wider external platform API when needed.</system-reminder>`;
+    const platform = args.provider ?? 'the external platform';
+    return `\n<system-reminder>This message arrived from ${platform}, but outbound replies are currently disabled for this org (no channel capability granted). Do NOT attempt to reply on the external platform. If action is needed, surface it inside Parall (\`parall messages send\` / \`parall dm\`). Your plain text output is not delivered anywhere.</system-reminder>`;
 }

package/dist/delivery.js

@@ -77,7 +77,7 @@ export async function buildParallDelivery(delivery, ctx) {
     // ON and observe OFF — the platform template always sets both together,
     // so it exists only on a hand-crafted binding.
     if (route.envelopeId) {
-        await completeFencedEnvelopes(ctx, [route.envelopeId]);
+        await completeFencedEnvelopes(ctx, [route.envelopeId], 'ok');
     }
     const subject = route.chatId ?? route.conversationId;
     if (subject) {

package/dist/fork.d.ts

@@ -1,5 +1,8 @@
-import type { ConnectorContext } from '@parel/plugin-sdk';
-import type { AgentEventWithChild, ChildSpawnFailedEvent } from './parel-sdk-compat.js';
+import type { AgentEvent, ConnectorContext } from '@parel/plugin-sdk';
+/** The child-spawn failure variant of the sdk's AgentEvent union. */
+type ChildSpawnFailedEvent = Extract<AgentEvent, {
+    type: 'child_spawn_failed';
+}>;
 /** Delay before a failed spawn's messages are re-driven through onTimer. */
 export declare const FORK_RETRY_DELAY_MS = 15000;
 export declare const FORK_RETRY_PREFIX = "forkRetry:";
@@ -99,12 +102,12 @@ export declare function clearForkState(ctx: ConnectorContext): Promise<string[]>
  * Track main-session busyness from the E1 turn stream. Child events (they
  * carry childRef) must NOT feed this — only the main session's turns do.
  */
-export declare function noteMainTurnEvent(ctx: ConnectorContext, event: AgentEventWithChild): Promise<void>;
+export declare function noteMainTurnEvent(ctx: ConnectorContext, event: AgentEvent): Promise<void>;
 /**
  * Resolve a child event's bookkeeping row (by its subject mirror) and fire
  * the pending spawn ack exactly once. Returns the ack request when due.
  */
-export declare function settleChildEvent(ctx: ConnectorContext, event: AgentEventWithChild): Promise<{
+export declare function settleChildEvent(ctx: ConnectorContext, event: AgentEvent): Promise<{
     subject: string;
     pendingAcks: PendingAck[];
 } | null>;
@@ -145,4 +148,5 @@ export declare function handleChildSpawnFailed(ctx: ConnectorContext, event: Chi
  * covers them.
  */
 export declare function buildForkScopePrefix(subject: string, threadRootId?: string): string;
+export {};
 //# sourceMappingURL=fork.d.ts.map

package/dist/fork.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fork.d.ts","sourceRoot":"","sources":["../src/fork.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AA+CxF,4EAA4E;AAC5E,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAS1C,eAAO,MAAM,iBAAiB,eAAe,CAAC;AAW9C,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B,gFAAgF;IAChF,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;2CAEuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE;AAClB;oEACoE;GAClE;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAMxC;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,YAAY,CAAC,CAwCvB;AAED;;sEAEsE;AACtE,wBAAsB,WAAW,CAC/B,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,OAAO,CAAC,CASlB;AAED;;;+EAG+E;AAC/E,wBAAsB,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO7F;AAED,0EAA0E;AAC1E,wBAAsB,cAAc,CAClC,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC,CAGlB;AAED,8EAA8E;AAC9E,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAMf;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED,iEAAiE;AACjE,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAE3C;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAoB7E;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,IAAI,CAAC,CAcf;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,UAAU,EAAE,CAAA;CAAE,GAAG,IAAI,CAAC,CA+BhE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,UAAU,EAAE,CAAA;CAAE,CAAC,CA2B3E;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAYnF"}
+{"version":3,"file":"fork.d.ts","sourceRoot":"","sources":["../src/fork.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAEtE,qEAAqE;AACrE,KAAK,qBAAqB,GAAG,OAAO,CAAC,UAAU,EAAE;IAAE,IAAI,EAAE,oBAAoB,CAAA;CAAE,CAAC,CAAC;AA+CjF,4EAA4E;AAC5E,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAS1C,eAAO,MAAM,iBAAiB,eAAe,CAAC;AAW9C,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B,gFAAgF;IAChF,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;2CAEuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE;AAClB;oEACoE;GAClE;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAMxC;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,YAAY,CAAC,CAwCvB;AAED;;sEAEsE;AACtE,wBAAsB,WAAW,CAC/B,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,OAAO,CAAC,CASlB;AAED;;;+EAG+E;AAC/E,wBAAsB,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO7F;AAED,0EAA0E;AAC1E,wBAAsB,cAAc,CAClC,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC,CAGlB;AAED,8EAA8E;AAC9E,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAMf;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED,iEAAiE;AACjE,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAE3C;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAoB7E;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAc/F;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,UAAU,GAChB,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,UAAU,EAAE,CAAA;CAAE,GAAG,IAAI,CAAC,CA+BhE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,UAAU,EAAE,CAAA;CAAE,CAAC,CA2B3E;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAYnF"}

package/dist/inbound-channel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inbound-channel.d.ts","sourceRoot":"","sources":["../src/inbound-channel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAiB3E;;;;GAIG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,OAAQ,CAAC;AAEhD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,yBAAyB,CAC7C,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,eAAe,EAAE,CAAC,CA6J5B"}
+{"version":3,"file":"inbound-channel.d.ts","sourceRoot":"","sources":["../src/inbound-channel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAkB3E;;;;GAIG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,OAAQ,CAAC;AAEhD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,yBAAyB,CAC7C,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,eAAe,EAAE,CAAC,CAkK5B"}

package/dist/inbound-channel.js

@@ -1,6 +1,7 @@
+import { channelCapabilityEnv } from './channel-capability.js';
 import { buildChannelPrompt } from './channel-prompt.js';
 import { parallApiUrl, parallOrgId, requireAgk } from './connect.js';
-import { ackEffect, createChannelInputStep, ensureSession, invalidateSession, markDispatchReceived, nextEnvelopeId, patchSession, readActiveEmit, REQUEST_TIMEOUT_MS, TURN_ENVELOPE_KEY, writeActiveEmit, } from './session.js';
+import { claimDispatchSource, completeSourceEffect, createChannelInputStep, ensureSession, invalidateSession, nextEnvelopeId, patchSession, readActiveEmit, REQUEST_TIMEOUT_MS, TURN_ENVELOPE_KEY, writeActiveEmit, } from './session.js';
 /**
  * External IM inbound (channel_message dispatches — Feishu/Slack via the
  * platform-mediated channel, external-im-channel-design.md). Split from
@@ -40,7 +41,7 @@ export async function effectsForChannelDispatch(sourceId, ctx) {
         if (m.status === 404 || m.status === 403) {
             // Deleted / inaccessible (also the shape a disabled org feature flag
             // takes) — permanently unusable, drop it.
-            return [ackEffect(ctx, 'channel_message', sourceId)];
+            return [completeSourceEffect(ctx, 'channel_message', sourceId)];
         }
         return []; // transient: keep pending, the catch-up sweep retries
     }
@@ -49,18 +50,18 @@ export async function effectsForChannelDispatch(sourceId, ctx) {
     const text = msg?.text ?? '';
     if (!conversationId) {
         // No conversation → no session key and no reply target: unusable.
-        return [ackEffect(ctx, 'channel_message', sourceId)];
+        return [completeSourceEffect(ctx, 'channel_message', sourceId)];
     }
     if (!text) {
         // The ingress adapter only persists mechanically parsed text; a row with
         // none will never grow any (same reasoning as attachment-only chat
         // messages) — drop rather than let it pile up in the pending queue.
-        return [ackEffect(ctx, 'channel_message', sourceId)];
+        return [completeSourceEffect(ctx, 'channel_message', sourceId)];
     }
     const c = await get(`/channel-conversations/${conversationId}`);
     if (!c.ok) {
         if (c.status === 404 || c.status === 403) {
-            return [ackEffect(ctx, 'channel_message', sourceId)];
+            return [completeSourceEffect(ctx, 'channel_message', sourceId)];
         }
         return [];
     }
@@ -78,7 +79,7 @@ export async function effectsForChannelDispatch(sourceId, ctx) {
     // (see the comments there): received settles before this function returns;
     // the turnEnvelope marker goes down before any session write; the row
     // stays 'received' until the turn event's complete-sources.
-    const receivedSettled = markDispatchReceived(ctx, 'channel_message', sourceId);
+    const receivedSettled = claimDispatchSource(ctx, 'channel_message', sourceId);
     const priorEmit = await readActiveEmit(ctx, 'channel_message', sourceId);
     const envelopeId = nextEnvelopeId('channel_message', sourceId, priorEmit);
     let sessionId = await ensureSession(ctx);
@@ -116,6 +117,9 @@ export async function effectsForChannelDispatch(sourceId, ctx) {
     }
     await receivedSettled;
     await writeActiveEmit(ctx, 'channel_message', sourceId, envelopeId);
+    // Live capability grant → this turn's lark-cli auth env (mint gate = the
+    // no-drift revocation point) + the hint teaching the single reply path.
+    const capabilityEnv = await channelCapabilityEnv(ctx);
     return [
         {
             type: 'emitEvent',
@@ -140,6 +144,7 @@ export async function effectsForChannelDispatch(sourceId, ctx) {
                         externalMessageId,
                         senderName,
                         text,
+                        cliCapable: capabilityEnv !== null,
                     }),
                     conversationId,
                     channelMessageId: sourceId,
@@ -147,19 +152,19 @@ export async function effectsForChannelDispatch(sourceId, ctx) {
                     externalConversationId,
                     externalMessageId,
                 },
-                // No chatId on purpose: the reply goes out through the provider clip
-                // (agent-invoked), NOT deliver() — deliver only runs the redundant
-                // session idle for channel routes (see delivery.ts).
+                // No chatId on purpose: the reply is the agent's own lark-cli send,
+                // NOT deliver() — deliver only runs the redundant session idle for
+                // channel routes (see delivery.ts).
                 replyRoute: {
                     kind: 'provider_http',
                     connectionId: ctx.connectionId,
                     data: { conversationId, envelopeId },
                 },
-                // No invocation context: PRLL_CHAT_ID must not point CLI defaults at
-                // a chat that doesn't exist, and the reply targets (external ids)
-                // already ride the prompt verbatim. (So no PRLL_DISPATCH_SOURCE_*
-                // either — the external reply goes out through the provider clip,
-                // and this row's ledger close is the turn event's complete-sources.)
+                // Invocation context carries ONLY the capability env: no PRLL_CHAT_ID
+                // (it must not point CLI defaults at a chat that doesn't exist) and
+                // no PRLL_DISPATCH_SOURCE_* (the external reply is a vendor-CLI send,
+                // and this row's ledger close is the turn event's complete-sources).
+                ...(capabilityEnv ? { context: capabilityEnv } : {}),
             },
         },
         // No ack effect — see the message path (inbound.ts): the row stays

package/dist/inbound.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inbound.d.ts","sourceRoot":"","sources":["../src/inbound.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,cAAc,EACf,MAAM,mBAAmB,CAAC;AAuH3B;kDACkD;AAClD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,gBAAgB,GAAG,IAAI,CASjE;AACD,wBAAgB,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAO9D;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,cAAc,EACrB,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,eAAe,EAAE,CAAC,CAG5B;AAwCD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,EACtB,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,eAAe,EAAE,CAAC,CAE5B;AA8BD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAE/E;AAwpBD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,UAAU,EACjB,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAE7B"}
+{"version":3,"file":"inbound.d.ts","sourceRoot":"","sources":["../src/inbound.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,cAAc,EACf,MAAM,mBAAmB,CAAC;AAkH3B;kDACkD;AAClD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,gBAAgB,GAAG,IAAI,CASjE;AACD,wBAAgB,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAO9D;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,cAAc,EACrB,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,eAAe,EAAE,CAAC,CAG5B;AAwCD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,EACtB,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,eAAe,EAAE,CAAC,CAE5B;AA8BD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAE/E;AAkrBD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,UAAU,EACjB,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAE7B"}