@vibe-lark/larkpal 0.1.10 → 0.1.12

package/dist/main.mjs

@@ -237,7 +237,29 @@ const DEFAULT_SETTINGS = {
 			"WebFetch(*)",
 			"WebSearch(*)"
 		],
-		deny: []
+		deny: [
+			"Read(//.lark-cli/**)",
+			"Read(//.config/lark/**)",
+			"Read(//.larkpal/credentials.json)",
+			"Read(//.env)",
+			"Read(//.env.*)",
+			"Bash(cat ~/.lark-cli:*)",
+			"Bash(cat ~/.config/lark:*)",
+			"Bash(cat ~/.larkpal/credentials:*)",
+			"Bash(head ~/.lark-cli:*)",
+			"Bash(head ~/.config/lark:*)",
+			"Bash(tail ~/.lark-cli:*)",
+			"Bash(tail ~/.config/lark:*)",
+			"Bash(less ~/.lark-cli:*)",
+			"Bash(less ~/.config/lark:*)",
+			"Bash(more ~/.lark-cli:*)",
+			"Bash(more ~/.config/lark:*)",
+			"Bash(env:*)",
+			"Bash(printenv:*)",
+			"Bash(export -p:*)",
+			"Bash(echo $LARK_APP_SECRET:*)",
+			"Bash(echo $ANTHROPIC_API_KEY:*)"
+		]
 	},
 	hooks: {
 		SessionStart: [{ hooks: [{
@@ -2848,7 +2870,8 @@ async function fetchFromApplicationApi(token) {
 		return {
 			appName: zhInfo?.name || app.app_name || "",
 			avatarUrl: app.avatar_url,
-			description: zhInfo?.description || app.description
+			description: zhInfo?.description || app.description,
+			helpDocUrl: zhInfo?.help_use
 		};
 	} catch (err) {
 		log$22.warn("application/v6 API 请求异常", { error: err instanceof Error ? err.message : String(err) });
@@ -2904,9 +2927,100 @@ async function getTenantAccessToken(appId, appSecret) {
 		return null;
 	}
 }
+/**
+* 从飞书云文档 URL 中解析文档 token
+*
+* 支持的 URL 格式：
+* - https://xxx.feishu.cn/docx/{token}
+* - https://xxx.feishu.cn/wiki/{token}
+* - https://xxx.larksuite.com/docx/{token}
+*/
+function parseDocTokenFromUrl(url) {
+	try {
+		const parts = new URL(url).pathname.split("/").filter(Boolean);
+		for (let i = 0; i < parts.length; i++) {
+			if (parts[i] === "docx" && parts[i + 1]) return {
+				token: parts[i + 1],
+				type: "docx"
+			};
+			if (parts[i] === "wiki" && parts[i + 1]) return {
+				token: parts[i + 1],
+				type: "wiki"
+			};
+		}
+		return null;
+	} catch {
+		return null;
+	}
+}
+/**
+* 从飞书云文档读取纯文本内容（作为人设文档）
+*
+* 对于 wiki 类型，先通过 wiki API 获取实际的 doc token，再读取内容。
+*/
+async function fetchDocContent(docUrl, accessToken) {
+	const parsed = parseDocTokenFromUrl(docUrl);
+	if (!parsed) {
+		log$22.warn("无法从 URL 中解析文档 token", { url: docUrl });
+		return null;
+	}
+	log$22.info("开始读取人设文档", {
+		url: docUrl,
+		type: parsed.type,
+		token: parsed.token
+	});
+	let docToken = parsed.token;
+	if (parsed.type === "wiki") {
+		const realToken = await resolveWikiNodeToDocToken(parsed.token, accessToken);
+		if (!realToken) log$22.warn("wiki 节点解析失败，尝试直接使用 token 读取");
+		else docToken = realToken;
+	}
+	try {
+		const data = await (await fetch(`https://open.feishu.cn/open-apis/docx/v1/documents/${docToken}/raw_content`, { headers: { Authorization: `Bearer ${accessToken}` } })).json();
+		log$22.info("文档 raw_content API 响应", {
+			code: data.code,
+			msg: data.msg,
+			contentLength: data.data?.content?.length
+		});
+		if (data.code !== 0 || !data.data?.content) {
+			log$22.warn("读取文档内容失败", {
+				code: data.code,
+				msg: data.msg,
+				docToken
+			});
+			return null;
+		}
+		return data.data.content.trim();
+	} catch (err) {
+		log$22.error("读取文档内容异常", {
+			error: err instanceof Error ? err.message : String(err),
+			docToken
+		});
+		return null;
+	}
+}
+/** 将 wiki 节点 token 解析为实际的文档 token */
+async function resolveWikiNodeToDocToken(wikiToken, accessToken) {
+	try {
+		const data = await (await fetch(`https://open.feishu.cn/open-apis/wiki/v2/spaces/get_node?token=${wikiToken}`, { headers: { Authorization: `Bearer ${accessToken}` } })).json();
+		log$22.info("wiki get_node API 响应", {
+			code: data.code,
+			msg: data.msg,
+			objType: data.data?.node?.obj_type
+		});
+		if (data.code !== 0 || !data.data?.node?.obj_token) return null;
+		return data.data.node.obj_token;
+	} catch (err) {
+		log$22.warn("wiki get_node 请求异常", { error: err instanceof Error ? err.message : String(err) });
+		return null;
+	}
+}
 /** CLAUDE.md 中的应用信息区块标记 */
 const APP_INFO_START = "<!-- APP_INFO_START -->";
 const APP_INFO_END = "<!-- APP_INFO_END -->";
+/** CLAUDE.md 中的人设文档区块标记 */
+const PERSONA_DOC_START = "<!-- PERSONA_DOC_START -->";
+const PERSONA_DOC_END = "<!-- PERSONA_DOC_END -->";
 /**
 * 将应用信息同步到 ~/.claude/CLAUDE.md
 *
@@ -2937,6 +3051,38 @@ async function syncAppInfoToClaudeMd(appInfo) {
 		hasAvatar: !!appInfo.avatarUrl
 	});
 }
+/**
+* 将人设文档内容同步到 ~/.claude/CLAUDE.md
+*
+* 在文件中维护一个 PERSONA_DOC 标记区块，内容来源于飞书云文档。
+* 如果文件中已有标记区块则替换，否则追加到文件末尾。
+*/
+async function syncPersonaDocToClaudeMd(personaContent) {
+	const claudeMdPath = join$1(homedir$1(), ".claude", "CLAUDE.md");
+	if (!existsSync$1(claudeMdPath)) {
+		log$22.warn("CLAUDE.md 不存在，无法同步人设文档（需先同步应用信息）");
+		return;
+	}
+	let content = await readFile$1(claudeMdPath, "utf-8");
+	const personaBlock = [
+		PERSONA_DOC_START,
+		"## 人设与行为规范",
+		"",
+		"> 以下内容来自飞书人设文档，是你的核心身份定义和行为准则。",
+		"",
+		personaContent,
+		PERSONA_DOC_END
+	].join("\n");
+	const startIdx = content.indexOf(PERSONA_DOC_START);
+	const endIdx = content.indexOf(PERSONA_DOC_END);
+	if (startIdx !== -1 && endIdx !== -1) {
+		const before = content.substring(0, startIdx);
+		const after = content.substring(endIdx + 24);
+		content = before + personaBlock + after;
+	} else content = content.trimEnd() + "\n\n" + personaBlock + "\n";
+	await writeFile$1(claudeMdPath, content, "utf-8");
+	log$22.info("CLAUDE.md 人设文档已同步", { contentLength: personaContent.length });
+}
 /** 构建应用信息标记区块 */
 function buildAppInfoBlock(appInfo) {
 	const lines = [
@@ -2980,10 +3126,20 @@ async function syncAppInfo(credentials) {
 		return null;
 	}
 	await syncAppInfoToClaudeMd(appInfo);
+	if (appInfo.helpDocUrl) {
+		log$22.info("检测到帮助文档 URL，尝试同步人设文档", { helpDocUrl: appInfo.helpDocUrl });
+		const token = await getTenantAccessToken(credentials.appId, credentials.appSecret);
+		if (token) {
+			const personaContent = await fetchDocContent(appInfo.helpDocUrl, token);
+			if (personaContent) await syncPersonaDocToClaudeMd(personaContent);
+			else log$22.warn("人设文档内容为空或读取失败，跳过同步");
+		}
+	}
 	await installSyncSkill();
 	log$22.info("应用信息同步完成", {
 		appName: appInfo.appName,
-		description: appInfo.description?.substring(0, 50)
+		description: appInfo.description?.substring(0, 50),
+		hasPersonaDoc: !!appInfo.helpDocUrl
 	});
 	return appInfo;
 }
@@ -12074,6 +12230,10 @@ async function main() {
 	const credentialProvider = new LarkCliCredentialProvider();
 	const appId = credentialProvider.getAppId();
 	logger.info("凭证加载完成", { appId });
+	if (process.env.LARK_APP_SECRET) {
+		delete process.env.LARK_APP_SECRET;
+		logger.info("已从 process.env 清除 LARK_APP_SECRET（CC 子进程不可继承）");
+	}
 	await ensureDefaults();
 	logger.info("默认配置检查完成");
 	const workspaceRoot = process.env.LARKPAL_WORKSPACE ?? join(homedir(), ".larkpal", "workspace");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibe-lark/larkpal",
-  "version": "0.1.10",
+  "version": "0.1.12",
   "description": "LarkPal - Lark/Feishu bot service",
   "type": "module",
   "main": "./dist/main.mjs",