botmux 2.85.1 → 2.87.0

package/dist/core/command-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-handler.d.ts","sourceRoot":"","sources":["../../src/core/command-handler.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAQxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAoF,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACjJ,OAAO,EAA8D,KAAK,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACtI,OAAO,EAAuB,KAAK,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAsBnG,OAAO,KAAK,EAAE,WAAW,EAAkB,MAAM,aAAa,CAAC;AAE/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAWhD,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAA4D,MAAM,2BAA2B,CAAC;AAC5I,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,CAAC;AAEjD;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,aAAsF,CAAC;AAE/H,wBAAgB,wCAAwC,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAYrF;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAe1E;AAID,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAE9B;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAAE,GACjB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CA0C9C;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKpF;AAED;;;;mCAImC;AACnC,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI,CAqB1F;AAoED,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC3C,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1H,cAAc,EAAE,MAAM,MAAM,CAAC;IAC7B,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,gCAAgC,EAAE,WAAW,EAAE,CAAC,CAAC;CACnF;AAocD;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,IAAI,CAAC,CA6Df;AAED;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,IAAI,CAAC,CA8Bf;AAED,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,kBAAkB,EACxB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CA+jDf;AAoDD,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,qBAAqB,EAC7B,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,kBAAkB,EACxB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,gBAAgB,GAAG,sBAAsB,EACjD,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,kBAAkB,EACxB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CA4Cf;AAED;;;wBAGwB;AACxB,wBAAsB,+BAA+B,CACnD,KAAK,EAAE,KAAK,EACZ,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EAC1C,KAAK,SAAK,GACT,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAuB7B;AAED;;kFAEkF;AAClF,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,gBAAgB,EACxB,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,kBAAkB,EACxB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAoBf"}
+{"version":3,"file":"command-handler.d.ts","sourceRoot":"","sources":["../../src/core/command-handler.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAQxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAoF,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACjJ,OAAO,EAA8D,KAAK,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACtI,OAAO,EAAuB,KAAK,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAkCnG,OAAO,KAAK,EAAE,WAAW,EAAkB,MAAM,aAAa,CAAC;AAE/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAWhD,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAA4D,MAAM,2BAA2B,CAAC;AAC5I,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,CAAC;AAEjD;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,aAAsF,CAAC;AAE/H,wBAAgB,wCAAwC,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAYrF;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAe1E;AAID,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAE9B;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAAE,GACjB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CA0C9C;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKpF;AAED;;;;mCAImC;AACnC,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI,CAqB1F;AAoED,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC3C,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1H,cAAc,EAAE,MAAM,MAAM,CAAC;IAC7B,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,gCAAgC,EAAE,WAAW,EAAE,CAAC,CAAC;CACnF;AAqlBD;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,IAAI,CAAC,CA6Df;AAED;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,IAAI,CAAC,CA8Bf;AA8BD,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,kBAAkB,EACxB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CA0mDf;AAoDD,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,qBAAqB,EAC7B,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,kBAAkB,EACxB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,gBAAgB,GAAG,sBAAsB,EACjD,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,kBAAkB,EACxB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CA4Cf;AAED;;;wBAGwB;AACxB,wBAAsB,+BAA+B,CACnD,KAAK,EAAE,KAAK,EACZ,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EAC1C,KAAK,SAAK,GACT,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAuB7B;AAED;;kFAEkF;AAClF,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,gBAAgB,EACxB,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,kBAAkB,EACxB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAoBf"}

package/dist/core/command-handler.js

@@ -40,9 +40,11 @@ import { ttadkConfigModelChoices } from '../setup/cli-selection.js';
 import { publishAttentionPatch, announcePendingRepoSession } from './session-activity.js';
 import { setCardMode } from '../services/card-mode-store.js';
 import { canOperate } from '../im/lark/event-dispatcher.js';
+import { buildSafeInsightReport } from '../services/insight/report.js';
 import { invalidWorkingDirs } from '../utils/working-dir.js';
-import { writeRoleFile, deleteRoleFile, resolveRole, resolveTeamRoleFile, writeTeamRoleFile, deleteTeamRoleFile } from './role-resolver.js';
+import { writeRoleFile, deleteRoleFile, resolveRole, resolveRoleFile, resolveTeamRoleFile, writeTeamRoleFile, deleteTeamRoleFile } from './role-resolver.js';
 import { getBotCapability, setBotCapability, clearBotCapability } from '../services/bot-profile-store.js';
+import { deleteRoleProfileEntry, deleteRoleProfileIfEmpty, isValidRoleProfileId, listRoleProfileEntries, listRoleProfiles, MAX_ROLE_PROFILE_ENTRY_BYTES, readRoleProfileEntry, writeRoleProfileEntry, } from '../services/role-profile-store.js';
 import { sessionKey, sessionAnchorId } from './types.js';
 import { t, localeForBot } from '../i18n/index.js';
 import { runSkillsImCommand } from './skills/im-command.js';
@@ -292,6 +294,139 @@ async function handleRoleCommand(args, rootId, chatId, larkAppId, senderId, deps
     const trimmed = args.trim();
     const loc = localeForBot(larkAppId);
     const dataDir = config.session.dataDir;
+    // /role profile [...] — reusable suites of per-bot chat roles. Profiles are
+    // not a runtime role layer; applying one materializes this bot's entry into
+    // the current chat role.
+    const profileMatch = trimmed.match(/^profile\b([\s\S]*)$/);
+    if (profileMatch) {
+        const profileArgs = profileMatch[1].trim();
+        const subMatch = profileArgs.match(/^(\S+)(?:\s+([\s\S]*))?$/);
+        const sub = (subMatch?.[1] ?? '').toLowerCase();
+        const subBody = subMatch?.[2]?.trim() ?? '';
+        if (!sub || sub === 'help') {
+            await sessionReply(rootId, t('role.profile.help', undefined, loc));
+            return;
+        }
+        if (sub === 'list' || sub === 'ls') {
+            const profiles = listRoleProfiles(dataDir);
+            if (profiles.length === 0) {
+                await sessionReply(rootId, t('role.profile.list_empty', undefined, loc));
+                return;
+            }
+            const lines = profiles.map(p => {
+                const hasEntry = readRoleProfileEntry(dataDir, p.profileId, larkAppId) !== null;
+                const status = hasEntry
+                    ? t('role.profile.current_configured', undefined, loc)
+                    : t('role.profile.current_missing', undefined, loc);
+                return `• ${p.profileId} — ${p.entryCount} ${t('role.profile.entries', undefined, loc)}; ${status}`;
+            });
+            await sessionReply(rootId, `${t('role.profile.list_header', undefined, loc)}\n${lines.join('\n')}`);
+            return;
+        }
+        const [profileId = '', ...afterProfile] = subBody.split(/\s+/);
+        if (!profileId || !isValidRoleProfileId(profileId)) {
+            await sessionReply(rootId, t('role.profile.invalid', undefined, loc));
+            return;
+        }
+        if (sub === 'show') {
+            const showAll = afterProfile.includes('--all');
+            if (showAll) {
+                const entries = listRoleProfileEntries(dataDir, profileId);
+                if (entries.length === 0) {
+                    await sessionReply(rootId, t('role.profile.no_entries', { profile: profileId }, loc));
+                    return;
+                }
+                const body = entries.map(entry => `### ${entry.larkAppId}\n${t('role.byte_count', { bytes: entry.byteLength, max: MAX_ROLE_PROFILE_ENTRY_BYTES }, loc)}\n\`\`\`markdown\n${entry.content}\n\`\`\``).join('\n\n');
+                await sessionReply(rootId, `${t('role.profile.show_all_header', { profile: profileId }, loc)}\n${body}`);
+                return;
+            }
+            const content = readRoleProfileEntry(dataDir, profileId, larkAppId);
+            if (content === null) {
+                await sessionReply(rootId, t('role.profile.entry_empty', { profile: profileId }, loc));
+                return;
+            }
+            await sessionReply(rootId, `${t('role.profile.entry_current', { profile: profileId }, loc)}\n\`\`\`markdown\n${content}\n\`\`\`\n${t('role.byte_count', { bytes: Buffer.byteLength(content, 'utf-8'), max: MAX_ROLE_PROFILE_ENTRY_BYTES }, loc)}`);
+            return;
+        }
+        if (sub === 'set') {
+            const content = subBody.slice(profileId.length).trim();
+            if (!content) {
+                await sessionReply(rootId, t('role.profile.set_empty', undefined, loc));
+                return;
+            }
+            writeRoleProfileEntry(dataDir, profileId, larkAppId, content);
+            await sessionReply(rootId, t('role.profile.entry_saved', {
+                profile: profileId,
+                bytes: Math.min(Buffer.byteLength(content.trim(), 'utf-8'), MAX_ROLE_PROFILE_ENTRY_BYTES),
+                max: MAX_ROLE_PROFILE_ENTRY_BYTES,
+            }, loc));
+            return;
+        }
+        if (sub === 'save') {
+            const { content, source } = resolveRole(larkAppId, chatId);
+            if (!content) {
+                await sessionReply(rootId, t('role.profile.save_no_effective', { profile: profileId }, loc));
+                return;
+            }
+            writeRoleProfileEntry(dataDir, profileId, larkAppId, content);
+            await sessionReply(rootId, t('role.profile.saved_effective', {
+                profile: profileId,
+                source,
+                bytes: Buffer.byteLength(content, 'utf-8'),
+                max: MAX_ROLE_PROFILE_ENTRY_BYTES,
+            }, loc));
+            return;
+        }
+        if (sub === 'delete' || sub === 'del' || sub === 'rm' || sub === '删除') {
+            const existed = deleteRoleProfileEntry(dataDir, profileId, larkAppId);
+            deleteRoleProfileIfEmpty(dataDir, profileId);
+            await sessionReply(rootId, existed
+                ? t('role.profile.entry_deleted', { profile: profileId }, loc)
+                : t('role.profile.entry_nothing', { profile: profileId }, loc));
+            return;
+        }
+        if (sub === 'apply') {
+            const flags = new Set(afterProfile);
+            const preview = flags.has('--preview');
+            const force = flags.has('--force');
+            const quiet = flags.has('--quiet');
+            const content = readRoleProfileEntry(dataDir, profileId, larkAppId);
+            if (content === null) {
+                await sessionReply(rootId, t('role.profile.apply_missing', { profile: profileId }, loc));
+                return;
+            }
+            const existing = resolveRoleFile(larkAppId, chatId);
+            const bytes = Buffer.byteLength(content, 'utf-8');
+            if (preview) {
+                const overwriteLine = existing && !force
+                    ? `\n${t('role.profile.apply_would_refuse', undefined, loc)}`
+                    : '';
+                await sessionReply(rootId, `${t('role.profile.apply_preview', { profile: profileId, bytes, max: MAX_ROLE_PROFILE_ENTRY_BYTES }, loc)}${overwriteLine}\n\`\`\`markdown\n${content}\n\`\`\``);
+                return;
+            }
+            if (existing && !force) {
+                // An empty entry would *clear* the chat role, not overwrite it — phrase
+                // the --force refusal accordingly so the intent is not misread.
+                const refusedKey = content ? 'role.profile.apply_refused' : 'role.profile.apply_refused_clear';
+                await sessionReply(rootId, t(refusedKey, { profile: profileId }, loc));
+                return;
+            }
+            if (!content) {
+                deleteRoleFile(larkAppId, chatId);
+                if (!quiet) {
+                    await sessionReply(rootId, t('role.profile.applied', { profile: profileId, bytes, max: MAX_ROLE_PROFILE_ENTRY_BYTES }, loc));
+                }
+                return;
+            }
+            writeRoleFile(larkAppId, chatId, content);
+            if (!quiet) {
+                await sessionReply(rootId, t('role.profile.applied', { profile: profileId, bytes, max: MAX_ROLE_PROFILE_ENTRY_BYTES }, loc));
+            }
+            return;
+        }
+        await sessionReply(rootId, t('role.profile.help', undefined, loc));
+        return;
+    }
     // /role team [...] — manage the team-level (per-bot, cross-chat) role
     const teamMatch = trimmed.match(/^team\b([\s\S]*)$/);
     if (teamMatch) {
@@ -886,6 +1021,38 @@ export async function handleTermLinkCommand(rootId, larkAppId, chatId, senderOpe
     }
     // channel === 'ephemeral': the visible-to-you card IS the response; no extra msg.
 }
+/** Format a SafeInsightReport into a compact owner-facing summary for the
+ *  `/insight` command. Spans are never rendered here — the dashboard Insight tab
+ *  owns span detail; the chat card stays a one-glance summary (aggregate + the
+ *  severity-sorted rule suggestions, top first). */
+function formatInsightCard(report, loc) {
+    if (report.status === 'unsupported_cli')
+        return t('cmd.insight.unsupported', undefined, loc);
+    if (report.status === 'transcript_missing')
+        return t('cmd.insight.no_transcript', undefined, loc);
+    if (report.status !== 'ok')
+        return t('cmd.insight.parse_error', undefined, loc);
+    const a = report.agg;
+    if (a.totalSpans === 0)
+        return t('cmd.insight.no_spans', undefined, loc);
+    const icon = (s) => (s === 'bad' ? '🔴' : s === 'warn' ? '🟡' : 'ℹ️');
+    const header = t('cmd.insight.header', undefined, loc);
+    const lines = [report.meta.asOf ? `${header} · ${report.meta.asOf}` : header];
+    lines.push(t('cmd.insight.metrics_line', {
+        total: String(a.totalSpans),
+        failed: String(a.failedSpans),
+        slow: String(a.slowSpans),
+        rw: a.readWriteRatio === null ? '—' : String(a.readWriteRatio),
+        compactions: String(a.compactions),
+    }, loc));
+    lines.push('', `${t('cmd.insight.suggestions_label', undefined, loc)}:`);
+    for (const s of report.suggestions) {
+        lines.push(`${icon(s.severity)} ${s.title} — ${s.action}`);
+        if (s.evidence.length)
+            lines.push(`   · ${s.evidence.join('；')}`);
+    }
+    return lines.join('\n');
+}
 export async function handleCommand(cmd, rootId, message, deps, larkAppId) {
     const { activeSessions, getActiveCount, lastRepoScan } = deps;
     // Command replies carry the triggering messageId as the turnId so a shared
@@ -919,6 +1086,28 @@ export async function handleCommand(cmd, rootId, message, deps, larkAppId) {
                 }
                 break;
             }
+            case '/insight': {
+                if (!ds) {
+                    await sessionReply(rootId, t('cmd.no_active_session', undefined, loc));
+                    break;
+                }
+                // owner-only：与 /card /term 同一 operator 门（开放模式下 owner 通过；
+                // 仅对话授权的 grantee 不算 operator）。无权限直接不回内容。
+                if (!canOperate(larkAppId, ds.chatId, message.senderId)) {
+                    await sessionReply(rootId, t('cmd.insight.operator_only', undefined, loc));
+                    break;
+                }
+                // 卡片只取 summary（聚合 + 规则建议）；span 明细留给 dashboard Insight tab。
+                // buildSafeInsightReport 同步、只读、自带 fail-closed 脱敏，raw 永不进结构。
+                const report = buildSafeInsightReport({
+                    cliId: ds.session.cliId ?? 'unknown',
+                    sessionId: ds.session.sessionId,
+                    cliSessionId: ds.session.cliSessionId,
+                    cwd: ds.session.workingDir,
+                }, { detail: 'summary' });
+                await sessionReply(rootId, formatInsightCard(report, loc));
+                break;
+            }
             case '/land': {
                 // 把沙盒会话副本里 agent 的改动落回真实仓库。owner 审阅 diff 卡后点「应用到磁盘」。
                 // agent 在沙盒里无感（以为改的就是真文件），所以只能由 owner 在此手动触发。
@@ -1062,8 +1251,9 @@ export async function handleCommand(cmd, rootId, message, deps, larkAppId) {
                         // dropped: wrap them now (full prompt-building context lives here)
                         // and stash for delivery right after the raw input on prompt_ready.
                         if (hasBufferedInput) {
-                            const { buildNewTopicPrompt, getAvailableBots } = await import('./session-manager.js');
-                            const followUpPrompt = buildNewTopicPrompt(pendingPrompt, ds.session.sessionId, botCfg.cliId, botCfg.cliPathOverride, ds.pendingAttachments, ds.pendingMentions, await getAvailableBots(ds.larkAppId, ds.chatId), ds.pendingFollowUps, { name: selfBot.botName, openId: selfBot.botOpenId }, loc, ds.pendingSender, { larkAppId, chatId: ds.chatId });
+                            const { buildNewTopicPrompt, ensureSessionWhiteboard, getAvailableBots } = await import('./session-manager.js');
+                            ensureSessionWhiteboard(ds);
+                            const followUpPrompt = buildNewTopicPrompt(pendingPrompt, ds.session.sessionId, botCfg.cliId, botCfg.cliPathOverride, ds.pendingAttachments, ds.pendingMentions, await getAvailableBots(ds.larkAppId, ds.chatId), ds.pendingFollowUps, { name: selfBot.botName, openId: selfBot.botOpenId }, loc, ds.pendingSender, { larkAppId, chatId: ds.chatId, whiteboardId: ds.session.whiteboardId });
                             ds.pendingFollowUpInput = {
                                 userPrompt: pendingPrompt || (ds.pendingFollowUps?.join('\n\n') ?? ''),
                                 cliInput: followUpPrompt,
@@ -1073,8 +1263,9 @@ export async function handleCommand(cmd, rootId, message, deps, larkAppId) {
                         forkWorker(ds, '', false);
                     }
                     else if (hasBufferedInput) {
-                        const { buildNewTopicPrompt, getAvailableBots } = await import('./session-manager.js');
-                        const prompt = buildNewTopicPrompt(pendingPrompt, ds.session.sessionId, botCfg.cliId, botCfg.cliPathOverride, ds.pendingAttachments, ds.pendingMentions, await getAvailableBots(ds.larkAppId, ds.chatId), ds.pendingFollowUps, { name: selfBot.botName, openId: selfBot.botOpenId }, loc, ds.pendingSender, { larkAppId, chatId: ds.chatId });
+                        const { buildNewTopicPrompt, ensureSessionWhiteboard, getAvailableBots } = await import('./session-manager.js');
+                        ensureSessionWhiteboard(ds);
+                        const prompt = buildNewTopicPrompt(pendingPrompt, ds.session.sessionId, botCfg.cliId, botCfg.cliPathOverride, ds.pendingAttachments, ds.pendingMentions, await getAvailableBots(ds.larkAppId, ds.chatId), ds.pendingFollowUps, { name: selfBot.botName, openId: selfBot.botOpenId }, loc, ds.pendingSender, { larkAppId, chatId: ds.chatId, whiteboardId: ds.session.whiteboardId });
                         // Last-line defence: prompt prep awaited above — if anything
                         // replaced OR closed the session in that window (`/close` deletes
                         // the active-map entry without touching sessionId), forking now
@@ -1811,6 +2002,16 @@ export async function handleCommand(cmd, rootId, message, deps, larkAppId) {
                     if (m.name)
                         rawArgs = rawArgs.split(`@${m.name}`).join(' ');
                 }
+                let roleProfileId;
+                const roleProfileArg = rawArgs.match(/(?:^|\s)--role-profile(?:=|\s+)(\S+)/);
+                if (roleProfileArg) {
+                    if (!isValidRoleProfileId(roleProfileArg[1])) {
+                        await sessionReply(rootId, t('role.profile.invalid', undefined, loc));
+                        break;
+                    }
+                    roleProfileId = roleProfileArg[1];
+                    rawArgs = rawArgs.replace(roleProfileArg[0], ' ');
+                }
                 const firstLine = rawArgs.split(/\r?\n/).map(s => s.trim()).find(Boolean) ?? '';
                 const MAX_NAME = 50; // Lark group names cap around 60; leave headroom for '…'
                 let groupName;
@@ -1834,6 +2035,7 @@ export async function handleCommand(cmd, rootId, message, deps, larkAppId) {
                         userOpenIds: [senderOpenId],
                         transferOwnerTo: senderOpenId,
                         notifyOwnerOpenId: senderOpenId,
+                        roleProfileId,
                     });
                     // Prefer the shareable join link (others can click to *join*); fall
                     // back to the member-only applink URL when Lark's link API failed.
@@ -1866,6 +2068,14 @@ export async function handleCommand(cmd, rootId, message, deps, larkAppId) {
                     if (result.invalidBotIds.length > 0) {
                         hints.push(t('cmd.group.warn_bots_rejected', { bots: result.invalidBotIds.map(nameOf).join('、') }, loc));
                     }
+                    if (roleProfileId) {
+                        if (result.roleProfileBootstrapError) {
+                            hints.push(t('cmd.group.role_profile_bootstrap_failed', { profile: roleProfileId, reason: result.roleProfileBootstrapError ?? 'unknown' }, loc));
+                        }
+                        else {
+                            hints.push(t('cmd.group.role_profile_bootstrap_sent', { profile: roleProfileId }, loc));
+                        }
+                    }
                     const hintsText = hints.length > 0 ? '\n' + hints.join('\n') : '';
                     await sessionReply(rootId, t('cmd.group.created', { name: groupName, link, hints: hintsText }, loc));
                     logger.info(`[${logTag}] /group created chat=${result.chatId} name="${groupName}" bots=[${larkAppIdsForGroup.join(',')}] invitee=${senderOpenId}`);