botmux 3.13.0 → 3.14.0

package/dist/core/command-handler.d.ts

@@ -1,10 +1,11 @@
 import type { CliId, ResumableSession } from '../adapters/cli/types.js';
+import { type WorkerSessionReplyOptions } from './worker-pool.js';
 import { validateWorkingDir } from './working-dir.js';
 import { type AdoptableSession } from './session-discovery.js';
 import { type ZellijAdoptableSession } from './zellij-adopt-discovery.js';
 import { type CodexAppThreadSummary } from '../services/codex-app-threads.js';
 import { type DocSubscription } from '../services/doc-subs-store.js';
-import type { LarkMessage } from '../types.js';
+import type { LarkMessage, FrozenSessionReplyTarget } from '../types.js';
 import type { DaemonSession } from './types.js';
 import { DAEMON_COMMANDS, PASSTHROUGH_COMMANDS } from './passthrough-commands.js';
 export { DAEMON_COMMANDS, PASSTHROUGH_COMMANDS };
@@ -32,17 +33,21 @@ export declare function formatSlashGroupName(name: string, prefix?: string): str
  * of fix as the `/card` / `/term` special cases in daemon.ts.)
  */
 export declare const EXISTING_SESSION_ONLY_DAEMON_COMMANDS: Set<string>;
-export declare function resolveAdapterDefaultPassthroughCommands(larkAppId?: string): string[];
 /**
- * Effective passthrough set for a bot: the fixed {@link PASSTHROUGH_COMMANDS}
- * plus adapter-scoped defaults and the bot's `customPassthroughCommands`
- * (bots.json). Entries that would shadow a botmux daemon command are dropped —
- * daemon commands must keep their daemon semantics, and passthrough is checked
- * BEFORE DAEMON_COMMANDS in the router, so an un-filtered custom `/status`
- * would hijack the daemon's own.
- * Unknown / no bot → falls back to the builtin set unchanged.
+ * Adapter-scoped default passthrough commands (e.g. Codex's `/goal`).
+ *
+ * `cliIdOverride` lets a caller resolve against a session's FROZEN CLI instead
+ * of the bot's current config — an existing session keeps the runtime it was
+ * created with, so changing `/botconfig cli` must not silently strip an old
+ * interactive Codex session's adapter-scoped `/goal` (nor grant one to a Codex
+ * App session). `defaultPassthroughCommands` is a static per-adapter list and
+ * does not depend on the resolved binary, so when the override diverges from
+ * the bot's current CLI we intentionally drop `cliPathOverride` (it belongs to
+ * the other CLI) and let the adapter resolve with no path hint.
  */
-export declare function resolvePassthroughCommands(larkAppId?: string): Set<string>;
+export declare function resolveAdapterDefaultPassthroughCommands(larkAppId?: string, cliIdOverride?: string): string[];
+export declare function cliHasNoRawPassthroughSurface(cliId: string | undefined): boolean;
+export declare function resolvePassthroughCommands(larkAppId?: string, cliIdOverride?: string): Set<string>;
 export interface SlashCommandInvocation {
     cmd: string;
     content: string;
@@ -99,9 +104,12 @@ export declare function parseForceTopicInvocation(content: string): {
 export declare function parseSlashCommandInvocation(content: string): SlashCommandInvocation | null;
 export interface CommandHandlerDeps {
     activeSessions: Map<string, DaemonSession>;
-    sessionReply: (rootId: string, content: string, msgType?: string, larkAppId?: string, turnId?: string) => Promise<string>;
+    sessionReply: (rootId: string, content: string, msgType?: string, larkAppId?: string, turnId?: string, opts?: WorkerSessionReplyOptions) => Promise<string>;
     getActiveCount: () => number;
     lastRepoScan: Map<string, import('../services/project-scanner.js').ProjectInfo[]>;
+    /** Immutable Lark placement captured by the daemon for this slash-command
+     * invocation. Unlike session state, it remains valid after close/replace. */
+    invocationReplyTarget?: FrozenSessionReplyTarget;
     /** 会前预热文档评论会话：立即启动 CLI、读取文档并进入待命。 */
     prewarmDocCommentSession?: (ds: DaemonSession, sub: DocSubscription) => Promise<void>;
 }

package/dist/core/command-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-handler.d.ts","sourceRoot":"","sources":["../../src/core/command-handler.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAoBxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,EAAyD,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACtH,OAAO,EAA6B,KAAK,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrG,OAAO,EAAuB,KAAK,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAMnG,OAAO,EAEoB,KAAK,eAAe,EAC9C,MAAM,+BAA+B,CAAC;AAmCvC,OAAO,KAAK,EAAE,WAAW,EAAqC,MAAM,aAAa,CAAC;AAGlF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAoBhD,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAA4D,MAAM,2BAA2B,CAAC;AAC5I,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,CAAC;AAEjD;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,aAA4I,CAAC;AAIrL;;;sBAGsB;AACtB,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,MAAM,CAUtE;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,qCAAqC,aAA6C,CAAC;AAEhG,wBAAgB,wCAAwC,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAYrF;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAe1E;AAID,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAE9B;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAAE,GACjB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAyC9C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKpF;AAED;;;;mCAImC;AACnC,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI,CA0B1F;AA2ED,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC3C,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1H,cAAc,EAAE,MAAM,MAAM,CAAC;IAC7B,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,gCAAgC,EAAE,WAAW,EAAE,CAAC,CAAC;IAClF,qCAAqC;IACrC,wBAAwB,CAAC,EAAE,CAAC,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvF;AA2rBD;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,IAAI,CAAC,CA6Df;AAED;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,IAAI,CAAC,CAgCf;AA8BD,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,kBAAkB,EACxB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAynFf;AAkHD,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,qBAAqB,EAC7B,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,kBAAkB,EACxB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAkDf;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,gBAAgB,GAAG,sBAAsB,EACjD,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,kBAAkB,EACxB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAgHf;AAED;;;+EAG+E;AAC/E,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC;;;wBAGwB;AACxB,wBAAsB,+BAA+B,CACnD,KAAK,EAAE,KAAK,EACZ,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EAC1C,KAAK,SAAqB,GACzB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAuB7B;AAED;;kFAEkF;AAClF,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,gBAAgB,EACxB,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,kBAAkB,EACxB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAgDf;AAED,KAAK,kBAAkB,GACnB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACpE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAE,CAAC;AAEvD;;;6DAG6D;AAC7D,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,aAAa,EACvB,OAAO,EAAE,WAAW,EACpB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,kBAAkB,CAAC,CAkJ7B"}
+{"version":3,"file":"command-handler.d.ts","sourceRoot":"","sources":["../../src/core/command-handler.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAOxE,OAAO,EAA6Y,KAAK,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAa7c,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,EAAyD,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACtH,OAAO,EAA6B,KAAK,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrG,OAAO,EAAuB,KAAK,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAMnG,OAAO,EAEoB,KAAK,eAAe,EAC9C,MAAM,+BAA+B,CAAC;AAmCvC,OAAO,KAAK,EAAE,WAAW,EAAqC,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAG5G,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAqBhD,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAA4D,MAAM,2BAA2B,CAAC;AAC5I,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,CAAC;AAEjD;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,aAA4I,CAAC;AAIrL;;;sBAGsB;AACtB,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,MAAM,CAUtE;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,qCAAqC,aAA6C,CAAC;AAEhG;;;;;;;;;;;GAWG;AACH,wBAAgB,wCAAwC,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAc7G;AAmBD,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEhF;AAED,wBAAgB,0BAA0B,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAsClG;AAID,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAE9B;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAAE,GACjB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAyC9C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKpF;AAED;;;;mCAImC;AACnC,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI,CA0B1F;AA2ED,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC3C,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,yBAAyB,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5J,cAAc,EAAE,MAAM,MAAM,CAAC;IAC7B,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,gCAAgC,EAAE,WAAW,EAAE,CAAC,CAAC;IAClF;iFAC6E;IAC7E,qBAAqB,CAAC,EAAE,wBAAwB,CAAC;IACjD,qCAAqC;IACrC,wBAAwB,CAAC,EAAE,CAAC,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvF;AA2rBD;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,IAAI,CAAC,CA6Df;AAED;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,IAAI,CAAC,CAgCf;AA8BD,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,kBAAkB,EACxB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CA6tFf;AAkHD,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,qBAAqB,EAC7B,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,kBAAkB,EACxB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAkDf;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,gBAAgB,GAAG,sBAAsB,EACjD,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,kBAAkB,EACxB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAgHf;AAED;;;+EAG+E;AAC/E,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC;;;wBAGwB;AACxB,wBAAsB,+BAA+B,CACnD,KAAK,EAAE,KAAK,EACZ,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EAC1C,KAAK,SAAqB,GACzB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAuB7B;AAED;;kFAEkF;AAClF,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,gBAAgB,EACxB,EAAE,EAAE,aAAa,EACjB,IAAI,EAAE,kBAAkB,EACxB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAgDf;AAED,KAAK,kBAAkB,GACnB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACpE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAE,CAAC;AAEvD;;;6DAG6D;AAC7D,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,aAAa,EACvB,OAAO,EAAE,WAAW,EACpB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,kBAAkB,CAAC,CAkJ7B"}

package/dist/core/command-handler.js

@@ -33,7 +33,7 @@ import { repinSessionWorkingDir } from './session-cwd.js';
 import { validateAdoptTarget, adoptTargetKey, adoptTargetLabel } from './session-discovery.js';
 import { validateZellijAdoptTarget } from './zellij-adopt-discovery.js';
 import { listCodexAppThreads } from '../services/codex-app-threads.js';
-import { generateAuthUrl, getTokenStatus, resolveUserToken, DOC_COMMENT_OAUTH_SCOPES } from '../utils/user-token.js';
+import { generateAuthUrl, getTokenStatus, resolveUserToken, DOC_COMMENT_OAUTH_SCOPES, FEED_GROUP_OAUTH_SCOPES } from '../utils/user-token.js';
 import { DocSubscriptionPermissionError, listDocComments, resolveDocFile, subscribeDocFile, unsubscribeDocFile } from '../im/lark/doc-comment.js';
 import { parseDocWatchCommand } from './doc-watch-command.js';
 import { parseVcMeetingPrepareCommand } from './vc-meeting-prepare-command.js';
@@ -62,6 +62,7 @@ import { requestAgentSessionRename } from './session-rename.js';
 import { hasProtectedSessionMutationOwnership } from './session-mutation-guard.js';
 import { withBotTurnMutation } from './bot-turn-mutation-gate.js';
 import { configuredRuntimeDisplayName, sessionConfiguredRuntimeDisplayName, } from './cli-runtime-display.js';
+import { isSessionGroup } from '../services/session-groups-store.js';
 // ─── Exported constants ──────────────────────────────────────────────────────
 // DAEMON_COMMANDS / PASSTHROUGH_COMMANDS / normalizePassthroughCommand now live
 // in the leaf ./passthrough-commands.js so the config store can share the
@@ -106,12 +107,26 @@ export function formatSlashGroupName(name, prefix = '') {
  * of fix as the `/card` / `/term` special cases in daemon.ts.)
  */
 export const EXISTING_SESSION_ONLY_DAEMON_COMMANDS = new Set(['/rename', '/fork', '/forklist']);
-export function resolveAdapterDefaultPassthroughCommands(larkAppId) {
+/**
+ * Adapter-scoped default passthrough commands (e.g. Codex's `/goal`).
+ *
+ * `cliIdOverride` lets a caller resolve against a session's FROZEN CLI instead
+ * of the bot's current config — an existing session keeps the runtime it was
+ * created with, so changing `/botconfig cli` must not silently strip an old
+ * interactive Codex session's adapter-scoped `/goal` (nor grant one to a Codex
+ * App session). `defaultPassthroughCommands` is a static per-adapter list and
+ * does not depend on the resolved binary, so when the override diverges from
+ * the bot's current CLI we intentionally drop `cliPathOverride` (it belongs to
+ * the other CLI) and let the adapter resolve with no path hint.
+ */
+export function resolveAdapterDefaultPassthroughCommands(larkAppId, cliIdOverride) {
     if (!larkAppId)
         return [];
     try {
         const bot = getBot(larkAppId);
-        const adapter = createCliAdapterSync(bot.config.cliId, bot.config.cliPathOverride);
+        const cliId = (cliIdOverride ?? bot.config.cliId);
+        const cliPathOverride = cliId === bot.config.cliId ? bot.config.cliPathOverride : undefined;
+        const adapter = createCliAdapterSync(cliId, cliPathOverride);
         const normalized = (adapter.defaultPassthroughCommands ?? [])
             .map(normalizePassthroughCommand)
             .filter((c) => !!c);
@@ -128,13 +143,48 @@ export function resolveAdapterDefaultPassthroughCommands(larkAppId) {
  * daemon commands must keep their daemon semantics, and passthrough is checked
  * BEFORE DAEMON_COMMANDS in the router, so an un-filtered custom `/status`
  * would hijack the daemon's own.
- * Unknown / no bot → falls back to the builtin set unchanged.
+ * Codex App deliberately resolves to an empty set because its runner speaks
+ * App Server rather than an interactive TUI; slash-looking text must use the
+ * structured turn lane. Unknown / no bot → falls back to the builtin set.
  */
-export function resolvePassthroughCommands(larkAppId) {
+/** Runner adapters speak a framed stdin protocol, not an interactive TUI:
+ * raw slash passthrough would bypass the turn ledger and the runner rejects
+ * non-frame input. Both the routing and the /list-slash-command display must
+ * agree on this set. */
+const NO_RAW_PASSTHROUGH_CLI_IDS = new Set(['codex-app', 'mira', 'mir', 'dsh']);
+export function cliHasNoRawPassthroughSurface(cliId) {
+    return !!cliId && NO_RAW_PASSTHROUGH_CLI_IDS.has(cliId);
+}
+export function resolvePassthroughCommands(larkAppId, cliIdOverride) {
     const effective = new Set(PASSTHROUGH_COMMANDS);
     if (!larkAppId)
         return effective;
-    for (const c of resolveAdapterDefaultPassthroughCommands(larkAppId)) {
+    // Resolve the EFFECTIVE CLI once and thread it through every layer below
+    // (early return, adapter defaults). An existing session freezes its CLI, so
+    // the override must reach the adapter-scoped defaults too — otherwise a bot
+    // switched to Codex App would still read the current config there and drop a
+    // frozen interactive Codex session's `/goal` (or vice versa). undefined when
+    // the bot is unknown → builtin set only.
+    let effectiveCliId;
+    try {
+        effectiveCliId = cliIdOverride ?? getBot(larkAppId).config.cliId;
+    }
+    catch {
+        /* unknown bot — builtin set only */
+    }
+    // Codex App speaks the structured app-server protocol: its PTY only hosts
+    // botmux's runner/viewer and is not an interactive Codex TUI. Sending a
+    // slash command through raw_input therefore bypasses the App Server turn
+    // ledger; the model still completes the text as an ordinary turn, but the
+    // worker has no pending dispatch to attribute that final to and the session
+    // remains stuck. Keep these messages on the normal structured turn path.
+    // Runner adapters (codex-app/mira/mir/dsh) speak a framed stdin protocol,
+    // not an interactive TUI: a slash command through raw_input bypasses the
+    // turn ledger and the runner rejects non-frame input, wedging the session.
+    // Keep these messages on the normal structured turn path.
+    if (cliHasNoRawPassthroughSurface(effectiveCliId))
+        return new Set();
+    for (const c of resolveAdapterDefaultPassthroughCommands(larkAppId, effectiveCliId)) {
         effective.add(c);
     }
     try {
@@ -1254,10 +1304,10 @@ export async function handleCommand(cmd, rootId, message, deps, larkAppId) {
                         await sessionReply(rootId, `⚠️ 会话关闭失败，已保留 active 记录以便重试：${closed.err instanceof Error ? closed.err.message : String(closed.err)}`);
                         break;
                     }
-                    // 「会话已关闭」卡片优先「仅自己可见」：普通群里走 ephemeral 只发给执行
-                    // /close 的本人；话题群不支持 ephemeral(18053) 时回退为正常的群内可见回复
-                    // ——与流式卡片上「关闭会话」按钮的送达方式保持一致。
-                    await deliverEphemeralOrReply(closed.current, message.senderId, closed.card, 'interactive', () => sessionReply(rootId, closed.card, 'interactive'));
+                    // 「会话已关闭」卡片优先「仅自己可见」：普通群顶层走 ephemeral 只发给
+                    // 执行 /close 的本人；若本命令从折叠到 chat-scope 的真实话题触发，则
+                    // invocationReplyTarget 让 helper 跳过无 thread 锚点的 ephemeral，回原话题。
+                    await deliverEphemeralOrReply(closed.current, message.senderId, closed.card, 'interactive', () => sessionReply(rootId, closed.card, 'interactive'), deps.invocationReplyTarget);
                     logger.info(`[${logTag}] Session closed by /close command`);
                 }
                 else {
@@ -1721,7 +1771,7 @@ export async function handleCommand(cmd, rootId, message, deps, larkAppId) {
                             }
                             return false;
                         }
-                        await deliverEphemeralOrReply(switched.current, message.senderId, switched.closedCard, 'interactive', () => sessionReply(rootId, switched.closedCard, 'interactive'));
+                        await deliverEphemeralOrReply(switched.current, message.senderId, switched.closedCard, 'interactive', () => sessionReply(rootId, switched.closedCard, 'interactive'), deps.invocationReplyTarget);
                         await sessionReply(rootId, t('cmd.repo.switched_to', { name: displayName }, loc));
                         if (switched.cardToWithdraw) {
                             try {
@@ -2147,6 +2197,24 @@ export async function handleCommand(cmd, rootId, message, deps, larkAppId) {
                     await sessionReply(rootId, getTokenStatus(botCfg2.larkAppId, normalizeBrand(botCfg2.brand)));
                     break;
                 }
+                // `/login tags` — 会话群侧边栏分组（feed group）专项授权：追加
+                // im:feed_group_v1 scope（与 /subscribe-lark-doc 的专项 scope 同款模式，
+                // 不污染通用 /login）。授权完成后 feed-group 标签模式全自动挂载。
+                if (subCmd === 'tags' || subCmd === 'tag' || subCmd === '标签') {
+                    const { authUrl: tagAuthUrl } = generateAuthUrl(botCfg2.larkAppId, botCfg2.larkAppSecret, normalizeBrand(botCfg2.brand), FEED_GROUP_OAUTH_SCOPES);
+                    await sessionReply(rootId, [
+                        t('cmd.login.tags_title', undefined, loc),
+                        '',
+                        t('cmd.login.step1', undefined, loc),
+                        tagAuthUrl,
+                        '',
+                        t('cmd.login.step2', undefined, loc),
+                        t('cmd.login.step3', undefined, loc),
+                        '',
+                        t('cmd.login.tags_footer', undefined, loc),
+                    ].join('\n'));
+                    break;
+                }
                 const { authUrl } = generateAuthUrl(botCfg2.larkAppId, botCfg2.larkAppSecret, normalizeBrand(botCfg2.brand));
                 await sessionReply(rootId, [
                     t('cmd.login.title', undefined, loc),
@@ -2609,6 +2677,11 @@ export async function handleCommand(cmd, rootId, message, deps, larkAppId) {
                     await sessionReply(rootId, t('cmd.oncall.need_group', undefined, loc));
                     break;
                 }
+                // 会话群的 oncall 绑定在出生时由 bot 自动写入，禁止手改（冲突隔离）。
+                if (isSessionGroup(chatId)) {
+                    await sessionReply(rootId, t('sg.cmd_unsupported', { cmd: '/oncall' }, loc));
+                    break;
+                }
                 if (!sub || sub === 'status' || sub === '状态') {
                     const entry = getOncallStatus(appId, chatId);
                     if (!entry) {
@@ -3017,12 +3090,14 @@ export async function handleCommand(cmd, rootId, message, deps, larkAppId) {
                     const { buildRelayPickerCard } = await import('../im/lark/card-builder.js');
                     // ── Ephemeral (仅邀请者可见) picker ────────────────────────────────
                     // The picker exposes session metadata — title + source-chat name — to
-                    // everyone who can see the message. When the bot runs in privateCard
-                    // mode we hide it: send the picker as an ephemeral card visible only to
-                    // the invoker.
+                    // everyone who can see the message. There is NO benefit to showing it
+                    // publicly: the invoker is always the owner (每张菜单 owner-only，别人点
+                    // 会被拒), so a public picker only leaks his session list to the whole
+                    // group. We therefore default it to private — decoupled from the
+                    // `privateCard` config, which continues to gate ONLY /card & /close.
                     //
-                    // Gate on group + privateCard + **chat-scope**. The chat-scope clause
-                    // is load-bearing: the ephemeral API (`ephemeral/v1/send`) takes a
+                    // Gate on group + **chat-scope**. The chat-scope clause is
+                    // load-bearing: the ephemeral API (`ephemeral/v1/send`) takes a
                     // `chat_id` only — it has NO thread/root anchor — so a thread-scope
                     // target (话题群 / 话题 inside a 普通群 / new-topic·shared) can't keep the
                     // card in its 话题. A 话题群 rejects with 18053 (→ fall back below), but
@@ -3031,12 +3106,11 @@ export async function handleCommand(cmd, rootId, message, deps, larkAppId) {
                     // guards against with a REGRESSION test; PR #164 was the original live
                     // fix. Per 申晗 (2026-07-29): 话题内公开可接受 — so thread-scope pickers
                     // stay on the visible in-thread reply (public card in the 话题), and
-                    // ephemeral is scoped to flat 普通群 only, mirroring /card & /close
-                    // private cards. p2p has no ephemeral option; an unexpected reject
-                    // (18053 etc.) still falls back to the visible reply below.
+                    // ephemeral is scoped to flat 普通群 only. p2p has no ephemeral option;
+                    // an unexpected reject (18053 etc.) still falls back to the visible
+                    // reply below.
                     const privatePicker = targetChatType === 'group'
-                        && targetScope === 'chat'
-                        && getBot(myAppId).config.privateCard === true;
+                        && targetScope === 'chat';
                     const card = buildRelayPickerCard(entries, targetChatId, targetAnchor, operatorOpenId, loc, undefined, targetScope, targetChatType, privatePicker ? 'private' : 'public');
                     if (privatePicker) {
                         const { sendEphemeralCard } = await import('../im/lark/client.js');
@@ -3595,7 +3669,12 @@ export async function handleCommand(cmd, rootId, message, deps, larkAppId) {
                 // is empty by construction, so no target-anchor conflict. Source is
                 // never touched.
                 const { forkSession } = await import('./worker-pool.js');
-                const forkResult = await forkSession(ds.session.sessionId, forkChatId, forkChatId, 'group', 'chat');
+                // forkTaskText = the group name (the human-readable intent for this
+                // fork), so /forklist can label the child row instead of falling back to
+                // the raw session title.
+                const forkResult = await forkSession(ds.session.sessionId, forkChatId, forkChatId, 'group', 'chat', {
+                    forkTaskText: forkGroupName,
+                });
                 if (!forkResult.ok) {
                     // Residual-orphan cleanup: the front guards already ran before
                     // createGroupWithBots, so this only fires on a narrow TOCTOU race
@@ -3635,8 +3714,52 @@ export async function handleCommand(cmd, rootId, message, deps, larkAppId) {
                     logger.warn(`[${logTag}] /fork --create: forkSession failed (${forkResult.error}); new chat ${forkChatId} ${orphanCleaned ? 'disbanded' : 'LEFT (disband failed)'}`);
                     break;
                 }
-                await sessionReply(rootId, t('cmd.fork.created', { name: forkGroupName, link: forkInviteLink }, loc));
+                // Persist the child on the SOURCE session's lineage BEFORE any
+                // user-visible send. The sub-topic fork path also records lineage; the
+                // --create (new-group) path historically skipped it entirely, leaving
+                // forkChildSessionIds permanently empty and /forklist always reporting
+                // "no forks".
+                //
+                // Ordering is load-bearing: the "created" notice below is a reply to the
+                // parent session's root message, i.e. the SAME message whose expiry
+                // (HTTP 400) this PR's other fix addresses. If that reply threw while it
+                // still ran first, control would unwind to handleCommand's outer catch
+                // (log-only) and the lineage write would be skipped — so in the very
+                // "root expired" scenario this change targets, /forklist would stay
+                // empty. Writing lineage first makes it independent of the notify path;
+                // the notice and panel refresh are best-effort afterwards.
+                if (!ds.session.forkChildSessionIds?.includes(forkResult.childSessionId)) {
+                    ds.session.forkChildSessionIds = [
+                        ...(ds.session.forkChildSessionIds ?? []),
+                        forkResult.childSessionId,
+                    ];
+                    try {
+                        sessionStore.updateSession(ds.session);
+                    }
+                    catch (err) {
+                        logger.warn(`[${logTag}] /fork --create parent lineage update failed: `
+                            + `${err instanceof Error ? err.message : String(err)}`);
+                    }
+                }
                 logger.info(`[${logTag}] /fork --create completed: chat=${forkChatId} child=${forkResult.childSessionId.substring(0, 8)} bot=${targetBotAppId} (source ${ds.session.sessionId.substring(0, 8)} untouched)`);
+                // User-visible notice + panel refresh: best-effort, AFTER lineage is
+                // durable. A failure here (e.g. the root-message 400) must not undo the
+                // lineage write, so swallow locally instead of letting it reach the
+                // outer catch.
+                try {
+                    await sessionReply(rootId, t('cmd.fork.created', { name: forkGroupName, link: forkInviteLink }, loc));
+                }
+                catch (err) {
+                    logger.warn(`[${logTag}] /fork --create created-notice send failed: `
+                        + `${err instanceof Error ? err.message : String(err)}`);
+                }
+                try {
+                    await upsertForkPanelCard(ds, loc, { preferredReplyToMessageId: message.messageId });
+                }
+                catch (err) {
+                    logger.warn(`[${logTag}] /fork --create panel refresh failed: `
+                        + `${err instanceof Error ? err.message : String(err)}`);
+                }
                 break;
             }
             case '/forklist': {
@@ -3644,7 +3767,7 @@ export async function handleCommand(cmd, rootId, message, deps, larkAppId) {
                     await sessionReply(rootId, t('cmd.fork.no_session', undefined, loc));
                     break;
                 }
-                await upsertForkPanelCard(ds, loc, { allowEmpty: true });
+                await upsertForkPanelCard(ds, loc, { allowEmpty: true, preferredReplyToMessageId: message.messageId });
                 break;
             }
             case '/card': {
@@ -3679,28 +3802,44 @@ export async function handleCommand(cmd, rootId, message, deps, larkAppId) {
                 //   ③ 用户在 bots.json 自定义配置的额外透传命令（customPassthroughCommands）
                 //   ④ 文件系统自动发现的 CLI 自定义命令 / skill / 插件
                 // MCP 的 /mcp__<server>__<prompt> 需运行时握手才能枚举，这里仅按 .mcp.json 提示 server 名。
+                // 展示口径必须与 resolvePassthroughCommands 的实际路由一致：既有会话按其
+                // 冻结的 CLI（session.cliId）解析，不偷读当前 bot 配置——否则切换默认 CLI 后
+                // 清单会与真正生效的透传集合漂移（Codex App 会话展示伪 passthrough，或旧交互
+                // 式会话丢掉 adapter-scoped 命令）。
                 const botCfg = ds
                     ? getBot(ds.larkAppId).config
                     : (larkAppId ? getBot(larkAppId).config : getAllBots()[0]?.config);
-                const cliId = botCfg?.cliId ?? 'claude-code';
+                const effectiveCliId = (ds?.session.cliId ?? botCfg?.cliId ?? 'claude-code');
                 const cliName = ds
                     ? sessionCliDisplayName(ds)
-                    : configuredRuntimeDisplayName(botCfg?.cliRuntime) ?? getCliDisplayName(cliId);
+                    : configuredRuntimeDisplayName(botCfg?.cliRuntime) ?? getCliDisplayName(effectiveCliId);
                 const workingDir = getSessionWorkingDir(ds);
-                const builtin = [...PASSTHROUGH_COMMANDS];
-                const adapterDefaults = resolveAdapterDefaultPassthroughCommands(larkAppId);
+                // Runner adapters route everything through the structured turn lane,
+                // so they have NO passthrough surface at all — mirror
+                // resolvePassthroughCommands's early empty return here and skip
+                // filesystem discovery (their PTY is the runner, not an interactive
+                // TUI that would honor those).
+                const noPassthrough = cliHasNoRawPassthroughSurface(effectiveCliId);
+                const builtin = noPassthrough ? [] : [...PASSTHROUGH_COMMANDS];
+                const adapterDefaults = noPassthrough ? [] : resolveAdapterDefaultPassthroughCommands(larkAppId, effectiveCliId);
                 // 只展示「实际生效」的 custom 命令：用与 resolvePassthroughCommands 同一套
                 // normalize 过滤掉手写 bots.json 里遮蔽 daemon 命令 / 非法的项（parser 出于
                 // 兼容会保留它们，但路由会丢弃），避免 `/status` 之类被展示成可用却走 daemon。
-                const custom = [...new Set((botCfg?.customPassthroughCommands ?? [])
+                // Codex App 无透传面，custom 也不生效 → 与路由一致清空。
+                const custom = noPassthrough ? [] : [...new Set((botCfg?.customPassthroughCommands ?? [])
                         .map(normalizePassthroughCommand)
                         .filter((c) => !!c))];
+                // 文件发现按有效会话 CLI 解析；跨 CLI（冻结 ≠ 当前配置）时不套用当前配置的
+                // cliPathOverride（它属于另一个 CLI）。Codex App 直接跳过发现。
+                const adapterPathOverride = effectiveCliId === botCfg?.cliId ? botCfg?.cliPathOverride : undefined;
                 let cliAdapter;
-                try {
-                    cliAdapter = createCliAdapterSync(cliId, botCfg?.cliPathOverride);
-                }
-                catch (err) {
-                    logger.warn(`[${logTag}] /list-slash-command could not create adapter for ${cliId}: ${err instanceof Error ? err.message : String(err)}`);
+                if (!noPassthrough) {
+                    try {
+                        cliAdapter = createCliAdapterSync(effectiveCliId, adapterPathOverride);
+                    }
+                    catch (err) {
+                        logger.warn(`[${logTag}] /list-slash-command could not create adapter for ${effectiveCliId}: ${err instanceof Error ? err.message : String(err)}`);
+                    }
                 }
                 const discoverySupported = supportsFilesystemCommandDiscovery(cliAdapter);
                 const discovered = cliAdapter && discoverySupported
@@ -3719,7 +3858,7 @@ export async function handleCommand(cmd, rootId, message, deps, larkAppId) {
                     ? sessionCliDisplayName(ds)
                     : configuredRuntimeDisplayName(botCfg?.cliRuntime)
                         ?? getCliDisplayName(botCfg?.cliId ?? 'claude-code');
-                const passthroughCommands = [...resolvePassthroughCommands(helpAppId)];
+                const passthroughCommands = [...resolvePassthroughCommands(helpAppId, ds?.session.cliId)];
                 const help = [
                     t('help.heading_session', undefined, loc),
                     t('help.close', { cliName }, loc),
@@ -4267,9 +4406,13 @@ async function upsertForkPanelCard(parentDs, loc, opts) {
         .map(session => ({
         instruction: session.forkTaskText ?? session.title,
         status: (session.status === 'active' ? 'active' : 'closed'),
+        // Link to the child's OWN chat: a sub-topic fork shares the parent chat and
+        // carries a larkThreadId (deep-link into that topic); a --create fork lives
+        // in its own new group (different chatId, no thread) so the link must use
+        // the child's chatId, not the parent's, or it would point back here.
         link: session.larkThreadId
-            ? threadAppLink(chatId, session.larkThreadId, brand)
-            : chatAppLink(chatId, brand),
+            ? threadAppLink(session.chatId ?? chatId, session.larkThreadId, brand)
+            : chatAppLink(session.chatId ?? chatId, brand),
     }));
     if (children.length === 0 && !opts?.allowEmpty)
         return;
@@ -4283,13 +4426,64 @@ async function upsertForkPanelCard(parentDs, loc, opts) {
             // fresh panel is still more useful than keeping the command silent.
         }
     }
-    try {
-        const cardId = await replyMessage(appId, parentDs.session.rootMessageId, buildForkPanelCard(children, loc), 'interactive', true);
-        parentDs.session.forkPanelCardId = cardId;
-        sessionStore.updateSession(parentDs.session);
+    // Post the panel. Primary: reply-in-thread to the session's root message so
+    // the panel anchors to this conversation. Fallback: if that reply fails (the
+    // most common cause is the root message aging past Lark's reply window —
+    // surfaces as HTTP 400 — but also covers a withdrawn root), post the card flat
+    // to the chat instead. The panel IS the user-visible output of /forklist, so a
+    // swallowed failure looks like the command silently did nothing; the flat send
+    // keeps it visible. Only if BOTH transports fail do we give up (and warn).
+    const cardBody = buildForkPanelCard(children, loc);
+    // Reply targets are tried in order, then a flat send as the last resort:
+    //   1) the FRESH triggering command message (when /forklist or /fork passes
+    //      it) — a just-arrived message is never past Lark's reply window, and in
+    //      a 话题群 it keeps the panel inside the current topic;
+    //   2) the session root message — the historical target, but it can age past
+    //      the reply window (HTTP 400) or be withdrawn;
+    //   3) a flat chat sendMessage — always delivers, though in a 话题群 it starts
+    //      a new sibling topic rather than threading. The panel is the user-visible
+    //      output of /forklist, so a visible-but-flat panel beats silent nothing.
+    const replyTargets = [];
+    if (opts?.preferredReplyToMessageId)
+        replyTargets.push(opts.preferredReplyToMessageId);
+    if (parentDs.session.rootMessageId
+        && parentDs.session.rootMessageId !== opts?.preferredReplyToMessageId) {
+        replyTargets.push(parentDs.session.rootMessageId);
     }
-    catch (err) {
-        logger.warn(`[fork-panel] failed to post panel card: ${err instanceof Error ? err.message : err}`);
+    let cardId;
+    for (const target of replyTargets) {
+        try {
+            cardId = await replyMessage(appId, target, cardBody, 'interactive', true);
+            break;
+        }
+        catch (replyErr) {
+            logger.warn(`[fork-panel] reply to ${target} failed `
+                + `(${replyErr instanceof Error ? replyErr.message : replyErr})`);
+        }
+    }
+    if (!cardId) {
+        logger.warn('[fork-panel] all reply targets failed; falling back to a flat chat message');
+        try {
+            cardId = await sendMessage(appId, chatId, cardBody, 'interactive');
+        }
+        catch (sendErr) {
+            logger.warn(`[fork-panel] failed to post panel card via both reply and flat send: `
+                + `${sendErr instanceof Error ? sendErr.message : sendErr}`);
+        }
+    }
+    if (cardId) {
+        // Local guard: a write-store failure here must not bubble to /forklist's
+        // outer catch (which would look like the command errored even though the
+        // panel already posted). Losing only the stale-card id just means the next
+        // /forklist can't delete the previous panel — a benign duplicate at worst.
+        parentDs.session.forkPanelCardId = cardId;
+        try {
+            sessionStore.updateSession(parentDs.session);
+        }
+        catch (err) {
+            logger.warn(`[fork-panel] persist forkPanelCardId failed: `
+                + `${err instanceof Error ? err.message : String(err)}`);
+        }
     }
 }
 //# sourceMappingURL=command-handler.js.map