dsh-lark-bot 0.9.2 → 0.10.0

package/dist/cli.js

@@ -667,7 +667,7 @@ var init_acp_adapter = __esm({
 });
 
 // src/cli.ts
-import { readFileSync as readFileSync4, realpathSync as realpathSync4 } from "fs";
+import { readFileSync as readFileSync5, realpathSync as realpathSync4 } from "fs";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { Command } from "commander";
 
@@ -1277,6 +1277,7 @@ var SDK_SERVER_PACKAGE = "@deepseek-ai/dsh-sdk-jsonrpc-server";
 var SDK_SERVER_VERSION = DSH_COMPATIBILITY.sdkServer;
 var SDK_BASE_BUNDLE = "@deepseek-ai/dsh-base";
 var DEFAULT_SDK_PROFILE = "dsh-lark-sdk";
+var DEFAULT_SAFE_SDK_PROFILE = "dsh-lark-safe-sdk";
 function sdkProfileRoot(home, profile, env) {
   return join3(resolveDshHome(home, env), "profiles", profile);
 }
@@ -1301,9 +1302,10 @@ function packageJsonFor(profile) {
   )}
 `;
 }
-function patchYamlFor() {
+function patchYamlFor(options) {
   const own = ownPackageInfo();
-  return [
+  const bridgeTools = options?.bridgeTools ?? true;
+  const lines = [
     "# dsh-lark SDK JSON-RPC runtime overlay (managed by dsh-lark-bot).",
     "# stdout is reserved for SDK JSON-RPC frames; no console logger may load.",
     "- insert:",
@@ -1324,26 +1326,31 @@ function patchYamlFor() {
     "",
     "- id: hmr",
     "  disabled: true",
-    "",
-    // In-process bridge callback tool: lets the agent mention users and push
-    // messages to other chats/topics through the running bridge process.
-    "- insert:",
-    "    - id: lark-notify",
-    `      name: '${own.name}/notify'`,
-    "      config:",
-    "        endpoint: !!js process.env.DSH_LARK_NOTIFY_URL",
-    "        token: !!js process.env.DSH_LARK_NOTIFY_TOKEN",
-    "",
-    // Question-card tool: the agent asks the user for decisions / missing
-    // information; the bridge shows a card and returns the answer.
-    "- insert:",
-    "    - id: lark-ask",
-    `      name: '${own.name}/ask'`,
-    "      config:",
-    "        endpoint: !!js process.env.DSH_LARK_ASK_URL",
-    "        token: !!js process.env.DSH_LARK_NOTIFY_TOKEN",
     ""
-  ].join("\n");
+  ];
+  if (bridgeTools) {
+    lines.push(
+      // In-process bridge callback tool: lets the agent mention users and push
+      // messages to other chats/topics through the running bridge process.
+      "- insert:",
+      "    - id: lark-notify",
+      `      name: '${own.name}/notify'`,
+      "      config:",
+      "        endpoint: !!js process.env.DSH_LARK_NOTIFY_URL",
+      "        token: !!js process.env.DSH_LARK_NOTIFY_TOKEN",
+      "",
+      // Question-card tool: the agent asks the user for decisions / missing
+      // information; the bridge shows a card and returns the answer.
+      "- insert:",
+      "    - id: lark-ask",
+      `      name: '${own.name}/ask'`,
+      "      config:",
+      "        endpoint: !!js process.env.DSH_LARK_ASK_URL",
+      "        token: !!js process.env.DSH_LARK_NOTIFY_TOKEN",
+      ""
+    );
+  }
+  return lines.join("\n");
 }
 function sdkServerInstalled(profileRoot) {
   const candidates = [
@@ -1401,7 +1408,13 @@ async function ensureSdkProfile(options) {
     await mkdir(root, { recursive: true });
     await writeFile(join3(root, "package.json"), packageJsonFor(profile), "utf8");
     await writeFile(join3(root, "cordis.yml"), "[]\n", "utf8");
-    await writeFile(join3(root, "cordis.patch.yml"), patchYamlFor(), "utf8");
+    await writeFile(
+      join3(root, "cordis.patch.yml"),
+      patchYamlFor(
+        options.bridgeTools === void 0 ? {} : { bridgeTools: options.bridgeTools }
+      ),
+      "utf8"
+    );
     const install = options.install ?? runPnpmInstall;
     if (!isSdkProfileReady(root)) {
       await install(root);
@@ -2179,6 +2192,10 @@ var PendingQueue = class {
   hasPending(scope) {
     return (this.pending.get(scope)?.length ?? 0) > 0;
   }
+  /** Number of messages waiting in the queue for a scope (not yet flushing). */
+  size(scope) {
+    return this.pending.get(scope)?.length ?? 0;
+  }
   isBlocked(scope) {
     return this.blocked.has(scope);
   }
@@ -2442,7 +2459,9 @@ var initialState = {
   footer: "thinking",
   terminal: "running",
   errorMsg: void 0,
-  idleTimeoutMinutes: void 0
+  idleTimeoutMinutes: void 0,
+  startedAtMs: void 0,
+  lastActivityMs: void 0
 };
 function closeStreamingText(blocks) {
   return blocks.map(
@@ -2588,8 +2607,16 @@ function markdown(content) {
 function noteMd(content) {
   return { tag: "markdown", content, text_size: "notation" };
 }
-function footerStatus(status) {
-  const text = status === "thinking" ? "\u{1F9E0} \u6B63\u5728\u601D\u8003" : status === "tool_running" ? "\u{1F9F0} \u6B63\u5728\u8C03\u7528\u5DE5\u5177" : "\u270D\uFE0F \u6B63\u5728\u8F93\u51FA";
+function footerStatus(status, state, now) {
+  let text = status === "thinking" ? "\u{1F9E0} \u6B63\u5728\u601D\u8003" : status === "tool_running" ? "\u{1F9F0} \u6B63\u5728\u8C03\u7528\u5DE5\u5177" : "\u270D\uFE0F \u6B63\u5728\u8F93\u51FA";
+  if (state.startedAtMs !== void 0) {
+    const elapsed = Math.max(0, Math.round((now - state.startedAtMs) / 1e3));
+    text += ` \u23F1 ${elapsed}s`;
+  }
+  if (state.lastActivityMs !== void 0) {
+    const idle = Math.max(0, Math.round((now - state.lastActivityMs) / 1e3));
+    if (idle >= 60) text += ` \xB7 \u23F8 \u65E0\u54CD\u5E94 ${idle}s`;
+  }
   return noteMd(text);
 }
 function summaryText(state) {
@@ -2623,7 +2650,7 @@ function usageLine(state) {
   if (state.usage.outputTokens !== void 0) parts.push(`out ${state.usage.outputTokens}`);
   return parts.length ? `\uFF08tokens ${parts.join(" \xB7 ")}\uFF09` : "";
 }
-function renderStandard(state) {
+function renderStandard(state, now) {
   const elements = [];
   if (state.reasoning.content) {
     elements.push(
@@ -2652,7 +2679,7 @@ function renderStandard(state) {
     if (usage) elements.push(noteMd(usage));
   }
   if (state.terminal === "running") {
-    if (state.footer) elements.push(footerStatus(state.footer));
+    if (state.footer) elements.push(footerStatus(state.footer, state, now));
     elements.push(stopButton());
   }
   return {
@@ -2664,10 +2691,10 @@ function renderStandard(state) {
     body: { elements }
   };
 }
-function renderCompact(state) {
+function renderCompact(state, now) {
   const elements = [noteMd(summaryText(state))];
   if (state.terminal === "running" && state.footer) {
-    elements.push(footerStatus(state.footer));
+    elements.push(footerStatus(state.footer, state, now));
   }
   if (state.terminal === "running") {
     elements.push(stopButton());
@@ -2681,7 +2708,7 @@ function renderCompact(state) {
     body: { elements }
   };
 }
-function renderDetailed(state) {
+function renderDetailed(state, now) {
   const elements = [];
   if (state.reasoning.content) {
     elements.push(
@@ -2720,7 +2747,7 @@ ${safeJsonPreview(tool.input)}
     if (usage) elements.push(noteMd(usage));
   }
   if (state.terminal === "running") {
-    if (state.footer) elements.push(footerStatus(state.footer));
+    if (state.footer) elements.push(footerStatus(state.footer, state, now));
     elements.push(stopButton());
   }
   return {
@@ -2740,10 +2767,10 @@ function safeJsonPreview(value) {
     return String(value).slice(0, 300);
   }
 }
-function renderCard(state, density = "standard") {
-  if (density === "compact") return renderCompact(state);
-  if (density === "detailed") return renderDetailed(state);
-  return renderStandard(state);
+function renderCard(state, density = "standard", now = Date.now()) {
+  if (density === "compact") return renderCompact(state, now);
+  if (density === "detailed") return renderDetailed(state, now);
+  return renderStandard(state, now);
 }
 
 // src/card/approval-card.ts
@@ -2895,7 +2922,12 @@ async function runAgentBatch(input) {
     } : {}
   });
   input.activeRuns.set(input.scope, { runId, stop: run.stop });
-  let state = initialState;
+  const now = Date.now();
+  let state = {
+    ...initialState,
+    startedAtMs: now,
+    lastActivityMs: now
+  };
   const stopRequested = { value: false };
   const timeoutMs = input.runPolicies?.get(input.scope) ?? input.runTimeoutMs ?? 0;
   let timedOut = false;
@@ -2906,10 +2938,16 @@ async function runAgentBatch(input) {
       input.chatId,
       renderCard(state, density),
       async (controller) => {
+        const ticker = setInterval(() => {
+          void controller.update(renderCard(state, density, Date.now())).catch(() => {
+          });
+        }, 5e3);
+        ticker.unref?.();
         const consume = async () => {
           for await (const event of run.events) {
             if (timedOut) return;
             state = applyEvent(state, event, stopRequested);
+            state = { ...state, lastActivityMs: Date.now() };
             if (event.type === "final_text") {
               assistantOutput = event.content;
             } else if (event.type === "text") {
@@ -2950,8 +2988,9 @@ async function runAgentBatch(input) {
             await consume();
           }
           state = timedOut ? markIdleTimeout(state, timeoutMs / 6e4) : finalizeIfRunning(state);
-          await controller.update(renderCard(state, density));
+          await controller.update(renderCard(state, density, Date.now()));
         } finally {
+          clearInterval(ticker);
           if (timeoutTimer !== void 0) clearTimeout(timeoutTimer);
           unsubscribeSettled?.();
         }
@@ -4578,7 +4617,18 @@ async function startChannel(deps) {
         log.fail("channel-command", error, { scope });
         return false;
       });
-      if (!handled) deps.pending.push(scope, msg);
+      if (!handled) {
+        const queued = deps.pending.size(scope);
+        const busy = queued > 0 || deps.pending.isFlushing(scope) || deps.pending.isBlocked(scope);
+        if (busy) {
+          await commandChannel.sendMarkdown(
+            msg.chatId,
+            `\u23F3 \u5DF2\u6536\u5230\uFF0C\u5F53\u524D\u6392\u961F\u4E2D\uFF08\u961F\u5217 ${queued + 1} \u6761\uFF09\u3002\u4EFB\u52A1\u5F00\u59CB\u540E\u4F1A\u5728\u8FD9\u91CC\u5B9E\u65F6\u663E\u793A\u8FDB\u5EA6\u3002`,
+            { replyTo: msg.messageId }
+          );
+        }
+        deps.pending.push(scope, msg);
+      }
     },
     cardAction: async (event) => {
       const value = event.action.value && typeof event.action.value === "object" ? event.action.value : void 0;
@@ -6383,9 +6433,13 @@ import { join as join16 } from "path";
 
 // src/guardian/service.ts
 import { randomUUID as randomUUID5 } from "crypto";
+import { readFileSync as readFileSync4 } from "fs";
 import { homedir as homedir8 } from "os";
 import { join as join15 } from "path";
-import { createLarkChannel as createLarkChannel2 } from "@larksuite/channel";
+import {
+  createLarkChannel as createLarkChannel2
+} from "@larksuite/channel";
+import { parse } from "yaml";
 init_dsh_runtime();
 
 // src/guardian/control.ts
@@ -6410,6 +6464,11 @@ function parseGuardianCommand(text) {
     case "leave":
     case "restore":
       return { kind: "safemode-exit", argument };
+    case "stop":
+    case "cancel":
+    case "abort":
+    case "kill":
+      return { kind: "safemode-stop", argument };
     case "help":
     case "?":
       return { kind: "safemode-help", argument };
@@ -6422,6 +6481,7 @@ var SAFEMODE_HELP = [
   "/safemode status \u2014 \u67E5\u770B\u5B88\u62A4\u72B6\u6001",
   "/safemode plugins \u2014 \u5217\u51FA\u6545\u969C profile \u5DF2\u5B89\u88C5\u7684\u63D2\u4EF6",
   "/safemode exit \u2014 \u9000\u51FA\u5B89\u5168\u6A21\u5F0F\uFF0C\u91CD\u542F\u5B8C\u6574 profile \u5E76\u4EA4\u8FD8\u98DE\u4E66\u901A\u9053",
+  "/safemode stop \u2014 \u7EC8\u6B62\u5F53\u524D\u6B63\u5728\u8FD0\u884C\u7684\u5B89\u5168\u6A21\u5F0F\u4EFB\u52A1",
   "",
   "\u5B89\u5168\u6A21\u5F0F\u4E0B\u53D1\u9001\u666E\u901A\u6D88\u606F\u5373\u53EF\u4E0E dsh \u6838\u5FC3\u5BF9\u8BDD\uFF0C\u8FDB\u884C\u5B9A\u4F4D / \u4FEE\u590D / \u7981\u7528\u635F\u574F\u63D2\u4EF6\u7684\u81EA\u6108\u64CD\u4F5C\u3002"
 ].join("\n");
@@ -6430,6 +6490,7 @@ var SAFEMODE_HELP_EN = [
   "/safemode status \u2014 show guardian state",
   "/safemode plugins \u2014 list plugins installed into the broken profile",
   "/safemode exit \u2014 leave safe mode, relaunch the full profile and hand the channel back",
+  "/safemode stop \u2014 interrupt the currently running safe-mode task",
   "",
   "In safe mode, send normal messages to converse with the dsh core for self-healing."
 ].join("\n");
@@ -6555,11 +6616,15 @@ async function probeSafeProfile(options) {
 // src/guardian/service.ts
 var MAX_TRANSCRIPT_ENTRIES = 30;
 var SAFE_RUN_TIMEOUT_MS = 10 * 6e4;
+var SAFE_SDK_PROVISION_TIMEOUT_MS = 3 * 6e4;
+var SAFE_CARD_TICK_MS = 5e3;
 var GuardianService = class {
   options;
   state;
   channel;
-  safeAdapter;
+  safeEngine;
+  safeRuns = /* @__PURE__ */ new Map();
+  sessionIds = /* @__PURE__ */ new Map();
   transcripts = /* @__PURE__ */ new Map();
   downStreak = 0;
   lastHeartbeatFreshAt;
@@ -6577,6 +6642,9 @@ var GuardianService = class {
       engineDeadMs: options.engineDeadMs ?? 12e4,
       takeoverGracePolls: options.takeoverGracePolls ?? 2,
       sendDelayMs: options.sendDelayMs ?? 600,
+      safeAdapterMode: options.safeAdapterMode ?? "auto",
+      safeTimeoutMs: options.safeTimeoutMs ?? SAFE_RUN_TIMEOUT_MS,
+      safeDensity: options.safeDensity ?? "detailed",
       stateFile: options.stateFile,
       configFile: options.configFile,
       heartbeatFile: options.heartbeatFile,
@@ -6591,6 +6659,7 @@ var GuardianService = class {
         findProcess: options.findProcess,
         spawnDetachedFn: options.spawnDetachedFn,
         probeSafeProfileFn: options.probeSafeProfileFn,
+        ensureSdkProfile: options.ensureSdkProfile,
         runPluginList: options.runPluginList,
         dshBin: options.dshBin,
         saveState: options.saveState,
@@ -6633,9 +6702,11 @@ var GuardianService = class {
     this.stopped = true;
     if (this.timer) clearInterval(this.timer);
     this.timer = void 0;
+    await this.stopAllSafeRuns();
+    this.sessionIds.clear();
     await Promise.allSettled([...this.activeMessages]);
     await this.disconnectChannel();
-    await this.safeAdapter?.dispose?.();
+    await this.disposeSafeEngine();
     this.log().info("guardian", "stopped", {});
   }
   snapshot() {
@@ -6648,6 +6719,8 @@ var GuardianService = class {
       dshUp: this.dshUp,
       heartbeatAgeMs: this.lastHeartbeatAgeMs,
       channelConnected: this.channel !== void 0,
+      safeEngine: this.safeEngine?.kind,
+      safeRuns: this.safeRuns.size,
       pid: process.pid,
       dshBin: this.dshBin,
       relaunchedPid: this.state.relaunchedPid,
@@ -6702,8 +6775,11 @@ var GuardianService = class {
         this.downStreak = 0;
         await this.setSeenUp();
         if (this.state.mode !== "standby" || this.channel !== void 0) {
+          await this.stopAllSafeRuns();
+          this.sessionIds.clear();
           await this.disconnectChannel();
           this.transcripts.clear();
+          await this.disposeSafeEngine();
           await this.setMode("standby");
         }
         return;
@@ -6754,6 +6830,7 @@ var GuardianService = class {
     });
     channel.on({
       message: (msg) => this.track(this.handleMessage(msg)),
+      cardAction: (event) => this.track(this.handleCardAction(event)),
       error: (error) => {
         this.log().fail("guardian-channel", error);
       },
@@ -6870,13 +6947,16 @@ var GuardianService = class {
       case "safemode-exit":
         await this.exitSafeMode(msg);
         return;
+      case "safemode-stop":
+        await this.handleStop(msg);
+        return;
       case "safemode-help":
         await this.sendMarkdown(msg.chatId, safemodeHelpText(), msg.messageId);
         return;
     }
   }
   async enterSafeMode(msg) {
-    if (this.state.mode === "safe") {
+    if (this.state.mode === "safe" && this.safeEngine) {
       await this.sendMarkdown(
         msg.chatId,
         "\u5DF2\u5728\u5B89\u5168\u6A21\u5F0F\u4E2D\u3002\u53D1\u9001\u666E\u901A\u6D88\u606F\u4E0E dsh \u6838\u5FC3\u5BF9\u8BDD\uFF1B`/safemode exit` \u9000\u51FA\u3002",
@@ -6924,16 +7004,26 @@ var GuardianService = class {
         );
         return;
       }
-      this.safeAdapter ??= this.options.adapter ?? new DshAdapter({
-        command: "node",
-        args: [bin, "--profile", this.state.safeProfile],
-        stopGraceMs: 5e3
-      });
+      const engine = await this.resolveSafeEngine();
+      if (!engine) {
+        await this.sendMarkdown(
+          msg.chatId,
+          [
+            "\u5B89\u5168\u6A21\u5F0F\u5F15\u64CE\u4E0D\u53EF\u7528\uFF1ASDK runtime \u672A\u5C31\u7EEA\u4E14 headless \u4E5F\u65E0\u6CD5\u542F\u52A8\u3002",
+            "\u8BF7\u68C0\u67E5\u672C\u673A dsh \u5B89\u88C5\u4E0E pnpm \u53EF\u7528\u6027\u540E\u91CD\u8BD5\u3002"
+          ].join("\n"),
+          msg.messageId
+        );
+        return;
+      }
+      this.safeEngine = engine;
       await this.setMode("safe");
+      const engineLabel = engine.kind === "sdk" ? "SDK \u6D41\u5F0F\u5F15\u64CE\uFF08\u5B9E\u65F6\u601D\u8003 / \u5DE5\u5177\u8C03\u7528 / \u6587\u5B57\u8F93\u51FA\uFF09" : engine.kind === "headless" ? "headless \u56DE\u9000\u5F15\u64CE\uFF08\u5B8C\u6210\u540E\u4E00\u6B21\u6027\u8F93\u51FA\uFF0C\u4EFB\u52A1\u671F\u95F4\u5361\u7247\u5B9E\u65F6\u663E\u793A\u6D3B\u52A8\u72B6\u6001\uFF09" : "\u6D4B\u8BD5\u5F15\u64CE";
       await this.sendMarkdown(
         msg.chatId,
         [
-          "\u5B89\u5168\u6A21\u5F0F\u5DF2\u5C31\u7EEA\uFF1Adsh \u4E3B\u6838\u5FC3\u8FD0\u884C\u4E2D\uFF0C\u7B2C\u4E09\u65B9\u63D2\u4EF6\u672A\u52A0\u8F7D\u3002",
+          `\u5B89\u5168\u6A21\u5F0F\u5DF2\u5C31\u7EEA\uFF1Adsh \u4E3B\u6838\u5FC3\u8FD0\u884C\u4E2D\uFF0C\u7B2C\u4E09\u65B9\u63D2\u4EF6\u672A\u52A0\u8F7D\u3002`,
+          `\u5F15\u64CE\uFF1A${engineLabel}`,
           "",
           "\u73B0\u5728\u53EF\u4EE5\u76F4\u63A5\u5BF9\u8BDD\u8FDB\u884C\u81EA\u6108\uFF08\u5B9A\u4F4D / \u4FEE\u590D / \u7981\u7528\u635F\u574F\u63D2\u4EF6\uFF09\uFF0C\u4F8B\u5982\uFF1A",
           "- \u201C\u5217\u51FA\u5F53\u524D profile \u5B89\u88C5\u7684\u63D2\u4EF6\u5E76\u68C0\u67E5\u54EA\u4E2A\u6700\u8FD1\u53D8\u574F\u201D",
@@ -6961,6 +7051,8 @@ var GuardianService = class {
         `dsh \u662F\u5426\u5728\u7EBF\uFF1A${snapshot.dshUp ? "\u662F" : "\u5426"}`,
         `\u5FC3\u8DF3\u9F84\uFF1A${snapshot.heartbeatAgeMs === void 0 ? "\u65E0" : `${snapshot.heartbeatAgeMs}ms`}`,
         `\u98DE\u4E66\u901A\u9053\uFF1A${snapshot.channelConnected ? "\u5B88\u62A4\u5DF2\u63A5\u7BA1" : "\u672A\u8FDE\u63A5"}`,
+        `\u5B89\u5168\u5F15\u64CE\uFF1A${snapshot.safeEngine ?? "\u672A\u5C31\u7EEA"}`,
+        `\u5B89\u5168\u6A21\u5F0F\u8FD0\u884C\u4E2D\u4EFB\u52A1\uFF1A${snapshot.safeRuns}`,
         `dsh bin\uFF1A${snapshot.dshBin ?? "\u672A\u53D1\u73B0"}`,
         `\u5B88\u62A4 pid\uFF1A${snapshot.pid}`,
         `\u5DF2\u89C2\u5BDF\u8FC7 dsh \u8FD0\u884C\uFF1A${snapshot.profileSeenUp ? "\u662F" : "\u5426"}`
@@ -7024,12 +7116,15 @@ var GuardianService = class {
       msg.messageId
     );
     await delay(this.options.sendDelayMs);
+    await this.stopAllSafeRuns();
+    this.sessionIds.clear();
     this.transcripts.clear();
+    await this.disposeSafeEngine();
     await this.disconnectChannel();
   }
   async runSafeTask(scope, msg) {
-    const adapter = this.safeAdapter;
-    if (!adapter) {
+    const engine = this.safeEngine;
+    if (!engine) {
       await this.sendMarkdown(
         msg.chatId,
         "\u5B89\u5168\u6A21\u5F0F\u672A\u5C31\u7EEA\uFF0C\u8BF7\u5148\u53D1\u9001 `/safemode`\u3002",
@@ -7037,67 +7132,259 @@ var GuardianService = class {
       );
       return;
     }
+    const active = this.safeRuns.get(scope);
+    if (active) {
+      const elapsed = Math.round((Date.now() - active.startedAt) / 1e3);
+      await this.sendMarkdown(
+        msg.chatId,
+        `\uFF08\u5B89\u5168\u6A21\u5F0F\uFF09\u4E0A\u4E00\u6761\u4EFB\u52A1\u4ECD\u5728\u5904\u7406\u4E2D\uFF0C\u5DF2\u8FD0\u884C ${elapsed}s\u3002\u53D1\u9001 \`/safemode stop\` \u6216\u70B9\u51FB\u5361\u7247 \u23F9 \u6309\u94AE\u53EF\u7EC8\u6B62\u3002`,
+        msg.messageId
+      );
+      return;
+    }
     const transcript = this.transcripts.get(scope) ?? [];
     const prompt = buildSafePrompt(transcript, msg.content);
-    await this.sendMarkdown(
-      msg.chatId,
-      "\uFF08\u5B89\u5168\u6A21\u5F0F \xB7 dsh \u6838\u5FC3\u5904\u7406\u4E2D\u2026\uFF09",
-      msg.messageId
-    );
-    const run = adapter.run({
-      runId: randomUUID5(),
+    const runId = randomUUID5();
+    const density = this.options.safeDensity;
+    const timeoutMs = this.options.safeTimeoutMs;
+    const now = Date.now();
+    let state = {
+      ...initialState,
+      startedAtMs: now,
+      lastActivityMs: now
+    };
+    let assistantOutput = "";
+    let finalText;
+    let errorText;
+    let timedOut = false;
+    let events = 0;
+    const run = engine.adapter.run({
+      runId,
       prompt,
       cwd: this.config?.workspaces.default,
-      sessionId: void 0,
+      sessionId: this.sessionIds.get(scope),
       model: void 0,
       images: void 0,
       stopGraceMs: 5e3
     });
-    const textParts = [];
-    let finalText;
-    let errorText;
-    let terminal = false;
+    this.safeRuns.set(scope, { stop: () => run.stop(), startedAt: now });
+    this.log().info("guardian-safe", "task-start", {
+      runId,
+      scope,
+      engine: engine.kind,
+      timeoutMs
+    });
     try {
-      for await (const event of run.events) {
-        if (event.type === "text" && event.delta) textParts.push(event.delta);
-        if (event.type === "final_text") finalText = event.content;
-        if (event.type === "error") {
-          errorText = event.message;
-          terminal = true;
-        }
-        if (event.type === "done") terminal = true;
-      }
-    } catch (error) {
-      errorText = error instanceof Error ? error.message : String(error);
-      terminal = true;
-    }
-    if (!terminal) {
-      await run.waitForExit(SAFE_RUN_TIMEOUT_MS);
-    }
-    if (errorText) {
-      await this.sendMarkdown(
+      await this.streamCard(
         msg.chatId,
-        `\uFF08\u5B89\u5168\u6A21\u5F0F \xB7 dsh \u6838\u5FC3\u9519\u8BEF\uFF09
-${errorText.slice(0, 2e3)}`,
-        msg.messageId
+        renderCard(state, density, Date.now()),
+        async (controller) => {
+          const ticker = setInterval(() => {
+            void controller.update(renderCard(state, density, Date.now())).catch(() => {
+            });
+          }, SAFE_CARD_TICK_MS);
+          ticker.unref?.();
+          let timeoutTimer;
+          try {
+            const consume = async () => {
+              for await (const event of run.events) {
+                if (timedOut) return;
+                events += 1;
+                state = reduce(state, event);
+                state = { ...state, lastActivityMs: Date.now() };
+                if (event.type === "final_text") {
+                  finalText = event.content;
+                } else if (event.type === "text") {
+                  assistantOutput += event.delta;
+                }
+                if (event.type === "system" && event.sessionId) {
+                  this.sessionIds.set(scope, event.sessionId);
+                }
+                if (event.type === "error") errorText = event.message;
+                await controller.update(renderCard(state, density, Date.now()));
+              }
+            };
+            const timeoutPromise = timeoutMs > 0 ? new Promise((resolve5) => {
+              timeoutTimer = setTimeout(() => {
+                if (timedOut) return;
+                timedOut = true;
+                state = markIdleTimeout(
+                  state,
+                  Math.round(timeoutMs / 6e4)
+                );
+                void run.stop();
+                resolve5();
+              }, timeoutMs);
+            }) : void 0;
+            if (timeoutPromise) {
+              await Promise.race([consume(), timeoutPromise]);
+            } else {
+              await consume();
+            }
+            if (!timedOut && state.terminal === "running") {
+              state = finalizeIfRunning(state);
+            }
+            await controller.update(renderCard(state, density, Date.now()));
+          } finally {
+            clearInterval(ticker);
+            if (timeoutTimer !== void 0) clearTimeout(timeoutTimer);
+          }
+        },
+        { replyTo: msg.messageId }
       );
+    } catch (error) {
+      this.log().fail("guardian-safe", error, { runId, scope });
+      state = markInterrupted(state);
+      try {
+        await this.sendMarkdown(
+          msg.chatId,
+          `\u26A0\uFE0F \u5B89\u5168\u6A21\u5F0F\u4EFB\u52A1\u5931\u8D25\uFF1A${error instanceof Error ? error.message : String(error)}`,
+          msg.messageId
+        );
+      } catch {
+      }
       return;
+    } finally {
+      this.safeRuns.delete(scope);
     }
-    const answer = finalText ?? textParts.join("").trim();
+    const durationMs = Date.now() - now;
+    const terminal = state.terminal;
+    this.log().info("guardian-safe", "task-end", {
+      runId,
+      scope,
+      engine: engine.kind,
+      terminal,
+      events,
+      durationMs,
+      ...errorText === void 0 ? {} : { errorText },
+      outputLength: (finalText ?? assistantOutput).trim().length
+    });
+    if (timedOut || terminal === "interrupted" || terminal === "error" || terminal === "idle_timeout") {
+      return;
+    }
+    const answer = finalText ?? assistantOutput.trim();
     if (!answer) {
-      await this.sendMarkdown(
-        msg.chatId,
-        "\uFF08\u5B89\u5168\u6A21\u5F0F \xB7 dsh \u6838\u5FC3\u672A\u8FD4\u56DE\u5185\u5BB9\uFF09",
-        msg.messageId
-      );
+      this.log().warn("guardian-safe", "task-empty", { runId, scope });
       return;
     }
-    await this.sendMarkdown(msg.chatId, answer, msg.messageId);
     this.transcripts.set(scope, pushTranscript(transcript, [
       { role: "user", content: msg.content },
       { role: "assistant", content: answer }
     ]));
   }
+  async streamCard(chatId, initial, producer, options) {
+    if (!this.channel) return;
+    await this.channel.stream(chatId, { card: { initial, producer } }, options);
+  }
+  async handleCardAction(event) {
+    const value = isRecord4(event.action.value) ? event.action.value : void 0;
+    if (value?.cmd !== "stop") return;
+    const scope = safeScopeForAction(event);
+    const run = this.safeRuns.get(scope);
+    if (!run) return;
+    this.log().info("guardian-safe", "stop-requested", { scope });
+    await run.stop();
+  }
+  async handleStop(msg) {
+    const scope = this.scopeFor(msg);
+    const run = this.safeRuns.get(scope);
+    if (!run) {
+      await this.sendMarkdown(
+        msg.chatId,
+        "\u5F53\u524D\u6CA1\u6709\u6B63\u5728\u8FD0\u884C\u7684\u5B89\u5168\u6A21\u5F0F\u4EFB\u52A1\u3002",
+        msg.messageId
+      );
+      return;
+    }
+    await this.sendMarkdown(
+      msg.chatId,
+      "\u5DF2\u8BF7\u6C42\u7EC8\u6B62\u5F53\u524D\u4EFB\u52A1\uFF0C\u6B63\u5728\u505C\u6B62 dsh \u8FDB\u7A0B\u2026",
+      msg.messageId
+    );
+    await run.stop();
+  }
+  async resolveSafeEngine() {
+    if (this.options.adapter) {
+      return { adapter: this.options.adapter, kind: "test" };
+    }
+    const mode = this.options.safeAdapterMode;
+    if (mode === "sdk" || mode === "auto") {
+      const launch = await this.provisionSafeSdk();
+      if (launch) {
+        this.log().info("guardian-safe", "engine-selected", { engine: "sdk" });
+        return {
+          adapter: new SdkDshAdapter({
+            launch,
+            provider: this.options.env?.DSH_LARK_PROVIDER ?? "deepseek-official",
+            model: this.safeModel()
+          }),
+          kind: "sdk"
+        };
+      }
+      if (mode === "sdk") return void 0;
+    }
+    if (!this.dshBin) return void 0;
+    this.log().info("guardian-safe", "engine-selected", { engine: "headless" });
+    return {
+      adapter: new DshAdapter({
+        command: "node",
+        args: [this.dshBin, "--profile", this.state.safeProfile],
+        stopGraceMs: 5e3
+      }),
+      kind: "headless"
+    };
+  }
+  async provisionSafeSdk() {
+    if (!this.dshBin) return void 0;
+    const ensure = this.options.ensureSdkProfile ?? ensureSdkProfile;
+    const result = await withTimeout2(
+      ensure({
+        home: this.options.home,
+        env: this.options.env ?? process.env,
+        profile: DEFAULT_SAFE_SDK_PROFILE,
+        bridgeTools: false
+      }),
+      SAFE_SDK_PROVISION_TIMEOUT_MS
+    );
+    if (!result) {
+      this.log().warn("guardian-safe", "sdk-provision-timeout", {
+        profile: DEFAULT_SAFE_SDK_PROFILE
+      });
+      return void 0;
+    }
+    if (!result.ok) {
+      this.log().warn("guardian-safe", "sdk-provision-failed", {
+        profile: DEFAULT_SAFE_SDK_PROFILE,
+        error: result.error
+      });
+      return void 0;
+    }
+    return resolveSdkLaunch({
+      home: this.options.home,
+      env: this.options.env ?? process.env,
+      profile: DEFAULT_SAFE_SDK_PROFILE
+    });
+  }
+  safeModel() {
+    const explicit = this.options.env?.DSH_LARK_MODEL;
+    if (explicit) return explicit;
+    return readDshDefaultModel(this.options.home, this.options.env ?? process.env) ?? "deepseek-v4-flash";
+  }
+  async stopAllSafeRuns() {
+    const runs = [...this.safeRuns.values()];
+    this.safeRuns.clear();
+    await Promise.allSettled(runs.map((run) => run.stop()));
+  }
+  async disposeSafeEngine() {
+    const engine = this.safeEngine;
+    this.safeEngine = void 0;
+    if (!engine) return;
+    try {
+      await engine.adapter.dispose?.();
+    } catch (error) {
+      this.log().fail("guardian-safe", error);
+    }
+  }
 };
 function buildSafePrompt(transcript, current) {
   if (transcript.length === 0) return current;
@@ -7119,12 +7406,58 @@ async function defaultRunPluginList(bin, dshProfile) {
 function delay(ms) {
   return new Promise((resolve5) => setTimeout(resolve5, ms));
 }
+function withTimeout2(promise, ms) {
+  return new Promise((resolve5) => {
+    const timer = setTimeout(() => resolve5(void 0), ms);
+    timer.unref?.();
+    promise.then(
+      (value) => {
+        clearTimeout(timer);
+        resolve5(value);
+      },
+      () => {
+        clearTimeout(timer);
+        resolve5(void 0);
+      }
+    );
+  });
+}
+function isRecord4(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function safeScopeForAction(event) {
+  const raw = isRecord4(event.raw) ? event.raw : void 0;
+  const message = isRecord4(raw?.message) ? raw.message : void 0;
+  const threadId = typeof message?.thread_id === "string" ? message.thread_id : void 0;
+  return threadId ? `${event.chatId}:${threadId}` : event.chatId;
+}
+function readDshDefaultModel(home, env) {
+  try {
+    const file = join15(resolveDshHome(home, env), "settings.yaml");
+    const doc = parse(readFileSync4(file, "utf8"));
+    const value = doc?.["agent-default-model"];
+    return typeof value === "string" && value ? value : void 0;
+  } catch {
+    return void 0;
+  }
+}
 function parseFreshness2(value) {
   const raw = value?.trim();
   if (!raw) return 6e5;
   const parsed = Number(raw);
   return Number.isInteger(parsed) && parsed >= 0 ? parsed : 6e5;
 }
+function parseSafeAdapterMode(value) {
+  const normalized = value?.trim().toLowerCase();
+  if (normalized === "sdk" || normalized === "headless") return normalized;
+  return "auto";
+}
+function parsePositiveInt2(value, fallback) {
+  const raw = value?.trim();
+  if (!raw) return fallback;
+  const parsed = Number(raw);
+  return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback;
+}
 function defined(input) {
   const output = {};
   for (const [key, value] of Object.entries(input)) {
@@ -7161,6 +7494,12 @@ async function buildGuardianService(env, overrides = {}) {
     pollMs: env.guardianPollMs,
     staleMs: env.guardianStaleMs,
     engineDeadMs: env.guardianEngineDeadMs,
+    safeAdapterMode: parseSafeAdapterMode(process.env.DSH_LARK_GUARDIAN_SAFE_ADAPTER),
+    safeTimeoutMs: parsePositiveInt2(
+      process.env.DSH_LARK_GUARDIAN_SAFE_TIMEOUT_MS,
+      SAFE_RUN_TIMEOUT_MS
+    ),
+    safeDensity: parseCardDensity(process.env.DSH_LARK_GUARDIAN_CARD_DENSITY) ?? "detailed",
     ...overrides
   });
 }
@@ -7252,7 +7591,7 @@ function waitForShutdown2() {
 
 // src/cli.ts
 function packageVersion() {
-  const raw = readFileSync4(new URL("../package.json", import.meta.url), "utf8");
+  const raw = readFileSync5(new URL("../package.json", import.meta.url), "utf8");
   const pkg = JSON.parse(raw);
   return typeof pkg.version === "string" ? pkg.version : "0.0.0";
 }