lark-kiro-bridge 0.3.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 lark-kiro-bridge contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.en.md

@@ -0,0 +1,293 @@
+# lark-kiro-bridge
+
+> Bridge **Kiro CLI** to Feishu / Lark — chat code, run commands, and operate Feishu itself.
+
+[![npm version](https://img.shields.io/npm/v/lark-kiro-bridge.svg?color=cb3837)](https://www.npmjs.com/package/lark-kiro-bridge)
+[![npm downloads](https://img.shields.io/npm/dm/lark-kiro-bridge.svg)](https://www.npmjs.com/package/lark-kiro-bridge)
+[![license](https://img.shields.io/npm/l/lark-kiro-bridge.svg)](./LICENSE)
+[![node](https://img.shields.io/node/v/lark-kiro-bridge.svg)](https://nodejs.org/)
+[![GitHub stars](https://img.shields.io/github/stars/walterwang0x01/lark-kiro-bridge?style=social)](https://github.com/walterwang0x01/lark-kiro-bridge)
+
+[🇨🇳 中文](./README.md) | 🇺🇸 English
+
+---
+
+`@bot` in a group chat or DM the bot directly. Your message goes straight to local `kiro-cli chat`. Replies stream back as **structured cards with native typing cursor**. Each chat keeps an isolated session, and switching directories doesn't lose context.
+
+**Why this exists**: cloud AI coding assistants (Cursor / Copilot / Devin) can't touch your local project directories, and have no way to operate Feishu's own APIs. lark-kiro-bridge **=** running local commands inside Feishu **+** orchestrating Feishu APIs from chat — one bot for both.
+
+```
+┌───────────────────────────────────────┐
+│ 💬 Kiro                                │
+├───────────────────────────────────────┤
+│ ☕ 3 tool calls ▸ (folded)             │
+│ ✅ Bash — lark-cli calendar +create…▾ │  ← latest tool stays expanded
+│ ┌─────────────────────────────────┐   │
+│ │ **Command** lark-cli calendar … │   │
+│ │ **Output** {"ok": true, ...}    │   │
+│ └─────────────────────────────────┘   │
+│                                        │
+│ Calendar event created ✅              │
+│ Title: Test                            │
+│ When:  Today 23:00 ~ 00:00 (1h)        │
+│                                        │
+│ ✍️ Streaming     [ ⏹ Stop ]           │
+└───────────────────────────────────────┘
+```
+
+## Table of Contents
+
+<details>
+<summary>Expand</summary>
+
+- [✨ Features](#-features)
+- [🚀 Quick Start](#-quick-start)
+- [📖 Slash Commands](#-slash-commands)
+- [💡 Use Cases](#-use-cases)
+- [⚙️ Configuration](#️-configuration)
+- [📚 Documentation](#-documentation)
+- [🤝 Contributing](#-contributing)
+- [📄 License](#-license)
+
+</details>
+
+## ✨ Features
+
+- 🎴 **Structured cards** — Each tool call gets its own collapsible panel; multi-call groups auto-condense; reasoning gets its own panel
+- ⚡ **Streaming typing cursor** — Native Feishu `streaming_mode` + footer status indicator
+- 🗂️ **Workspace plan B** — `/cd` doesn't drop context: per-`(chat, cwd)` Kiro session map auto-resumes
+- 🔘 **Clickable buttons** — `/model` `/help` `/status` `/ws list` `/config` are all interactive cards, zero command memorization
+- 📝 **`/config` in-Feishu form** — Edit access control & preferences inside Feishu, takes effect instantly, anti-lockout validation
+- 🚄 **Rapid-fire message merging** — Multiple short messages within 200ms merge into a single Kiro call, no more abort-and-retry
+- 🎤 **Voice input** — Send a voice message in Feishu → auto-transcribed (Feishu ASR) → fed to Kiro. Requires `ffmpeg` and ASR scope.
+- 🛡️ **Process group kill** — `detached: true` + `process.kill(-pid)` reaches kiro-cli's grandchildren
+- ⏱ **Idle watchdog** — Stuck process auto-killed; tunable globally and per-chat
+- 🔐 **Three-tier access control** — User / chat / admin allowlists. **DMs always bypass the chat allowlist** so you can never lock yourself out.
+- 🍎 **macOS native daemon** — launchd auto-restart on crash, login auto-start
+- 📊 **`/doctor` self-diagnosis** — Feed logs back to Kiro to analyze its own failures
+
+## 🚀 Quick Start
+
+### Prerequisites
+
+- macOS (Linux / Windows daemon on roadmap)
+- Node.js ≥ 20
+- `kiro-cli` installed and logged in
+- A Feishu / Lark account (personal edition is fine — the QR wizard auto-creates the app)
+- **Optional**: `ffmpeg` for voice input (`brew install ffmpeg` / `apt install ffmpeg`) + Feishu `speech_to_text:speech` scope (free-tier tenants are not supported)
+
+### 30-second setup ⚡
+
+```bash
+# 1. Install
+npm i -g lark-kiro-bridge
+
+# 2. Run (first launch shows a QR — scan, approve, done)
+lark-kiro-bridge run
+```
+
+> **That's it** — scanning the QR in Feishu auto-creates the app, writes credentials, and grants required permissions.
+
+DM the bot "hi" — you should see a streaming card immediately.
+
+### Already have a Feishu app?
+
+If you've manually created an app on the Feishu Open Platform and want to reuse the App ID/Secret:
+
+```bash
+lark-kiro-bridge init --manual
+# Interactive prompts for App ID and Secret
+```
+
+Or one-line:
+
+```bash
+lark-kiro-bridge init --app-id cli_xxx --app-secret xxx
+```
+
+> Manual Feishu console setup (subscribe `im.message.receive_v1` + `card.action.trigger`) → [docs/FAQ.md](./docs/FAQ.md)
+
+### Background daemon (recommended for production)
+
+```bash
+lark-kiro-bridge start          # Install launchd plist and start
+lark-kiro-bridge status         # Check status
+lark-kiro-bridge restart        # Restart
+```
+
+## 📖 Slash Commands
+
+### Daily commands (everyone)
+
+| Command | Aliases | Purpose |
+|---|---|---|
+| `/help` | `/h` `/?` | Help card with action buttons |
+| `/status` | `/s` | Current cwd / session / watchdog |
+| `/model [name]` | `/m` | View / switch / reset model with one click |
+| `/new` | `/reset` | Reset Kiro session for current cwd |
+| `/stop` | `/abort` | Abort the running task |
+| `/pwd` | `/cwd` | Current working directory |
+| `/ws list` | — | List named workspaces with switch buttons |
+| `/timeout [N\|off]` | `/to` | Idle watchdog threshold (minutes) |
+| `/doctor [desc]` | — | Let Kiro inspect logs and diagnose |
+
+### Admin commands
+
+| Command | Purpose |
+|---|---|
+| `/config` | View / edit access control & preferences (in-Feishu form, applies instantly) |
+| `/cd <path>` | Switch working directory (gated by `allowedRoots`) |
+| `/ws save <name>` | Save current cwd as a named workspace |
+| `/ws use <name>` | Switch to a named workspace |
+| `/ws remove <name>` | Delete a named workspace |
+| `/reconnect` | Force reconnect Feishu WebSocket |
+
+> By default everyone is admin (`access.admins` empty). Tighten before sharing with a team.
+
+**Trigger rules**: DMs respond to anything; group chats require `@bot`; `@all` is never answered.
+
+## 💡 Use Cases
+
+```
+You: Delete today's 23:00 meeting
+🤖  Calls lark-cli calendar +agenda → finds event → confirms → +delete
+
+You: Summarize last week's meetings and post to the product channel
+🤖  lark-cli vc +list → extracts notes → lark-cli message +send to channel
+
+You: Commit today's changes in the portfolio project
+🤖  cd portfolio → git diff → splits into atomic commits → git push
+
+You: Find Alice's open_id and send her a meeting invite
+🤖  lark-cli contact +find Alice → gets open_id → lark-cli calendar +create
+
+You: [drops a design mockup image] evaluate technical feasibility
+🤖  Auto-downloads image → @file feeds to Kiro → vision analysis + plan
+```
+
+## ⚙️ Configuration
+
+### Minimum (auto-generated)
+
+`lark-kiro-bridge init` writes `~/.lark-kiro-bridge/config.json`:
+
+```json
+{
+  "lark": {
+    "appId": "cli_xxxxxxxxxxx",
+    "appSecret": "xxxxxxxxxxxxxxxxxxxx"
+  }
+}
+```
+
+All other fields have sensible defaults.
+
+### Full reference
+
+<details>
+<summary>Click to expand all configurable fields</summary>
+
+```json
+{
+  "lark": {
+    "appId": "cli_xxxxxxxxxxx",
+    "appSecret": "xxxxxxxxxxxxxxxxxxxx"
+  },
+  "kiro": {
+    "binPath": "kiro-cli",
+    "trustedTools": [
+      "fs_read", "fs_write", "grep", "glob", "code",
+      "execute_bash", "web_search", "web_fetch"
+    ],
+    "timeoutMs": 600000,
+    "idleTimeoutMinutes": 5,
+    "model": "claude-sonnet-4.6"
+  },
+  "workspace": {
+    "defaultCwd": "/Users/you/Projects",
+    "allowedRoots": ["/Users/you/Projects"]
+  },
+  "access": {
+    "allowedUsers": [],
+    "allowedChats": [],
+    "admins": []
+  },
+  "preferences": {
+    "requireMentionInGroup": true,
+    "cardUpdateIntervalMs": 800,
+    "logRetentionDays": 7
+  }
+}
+```
+
+**`trustedTools`** — Tools Kiro can invoke without asking:
+- `fs_read fs_write grep glob code` — File and code operations
+- `execute_bash` — Run shell commands (lark-cli / git / etc). **Safe for personal use; evaluate for team scenarios**
+- `web_search web_fetch` — Internet search
+
+**`access`** — Three-tier allowlists, see [SECURITY.md](./SECURITY.md):
+- Empty `allowedUsers` = everyone allowed
+- Empty `allowedChats` = every chat allowed
+- Empty `admins` = everyone is admin
+
+**`workspace.allowedRoots`** — Whitelist of directories `/cd` can reach. Limits blast radius.
+
+</details>
+
+### CLI
+
+```bash
+lark-kiro-bridge init                # Scan QR to create Feishu app (recommended)
+lark-kiro-bridge init --manual       # Manually enter existing App ID/Secret
+lark-kiro-bridge init --app-id <id> --app-secret <s>   # One-shot (CI-friendly)
+lark-kiro-bridge run                 # Foreground (auto-launches QR if no config)
+lark-kiro-bridge config-show         # Show current config (redacted)
+
+lark-kiro-bridge start               # Install and start daemon
+lark-kiro-bridge stop                # Stop daemon
+lark-kiro-bridge restart             # Restart
+lark-kiro-bridge status              # Daemon status
+lark-kiro-bridge unregister          # Uninstall
+
+lark-kiro-bridge ps                  # List all bridge processes on this host
+lark-kiro-bridge kill <id> [--force] # Kill a process
+```
+
+## 📚 Documentation
+
+| Doc | Content |
+|---|---|
+| [docs/ARCHITECTURE.md](./docs/ARCHITECTURE.md) | Data flow, card rendering, workspace plan B, design trade-offs |
+| [docs/FAQ.md](./docs/FAQ.md) | Common questions + troubleshooting |
+| [SECURITY.md](./SECURITY.md) | Security policy, vulnerability disclosure, hardening |
+| [CHANGELOG.md](./CHANGELOG.md) | Release notes |
+
+> Most docs are in Chinese; English versions are on the roadmap. PRs welcome.
+
+## 🤝 Contributing
+
+PRs and issues welcome. Dev flow:
+
+```bash
+git clone https://github.com/walterwang0x01/lark-kiro-bridge.git
+cd lark-kiro-bridge
+pnpm install
+pnpm typecheck && pnpm lint && pnpm test    # required before commit
+pnpm build
+node bin/lark-kiro-bridge.mjs run           # local run (stop daemon first)
+```
+
+Conventions: TypeScript strict / Biome lint / vitest tests / conventional commits.
+
+## Roadmap
+
+- **v0.2** ✅ Current (structured cards + button callbacks + Slack-style tool panels + QR app binding + voice input via ASR)
+- **v0.3** ✅ In-Feishu `/config` form + three-tier access control (DM bypass) + rapid-fire message merging
+- **v0.4** Linux systemd / Windows Task Scheduler daemon
+- **v0.4** `/ps` `/exit` to manage host processes from Feishu
+- **v0.5** Group-name → workspace heuristic (joining "agenzo" group defaults cwd to agenzo dir)
+- **v1.0** Centralized server deployment / multi-user isolation / web admin panel
+
+## 📄 License
+
+[MIT](./LICENSE) © 2026 walterwang0x01

package/README.md

@@ -0,0 +1,291 @@
+# lark-kiro-bridge
+
+> 把 **Kiro CLI** 接到飞书 / Lark — 在飞书里聊代码、跑命令、操作飞书自己。
+
+[![npm version](https://img.shields.io/npm/v/lark-kiro-bridge.svg?color=cb3837)](https://www.npmjs.com/package/lark-kiro-bridge)
+[![npm downloads](https://img.shields.io/npm/dm/lark-kiro-bridge.svg)](https://www.npmjs.com/package/lark-kiro-bridge)
+[![license](https://img.shields.io/npm/l/lark-kiro-bridge.svg)](./LICENSE)
+[![node](https://img.shields.io/node/v/lark-kiro-bridge.svg)](https://nodejs.org/)
+[![GitHub stars](https://img.shields.io/github/stars/walterwang0x01/lark-kiro-bridge?style=social)](https://github.com/walterwang0x01/lark-kiro-bridge)
+
+🇨🇳 中文 | [🇺🇸 English](./README.en.md)
+
+---
+
+群里 `@bot` 或私聊机器人，消息直达本地 `kiro-cli chat`，回复以**结构化卡片 + 流式打字光标**实时刷新。每个 chat 独立 session，切目录不丢上下文。
+
+**核心价值**：云端 AI 编程助手（Cursor / Copilot / Devin）碰不到你本机的项目目录，也没有飞书 API 调度能力。lark-kiro-bridge **=** 在飞书里跑本地命令 **+** 操作飞书自己，一个机器人解决两件事。
+
+```
+┌───────────────────────────────────────┐
+│ 💬 Kiro                                │
+├───────────────────────────────────────┤
+│ ☕ 3 个工具调用 ▸ (folded)             │
+│ ✅ Bash — lark-cli calendar +create…▾ │  ← 最新工具实时展开
+│ ┌─────────────────────────────────┐   │
+│ │ **Command** lark-cli calendar … │   │
+│ │ **Output** {"ok": true, ...}    │   │
+│ └─────────────────────────────────┘   │
+│                                        │
+│ 日程已创建成功 ✅                      │
+│ 主题：测试                             │
+│ 时间：今天 23:00 ~ 明天 00:00          │
+│                                        │
+│ ✍️ 正在输出     [ ⏹ 终止 ]            │
+└───────────────────────────────────────┘
+```
+
+## 目录
+
+<details>
+<summary>展开</summary>
+
+- [✨ 特性](#-特性)
+- [🚀 快速上手](#-快速上手)
+- [📖 飞书内的命令](#-飞书内的命令)
+- [💡 使用场景](#-使用场景)
+- [⚙️ 配置](#️-配置)
+- [📚 进阶文档](#-进阶文档)
+- [🤝 参与贡献](#-参与贡献)
+- [📄 License](#-license)
+
+</details>
+
+## ✨ 特性
+
+- 🎴 **结构化卡片** — 每次工具调用一个独立可折叠面板，多调用自动聚合，思考过程独立展示
+- ⚡ **流式打字光标** — 飞书原生 `streaming_mode`，配合 footer 实时状态指示
+- 🗂️ **工作区方案 B** — 切目录不丢上下文：每个 `(chat, cwd)` 独立 Kiro session，自动续聊
+- 🔘 **按钮可点** — `/model` `/help` `/status` `/ws list` `/config` 全部可点击操作，0 命令记忆
+- 📝 **`/config` 飞书内表单** — 在飞书里改访问控制和偏好，即时生效，防自锁校验
+- 🚄 **rapid-fire 消息合并** — 200ms 内连发的多条短消息自动合并为一次 Kiro 调用，不再被前一条 abort
+- 🎤 **语音输入** — 飞书发语音消息 → 自动转写（飞书 ASR）→ 喂给 Kiro，需 `ffmpeg` 和 ASR 权限
+- 🛡️ **进程组 kill** — `detached: true` + `process.kill(-pid)` 杀掉 kiro-cli 全部子孙
+- ⏱ **Idle Watchdog** — 卡住自动 killTree，可全局 / per-chat 配置
+- 🔐 **三层访问控制** — 用户 / 群 / 管理员白名单，**DM 永远豁免群白名单**，不会把自己锁外面
+- 🍎 **macOS 原生守护** — launchd 崩溃自动拉起，开机自启
+- 📊 **`/doctor` 自诊断** — 让 Kiro 看日志自己分析故障
+
+## 🚀 快速上手
+
+### 前置条件
+
+- macOS（Linux / Windows daemon 在路线图）
+- Node.js ≥ 20
+- `kiro-cli` 已安装并登录
+- 飞书账号（个人版即可，扫码自动创建应用）
+- **可选**：`ffmpeg`（用于语音输入转写，`brew install ffmpeg` / `apt install ffmpeg`）+ 飞书 ASR scope `speech_to_text:speech`（飞书免费版租户不支持）
+
+### 30 秒上线 ⚡
+
+```bash
+# 1. 安装
+npm i -g lark-kiro-bridge
+
+# 2. 启动（首次会自动弹二维码 → 扫码同意 → 完成）
+lark-kiro-bridge run
+```
+
+> **就这么简单**——飞书 App 扫码同意后，bridge 自动创建应用、配好凭证、开通必要权限。
+
+启动后在飞书私聊机器人发「你好」，应该立即看到流式刷新的卡片。
+
+### 想用已有的飞书应用？
+
+如果你已经在飞书开放平台手动建过应用，想复用已有的 App ID/Secret：
+
+```bash
+lark-kiro-bridge init --manual
+# 交互式输入 App ID 和 App Secret
+```
+
+或一行搞定：
+
+```bash
+lark-kiro-bridge init --app-id cli_xxx --app-secret xxx
+```
+
+> 飞书后台手动配置（订阅事件 `im.message.receive_v1` + `card.action.trigger`）→ [docs/FAQ.md](./docs/FAQ.md)
+
+### 后台守护（推荐生产）
+
+```bash
+lark-kiro-bridge start          # 装 launchd plist 并启动
+lark-kiro-bridge status         # 看状态
+lark-kiro-bridge restart        # 重启
+```
+
+## 📖 飞书内的命令
+
+### 日常命令（所有人）
+
+| 命令 | 别名 | 作用 |
+|---|---|---|
+| `/help` | `/h` `/?` | 帮助卡片（可点按钮） |
+| `/status` | `/s` | 当前 cwd / session / watchdog |
+| `/model [name]` | `/m` | 查看 / 切换模型，按钮一键切 |
+| `/new` | `/reset` | 重置当前 cwd 下的 Kiro 会话 |
+| `/stop` | `/abort` | 停止正在跑的任务 |
+| `/pwd` | `/cwd` | 当前工作目录 |
+| `/ws list` | — | 列出命名工作区，按钮一键切 |
+| `/timeout [N\|off]` | `/to` | idle watchdog 阈值（分钟） |
+| `/doctor [描述]` | — | 让 Kiro 看日志自诊断 |
+
+### 管理员命令
+
+| 命令 | 作用 |
+|---|---|
+| `/config` | 查看 / 编辑访问控制 + 偏好（飞书内表单，即时生效） |
+| `/cd <path>` | 切换工作目录（受 `allowedRoots` 限制） |
+| `/ws save <name>` | 把当前 cwd 存为命名工作区 |
+| `/ws use <name>` | 切到命名工作区 |
+| `/ws remove <name>` | 删除命名工作区 |
+| `/reconnect` | 强制重连飞书 WebSocket |
+
+> 默认所有人都是管理员（`access.admins` 为空）。团队推广前请收紧。
+
+**响应规则**：私聊全收；群里必须 `@bot`；`@all` 永不响应。
+
+## 💡 使用场景
+
+```
+你: 删掉今天 23 点的会议
+🤖 调 lark-cli calendar +agenda 找到日程 → 二次确认 → +delete
+
+你: 整理一下上周的会议纪要发到产品群
+🤖 lark-cli vc +list → 提取纪要 → 调 lark-cli message +send 到指定群
+
+你: 把 portfolio 项目今天的改动 commit 一下
+🤖 cd portfolio → git diff → 拆分 atomic commits → git push
+
+你: 查一下张三的 open_id 顺便给他发个会议邀请
+🤖 lark-cli contact +find 张三 → 拿到 open_id → 调 lark-cli calendar +create
+
+你: [发了一张设计稿] 帮我评估技术可行性
+🤖 自动下载图片 → @file 喂给 Kiro → 视觉分析 + 给出实现方案
+```
+
+## ⚙️ 配置
+
+### 最小可用（自动生成）
+
+`lark-kiro-bridge init` 写入 `~/.lark-kiro-bridge/config.json`：
+
+```json
+{
+  "lark": {
+    "appId": "cli_xxxxxxxxxxx",
+    "appSecret": "xxxxxxxxxxxxxxxxxxxx"
+  }
+}
+```
+
+其他字段都有合理默认值。
+
+### 完整配置参考
+
+<details>
+<summary>点开看所有可配置项</summary>
+
+```json
+{
+  "lark": {
+    "appId": "cli_xxxxxxxxxxx",
+    "appSecret": "xxxxxxxxxxxxxxxxxxxx"
+  },
+  "kiro": {
+    "binPath": "kiro-cli",
+    "trustedTools": [
+      "fs_read", "fs_write", "grep", "glob", "code",
+      "execute_bash", "web_search", "web_fetch"
+    ],
+    "timeoutMs": 600000,
+    "idleTimeoutMinutes": 5,
+    "model": "claude-sonnet-4.6"
+  },
+  "workspace": {
+    "defaultCwd": "/Users/you/Projects",
+    "allowedRoots": ["/Users/you/Projects"]
+  },
+  "access": {
+    "allowedUsers": [],
+    "allowedChats": [],
+    "admins": []
+  },
+  "preferences": {
+    "requireMentionInGroup": true,
+    "cardUpdateIntervalMs": 800,
+    "logRetentionDays": 7
+  }
+}
+```
+
+`trustedTools` — Kiro 不询问就能调用的工具：
+- `fs_read fs_write grep glob code` — 文件读写、代码搜索
+- `execute_bash` — 跑 shell 命令（lark-cli / git / 等）。**单人用安全；团队场景请评估**
+- `web_search web_fetch` — 联网搜资料
+
+`access` — 三层白名单，详见 [SECURITY.md](./SECURITY.md)：
+- `allowedUsers` 为空 = 所有人允许
+- `allowedChats` 为空 = 所有 chat 允许
+- `admins` 为空 = 所有人都是管理员
+
+`workspace.allowedRoots` — `/cd` 能去的根目录白名单，限制爆炸半径。
+
+</details>
+
+### CLI
+
+```bash
+lark-kiro-bridge init                # 扫码创建飞书应用（首选）
+lark-kiro-bridge init --manual       # 手动输入已有 App ID/Secret
+lark-kiro-bridge init --app-id <id> --app-secret <s>   # 一行搞定（CI 友好）
+lark-kiro-bridge run                 # 前台启动（首次自动跳扫码）
+lark-kiro-bridge config-show         # 显示当前配置（脱敏）
+
+lark-kiro-bridge start               # 装并起 daemon
+lark-kiro-bridge stop                # 停 daemon
+lark-kiro-bridge restart             # 重启
+lark-kiro-bridge status              # 状态
+lark-kiro-bridge unregister          # 卸载
+
+lark-kiro-bridge ps                  # 列本机所有 bridge 进程
+lark-kiro-bridge kill <id> [--force] # 杀掉某个进程
+```
+
+## 📚 进阶文档
+
+| 文档 | 内容 |
+|---|---|
+| [docs/ARCHITECTURE.md](./docs/ARCHITECTURE.md) | 整体数据流、卡片渲染体系、工作目录方案 B、设计取舍 |
+| [docs/FAQ.md](./docs/FAQ.md) | 常见疑问 + 故障排查（机器人不响应 / 200340 / 卡片卡死 / …） |
+| [SECURITY.md](./SECURITY.md) | 安全策略、漏洞披露、加固指南 |
+| [CHANGELOG.md](./CHANGELOG.md) | 版本变更日志 |
+
+## 🤝 参与贡献
+
+PR / Issue 都欢迎。开发流程：
+
+```bash
+git clone https://github.com/walterwang0x01/lark-kiro-bridge.git
+cd lark-kiro-bridge
+pnpm install
+pnpm typecheck && pnpm lint && pnpm test    # 提交前必跑
+pnpm build
+node bin/lark-kiro-bridge.mjs run           # 本地跑（先 stop daemon）
+```
+
+代码规范：TypeScript strict / Biome lint / vitest 测试 / commit 用 conventional commits。
+
+## 路线图
+
+- **v0.2** ✅ 当前版（结构化卡片 + 按钮回调 + Slack-style 工具面板 + 扫码绑定 + 语音输入 ASR）
+- **v0.3** ✅ `/config` 飞书内表单 + 三层访问控制（DM 豁免群白名单）+ rapid-fire 消息合并
+- **v0.4** Linux systemd / Windows Task Scheduler 守护
+- **v0.4** `/ps` `/exit` 飞书内调用本机进程
+- **v0.5** 群名 → 工作区的启发式默认（进 agenzo 群默认在 agenzo 目录）
+- **v1.0** 服务器集中部署 / 多用户隔离 / Web 管理面板
+
+## 📄 License
+
+[MIT](./LICENSE) © 2026 walterwang0x01

package/bin/lark-kiro-bridge.mjs

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import('../dist/cli.js').catch((err) => {
+  console.error(err);
+  process.exit(1);
+});

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+
+export {  }