lark-remote 0.1.1 → 0.1.3

package/dist/session/codex/sessions.js

@@ -27,10 +27,11 @@ export class CodexSessionReader {
     getNewestSession(cwd) {
         return this.listSessions(cwd, { limit: 1 }).sessions[0] ?? null;
     }
-    readSessionContent(sessionId, _cwd, opts) {
+    readSessionContent(sessionId, cwd, opts) {
         return readCodexSessionContent(sessionId, {
             codexHome: this.codexHome,
             maxEvents: opts?.maxEvents,
+            cwd,
         });
     }
     isSessionActive(sessionId, _cwd) {

package/dist/session/kimi/sessions.d.ts

@@ -24,7 +24,9 @@ export type CwdGuardResult = 'verified' | 'failed' | 'unverifiable';
  * - failed: session has a workDir but it doesn't match realCwd
  * - unverifiable: session has no workDir field (cannot verify)
  *
- * Unverifiable is a fail-open state — the caller should allow access and log a warning.
+ * Unverifiable sessions are handled by the caller: when no cwd source can
+ * verify the session, it is rejected (fail-closed), aligned with claude's
+ * cwd guard semantics.
  */
 export declare function checkCwdGuard(state: KimiSessionState, realCwd: string): CwdGuardResult;
 /**

package/dist/session/kimi/sessions.js

@@ -105,7 +105,9 @@ export function extractWorkDir(state) {
  * - failed: session has a workDir but it doesn't match realCwd
  * - unverifiable: session has no workDir field (cannot verify)
  *
- * Unverifiable is a fail-open state — the caller should allow access and log a warning.
+ * Unverifiable sessions are handled by the caller: when no cwd source can
+ * verify the session, it is rejected (fail-closed), aligned with claude's
+ * cwd guard semantics.
  */
 export function checkCwdGuard(state, realCwd) {
     const sessionWorkDir = extractWorkDir(state);
@@ -283,27 +285,61 @@ export class KimiSessionReader {
      * Read session content (events + usage)
      */
     readSessionContent(sessionId, cwd, opts) {
-        // Find session directory from index
-        const sessionDir = this.findSessionDirFromIndex(sessionId);
+        // Find session directory from index (also retrieve index entry for
+        // fallback cwd guard when state.json is missing or unparseable)
+        const indexEntry = this.findSessionIndexEntry(sessionId);
+        const sessionDir = indexEntry?.sessionDir ?? null;
         if (!sessionDir) {
             return { events: [] };
         }
         const statePath = path.join(sessionDir, 'state.json');
+        let realCwd;
+        try {
+            realCwd = fs.realpathSync(cwd);
+        }
+        catch {
+            getLogger().warn(`[kimi-session-reader] fs.realpathSync failed for cwd=${cwd} (session ${sessionId}), returning empty`);
+            return { events: [] };
+        }
+        let cwdGuardPassed = false;
         try {
             if (fs.existsSync(statePath)) {
                 const state = JSON.parse(fs.readFileSync(statePath, 'utf-8'));
-                const realCwd = fs.realpathSync(cwd);
                 const guardResult = checkCwdGuard(state, realCwd);
                 if (guardResult === 'failed') {
                     return { events: [] };
                 }
                 if (guardResult === 'unverifiable') {
-                    getLogger().warn(`[kimi-session-reader] state.json has no workDir/cwd field for session ${sessionId}, skipping cwd guard`);
+                    getLogger().warn(`[kimi-session-reader] state.json has no workDir/cwd field for session ${sessionId}, falling back to index workDir`);
+                    // Fall through to index-based guard below
+                }
+                else {
+                    // verified — state.json cwd matches
+                    cwdGuardPassed = true;
                 }
             }
         }
         catch {
-            // Unverifiable — skip the check
+            // state.json unparseable — fall through to index-based guard
+            getLogger().warn(`[kimi-session-reader] state.json parse failed for session ${sessionId}, falling back to index workDir`);
+        }
+        // Fallback: when state.json is missing, unparseable, or has no workDir/cwd,
+        // use the workDir from the session index entry as a secondary guard.
+        // This prevents /resume <id> from accessing a session belonging to a
+        // different workspace when state.json is unavailable.
+        if (!cwdGuardPassed) {
+            const indexWorkDir = indexEntry?.workDir;
+            if (indexWorkDir && indexWorkDir !== realCwd) {
+                return { events: [] };
+            }
+            // v2 sessions have empty index workDir (v1-only field) and may lack
+            // state.json cwd. When no cwd source can verify the session belongs to
+            // the requested workspace, fail-closed to prevent cross-workspace access
+            // (aligned with claude's fail-closed cwd guard).
+            if (!indexWorkDir) {
+                getLogger().warn(`[kimi-session-reader] no cwd source (state.json + index) for session ${sessionId}, rejecting (fail-closed)`);
+                return { events: [] };
+            }
         }
         const wirePath = path.join(sessionDir, 'agents', 'main', 'wire.jsonl');
         if (!fs.existsSync(wirePath)) {

package/dist/session/opencode/sessions.d.ts

@@ -15,8 +15,6 @@
  */
 import type { AgentSession, AgentSessionReader, SessionContent } from '../../runner/index.js';
 interface OpencodeSessionReaderOptions {
-    /** Path to opencode binary. Default: 'opencode' (in PATH). */
-    binary?: string;
     /** Cache TTL for session list (ms). Default: 10_000. */
     cacheTtlMs?: number;
     /**

package/dist/session/opencode/sessions.js

@@ -28,7 +28,7 @@ export class OpencodeSessionReader {
     /** Cache keyed by cwd - each cwd has its own cache entry */
     listCache = new Map();
     constructor(opts = {}) {
-        this.binary = opts.binary ?? 'opencode';
+        this.binary = 'opencode';
         this.cacheTtlMs = opts.cacheTtlMs ?? 10_000;
         this.captureExportOverride = opts.captureExport;
     }

package/dist/startup-contact.d.ts

@@ -13,6 +13,8 @@ export declare class StartupContactStore {
     save(contact: StartupContact): void;
     getContact(): StartupContact | undefined;
 }
-export declare function formatStartupHello(now?: Date, pid?: number): string;
-export declare function sendStartupHello(connector: StartupHelloChannel, store: StartupContactStore): Promise<void>;
+export declare function formatStartupHello(now?: Date, pid?: number, dev?: boolean): string;
+export declare function sendStartupHello(connector: StartupHelloChannel, store: StartupContactStore, opts?: {
+    dev?: boolean;
+}): Promise<void>;
 export {};

package/dist/startup-contact.js

@@ -21,7 +21,7 @@ export class StartupContactStore {
         return contact.chatId || contact.userId ? contact : undefined;
     }
 }
-export function formatStartupHello(now = new Date(), pid = process.pid) {
+export function formatStartupHello(now = new Date(), pid = process.pid, dev = false) {
     const startedAt = new Intl.DateTimeFormat('zh-CN', {
         year: 'numeric',
         month: '2-digit',
@@ -31,9 +31,10 @@ export function formatStartupHello(now = new Date(), pid = process.pid) {
         second: '2-digit',
         hour12: false,
     }).format(now);
-    return `lark-remote 已启动\n启动时间：${startedAt}\n进程号：${pid}`;
+    const modeTag = dev ? ' 🔧 dev' : '';
+    return `lark-remote${modeTag} 已启动\n启动时间：${startedAt}\n进程号：${pid}`;
 }
-export async function sendStartupHello(connector, store) {
+export async function sendStartupHello(connector, store, opts) {
     const contact = store.getContact();
     const recipient = contact?.chatId ?? contact?.userId;
     if (!recipient) {
@@ -41,7 +42,9 @@ export async function sendStartupHello(connector, store) {
         return;
     }
     try {
-        await connector.sendWithRetry(recipient, { text: formatStartupHello() });
+        await connector.sendWithRetry(recipient, {
+            text: formatStartupHello(undefined, undefined, opts?.dev),
+        });
         getLogger().info('[startup] hello message sent');
     }
     catch (err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lark-remote",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Feishu (Lark) private-chat bridge to local coding agents — Claude Code / Codex / opencode / pi / kimi, with live-streaming CardKit 2.0 cards",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -18,13 +18,13 @@
     "!dist/**/*.js.map",
     "!dist/**/*.d.ts.map",
     "!dist/config/codex-bundled-test-helpers.*",
-    "!dist/test-helpers.*",
     "README.md",
     "README.en.md",
     "LICENSE",
     "CHANGELOG.md"
   ],
   "scripts": {
+    "prepare": "husky",
     "dev": "bun src/index.ts",
     "build": "rm -rf dist && tsc && chmod +x dist/index.js dist/cli.js",
     "typecheck": "tsc --noEmit",
@@ -34,12 +34,35 @@
     "format:check": "prettier --check 'src/**/*.ts' 'tests/**/*.ts'",
     "test": "vitest run",
     "test:watch": "vitest",
+    "test:bridge": "vitest run --project infra-bridge",
+    "test:card": "vitest run --project infra-card",
+    "test:connector": "vitest run --project infra-connector",
+    "test:router": "vitest run --project infra-router",
+    "test:session": "vitest run --project infra-session",
+    "test:runner": "vitest run --project infra-runner",
+    "test:config": "vitest run --project infra-config",
+    "test:order": "vitest run --project infra-order",
+    "test:misc": "vitest run --project infra-misc",
+    "test:claude": "vitest run --project agent-claude",
+    "test:codex": "vitest run --project agent-codex",
+    "test:opencode": "vitest run --project agent-opencode",
+    "test:pi": "vitest run --project agent-pi",
+    "test:kimi": "vitest run --project agent-kimi",
+    "test:bash": "vitest run --project agent-bash",
+    "test:infra": "vitest run --project 'infra-*'",
+    "test:agents": "vitest run --project 'agent-*'",
+    "test:codex-full": "vitest run --project agent-codex --project infra-runner --project infra-session",
+    "test:claude-full": "vitest run --project agent-claude --project infra-runner --project infra-session",
+    "test:opencode-full": "vitest run --project agent-opencode --project infra-runner --project infra-session",
+    "test:pi-full": "vitest run --project agent-pi --project infra-runner --project infra-session",
+    "test:kimi-full": "vitest run --project agent-kimi --project infra-runner --project infra-session",
+    "test:live": "vitest run --project live",
     "prepublishOnly": "tsc --noEmit && vitest run && rm -rf dist && tsc && chmod +x dist/index.js dist/cli.js",
     "prepack": "node -e \"const fs=require('fs');if(!fs.existsSync('dist/cli.js')){console.error('dist/ missing — run bun run build first');process.exit(1)}\""
   },
   "publishConfig": {
     "access": "public",
-    "provenance": false
+    "provenance": true
   },
   "keywords": [
     "feishu",
@@ -85,9 +108,21 @@
     "eslint": "^10.7.0",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-prettier": "^5.5.6",
+    "husky": "^9.1.7",
+    "lint-staged": "^17.3.0",
     "prettier": "^3.9.5",
     "typescript": "^6.0.0",
     "typescript-eslint": "^8.63.0",
-    "vitest": "^4.1.9"
+    "vitest": "^4.1.10"
+  },
+  "lint-staged": {
+    "src/**/*.ts": [
+      "eslint --fix",
+      "prettier --write"
+    ],
+    "tests/**/*.ts": [
+      "eslint --fix",
+      "prettier --write"
+    ]
   }
 }