lark-remote 0.1.5 → 0.1.7

package/dist/index.js

@@ -1,14 +1,14 @@
-import { loadConfig, getAgentConfig, DEFAULT_STOP_GRACE_MS, } from './config/index.js';
+import { loadConfig, getAgentConfig } from './config/index.js';
 import { resolveAgentChoices, } from './runner/index.js';
 import { ensureConfig } from './config/wizard.js';
 import { parseCliArgs, resolveConfigDir, setConfigDir, printHelp, printVersion, } from './config/dir.js';
 import { FeishuConnector } from './connector/index.js';
-import { ClaudeRunner, CodexExecRunner, OpencodeExecRunner, PiRunner, KimiRunner, } from './runner/index.js';
+import { ClaudeRunner, CodexAppServerRunner, OpencodeAcpRunner, PiRpcRunner, KimiAcpRunner, } from './runner/index.js';
 import { AgentRegistry } from './runner/registry.js';
 import { probeAllAgents } from './runner/probe.js';
 import { SessionReaderRegistry, SessionStore } from './session/index.js';
 import { ClaudeSessionReader, CodexSessionReader, OpencodeSessionReader, PiSessionReader, KimiSessionReader, } from './session/index.js';
-import { CommandRouter, isImmediateAction, formatUsageStats, } from './router/index.js';
+import { CommandRouter, isImmediateAction } from './router/index.js';
 import { dispatchOrderExecForQueue } from './router/order-exec-dispatch.js';
 import { Bridge } from './bridge/index.js';
 import { initLogger, getLogger } from './logger/index.js';
@@ -19,76 +19,44 @@ import { spawnReplacementBridge, waitForPreviousInstance } from './restart.js';
 import { checkLatestVersion, isNewer, runInstallLatest, formatUpdateHint } from './update/index.js';
 import { classifyRejection } from './error-classification.js';
 import { WorkspaceStore } from './workspace/index.js';
-import { markdownDiv } from './card/collapsible.js';
-import { sessionEventPanel } from './router/card-helpers.js';
-import { newSessionButton, agentDisplayName } from './card/card-shared.js';
+import { buildSessionHistoryCard } from './router/card-helpers.js';
+import { newSessionButton, resumeCompactButton, agentDisplayName } from './card/card-shared.js';
 import path from 'node:path';
 import fs from 'node:fs';
+import { silentlyUnlink } from './common/fs.js';
 /** Send auto-resume card for a restored session */
-async function sendAutoResumeCard(connector, contact, cwd, session, state) {
+async function sendAutoResumeCard(connector, contact, cwd, session, state, compactSupported = false) {
     if (!contact.userId)
         return;
     const recipient = contact.chatId ?? contact.userId;
     if (!recipient)
         return;
-    // Build header with displayTitle (aiTitle or last user message) and recap
-    let header = `📂 \`${cwd}\`\n已恢复最近会话: **${session.sessionId}**`;
-    const sections = [];
-    if (state.displayTitle) {
-        const label = state.aiTitle ? 'AI 标题' : '最近输入';
-        sections.push(`🏷️ **${label}**\n${state.displayTitle}`);
-    }
-    if (state.recap) {
-        const recapPreview = state.recap.length > 200 ? state.recap.slice(0, 197) + '...' : state.recap;
-        sections.push(`📝 **Recap**\n${recapPreview}`);
-    }
-    if (sections.length > 0) {
-        header += '\n\n' + sections.join('\n\n──\n\n');
-    }
-    const elements = [markdownDiv(header), { tag: 'hr' }];
     // Limit history events to prevent card size exceeded error (11310)
     const MAX_HISTORY_EVENTS = 5;
     const eventsToShow = state.events.slice(-MAX_HISTORY_EVENTS);
     const hiddenCount = state.events.length - MAX_HISTORY_EVENTS;
-    // Add indicator if events were hidden
-    if (hiddenCount > 0) {
-        elements.push(markdownDiv(`📜 还有 ${hiddenCount} 个更早的事件未显示`));
-    }
-    // Fold session history into collapsible panels: the last 2 events stay expanded
+    // Action buttons: Compact (runCompact-capable runner) + new session.
     const agentKind = state.agentKind ?? 'claude';
-    eventsToShow.forEach((ev, i) => {
-        elements.push(sessionEventPanel(ev, i, eventsToShow.length, 2, agentKind));
-    });
-    // Add usage/stats at the end
-    if (state.usage) {
-        const usageStr = formatUsageStats(state.usage);
-        elements.push(markdownDiv(usageStr));
+    const actionButtons = [];
+    if (compactSupported) {
+        actionButtons.push(resumeCompactButton(session.sessionId, state.agentKind ?? 'codex'));
     }
-    // Add new session button - use column_set+column (div+elements not supported in 2.0)
-    const newSessionBtn = newSessionButton();
-    elements.push({
-        tag: 'column_set',
-        columns: [
-            {
-                tag: 'column',
-                width: 'auto',
-                elements: [newSessionBtn],
-            },
-        ],
+    actionButtons.push(newSessionButton());
+    const card = buildSessionHistoryCard({
+        sessionId: session.sessionId,
+        cwd,
+        displayTitle: state.displayTitle,
+        aiTitle: state.aiTitle,
+        recap: state.recap,
+        events: eventsToShow,
+        usage: state.usage,
+    }, {
+        agentKind,
+        headerText: `📂 \`${cwd}\`\n已恢复最近会话: **${session.sessionId}**`,
+        title: `🔁 自动恢复会话 · ${agentDisplayName(agentKind)}`,
+        hiddenCount,
+        actions: actionButtons,
     });
-    const card = {
-        schema: '2.0',
-        config: {
-            wide_screen_mode: true,
-        },
-        header: {
-            title: {
-                tag: 'plain_text',
-                content: `🔁 自动恢复会话 · ${agentDisplayName(agentKind)}`,
-            },
-        },
-        body: { elements },
-    };
     await connector.sendWithRetry(recipient, { card });
 }
 /** Initialize CLI args, config, and logger. Returns { config, configDir, logger, instanceLock }. */
@@ -161,28 +129,36 @@ function initializeRunner(config, configDir, cliArgs) {
             settings: cliArgs.settings,
             pidDir: configDir,
             workspace: ws,
+            permissionMode: claudeConfig.permissionMode,
+            idleTtlMs: claudeConfig.idleTtlMinutes != null ? claudeConfig.idleTtlMinutes * 60_000 : undefined,
         });
     });
-    // Register CodexExecRunner (codex exec --json, approval_policy=never).
-    // Factory reads latest config from container.current so runtime config changes
-    // (reasoningEffort, model, etc.) take effect after bridge.setConfig() + clearRunners().
+    // Register Codex runner (app-server only). The registry factory reads latest
+    // config from container.current so runtime config changes (model, sandbox,
+    // approvalPolicy, reasoningEffort, etc.) take effect after bridge.setConfig()
+    // + clearRunners().
     const codexSessionReader = new CodexSessionReader({ codexHome: process.env.CODEX_HOME });
-    agentRegistry.register('codex', (ws) => {
+    agentRegistry.register('codex', (_ws) => {
         const container = agentRegistry.getConfigContainer();
         const latestConfig = container?.current ?? config;
         const codexConfig = getAgentConfig(latestConfig, 'codex');
-        return new CodexExecRunner({
+        return new CodexAppServerRunner({
+            kind: 'codex',
             model: codexConfig?.model,
             modelProvider: codexConfig?.modelProvider,
             reasoningEffort: codexConfig?.reasoningEffort,
-            stopGraceMs: codexConfig?.stopGraceMs ?? latestConfig.claude?.stopGraceMs ?? DEFAULT_STOP_GRACE_MS,
-            pidDir: configDir,
-            workspace: ws,
             sessionReader: codexSessionReader,
+            sandbox: codexConfig?.sandbox,
+            approvalPolicy: codexConfig?.approvalPolicy,
+            binary: codexConfig?.appServer?.binary,
+            requestTimeoutMs: codexConfig?.appServer?.requestTimeoutMs,
+            idleTtlMs: codexConfig?.appServer?.idleTtlMs,
+            turnTimeoutMs: codexConfig?.appServer?.turnIdleTimeoutMinutes != null
+                ? codexConfig.appServer.turnIdleTimeoutMinutes * 60_000
+                : undefined,
         });
     });
-    // Register OpencodeExecRunner (run mode)
-    // Using `opencode run --format json --auto` instead of HTTP+SSE server mode
+    // Register OpencodeAcpRunner (pure ACP mode, `opencode acp` JSON-RPC over stdio)
     // Register session reader (same instance as used by runner)
     const sessionReaderRegistry = new SessionReaderRegistry();
     sessionReaderRegistry.register('claude', new ClaudeSessionReader());
@@ -190,7 +166,7 @@ function initializeRunner(config, configDir, cliArgs) {
     // Register OpencodeSessionReader (CLI version)
     // Using `opencode session list` and `opencode export` instead of HTTP API
     const opencodeSessionReader = new OpencodeSessionReader();
-    agentRegistry.register('opencode', (ws) => {
+    agentRegistry.register('opencode', (_ws) => {
         // Get latest config from container (set below for pi)
         const container = agentRegistry.getConfigContainer();
         const latestConfig = container?.current ?? config;
@@ -207,17 +183,15 @@ function initializeRunner(config, configDir, cliArgs) {
                 model = `${provider}/${ocConfig.modelID}`;
             }
         }
-        return new OpencodeExecRunner({
+        return new OpencodeAcpRunner({
+            kind: 'opencode',
             model,
-            // P1-15: read stopGraceMs from latestConfig (not startup closure)
-            stopGraceMs: latestConfig.claude?.stopGraceMs ?? DEFAULT_STOP_GRACE_MS,
-            pidDir: configDir,
-            workspace: ws,
             sessionReader: opencodeSessionReader,
+            mode: ocConfig?.mode ?? 'build',
         });
     });
     sessionReaderRegistry.register('opencode', opencodeSessionReader);
-    // Register PiRunner and PiSessionReader
+    // Register PiRpcRunner and PiSessionReader
     // 2026-07-12: 修复 config.save 后 pi provider 不生效的问题
     // 关键：factory 闭包必须能访问到最新的 config，而不是启动时的快照
     // 用可变容器存储 config 引用，registry 持有容器引用，factory 从容器读取最新值
@@ -229,7 +203,7 @@ function initializeRunner(config, configDir, cliArgs) {
         const container = agentRegistry.getConfigContainer();
         const latestConfig = container?.current ?? config;
         const piConf = getAgentConfig(latestConfig, 'pi');
-        return new PiRunner({
+        return new PiRpcRunner({
             provider: piConf?.provider ?? 'Volcano',
             model: piConf?.model ?? 'glm-5.2',
             thinking: piConf?.thinking ?? 'medium',
@@ -237,27 +211,30 @@ function initializeRunner(config, configDir, cliArgs) {
                 .split(',')
                 .map((t) => t.trim())
                 .filter(Boolean),
-            pidDir: configDir,
             workspace: ws,
             sessionReader: piSessionReader,
         });
     });
     sessionReaderRegistry.register('pi', piSessionReader);
-    // Register KimiRunner and KimiSessionReader
+    // Register KimiAcpRunner (pure ACP mode) and KimiSessionReader
     const kimiSessionReader = new KimiSessionReader();
-    agentRegistry.register('kimi', (ws) => {
+    agentRegistry.register('kimi', (_ws) => {
         // 每次 factory 调用时从 registry 获取最新 config
         const container = agentRegistry.getConfigContainer();
         const latestConfig = container?.current ?? config;
         const kimiConf = getAgentConfig(latestConfig, 'kimi');
-        return new KimiRunner({
-            model: kimiConf?.model ?? 'kimi-code/k3',
-            thinkingEffort: kimiConf?.thinkingEffort ?? 'max',
-            // P1-15: read stopGraceMs from latestConfig (not startup closure)
-            stopGraceMs: latestConfig.claude?.stopGraceMs ?? DEFAULT_STOP_GRACE_MS,
-            pidDir: configDir,
-            workspace: ws,
+        const acpConf = kimiConf?.acp;
+        return new KimiAcpRunner({
+            kind: 'kimi',
             sessionReader: kimiSessionReader,
+            binary: acpConf?.binary ?? 'kimi',
+            requestTimeoutMs: acpConf?.requestTimeoutMs,
+            idleTtlMs: acpConf?.idleTtlMs,
+            turnIdleTimeoutMs: acpConf?.turnIdleTimeoutMinutes != null
+                ? acpConf.turnIdleTimeoutMinutes * 60_000
+                : undefined,
+            model: kimiConf?.model ?? 'kimi-code/k3',
+            permissionMode: kimiConf?.permissionMode ?? 'manual',
         });
     });
     sessionReaderRegistry.register('kimi', kimiSessionReader);
@@ -288,6 +265,48 @@ function initializeRunner(config, configDir, cliArgs) {
 }
 /** Setup message and card action handlers. */
 function setupMessageHandlers(connector, router, bridge, sessionStore, workspaceStore, binder, logger, config) {
+    // 入站媒体（图片/文件）：先认证后下载（P1 review 修复）。
+    // connector 只上报"媒体到达"，这里先过 owner + enabled 闸门，通过后才
+    // 下载——未认证/关闭配置时不会发生任何网络下载或内存/磁盘占用。
+    connector.setInboundMediaDetectedHandler((msg) => {
+        if (!binder.isOwner(msg.userId)) {
+            logger.warn(`[media] rejected inbound media from non-owner ${msg.userId}`);
+            return;
+        }
+        // 读 router.config（活引用）：/config 保存后 setConfigValues 返回新对象，
+        // 启动时捕获的 config 参数会过期（P2 review 修复）。
+        if (!router.config.inboundMedia.enabled) {
+            // 不静默（P3 review）：关闭时给 owner 明确反馈，避免发图后无任何反应。
+            // 不下载、不落盘，只回一条说明。
+            void bridge
+                .sendResult({
+                text: '⚠️ 入站媒体保存已关闭（inboundMedia.enabled: false），未保存文件。' +
+                    '如需自动保存图片/文件，请开启后重试',
+            }, {
+                userId: msg.userId,
+                chatId: msg.chatId,
+                messageId: msg.messageId,
+            })
+                .catch((err) => logger.error('[media] disabled feedback send failed:', err));
+            return;
+        }
+        void (async () => {
+            const payload = await connector.downloadInboundMedia(msg, {
+                maxFileSizeMb: router.config.inboundMedia.maxFileSizeMb,
+            });
+            try {
+                await bridge.onInboundMedia(payload);
+            }
+            catch (err) {
+                // handle() 的正常路径会清理临时文件；这里兜底 handle 进入 mkdir
+                // try 之前意外抛错的情况，避免 os.tmpdir 残留。
+                for (const item of payload.media) {
+                    silentlyUnlink(item.tempPath);
+                }
+                throw err;
+            }
+        })().catch((err) => logger.error('[media] inbound media download/save failed:', err));
+    });
     connector.setMessageHandler((msg) => {
         // 绑定/授权闸门：仅 owner 放行；非 owner 静默丢弃；未绑定时要求 PIN 认领
         const decision = binder.classify(msg.userId, msg.content, msg.chatId);
@@ -345,9 +364,16 @@ function setupMessageHandlers(connector, router, bridge, sessionStore, workspace
         }
         // decision.kind === 'owner'：正常处理（不再每条覆盖 startup-contact）
         logger.info(`message from ${msg.userId}: ${msg.content.slice(0, 100)}`);
+        // 文本到达先冲刷待合批的媒体保存提示（先图后文字时文字到达
+        // 先冲刷批次，避免合批提示被后续消息淹没/丢图）。
+        bridge.flushMediaNotifications(msg.userId, msg.chatId);
         // Add Typing reaction to indicate "still alive"
         void connector.addReaction(msg.messageId, 'Typing');
-        const trimmedLower = msg.content.trim().toLowerCase();
+        // 别名展开：命令分发前对消息做一次 $name 展开（不递归）。
+        // `!` / `/` 开头的消息不会进入展开路径（$PATH、$HOME 等 shell 变量不受影响），
+        // 未知 $xxx 原样透传；展开结果若以 `/` 开头会自然落入命令路径。
+        const content = router.expandAliasMessage(msg.content);
+        const trimmedLower = content.trim().toLowerCase();
         if (trimmedLower === '/stop' || trimmedLower === '/t') {
             void (async () => {
                 const stopped = await bridge.interruptCurrentRun({
@@ -364,9 +390,9 @@ function setupMessageHandlers(connector, router, bridge, sessionStore, workspace
             })().catch((err) => logger.error('[control] /stop failed:', err));
             return;
         }
-        if (msg.content.trim().startsWith('/')) {
+        if (content.trim().startsWith('/')) {
             void router
-                .handle(msg.content, {
+                .handle(content, {
                 userId: msg.userId,
                 chatId: msg.chatId,
                 messageId: msg.messageId,
@@ -379,9 +405,9 @@ function setupMessageHandlers(connector, router, bridge, sessionStore, workspace
         // in the same workspace (design.md §9.6: the queue exists to prevent
         // concurrent claude runs, not to serialize bash). router.handle dispatches
         // `!` to bridge.executeBash, which tracks the run independently.
-        if (msg.content.trim().startsWith('!')) {
+        if (content.trim().startsWith('!')) {
             void router
-                .handle(msg.content, {
+                .handle(content, {
                 userId: msg.userId,
                 chatId: msg.chatId,
                 messageId: msg.messageId,
@@ -405,7 +431,7 @@ function setupMessageHandlers(connector, router, bridge, sessionStore, workspace
         // 捕获点 Bridge.currentBinding。
         const binding = bridge.currentBinding(msg.userId);
         bridge.enqueue(workspace, async () => {
-            await router.handle(msg.content, {
+            await router.handle(content, {
                 userId: msg.userId,
                 chatId: msg.chatId,
                 messageId: msg.messageId,
@@ -420,7 +446,7 @@ function setupMessageHandlers(connector, router, bridge, sessionStore, workspace
                 userId: msg.userId,
                 chatId: msg.chatId,
                 messageId: msg.messageId,
-                messagePreview: msg.content.slice(0, 3000),
+                messagePreview: content.slice(0, 3000),
                 // D3/Step4: binding 随 taskMeta 存进 QueuedTask，供替换闭包
                 // （queue.edit/queue.immediate）复用，不重新快照。
                 binding,
@@ -479,11 +505,20 @@ function setupMessageHandlers(connector, router, bridge, sessionStore, workspace
             inputValue: action.raw?.action?.input_value ??
                 action.action.input_value,
         };
-        // queue.input 和 config.save 返回 CardActionResponse toast 给点击用户即时反馈。
-        // 必须直接返回值 -- enqueueImmediate / enqueueConfigAction 是 fire-and-forget，
-        // 会吞掉返回值。queue.input 只做一次卡片更新 + toast，快速且不需要串行队列序列化。
-        // config.save 内部已有 enqueueConfigAction 串行化保证，但返回值需要直接返回给飞书。
-        if (actionValue.cmd === 'queue.input' || actionValue.cmd === 'config.save') {
+        // queue.input / config.save / approval.respond / approval.toggle /
+        // approval.answer 系列返回 CardActionResponse toast 给点击用户即时反馈。
+        // 必须直接返回值 -- enqueueImmediate / enqueueConfigAction 是
+        // fire-and-forget，会吞掉返回值（2026-08-17 review：answer 家族曾漏在
+        // 直返列表外，过期/重复 nonce/非法选项等错误 toast 被静默吞掉）。
+        // 审批响应尤其不能落串行队列：run 任务占用队列头直到 turn 结束，审批响应
+        // 排在后面会形成死锁（run 不结束不执行、run 结束 coordinator 已删响应空转）。
+        if (actionValue.cmd === 'queue.input' ||
+            actionValue.cmd === 'config.save' ||
+            actionValue.cmd === 'approval.respond' ||
+            actionValue.cmd === 'approval.toggle' ||
+            actionValue.cmd === 'approval.answer' ||
+            actionValue.cmd === 'approval.answerSubmit' ||
+            actionValue.cmd === 'approval.answerCustom') {
             return router.handleCardAction(fullValue, { userId, chatId, messageId });
         }
         // order.exec → equivalent queued message (Plan A): resolve the order text
@@ -514,6 +549,8 @@ function setupMessageHandlers(connector, router, bridge, sessionStore, workspace
                     chatId,
                     messageId,
                     messagePreview: `card action: ${actionValue.cmd}`,
+                    // Compact 是单向操作，排队卡不允许编辑（编辑预览无意义）。
+                    editable: actionValue.cmd !== 'codex.compact' && actionValue.cmd !== 'resume.compact',
                 },
             });
         }
@@ -599,6 +636,7 @@ async function main() {
         configPath: path.join(configDir, 'config.yaml'),
         workspacePath: path.join(configDir, 'workspace.json'),
         ordersPath: path.join(configDir, 'orders.json'),
+        aliasesPath: path.join(configDir, 'aliases.json'),
         restartSpawner: () => spawnReplacementBridge(path.join(configDir, 'logs')),
         sessionReaderRegistry,
         devMode: cliArgs.dev,
@@ -663,7 +701,9 @@ async function main() {
                         recap: content.recap,
                         displayTitle: content.displayTitle,
                         agentKind: config.defaultAgent,
-                    });
+                    }, 
+                    // Compact 能力探测与 bridge 侧一致（runner 有 runCompact 才渲染）。
+                    bridge.hasRunCompact(restoredCwd, config.defaultAgent));
                 }
                 catch (err) {
                     getLogger().warn('[startup] sendAutoResumeCard failed:', err);

package/dist/instance-lock.js

@@ -1,6 +1,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { execFileSync } from 'node:child_process';
+import { silentlyUnlink } from './common/fs.js';
 export class InstanceAlreadyRunningError extends Error {
     pid;
     lockPath;
@@ -68,10 +69,7 @@ export class InstanceLock {
                     throw new InstanceAlreadyRunningError(pid, this.lockPath);
                 }
                 // Stale lock: remove and retry once
-                try {
-                    fs.unlinkSync(this.lockPath);
-                }
-                catch { }
+                silentlyUnlink(this.lockPath);
                 try {
                     const fd = fs.openSync(this.lockPath, 'wx');
                     fs.writeSync(fd, this.lockContents(process.pid));
@@ -99,10 +97,7 @@ export class InstanceLock {
     release() {
         const { pid } = this.readPidAndComm();
         if (pid === process.pid) {
-            try {
-                fs.unlinkSync(this.lockPath);
-            }
-            catch { }
+            silentlyUnlink(this.lockPath);
         }
     }
     registerExitHandlers() {
@@ -142,10 +137,7 @@ export class InstanceLock {
         if (Number.isInteger(pid) && pid > 0 && comm)
             return { pid, comm };
         // Malformed or missing comm — treat as corrupt, unlink and return undefined
-        try {
-            fs.unlinkSync(this.lockPath);
-        }
-        catch { }
+        silentlyUnlink(this.lockPath);
         return { pid: undefined, comm: undefined };
     }
 }

package/dist/order/alias-resolve.d.ts

@@ -0,0 +1,13 @@
+import type { AliasEntry } from './alias-store.js';
+/**
+ * 一次别名展开。
+ *
+ * - 仅匹配消息开头的 `$name`（`^$name`），`$name` 后接空格或行尾，全词精确匹配；
+ * - 名称必须 `[A-Za-z_][A-Za-z0-9_]*`（数字开头的 `$500` 永不匹配）；
+ * - 未知别名返回 undefined（原样透传给 agent，不报错）；
+ * - 单次不递归：展开结果不再二次展开，防死循环；
+ * - `!` / `/` 开头消息天然不匹配（正则要求 `$` 开头），bash 的 `$PATH` 不受影响。
+ *
+ * @returns 展开后的完整消息；无匹配时返回 undefined。
+ */
+export declare function resolveAlias(message: string, aliases: readonly AliasEntry[]): string | undefined;

package/dist/order/alias-resolve.js

@@ -0,0 +1,22 @@
+/**
+ * 一次别名展开。
+ *
+ * - 仅匹配消息开头的 `$name`（`^$name`），`$name` 后接空格或行尾，全词精确匹配；
+ * - 名称必须 `[A-Za-z_][A-Za-z0-9_]*`（数字开头的 `$500` 永不匹配）；
+ * - 未知别名返回 undefined（原样透传给 agent，不报错）；
+ * - 单次不递归：展开结果不再二次展开，防死循环；
+ * - `!` / `/` 开头消息天然不匹配（正则要求 `$` 开头），bash 的 `$PATH` 不受影响。
+ *
+ * @returns 展开后的完整消息；无匹配时返回 undefined。
+ */
+export function resolveAlias(message, aliases) {
+    const match = /^\$([A-Za-z_][A-Za-z0-9_]*)(?=$|[ \t])/.exec(message);
+    if (!match)
+        return undefined;
+    const entry = aliases.find((a) => a.name === match[1]);
+    if (!entry)
+        return undefined;
+    // lookahead 不消费空格：match[0] 仅含 $name，参数（含前导空格）原样拼接在别名文本后。
+    return entry.text + message.slice(match[0].length);
+}
+//# sourceMappingURL=alias-resolve.js.map

package/dist/order/alias-store.d.ts

@@ -0,0 +1,38 @@
+export declare const MAX_ALIASES = 50;
+export declare const MAX_ALIAS_NAME_LENGTH = 20;
+export declare const MAX_ALIAS_TEXT_LENGTH = 200;
+/**
+ * 别名名称规则：`[A-Za-z_][A-Za-z0-9_]*`，≤20 字符，不能数字开头
+ * —— `$500`、`$3d` 这类正常文本永远不匹配，不会误展开。
+ */
+export declare const ALIAS_NAME_PATTERN: RegExp;
+export interface AliasEntry {
+    name: string;
+    text: string;
+    createdAt: string;
+}
+/**
+ * 全局别名存储。
+ *
+ * 独立于 OrderStore（aliases.json），避免破坏 orders.json 向后兼容。
+ * 原子写（tmp + rename）+ 损坏恢复，复用 OrderStore/WorkspaceStore 同一模式。
+ */
+export declare class AliasStore {
+    private filePath;
+    private data;
+    constructor(filePath?: string);
+    /** Reload data from disk (useful when another process may have written). */
+    reload(): void;
+    private load;
+    private persist;
+    has(name: string): boolean;
+    get(name: string): AliasEntry | undefined;
+    list(): AliasEntry[];
+    /**
+     * 注册/更新别名（同名覆盖文本，保留 createdAt）。返回写入后的条目。
+     * 名称/文本/数量超限时抛错，由调用方提示用户。
+     */
+    set(name: string, text: string): AliasEntry;
+    /** 删除别名；不存在返回 false。 */
+    remove(name: string): boolean;
+}

package/dist/order/alias-store.js

@@ -0,0 +1,106 @@
+import path from 'node:path';
+import os from 'node:os';
+import { atomicWriteJson } from '../persistence/atomic-write.js';
+import { loadJsonFile } from '../persistence/load-json-file.js';
+export const MAX_ALIASES = 50;
+export const MAX_ALIAS_NAME_LENGTH = 20;
+export const MAX_ALIAS_TEXT_LENGTH = 200;
+/**
+ * 别名名称规则：`[A-Za-z_][A-Za-z0-9_]*`，≤20 字符，不能数字开头
+ * —— `$500`、`$3d` 这类正常文本永远不匹配，不会误展开。
+ */
+export const ALIAS_NAME_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
+/**
+ * 全局别名存储。
+ *
+ * 独立于 OrderStore（aliases.json），避免破坏 orders.json 向后兼容。
+ * 原子写（tmp + rename）+ 损坏恢复，复用 OrderStore/WorkspaceStore 同一模式。
+ */
+export class AliasStore {
+    filePath;
+    data;
+    constructor(filePath) {
+        this.filePath = filePath ?? path.join(os.homedir(), '.lark-remote', 'aliases.json');
+        this.data = [];
+        this.load();
+    }
+    /** Reload data from disk (useful when another process may have written). */
+    reload() {
+        this.load();
+    }
+    load() {
+        const parsed = loadJsonFile(this.filePath, undefined);
+        if (!parsed || !Array.isArray(parsed)) {
+            this.data = [];
+            return;
+        }
+        const valid = [];
+        for (const e of parsed) {
+            if (e &&
+                typeof e.name === 'string' &&
+                typeof e.text === 'string' &&
+                typeof e.createdAt === 'string' &&
+                ALIAS_NAME_PATTERN.test(e.name) &&
+                e.name.length <= MAX_ALIAS_NAME_LENGTH) {
+                valid.push({
+                    name: e.name,
+                    text: e.text.slice(0, MAX_ALIAS_TEXT_LENGTH),
+                    createdAt: e.createdAt,
+                });
+            }
+        }
+        this.data = valid;
+    }
+    persist() {
+        atomicWriteJson(this.filePath, this.data);
+    }
+    has(name) {
+        return this.data.some((a) => a.name === name);
+    }
+    get(name) {
+        return this.data.find((a) => a.name === name);
+    }
+    list() {
+        return [...this.data];
+    }
+    /**
+     * 注册/更新别名（同名覆盖文本，保留 createdAt）。返回写入后的条目。
+     * 名称/文本/数量超限时抛错，由调用方提示用户。
+     */
+    set(name, text) {
+        if (!ALIAS_NAME_PATTERN.test(name) || name.length > MAX_ALIAS_NAME_LENGTH) {
+            throw new Error(`别名名称只能包含字母/数字/下划线，不能数字开头，且不超过 ${MAX_ALIAS_NAME_LENGTH} 字符`);
+        }
+        if (text.length > MAX_ALIAS_TEXT_LENGTH) {
+            throw new Error(`别名文本超过 ${MAX_ALIAS_TEXT_LENGTH} 字符限制`);
+        }
+        if (!this.has(name) && this.data.length >= MAX_ALIASES) {
+            throw new Error(`别名数量已达上限 ${MAX_ALIASES}`);
+        }
+        const existing = this.get(name);
+        const entry = {
+            name,
+            text,
+            createdAt: existing?.createdAt ?? new Date().toISOString(),
+        };
+        const idx = this.data.findIndex((a) => a.name === name);
+        if (idx >= 0) {
+            this.data[idx] = entry;
+        }
+        else {
+            this.data.push(entry);
+        }
+        this.persist();
+        return entry;
+    }
+    /** 删除别名；不存在返回 false。 */
+    remove(name) {
+        const before = this.data.length;
+        this.data = this.data.filter((a) => a.name !== name);
+        if (this.data.length === before)
+            return false;
+        this.persist();
+        return true;
+    }
+}
+//# sourceMappingURL=alias-store.js.map

package/dist/persistence/atomic-write.d.ts

@@ -1,10 +1,16 @@
 /**
- * Atomically write string content to a file via tmp + rename.
+ * Atomically write content (string or binary Buffer) to a file via tmp + rename.
  * Falls back to copy+unlink when rename fails with EXDEV (cross-device).
  */
-export declare function atomicWrite(filePath: string, content: string, encoding?: BufferEncoding): void;
+export declare function atomicWrite(filePath: string, content: string | Buffer, encoding?: BufferEncoding): void;
 /**
  * Atomically write JSON data to a file via tmp + rename.
  * Ensures a crash mid-write cannot leave a truncated file.
  */
 export declare function atomicWriteJson(filePath: string, data: unknown): void;
+/**
+ * 把已写好的文件原子移动到目标位置（rename 同设备即原子；EXDEV 跨设备
+ * 回退 copy + unlink）。失败时抛出，由调用方负责清理源文件（best-effort）。
+ * 用于入站媒体：下载已流式写入临时文件，落盘只需一次 move，不再复制进内存。
+ */
+export declare function atomicMoveFile(srcPath: string, destPath: string): void;