lark-remote 0.1.5 → 0.1.7

package/dist/common/truncate.js

@@ -0,0 +1,92 @@
+/**
+ * Shared text truncation primitives.
+ *
+ * Centralizes the two truncation utilities previously split across the card
+ * layer (`card-shared.ts` char-based `truncate` and `card/text-truncate.ts`
+ * byte-safe `truncateUtf8`). Session readers import from here instead of the
+ * card layer (fixing the layer inversion), and the card layer re-exports for
+ * backward compatibility.
+ */
+/** Default truncation suffix, shared across all consumers for UX consistency. */
+export const DEFAULT_TRUNCATE_SUFFIX = '…（已截断）';
+/**
+ * Max byte budget for a single session `tool_result` event's content when
+ * replaying an opencode session (L2 pre-fold). Pre-folding here bounds the
+ * in-memory `events[]` array and the intermediate card JSON so a single
+ * pathological tool_result never inflates the replay payload to megabytes.
+ */
+export const TOOL_RESULT_MAX_BYTES = 4000;
+/**
+ * Fit a UTF-8 string into `maxBytes` by iterating Unicode codepoints, never
+ * splitting a multi-byte sequence. When `fromEnd` is true, keeps the TAIL
+ * (useful for logs/tails); otherwise keeps the HEAD.
+ */
+export function fitUtf8(value, maxBytes, fromEnd = false) {
+    if (fromEnd) {
+        const codepoints = Array.from(value);
+        let bytes = 0;
+        let start = codepoints.length;
+        for (let i = codepoints.length - 1; i >= 0; i--) {
+            const cb = Buffer.byteLength(codepoints[i], 'utf8');
+            if (bytes + cb > maxBytes)
+                break;
+            bytes += cb;
+            start = i;
+        }
+        return codepoints.slice(start).join('');
+    }
+    // head 分支：惰性 for-of 迭代 + 字符串索引累计（O(1) 内存）。
+    let bytes = 0;
+    let end = 0;
+    for (const char of value) {
+        const cb = Buffer.byteLength(char, 'utf8');
+        if (bytes + cb > maxBytes)
+            break;
+        bytes += cb;
+        end += char.length;
+    }
+    return value.slice(0, end);
+}
+/**
+ * Truncate a UTF-8 string to fit within `maxBytes`, appending `suffix`
+ * (default `…（已截断）`) when truncation occurs. When `fromEnd` is true, keeps
+ * the tail and prepends the suffix (useful for "show the most recent N bytes").
+ */
+export function truncateUtf8(value, maxBytes, fromEnd = false, suffix = DEFAULT_TRUNCATE_SUFFIX) {
+    if (Buffer.byteLength(value, 'utf8') <= maxBytes)
+        return value;
+    const suffixBytes = Buffer.byteLength(suffix, 'utf8');
+    const budget = maxBytes - suffixBytes;
+    if (budget <= 0)
+        return suffix;
+    const truncated = fitUtf8(value, budget, fromEnd);
+    return fromEnd ? `${suffix}\n${truncated}` : `${truncated}${suffix}`;
+}
+/** Char-based truncation with optional suffix / whitespace normalization. */
+export function truncate(str, max, options) {
+    const suffix = options?.suffix ?? '…';
+    const normalize = options?.normalizeWhitespace ?? false;
+    let s = str;
+    if (normalize)
+        s = s.replace(/\s+/g, ' ').trim();
+    if (s.length <= max)
+        return s;
+    const suffixLen = suffix.length;
+    const budget = max - suffixLen;
+    if (budget <= 0)
+        return suffix;
+    // Iterate by Unicode codepoint (for...of) so the cut never lands inside a
+    // surrogate pair (P2-31 anchor: must not emit a lone surrogate).
+    let end = 0;
+    for (const ch of s) {
+        if (end + ch.length > budget)
+            break;
+        end += ch.length; // 1 (BMP) or 2 (surrogate pair) — slice lands on a boundary
+    }
+    return s.slice(0, end) + suffix;
+}
+/** Char-level tail keep (used for store-time caps, e.g. bash output). */
+export function keepTail(value, maxChars) {
+    return value.length <= maxChars ? value : value.slice(-maxChars);
+}
+//# sourceMappingURL=truncate.js.map

package/dist/config/codex-config.d.ts

@@ -80,7 +80,7 @@ export declare function getCodexCatalogModels(codexHome?: string): BundledModelI
 /**
  * Test utility: clear the catalog cache. Tests that exercise the bundled
  * command path (`--bundled`) directly use `invalidateCodexBundledTestCache`
- * from `codex-bundled-test-helpers.ts`.
+ * from `tests/lib/codex-bundled-test-helpers.ts`.
  */
 export declare function invalidateCodexBundledCache(): void;
 /**

package/dist/config/codex-config.js

@@ -208,7 +208,7 @@ export function getCodexCatalogModels(codexHome) {
 /**
  * Test utility: clear the catalog cache. Tests that exercise the bundled
  * command path (`--bundled`) directly use `invalidateCodexBundledTestCache`
- * from `codex-bundled-test-helpers.ts`.
+ * from `tests/lib/codex-bundled-test-helpers.ts`.
  */
 export function invalidateCodexBundledCache() {
     catalogCache = null;

package/dist/config/dir.js

@@ -79,7 +79,7 @@ export function printHelp() {
         'Options:',
         '  --config-dir <path>   自定义配置目录（默认 ~/.lark-remote，可用于同机多实例）',
         '  --settings <path>     指定 Claude 配置文件路径',
-        '  --dev                 开发模式：标记从源码 bun src/index.ts 启动（空闲超时自动停止据此选择拉起方式）',
+        '  --dev                 开发模式：标记从源码 bun src/index.ts 启动（看门狗据此选择拉起方式）',
         '  --update              升级到最新版本后退出（用于 cron/脚本自动化升级）',
         '  -h, --help            显示本帮助信息',
         '  -v, --version         显示版本号',

package/dist/config/index.d.ts

@@ -2,6 +2,12 @@ import { z } from 'zod';
 export { getConfigDir } from './dir.js';
 /** Valid effort values for Claude */
 export declare const CLAUDE_EFFORTS: readonly ["low", "medium", "high", "xhigh", "max"];
+/**
+ * Claude 官方 --permission-mode 枚举（claude --help 输出，2026-08 实测）。
+ * 额外支持 'default'：Claude settings.json 的官方未设置值，等价于不传
+ * --permission-mode（交互式默认：高风险工具逐个询问）。
+ */
+export declare const CLAUDE_PERMISSION_MODES: readonly ["default", "acceptEdits", "auto", "bypassPermissions", "manual", "dontAsk", "plan"];
 /** Valid thinking levels for Pi */
 export declare const PI_THINKING_LEVELS: readonly ["off", "minimal", "low", "medium", "high", "xhigh"];
 /**
@@ -10,6 +16,11 @@ export declare const PI_THINKING_LEVELS: readonly ["off", "minimal", "low", "med
  * instead of re-literalizing `5000` (Clean Code P3-1, G25).
  */
 export declare const DEFAULT_STOP_GRACE_MS: 5000;
+/** Codex app-server turn idle timeout default (minutes). */
+export declare const DEFAULT_TURN_IDLE_TIMEOUT_MINUTES: 10;
+/** 入站媒体默认配置（schema 默认与 connector 兜底共用，避免双源漂移）。 */
+export declare const DEFAULT_INBOUND_MEDIA_DIR_NAME = ".lark-remote-temp";
+export declare const DEFAULT_INBOUND_MEDIA_MAX_SIZE_MB = 50;
 /** 模型 ID → alias 映射。 */
 export declare const MODEL_ID_TO_ALIAS: Record<string, string>;
 /** alias → model ID 反向映射。 */
@@ -18,11 +29,22 @@ declare const ClaudeConfigSchema: z.ZodObject<{
     model: z.ZodDefault<z.ZodString>;
     effort: z.ZodDefault<z.ZodEnum<{
         medium: "medium";
-        max: "max";
         low: "low";
         high: "high";
         xhigh: "xhigh";
+        max: "max";
     }>>;
+    permissionMode: z.ZodDefault<z.ZodEnum<{
+        default: "default";
+        plan: "plan";
+        bypassPermissions: "bypassPermissions";
+        auto: "auto";
+        manual: "manual";
+        acceptEdits: "acceptEdits";
+        dontAsk: "dontAsk";
+    }>>;
+    approvalTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    idleTtlMinutes: z.ZodDefault<z.ZodNumber>;
     stopGraceMs: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strip>;
 /** Codex-specific configuration. */
@@ -30,12 +52,31 @@ export declare const CodexConfigSchema: z.ZodObject<{
     model: z.ZodOptional<z.ZodString>;
     modelProvider: z.ZodOptional<z.ZodString>;
     reasoningEffort: z.ZodOptional<z.ZodString>;
-    stopGraceMs: z.ZodDefault<z.ZodNumber>;
+    approvalPolicy: z.ZodDefault<z.ZodEnum<{
+        untrusted: "untrusted";
+        "on-request": "on-request";
+        never: "never";
+    }>>;
+    sandbox: z.ZodDefault<z.ZodEnum<{
+        "read-only": "read-only";
+        "workspace-write": "workspace-write";
+        "danger-full-access": "danger-full-access";
+    }>>;
+    appServer: z.ZodOptional<z.ZodObject<{
+        binary: z.ZodDefault<z.ZodString>;
+        requestTimeoutMs: z.ZodDefault<z.ZodNumber>;
+        idleTtlMs: z.ZodDefault<z.ZodNumber>;
+        turnIdleTimeoutMinutes: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 /** OpenCode-specific configuration (run mode: opencode run --format json --auto). */
 declare const OpencodeConfigSchema: z.ZodObject<{
     providerID: z.ZodDefault<z.ZodString>;
     modelID: z.ZodDefault<z.ZodString>;
+    mode: z.ZodDefault<z.ZodEnum<{
+        plan: "plan";
+        build: "build";
+    }>>;
 }, z.core.$strip>;
 /** Pi-specific configuration. pi is a spawn-per-message CLI like Claude. */
 declare const PiConfigSchema: z.ZodObject<{
@@ -51,14 +92,25 @@ declare const PiConfigSchema: z.ZodObject<{
     }>>;
     tools: z.ZodDefault<z.ZodString>;
 }, z.core.$strip>;
-/** Kimi-specific configuration. kimi is a spawn-per-message CLI. */
+/** Kimi-specific configuration. Pure ACP mode (persistent `kimi acp` connection). */
 declare const KimiConfigSchema: z.ZodObject<{
     model: z.ZodDefault<z.ZodString>;
     thinkingEffort: z.ZodDefault<z.ZodEnum<{
-        max: "max";
         low: "low";
         high: "high";
+        max: "max";
     }>>;
+    permissionMode: z.ZodDefault<z.ZodEnum<{
+        auto: "auto";
+        yolo: "yolo";
+        manual: "manual";
+    }>>;
+    acp: z.ZodOptional<z.ZodObject<{
+        binary: z.ZodDefault<z.ZodString>;
+        requestTimeoutMs: z.ZodDefault<z.ZodNumber>;
+        idleTtlMs: z.ZodDefault<z.ZodNumber>;
+        turnIdleTimeoutMinutes: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export declare const AppConfigSchema: z.ZodObject<{
     feishu: z.ZodObject<{
@@ -69,23 +121,53 @@ export declare const AppConfigSchema: z.ZodObject<{
         model: z.ZodDefault<z.ZodString>;
         effort: z.ZodDefault<z.ZodEnum<{
             medium: "medium";
-            max: "max";
             low: "low";
             high: "high";
             xhigh: "xhigh";
+            max: "max";
+        }>>;
+        permissionMode: z.ZodDefault<z.ZodEnum<{
+            default: "default";
+            plan: "plan";
+            bypassPermissions: "bypassPermissions";
+            auto: "auto";
+            manual: "manual";
+            acceptEdits: "acceptEdits";
+            dontAsk: "dontAsk";
         }>>;
+        approvalTimeoutMs: z.ZodDefault<z.ZodNumber>;
+        idleTtlMinutes: z.ZodDefault<z.ZodNumber>;
         stopGraceMs: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strip>>;
-    agents: z.ZodOptional<z.ZodObject<{
-        codex: z.ZodOptional<z.ZodObject<{
+    agents: z.ZodDefault<z.ZodObject<{
+        codex: z.ZodDefault<z.ZodObject<{
             model: z.ZodOptional<z.ZodString>;
             modelProvider: z.ZodOptional<z.ZodString>;
             reasoningEffort: z.ZodOptional<z.ZodString>;
-            stopGraceMs: z.ZodDefault<z.ZodNumber>;
+            approvalPolicy: z.ZodDefault<z.ZodEnum<{
+                untrusted: "untrusted";
+                "on-request": "on-request";
+                never: "never";
+            }>>;
+            sandbox: z.ZodDefault<z.ZodEnum<{
+                "read-only": "read-only";
+                "workspace-write": "workspace-write";
+                "danger-full-access": "danger-full-access";
+            }>>;
+            appServer: z.ZodOptional<z.ZodObject<{
+                binary: z.ZodDefault<z.ZodString>;
+                requestTimeoutMs: z.ZodDefault<z.ZodNumber>;
+                idleTtlMs: z.ZodDefault<z.ZodNumber>;
+                turnIdleTimeoutMinutes: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip>>;
         }, z.core.$strip>>;
         opencode: z.ZodOptional<z.ZodObject<{
             providerID: z.ZodDefault<z.ZodString>;
             modelID: z.ZodDefault<z.ZodString>;
+            mode: z.ZodDefault<z.ZodEnum<{
+                plan: "plan";
+                build: "build";
+            }>>;
         }, z.core.$strip>>;
         pi: z.ZodOptional<z.ZodObject<{
             provider: z.ZodDefault<z.ZodString>;
@@ -103,10 +185,21 @@ export declare const AppConfigSchema: z.ZodObject<{
         kimi: z.ZodOptional<z.ZodObject<{
             model: z.ZodDefault<z.ZodString>;
             thinkingEffort: z.ZodDefault<z.ZodEnum<{
-                max: "max";
                 low: "low";
                 high: "high";
+                max: "max";
+            }>>;
+            permissionMode: z.ZodDefault<z.ZodEnum<{
+                auto: "auto";
+                yolo: "yolo";
+                manual: "manual";
             }>>;
+            acp: z.ZodOptional<z.ZodObject<{
+                binary: z.ZodDefault<z.ZodString>;
+                requestTimeoutMs: z.ZodDefault<z.ZodNumber>;
+                idleTtlMs: z.ZodDefault<z.ZodNumber>;
+                turnIdleTimeoutMinutes: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     agentChoices: z.ZodOptional<z.ZodObject<{
@@ -144,6 +237,11 @@ export declare const AppConfigSchema: z.ZodObject<{
             error: "error";
         }>>;
     }, z.core.$strip>>;
+    inboundMedia: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        dirName: z.ZodDefault<z.ZodString>;
+        maxFileSizeMb: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
     defaultAgent: z.ZodDefault<z.ZodEnum<{
         claude: "claude";
         codex: "codex";
@@ -175,6 +273,15 @@ export declare function mapAgentKey(key: string): string;
  * config 路径中不存在，写/删/读三条路径统一拒绝。
  */
 export declare function assertSafeKeyPart(part: string): void;
+/**
+ * 按 dot-separated key 下钻到目标键的父容器（不含最后一段）。
+ *
+ * - create=true：中间缺失/非对象段自动补 `{}`（set 语义）
+ * - create=false：中间缺失/非对象段返回 undefined（get/delete 语义）
+ *
+ * 危险段（__proto__/prototype/constructor）在每段统一拒绝。
+ */
+export declare function walkNestedContainer(target: unknown, parts: string[], create: boolean): Record<string, unknown> | undefined;
 /** Get a nested value from config by dot-separated key, e.g. "feishu.appId" */
 export declare function getConfigValue(config: AppConfig, key: string): unknown;
 /** Set a nested value in config by dot-separated key, write back to YAML file */

package/dist/config/index.js

@@ -9,6 +9,20 @@ export { getConfigDir } from './dir.js';
 import { KIMI_THINKING_EFFORTS } from './kimi-config.js';
 /** Valid effort values for Claude */
 export const CLAUDE_EFFORTS = ['low', 'medium', 'high', 'xhigh', 'max'];
+/**
+ * Claude 官方 --permission-mode 枚举（claude --help 输出，2026-08 实测）。
+ * 额外支持 'default'：Claude settings.json 的官方未设置值，等价于不传
+ * --permission-mode（交互式默认：高风险工具逐个询问）。
+ */
+export const CLAUDE_PERMISSION_MODES = [
+    'default',
+    'acceptEdits',
+    'auto',
+    'bypassPermissions',
+    'manual',
+    'dontAsk',
+    'plan',
+];
 /** Valid thinking levels for Pi */
 export const PI_THINKING_LEVELS = ['off', 'minimal', 'low', 'medium', 'high', 'xhigh'];
 /** 默认值常量：schema 与 template 共享，避免双源不一致（G25 Magic Numbers）。 */
@@ -16,6 +30,11 @@ const DEFAULTS = {
     CLAUDE_MODEL: 'claude-opus-4-8',
     STOP_GRACE_MS: 5000,
     IDLE_WATCHDOG_MINUTES: 15,
+    TURN_IDLE_TIMEOUT_MINUTES: 10,
+    /** 审批超时默认 5 分钟（对齐 codex 红线：勿随意改短）。 */
+    APPROVAL_TIMEOUT_MS: 5 * 60 * 1000,
+    /** Claude 会话级空闲回收默认 30 分钟（对齐 codex appServer.idleTtlMs）。 */
+    CLAUDE_IDLE_TTL_MINUTES: 30,
 };
 /**
  * Default SIGTERM→SIGKILL grace period (ms). Exported so runners (SpawningRunner)
@@ -23,6 +42,11 @@ const DEFAULTS = {
  * instead of re-literalizing `5000` (Clean Code P3-1, G25).
  */
 export const DEFAULT_STOP_GRACE_MS = DEFAULTS.STOP_GRACE_MS;
+/** Codex app-server turn idle timeout default (minutes). */
+export const DEFAULT_TURN_IDLE_TIMEOUT_MINUTES = DEFAULTS.TURN_IDLE_TIMEOUT_MINUTES;
+/** 入站媒体默认配置（schema 默认与 connector 兜底共用，避免双源漂移）。 */
+export const DEFAULT_INBOUND_MEDIA_DIR_NAME = '.lark-remote-temp';
+export const DEFAULT_INBOUND_MEDIA_MAX_SIZE_MB = 50;
 /** 模型 ID → alias 映射。 */
 export const MODEL_ID_TO_ALIAS = {
     'claude-opus-4-8': 'opus',
@@ -44,16 +68,37 @@ const FeishuConfigSchema = z.object({
 const ClaudeConfigSchema = z.object({
     model: z.string().default(DEFAULTS.CLAUDE_MODEL),
     effort: z.enum(CLAUDE_EFFORTS).default('medium'),
-    // permissionMode 硬编码为 bypassPermissions（runner 内部），不通过 config 配置
+    /**
+     * Claude 权限模式（官方 --permission-mode 枚举 + 'default'=省略该参数）。
+     * 默认 bypassPermissions 保持现有行为（无审批卡）；配置为其他值后激活
+     * 交互式审批（control_request → run 卡审批区）。
+     */
+    permissionMode: z.enum(CLAUDE_PERMISSION_MODES).default('bypassPermissions'),
+    /** 审批请求超时（ms），默认 5 分钟；超时自动发送 cancel 并中断 turn。
+     *  0 = 立即过期（fail-fast，避免审批永久挂起），不推荐；勿随意改短。 */
+    approvalTimeoutMs: z.number().int().min(0).default(DEFAULTS.APPROVAL_TIMEOUT_MS),
+    /** 会话级空闲回收（分钟）：turn 之间无新消息超过该窗口则停止长驻进程。 */
+    idleTtlMinutes: z.number().int().min(0).default(DEFAULTS.CLAUDE_IDLE_TTL_MINUTES),
     stopGraceMs: z.number().int().min(0).default(DEFAULTS.STOP_GRACE_MS),
 });
+/** Codex app-server connection configuration. */
+const CodexAppServerConfigSchema = z.object({
+    /** Path to the codex binary for app-server mode. */
+    binary: z.string().default('codex'),
+    /** Request timeout in milliseconds. */
+    requestTimeoutMs: z.number().int().min(0).default(60000),
+    /** Idle TTL for connection pool in milliseconds. */
+    idleTtlMs: z.number().int().min(0).default(1800000),
+    /** Turn idle timeout in minutes: no app-server output for this long triggers
+     *  turn/interrupt and fails the run. 0 disables the timeout. */
+    turnIdleTimeoutMinutes: z.number().int().min(0).default(DEFAULT_TURN_IDLE_TIMEOUT_MINUTES),
+});
 /** Codex-specific configuration. */
 export const CodexConfigSchema = z.object({
     /** model to use. Undefined → codex reads from its config.toml. */
     model: z.string().optional(),
     /** model provider, e.g. 'volcengine-coding-plan'. Undefined → codex reads from its config.toml. */
     modelProvider: z.string().optional(),
-    // approvalPolicy 和 sandboxPolicy 在 runner 内硬编码（exec 模式使用 approval_policy=never）
     /**
      * Reasoning effort level。codex 标准档位 minimal/low/medium/high/xhigh/max/ultra
      * 之外还接受 none 与模型自定义值（ReasoningEffort::Custom），目录声明什么就存什么
@@ -61,8 +106,14 @@ export const CodexConfigSchema = z.object({
      */
     // codex 拒绝空串档位（ReasoningEffort::from_str "" → Err，P3-3）
     reasoningEffort: z.string().min(1).optional(),
-    /** Stop grace period in milliseconds. */
-    stopGraceMs: z.number().int().min(0).default(5000),
+    /** Approval policy (Codex 官方 AskForApproval 标准值). 默认 on-request。 */
+    approvalPolicy: z.enum(['untrusted', 'on-request', 'never']).default('on-request'),
+    /** Sandbox mode (Codex 官方 SandboxMode 标准值). 默认 workspace-write。 */
+    sandbox: z
+        .enum(['read-only', 'workspace-write', 'danger-full-access'])
+        .default('workspace-write'),
+    /** App-server connection configuration. */
+    appServer: CodexAppServerConfigSchema.optional(),
 });
 /** OpenCode-specific configuration (run mode: opencode run --format json --auto). */
 const OpencodeConfigSchema = z.object({
@@ -70,6 +121,8 @@ const OpencodeConfigSchema = z.object({
     providerID: z.string().default('anthropic'),
     /** Model ID for the LLM backend (e.g. 'claude-sonnet-4-20250514'). */
     modelID: z.string().default('claude-sonnet-4-20250514'),
+    /** Session mode (opencode agent name): 'build' (default) or 'plan'. */
+    mode: z.enum(['build', 'plan']).default('build'),
 });
 /** Pi-specific configuration. pi is a spawn-per-message CLI like Claude. */
 const PiConfigSchema = z.object({
@@ -82,16 +135,35 @@ const PiConfigSchema = z.object({
     /** Comma-separated tool whitelist. */
     tools: z.string().default('read,bash,edit,write,grep,find,ls'),
 });
-/** Kimi-specific configuration. kimi is a spawn-per-message CLI. */
+/** Kimi-specific configuration. Pure ACP mode (persistent `kimi acp` connection). */
 const KimiConfigSchema = z.object({
     /** Model ID or alias, e.g. 'kimi-code/k3'. */
     model: z.string().default('kimi-code/k3'),
     /** Thinking effort: 'on', 'max'. */
     thinkingEffort: z.enum(KIMI_THINKING_EFFORTS).default('max'),
+    /** Permission mode: 'manual' (approve each), 'auto' (engine decides), 'yolo' (allow all). */
+    permissionMode: z.enum(['manual', 'auto', 'yolo']).default('manual'),
+    /** ACP sub-configuration. */
+    acp: z
+        .object({
+        /** Path to kimi binary for ACP mode. */
+        binary: z.string().default('kimi'),
+        /** Request timeout in milliseconds. */
+        requestTimeoutMs: z.number().int().min(0).default(60000),
+        /** Idle TTL for ACP connection in milliseconds. */
+        idleTtlMs: z.number().int().min(0).default(1800000),
+        /** Turn idle timeout in minutes (0 disables). */
+        turnIdleTimeoutMinutes: z.number().int().min(0).default(DEFAULT_TURN_IDLE_TIMEOUT_MINUTES),
+    })
+        .optional(),
 });
+/** 首次启动的默认 agents 配置：codex 默认 app-server / on-request / workspace-write。 */
+const DEFAULT_AGENTS_CONFIG = {
+    codex: CodexConfigSchema.parse({}),
+};
 /** Agents configuration: per-agent settings keyed by agent kind. */
 const AgentsConfigSchema = z.object({
-    codex: CodexConfigSchema.optional(),
+    codex: CodexConfigSchema.default(DEFAULT_AGENTS_CONFIG.codex),
     opencode: OpencodeConfigSchema.optional(),
     pi: PiConfigSchema.optional(),
     kimi: KimiConfigSchema.optional(),
@@ -112,6 +184,15 @@ const OutputConfigSchema = z.object({
 const LoggingConfigSchema = z.object({
     level: z.enum(['debug', 'info', 'warn', 'error']).default('info'),
 });
+/** 入站媒体落盘配置（预留可配置，默认即可用）。 */
+const InboundMediaConfigSchema = z.object({
+    /** 是否启用图片/文件落盘。 */
+    enabled: z.boolean().default(true),
+    /** 落盘根目录名（位于当前 cwd 下）。 */
+    dirName: z.string().min(1).default(DEFAULT_INBOUND_MEDIA_DIR_NAME),
+    /** 单文件大小上限（MiB）。 */
+    maxFileSizeMb: z.number().int().min(1).default(DEFAULT_INBOUND_MEDIA_MAX_SIZE_MB),
+});
 /** Agent-specific saved choices for quick switching. */
 const AgentChoicesSchema = z.object({
     codex: z
@@ -144,13 +225,15 @@ export const AppConfigSchema = z.object({
     feishu: FeishuConfigSchema,
     /** Claude config (top-level; other agents live under `agents`). */
     claude: ClaudeConfigSchema.default(ClaudeConfigSchema.parse({})),
-    /** Per-agent configuration for non-claude agents. */
-    agents: AgentsConfigSchema.optional(),
+    /** Per-agent configuration for non-claude agents. 首次启动默认含 codex（app-server / workspace-write / on-request）。 */
+    agents: AgentsConfigSchema.default(DEFAULT_AGENTS_CONFIG),
     /** Agent-specific saved choices for quick switching. */
     agentChoices: AgentChoicesSchema.optional(),
     idle: IdleConfigSchema.default(IdleConfigSchema.parse({})),
     output: OutputConfigSchema.default(OutputConfigSchema.parse({})),
     logging: LoggingConfigSchema.default(LoggingConfigSchema.parse({})),
+    /** 入站媒体（图片/文件）落盘配置。 */
+    inboundMedia: InboundMediaConfigSchema.default(InboundMediaConfigSchema.parse({})),
     /** Default agent for new runs. */
     defaultAgent: z.enum(['claude', 'codex', 'opencode', 'pi', 'kimi']).default('claude'),
     /** Check for updates on bridge startup (default: false). */
@@ -163,6 +246,9 @@ const TEMPLATE = `feishu:
 claude:
   model: ${DEFAULTS.CLAUDE_MODEL}
   effort: medium
+  permissionMode: bypassPermissions
+  approvalTimeoutMs: ${DEFAULTS.APPROVAL_TIMEOUT_MS}
+  idleTtlMinutes: ${DEFAULTS.CLAUDE_IDLE_TTL_MINUTES}
   stopGraceMs: ${DEFAULTS.STOP_GRACE_MS}
 
 idle:
@@ -250,33 +336,45 @@ export function assertSafeKeyPart(part) {
         throw new Error(`[lark-remote] invalid config key segment: '${part}'`);
     }
 }
-/** 在对象上按 dot-separated key 设置嵌套值（仅修改内存对象，不写盘）。 */
-function setNestedValue(target, key, value) {
-    const parts = key.split('.');
+/**
+ * 按 dot-separated key 下钻到目标键的父容器（不含最后一段）。
+ *
+ * - create=true：中间缺失/非对象段自动补 `{}`（set 语义）
+ * - create=false：中间缺失/非对象段返回 undefined（get/delete 语义）
+ *
+ * 危险段（__proto__/prototype/constructor）在每段统一拒绝。
+ */
+export function walkNestedContainer(target, parts, create) {
     let current = target;
     for (let i = 0; i < parts.length - 1; i++) {
         assertSafeKeyPart(parts[i]);
         const next = current[parts[i]];
         if (next == null || typeof next !== 'object') {
+            if (!create)
+                return undefined;
             current[parts[i]] = {};
         }
         current = current[parts[i]];
     }
+    return current;
+}
+/** 在对象上按 dot-separated key 设置嵌套值（仅修改内存对象，不写盘）。 */
+function setNestedValue(target, key, value) {
+    const parts = key.split('.');
+    const container = walkNestedContainer(target, parts, true);
     const lastPart = parts[parts.length - 1];
     assertSafeKeyPart(lastPart);
-    current[lastPart] = value;
+    container[lastPart] = value;
 }
 /** Get a nested value from config by dot-separated key, e.g. "feishu.appId" */
 export function getConfigValue(config, key) {
     const parts = key.split('.');
-    let current = config;
-    for (const part of parts) {
-        assertSafeKeyPart(part);
-        if (current == null || typeof current !== 'object')
-            return undefined;
-        current = current[part];
-    }
-    return current;
+    const container = walkNestedContainer(config, parts, false);
+    if (!container)
+        return undefined;
+    const lastPart = parts[parts.length - 1];
+    assertSafeKeyPart(lastPart);
+    return container[lastPart];
 }
 /** Set a nested value in config by dot-separated key, write back to YAML file */
 export function setConfigValue(configPath, config, key, value) {
@@ -315,17 +413,12 @@ export function setConfigValues(configPath, config, updates) {
  */
 function deleteNestedValue(target, key) {
     const parts = key.split('.');
-    let current = target;
-    for (let i = 0; i < parts.length - 1; i++) {
-        assertSafeKeyPart(parts[i]);
-        const next = current[parts[i]];
-        if (next == null || typeof next !== 'object')
-            return;
-        current = next;
-    }
+    const container = walkNestedContainer(target, parts, false);
+    if (!container)
+        return;
     const lastPart = parts[parts.length - 1];
     assertSafeKeyPart(lastPart);
-    delete current[lastPart];
+    delete container[lastPart];
 }
 export function getAgentConfig(config, kind) {
     if (kind === 'claude') {