lark-remote 0.1.6 → 0.1.7

package/dist/card/text-truncate.d.ts

@@ -1,20 +1,27 @@
 /**
  * UTF-8 byte-safe text truncation primitives.
  *
- * Shared by the live run renderer (`run-renderer.ts`), the static card budget
- * enforcer (`card-budget.ts`), and the opencode session reader
- * (`src/session/opencode/sessions.ts`) so that huge tool outputs are folded at a single
- * place instead of being reimplemented per consumer.
+ * The core `fitUtf8` / `truncateUtf8` / `DEFAULT_TRUNCATE_SUFFIX` primitives
+ * live in `src/common/truncate.ts` (shared with session readers to avoid a
+ * card→session layer inversion); this module re-exports them and adds the
+ * card-specific markdown-table helpers.
  *
  * Why byte-safe: Feishu card size limits are measured in UTF-8 bytes, and a
  * naive `str.slice(0, n)` can split a multi-byte CJK/emoji codepoint, yielding
  * invalid UTF-8. `fitUtf8` iterates by Unicode codepoint (via `Array.from` /
  * `for...of`) so it never breaks a surrogate pair or a multi-byte sequence.
  */
+import { DEFAULT_TRUNCATE_SUFFIX, truncateUtf8 } from '../common/truncate.js';
+export { DEFAULT_TRUNCATE_SUFFIX, truncateUtf8 };
 /** Feishu 11310 limit: max markdown tables per card. */
 export declare const FEISHU_MAX_TABLES = 5;
-/** Default truncation suffix, shared across all consumers for UX consistency. */
-export declare const DEFAULT_TRUNCATE_SUFFIX = "\u2026\uFF08\u5DF2\u622A\u65AD\uFF09";
+/**
+ * Feishu 单卡字节上限（安全阈值）。
+ *
+ * 供 run-renderer（流式卡）、card-budget（静态卡）、bash-renderer（bash 卡）
+ * 共用，避免三处各自定义后数值漂移。
+ */
+export declare const CARD_BUDGET_BYTES = 28000;
 /**
  * Max byte budget for a single session `tool_result` event's content when
  * replaying an opencode session (L2 pre-fold). The static card budget enforcer
@@ -24,12 +31,6 @@ export declare const DEFAULT_TRUNCATE_SUFFIX = "\u2026\uFF08\u5DF2\u622A\u65AD\u
  * 500KB file listing) never inflates the replay payload to megabytes.
  */
 export declare const TOOL_RESULT_MAX_BYTES = 4000;
-/**
- * Truncate a UTF-8 string to fit within `maxBytes`, appending `suffix`
- * (default `…（已截断）`) when truncation occurs. When `fromEnd` is true, keeps
- * the tail and prepends the suffix (useful for "show the most recent N bytes").
- */
-export declare function truncateUtf8(value: string, maxBytes: number, fromEnd?: boolean, suffix?: string): string;
 /**
  * Count the number of markdown tables in a string.
  *

package/dist/card/text-truncate.js

@@ -1,20 +1,27 @@
 /**
  * UTF-8 byte-safe text truncation primitives.
  *
- * Shared by the live run renderer (`run-renderer.ts`), the static card budget
- * enforcer (`card-budget.ts`), and the opencode session reader
- * (`src/session/opencode/sessions.ts`) so that huge tool outputs are folded at a single
- * place instead of being reimplemented per consumer.
+ * The core `fitUtf8` / `truncateUtf8` / `DEFAULT_TRUNCATE_SUFFIX` primitives
+ * live in `src/common/truncate.ts` (shared with session readers to avoid a
+ * card→session layer inversion); this module re-exports them and adds the
+ * card-specific markdown-table helpers.
  *
  * Why byte-safe: Feishu card size limits are measured in UTF-8 bytes, and a
  * naive `str.slice(0, n)` can split a multi-byte CJK/emoji codepoint, yielding
  * invalid UTF-8. `fitUtf8` iterates by Unicode codepoint (via `Array.from` /
  * `for...of`) so it never breaks a surrogate pair or a multi-byte sequence.
  */
+import { DEFAULT_TRUNCATE_SUFFIX, truncateUtf8 } from '../common/truncate.js';
+export { DEFAULT_TRUNCATE_SUFFIX, truncateUtf8 };
 /** Feishu 11310 limit: max markdown tables per card. */
 export const FEISHU_MAX_TABLES = 5;
-/** Default truncation suffix, shared across all consumers for UX consistency. */
-export const DEFAULT_TRUNCATE_SUFFIX = '…（已截断）';
+/**
+ * Feishu 单卡字节上限（安全阈值）。
+ *
+ * 供 run-renderer（流式卡）、card-budget（静态卡）、bash-renderer（bash 卡）
+ * 共用，避免三处各自定义后数值漂移。
+ */
+export const CARD_BUDGET_BYTES = 28_000;
 /**
  * Max byte budget for a single session `tool_result` event's content when
  * replaying an opencode session (L2 pre-fold). The static card budget enforcer
@@ -24,63 +31,6 @@ export const DEFAULT_TRUNCATE_SUFFIX = '…（已截断）';
  * 500KB file listing) never inflates the replay payload to megabytes.
  */
 export const TOOL_RESULT_MAX_BYTES = 4000;
-/**
- * Fit a UTF-8 string into `maxBytes` by iterating Unicode codepoints, never
- * splitting a multi-byte sequence. When `fromEnd` is true, keeps the TAIL
- * (useful for logs/tails); otherwise keeps the HEAD.
- *
- * P1-2 (2026-08-02): 单遍累计单字符字节数，替代逐字符 `Buffer.byteLength(result +
- * char)` + `result += char`（后者每轮新建并扫描不断增长的字符串，O(budget²)）。
- * 字节长度对拼接可加（byteLength(a+b) = byteLength(a) + byteLength(b)），故累计
- * 与旧实现的逐字符判断逐字节等价；最后一次 slice/join 物化结果。混合 CJK/emoji
- * 样本实测 ~150× 提速（33.7ms/次 → 0.2ms/次，见 tests/anchor/priority/p0-fit-utf8.test.ts）。
- */
-function fitUtf8(value, maxBytes, fromEnd = false) {
-    if (fromEnd) {
-        // tail 分支：需要从末尾找截断起点，Array.from 一次物化（旧实现同样 Array.from().reverse()，
-        // 无内存回归）；数组仅用于定位，之后 slice+join。
-        const codepoints = Array.from(value);
-        let bytes = 0;
-        let start = codepoints.length;
-        for (let i = codepoints.length - 1; i >= 0; i--) {
-            const cb = Buffer.byteLength(codepoints[i], 'utf8');
-            if (bytes + cb > maxBytes)
-                break;
-            bytes += cb;
-            start = i;
-        }
-        return codepoints.slice(start).join('');
-    }
-    // head 分支：惰性 for-of 迭代 + 字符串索引累计（旧实现同 O(1) 内存）。
-    // 不物化数组——opencode-sessions 会对 MB 级 tool_result 做 head 截断，
-    // Array.from 全量分配会引入不必要的瞬态内存。
-    let bytes = 0;
-    let end = 0;
-    for (const char of value) {
-        const cb = Buffer.byteLength(char, 'utf8');
-        if (bytes + cb > maxBytes)
-            break;
-        bytes += cb;
-        end += char.length; // for-of 产出完整码点；char.length 为 1 或 2（代理对），
-        // end 落在码点边界上，value.slice(0, end) 不会切分代理对
-    }
-    return value.slice(0, end);
-}
-/**
- * Truncate a UTF-8 string to fit within `maxBytes`, appending `suffix`
- * (default `…（已截断）`) when truncation occurs. When `fromEnd` is true, keeps
- * the tail and prepends the suffix (useful for "show the most recent N bytes").
- */
-export function truncateUtf8(value, maxBytes, fromEnd = false, suffix = DEFAULT_TRUNCATE_SUFFIX) {
-    if (Buffer.byteLength(value, 'utf8') <= maxBytes)
-        return value;
-    const suffixBytes = Buffer.byteLength(suffix, 'utf8');
-    const budget = maxBytes - suffixBytes;
-    if (budget <= 0)
-        return suffix;
-    const truncated = fitUtf8(value, budget, fromEnd);
-    return fromEnd ? `${suffix}\n${truncated}` : `${truncated}${suffix}`;
-}
 /**
  * Count the number of markdown tables in a string.
  *

package/dist/common/fs.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Unlink a file, silently ignoring ENOENT and other errors.
+ *
+ * Use for cleanup paths (pid files, temp files, stale locks) where the
+ * file may already be gone or was never created — a missing file is not
+ * an error worth propagating.
+ */
+export declare function silentlyUnlink(path: string): void;

package/dist/common/fs.js

@@ -0,0 +1,17 @@
+import fs from 'node:fs';
+/**
+ * Unlink a file, silently ignoring ENOENT and other errors.
+ *
+ * Use for cleanup paths (pid files, temp files, stale locks) where the
+ * file may already be gone or was never created — a missing file is not
+ * an error worth propagating.
+ */
+export function silentlyUnlink(path) {
+    try {
+        fs.unlinkSync(path);
+    }
+    catch {
+        /* ignore — file may not exist */
+    }
+}
+//# sourceMappingURL=fs.js.map

package/dist/common/guards.d.ts

@@ -11,27 +11,7 @@
  * Used as a prerequisite before accessing string-keyed properties.
  */
 export declare function isRecord(v: unknown): v is Record<string, unknown>;
-/**
- * Narrows `v` to `Record<string, unknown>` when it is a non-null object,
- * otherwise returns `undefined`.
- */
-export declare function recordValue(v: unknown): Record<string, unknown> | undefined;
 /**
  * Returns the string value when `v` is a `string`, otherwise `undefined`.
  */
 export declare function stringValue(v: unknown): string | undefined;
-/**
- * Returns the number value when `v` is a `number`, otherwise `undefined`.
- */
-export declare function numberValue(v: unknown): number | undefined;
-/**
- * Extracts a human-readable error message from an opaque error object.
- *
- * Priority:
- *  1. `raw.message`  (string)
- *  2. `raw.error.message`  (string, when `raw.error` is a record)
- *  3. `raw.error.data.message`  (string, AI SDK wraps provider errors as {error:{data:{message}}})
- *  4. `raw.error` itself  (when it is a string)
- *  5. `fallback`
- */
-export declare function extractErrorMessage(raw: Record<string, unknown>, fallback: string): string;

package/dist/common/guards.js

@@ -13,53 +13,10 @@
 export function isRecord(v) {
     return typeof v === 'object' && v !== null;
 }
-/**
- * Narrows `v` to `Record<string, unknown>` when it is a non-null object,
- * otherwise returns `undefined`.
- */
-export function recordValue(v) {
-    return isRecord(v) ? v : undefined;
-}
 /**
  * Returns the string value when `v` is a `string`, otherwise `undefined`.
  */
 export function stringValue(v) {
     return typeof v === 'string' ? v : undefined;
 }
-/**
- * Returns the number value when `v` is a `number`, otherwise `undefined`.
- */
-export function numberValue(v) {
-    return typeof v === 'number' ? v : undefined;
-}
-/**
- * Extracts a human-readable error message from an opaque error object.
- *
- * Priority:
- *  1. `raw.message`  (string)
- *  2. `raw.error.message`  (string, when `raw.error` is a record)
- *  3. `raw.error.data.message`  (string, AI SDK wraps provider errors as {error:{data:{message}}})
- *  4. `raw.error` itself  (when it is a string)
- *  5. `fallback`
- */
-export function extractErrorMessage(raw, fallback) {
-    const msg = stringValue(raw.message);
-    if (msg !== undefined)
-        return msg;
-    const err = raw.error;
-    if (isRecord(err)) {
-        const subMsg = stringValue(err.message);
-        if (subMsg !== undefined)
-            return subMsg;
-        const data = recordValue(err.data);
-        if (data) {
-            const dataMsg = stringValue(data.message);
-            if (dataMsg !== undefined)
-                return dataMsg;
-        }
-    }
-    if (typeof err === 'string')
-        return err;
-    return fallback;
-}
 //# sourceMappingURL=guards.js.map

package/dist/common/sleep.d.ts

@@ -0,0 +1,2 @@
+/** Wait for `ms` milliseconds. */
+export declare function sleep(ms: number): Promise<void>;

package/dist/common/sleep.js

@@ -0,0 +1,5 @@
+/** Wait for `ms` milliseconds. */
+export function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=sleep.js.map

package/dist/common/truncate.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Shared text truncation primitives.
+ *
+ * Centralizes the two truncation utilities previously split across the card
+ * layer (`card-shared.ts` char-based `truncate` and `card/text-truncate.ts`
+ * byte-safe `truncateUtf8`). Session readers import from here instead of the
+ * card layer (fixing the layer inversion), and the card layer re-exports for
+ * backward compatibility.
+ */
+/** Default truncation suffix, shared across all consumers for UX consistency. */
+export declare const DEFAULT_TRUNCATE_SUFFIX = "\u2026\uFF08\u5DF2\u622A\u65AD\uFF09";
+/**
+ * Max byte budget for a single session `tool_result` event's content when
+ * replaying an opencode session (L2 pre-fold). Pre-folding here bounds the
+ * in-memory `events[]` array and the intermediate card JSON so a single
+ * pathological tool_result never inflates the replay payload to megabytes.
+ */
+export declare const TOOL_RESULT_MAX_BYTES = 4000;
+/**
+ * Fit a UTF-8 string into `maxBytes` by iterating Unicode codepoints, never
+ * splitting a multi-byte sequence. When `fromEnd` is true, keeps the TAIL
+ * (useful for logs/tails); otherwise keeps the HEAD.
+ */
+export declare function fitUtf8(value: string, maxBytes: number, fromEnd?: boolean): string;
+/**
+ * Truncate a UTF-8 string to fit within `maxBytes`, appending `suffix`
+ * (default `…（已截断）`) when truncation occurs. When `fromEnd` is true, keeps
+ * the tail and prepends the suffix (useful for "show the most recent N bytes").
+ */
+export declare function truncateUtf8(value: string, maxBytes: number, fromEnd?: boolean, suffix?: string): string;
+interface TruncateOptions {
+    suffix?: string;
+    normalizeWhitespace?: boolean;
+}
+/** Char-based truncation with optional suffix / whitespace normalization. */
+export declare function truncate(str: string, max: number, options?: TruncateOptions): string;
+/** Char-level tail keep (used for store-time caps, e.g. bash output). */
+export declare function keepTail(value: string, maxChars: number): string;
+export {};

package/dist/common/truncate.js

@@ -0,0 +1,92 @@
+/**
+ * Shared text truncation primitives.
+ *
+ * Centralizes the two truncation utilities previously split across the card
+ * layer (`card-shared.ts` char-based `truncate` and `card/text-truncate.ts`
+ * byte-safe `truncateUtf8`). Session readers import from here instead of the
+ * card layer (fixing the layer inversion), and the card layer re-exports for
+ * backward compatibility.
+ */
+/** Default truncation suffix, shared across all consumers for UX consistency. */
+export const DEFAULT_TRUNCATE_SUFFIX = '…（已截断）';
+/**
+ * Max byte budget for a single session `tool_result` event's content when
+ * replaying an opencode session (L2 pre-fold). Pre-folding here bounds the
+ * in-memory `events[]` array and the intermediate card JSON so a single
+ * pathological tool_result never inflates the replay payload to megabytes.
+ */
+export const TOOL_RESULT_MAX_BYTES = 4000;
+/**
+ * Fit a UTF-8 string into `maxBytes` by iterating Unicode codepoints, never
+ * splitting a multi-byte sequence. When `fromEnd` is true, keeps the TAIL
+ * (useful for logs/tails); otherwise keeps the HEAD.
+ */
+export function fitUtf8(value, maxBytes, fromEnd = false) {
+    if (fromEnd) {
+        const codepoints = Array.from(value);
+        let bytes = 0;
+        let start = codepoints.length;
+        for (let i = codepoints.length - 1; i >= 0; i--) {
+            const cb = Buffer.byteLength(codepoints[i], 'utf8');
+            if (bytes + cb > maxBytes)
+                break;
+            bytes += cb;
+            start = i;
+        }
+        return codepoints.slice(start).join('');
+    }
+    // head 分支：惰性 for-of 迭代 + 字符串索引累计（O(1) 内存）。
+    let bytes = 0;
+    let end = 0;
+    for (const char of value) {
+        const cb = Buffer.byteLength(char, 'utf8');
+        if (bytes + cb > maxBytes)
+            break;
+        bytes += cb;
+        end += char.length;
+    }
+    return value.slice(0, end);
+}
+/**
+ * Truncate a UTF-8 string to fit within `maxBytes`, appending `suffix`
+ * (default `…（已截断）`) when truncation occurs. When `fromEnd` is true, keeps
+ * the tail and prepends the suffix (useful for "show the most recent N bytes").
+ */
+export function truncateUtf8(value, maxBytes, fromEnd = false, suffix = DEFAULT_TRUNCATE_SUFFIX) {
+    if (Buffer.byteLength(value, 'utf8') <= maxBytes)
+        return value;
+    const suffixBytes = Buffer.byteLength(suffix, 'utf8');
+    const budget = maxBytes - suffixBytes;
+    if (budget <= 0)
+        return suffix;
+    const truncated = fitUtf8(value, budget, fromEnd);
+    return fromEnd ? `${suffix}\n${truncated}` : `${truncated}${suffix}`;
+}
+/** Char-based truncation with optional suffix / whitespace normalization. */
+export function truncate(str, max, options) {
+    const suffix = options?.suffix ?? '…';
+    const normalize = options?.normalizeWhitespace ?? false;
+    let s = str;
+    if (normalize)
+        s = s.replace(/\s+/g, ' ').trim();
+    if (s.length <= max)
+        return s;
+    const suffixLen = suffix.length;
+    const budget = max - suffixLen;
+    if (budget <= 0)
+        return suffix;
+    // Iterate by Unicode codepoint (for...of) so the cut never lands inside a
+    // surrogate pair (P2-31 anchor: must not emit a lone surrogate).
+    let end = 0;
+    for (const ch of s) {
+        if (end + ch.length > budget)
+            break;
+        end += ch.length; // 1 (BMP) or 2 (surrogate pair) — slice lands on a boundary
+    }
+    return s.slice(0, end) + suffix;
+}
+/** Char-level tail keep (used for store-time caps, e.g. bash output). */
+export function keepTail(value, maxChars) {
+    return value.length <= maxChars ? value : value.slice(-maxChars);
+}
+//# sourceMappingURL=truncate.js.map

package/dist/config/codex-config.d.ts

@@ -80,7 +80,7 @@ export declare function getCodexCatalogModels(codexHome?: string): BundledModelI
 /**
  * Test utility: clear the catalog cache. Tests that exercise the bundled
  * command path (`--bundled`) directly use `invalidateCodexBundledTestCache`
- * from `codex-bundled-test-helpers.ts`.
+ * from `tests/lib/codex-bundled-test-helpers.ts`.
  */
 export declare function invalidateCodexBundledCache(): void;
 /**

package/dist/config/codex-config.js

@@ -208,7 +208,7 @@ export function getCodexCatalogModels(codexHome) {
 /**
  * Test utility: clear the catalog cache. Tests that exercise the bundled
  * command path (`--bundled`) directly use `invalidateCodexBundledTestCache`
- * from `codex-bundled-test-helpers.ts`.
+ * from `tests/lib/codex-bundled-test-helpers.ts`.
  */
 export function invalidateCodexBundledCache() {
     catalogCache = null;

package/dist/config/index.d.ts

@@ -2,6 +2,12 @@ import { z } from 'zod';
 export { getConfigDir } from './dir.js';
 /** Valid effort values for Claude */
 export declare const CLAUDE_EFFORTS: readonly ["low", "medium", "high", "xhigh", "max"];
+/**
+ * Claude 官方 --permission-mode 枚举（claude --help 输出，2026-08 实测）。
+ * 额外支持 'default'：Claude settings.json 的官方未设置值，等价于不传
+ * --permission-mode（交互式默认：高风险工具逐个询问）。
+ */
+export declare const CLAUDE_PERMISSION_MODES: readonly ["default", "acceptEdits", "auto", "bypassPermissions", "manual", "dontAsk", "plan"];
 /** Valid thinking levels for Pi */
 export declare const PI_THINKING_LEVELS: readonly ["off", "minimal", "low", "medium", "high", "xhigh"];
 /**
@@ -12,6 +18,9 @@ export declare const PI_THINKING_LEVELS: readonly ["off", "minimal", "low", "med
 export declare const DEFAULT_STOP_GRACE_MS: 5000;
 /** Codex app-server turn idle timeout default (minutes). */
 export declare const DEFAULT_TURN_IDLE_TIMEOUT_MINUTES: 10;
+/** 入站媒体默认配置（schema 默认与 connector 兜底共用，避免双源漂移）。 */
+export declare const DEFAULT_INBOUND_MEDIA_DIR_NAME = ".lark-remote-temp";
+export declare const DEFAULT_INBOUND_MEDIA_MAX_SIZE_MB = 50;
 /** 模型 ID → alias 映射。 */
 export declare const MODEL_ID_TO_ALIAS: Record<string, string>;
 /** alias → model ID 反向映射。 */
@@ -20,11 +29,22 @@ declare const ClaudeConfigSchema: z.ZodObject<{
     model: z.ZodDefault<z.ZodString>;
     effort: z.ZodDefault<z.ZodEnum<{
         medium: "medium";
-        max: "max";
         low: "low";
         high: "high";
         xhigh: "xhigh";
+        max: "max";
+    }>>;
+    permissionMode: z.ZodDefault<z.ZodEnum<{
+        default: "default";
+        plan: "plan";
+        bypassPermissions: "bypassPermissions";
+        auto: "auto";
+        manual: "manual";
+        acceptEdits: "acceptEdits";
+        dontAsk: "dontAsk";
     }>>;
+    approvalTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    idleTtlMinutes: z.ZodDefault<z.ZodNumber>;
     stopGraceMs: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strip>;
 /** Codex-specific configuration. */
@@ -32,20 +52,15 @@ export declare const CodexConfigSchema: z.ZodObject<{
     model: z.ZodOptional<z.ZodString>;
     modelProvider: z.ZodOptional<z.ZodString>;
     reasoningEffort: z.ZodOptional<z.ZodString>;
-    stopGraceMs: z.ZodDefault<z.ZodNumber>;
-    serviceMode: z.ZodOptional<z.ZodEnum<{
-        exec: "exec";
-        "app-server": "app-server";
-    }>>;
-    approvalPolicy: z.ZodOptional<z.ZodEnum<{
+    approvalPolicy: z.ZodDefault<z.ZodEnum<{
         untrusted: "untrusted";
         "on-request": "on-request";
         never: "never";
     }>>;
-    sandbox: z.ZodOptional<z.ZodEnum<{
-        "danger-full-access": "danger-full-access";
+    sandbox: z.ZodDefault<z.ZodEnum<{
         "read-only": "read-only";
         "workspace-write": "workspace-write";
+        "danger-full-access": "danger-full-access";
     }>>;
     appServer: z.ZodOptional<z.ZodObject<{
         binary: z.ZodDefault<z.ZodString>;
@@ -58,6 +73,10 @@ export declare const CodexConfigSchema: z.ZodObject<{
 declare const OpencodeConfigSchema: z.ZodObject<{
     providerID: z.ZodDefault<z.ZodString>;
     modelID: z.ZodDefault<z.ZodString>;
+    mode: z.ZodDefault<z.ZodEnum<{
+        plan: "plan";
+        build: "build";
+    }>>;
 }, z.core.$strip>;
 /** Pi-specific configuration. pi is a spawn-per-message CLI like Claude. */
 declare const PiConfigSchema: z.ZodObject<{
@@ -73,14 +92,25 @@ declare const PiConfigSchema: z.ZodObject<{
     }>>;
     tools: z.ZodDefault<z.ZodString>;
 }, z.core.$strip>;
-/** Kimi-specific configuration. kimi is a spawn-per-message CLI. */
+/** Kimi-specific configuration. Pure ACP mode (persistent `kimi acp` connection). */
 declare const KimiConfigSchema: z.ZodObject<{
     model: z.ZodDefault<z.ZodString>;
     thinkingEffort: z.ZodDefault<z.ZodEnum<{
-        max: "max";
         low: "low";
         high: "high";
+        max: "max";
+    }>>;
+    permissionMode: z.ZodDefault<z.ZodEnum<{
+        auto: "auto";
+        yolo: "yolo";
+        manual: "manual";
     }>>;
+    acp: z.ZodOptional<z.ZodObject<{
+        binary: z.ZodDefault<z.ZodString>;
+        requestTimeoutMs: z.ZodDefault<z.ZodNumber>;
+        idleTtlMs: z.ZodDefault<z.ZodNumber>;
+        turnIdleTimeoutMinutes: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export declare const AppConfigSchema: z.ZodObject<{
     feishu: z.ZodObject<{
@@ -91,32 +121,38 @@ export declare const AppConfigSchema: z.ZodObject<{
         model: z.ZodDefault<z.ZodString>;
         effort: z.ZodDefault<z.ZodEnum<{
             medium: "medium";
-            max: "max";
             low: "low";
             high: "high";
             xhigh: "xhigh";
+            max: "max";
         }>>;
+        permissionMode: z.ZodDefault<z.ZodEnum<{
+            default: "default";
+            plan: "plan";
+            bypassPermissions: "bypassPermissions";
+            auto: "auto";
+            manual: "manual";
+            acceptEdits: "acceptEdits";
+            dontAsk: "dontAsk";
+        }>>;
+        approvalTimeoutMs: z.ZodDefault<z.ZodNumber>;
+        idleTtlMinutes: z.ZodDefault<z.ZodNumber>;
         stopGraceMs: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strip>>;
-    agents: z.ZodOptional<z.ZodObject<{
-        codex: z.ZodOptional<z.ZodObject<{
+    agents: z.ZodDefault<z.ZodObject<{
+        codex: z.ZodDefault<z.ZodObject<{
             model: z.ZodOptional<z.ZodString>;
             modelProvider: z.ZodOptional<z.ZodString>;
             reasoningEffort: z.ZodOptional<z.ZodString>;
-            stopGraceMs: z.ZodDefault<z.ZodNumber>;
-            serviceMode: z.ZodOptional<z.ZodEnum<{
-                exec: "exec";
-                "app-server": "app-server";
-            }>>;
-            approvalPolicy: z.ZodOptional<z.ZodEnum<{
+            approvalPolicy: z.ZodDefault<z.ZodEnum<{
                 untrusted: "untrusted";
                 "on-request": "on-request";
                 never: "never";
             }>>;
-            sandbox: z.ZodOptional<z.ZodEnum<{
-                "danger-full-access": "danger-full-access";
+            sandbox: z.ZodDefault<z.ZodEnum<{
                 "read-only": "read-only";
                 "workspace-write": "workspace-write";
+                "danger-full-access": "danger-full-access";
             }>>;
             appServer: z.ZodOptional<z.ZodObject<{
                 binary: z.ZodDefault<z.ZodString>;
@@ -128,6 +164,10 @@ export declare const AppConfigSchema: z.ZodObject<{
         opencode: z.ZodOptional<z.ZodObject<{
             providerID: z.ZodDefault<z.ZodString>;
             modelID: z.ZodDefault<z.ZodString>;
+            mode: z.ZodDefault<z.ZodEnum<{
+                plan: "plan";
+                build: "build";
+            }>>;
         }, z.core.$strip>>;
         pi: z.ZodOptional<z.ZodObject<{
             provider: z.ZodDefault<z.ZodString>;
@@ -145,10 +185,21 @@ export declare const AppConfigSchema: z.ZodObject<{
         kimi: z.ZodOptional<z.ZodObject<{
             model: z.ZodDefault<z.ZodString>;
             thinkingEffort: z.ZodDefault<z.ZodEnum<{
-                max: "max";
                 low: "low";
                 high: "high";
+                max: "max";
             }>>;
+            permissionMode: z.ZodDefault<z.ZodEnum<{
+                auto: "auto";
+                yolo: "yolo";
+                manual: "manual";
+            }>>;
+            acp: z.ZodOptional<z.ZodObject<{
+                binary: z.ZodDefault<z.ZodString>;
+                requestTimeoutMs: z.ZodDefault<z.ZodNumber>;
+                idleTtlMs: z.ZodDefault<z.ZodNumber>;
+                turnIdleTimeoutMinutes: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     agentChoices: z.ZodOptional<z.ZodObject<{
@@ -186,6 +237,11 @@ export declare const AppConfigSchema: z.ZodObject<{
             error: "error";
         }>>;
     }, z.core.$strip>>;
+    inboundMedia: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        dirName: z.ZodDefault<z.ZodString>;
+        maxFileSizeMb: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
     defaultAgent: z.ZodDefault<z.ZodEnum<{
         claude: "claude";
         codex: "codex";
@@ -217,6 +273,15 @@ export declare function mapAgentKey(key: string): string;
  * config 路径中不存在，写/删/读三条路径统一拒绝。
  */
 export declare function assertSafeKeyPart(part: string): void;
+/**
+ * 按 dot-separated key 下钻到目标键的父容器（不含最后一段）。
+ *
+ * - create=true：中间缺失/非对象段自动补 `{}`（set 语义）
+ * - create=false：中间缺失/非对象段返回 undefined（get/delete 语义）
+ *
+ * 危险段（__proto__/prototype/constructor）在每段统一拒绝。
+ */
+export declare function walkNestedContainer(target: unknown, parts: string[], create: boolean): Record<string, unknown> | undefined;
 /** Get a nested value from config by dot-separated key, e.g. "feishu.appId" */
 export declare function getConfigValue(config: AppConfig, key: string): unknown;
 /** Set a nested value in config by dot-separated key, write back to YAML file */