lark-remote 0.1.6 → 0.1.8

package/dist/order/alias-resolve.js

@@ -0,0 +1,22 @@
+/**
+ * 一次别名展开。
+ *
+ * - 仅匹配消息开头的 `$name`（`^$name`），`$name` 后接空格或行尾，全词精确匹配；
+ * - 名称必须 `[A-Za-z_][A-Za-z0-9_]*`（数字开头的 `$500` 永不匹配）；
+ * - 未知别名返回 undefined（原样透传给 agent，不报错）；
+ * - 单次不递归：展开结果不再二次展开，防死循环；
+ * - `!` / `/` 开头消息天然不匹配（正则要求 `$` 开头），bash 的 `$PATH` 不受影响。
+ *
+ * @returns 展开后的完整消息；无匹配时返回 undefined。
+ */
+export function resolveAlias(message, aliases) {
+    const match = /^\$([A-Za-z_][A-Za-z0-9_]*)(?=$|[ \t])/.exec(message);
+    if (!match)
+        return undefined;
+    const entry = aliases.find((a) => a.name === match[1]);
+    if (!entry)
+        return undefined;
+    // lookahead 不消费空格：match[0] 仅含 $name，参数（含前导空格）原样拼接在别名文本后。
+    return entry.text + message.slice(match[0].length);
+}
+//# sourceMappingURL=alias-resolve.js.map

package/dist/order/alias-store.d.ts

@@ -0,0 +1,38 @@
+export declare const MAX_ALIASES = 50;
+export declare const MAX_ALIAS_NAME_LENGTH = 20;
+export declare const MAX_ALIAS_TEXT_LENGTH = 200;
+/**
+ * 别名名称规则：`[A-Za-z_][A-Za-z0-9_]*`，≤20 字符，不能数字开头
+ * —— `$500`、`$3d` 这类正常文本永远不匹配，不会误展开。
+ */
+export declare const ALIAS_NAME_PATTERN: RegExp;
+export interface AliasEntry {
+    name: string;
+    text: string;
+    createdAt: string;
+}
+/**
+ * 全局别名存储。
+ *
+ * 独立于 OrderStore（aliases.json），避免破坏 orders.json 向后兼容。
+ * 原子写（tmp + rename）+ 损坏恢复，复用 OrderStore/WorkspaceStore 同一模式。
+ */
+export declare class AliasStore {
+    private filePath;
+    private data;
+    constructor(filePath?: string);
+    /** Reload data from disk (useful when another process may have written). */
+    reload(): void;
+    private load;
+    private persist;
+    has(name: string): boolean;
+    get(name: string): AliasEntry | undefined;
+    list(): AliasEntry[];
+    /**
+     * 注册/更新别名（同名覆盖文本，保留 createdAt）。返回写入后的条目。
+     * 名称/文本/数量超限时抛错，由调用方提示用户。
+     */
+    set(name: string, text: string): AliasEntry;
+    /** 删除别名；不存在返回 false。 */
+    remove(name: string): boolean;
+}

package/dist/order/alias-store.js

@@ -0,0 +1,106 @@
+import path from 'node:path';
+import os from 'node:os';
+import { atomicWriteJson } from '../persistence/atomic-write.js';
+import { loadJsonFile } from '../persistence/load-json-file.js';
+export const MAX_ALIASES = 50;
+export const MAX_ALIAS_NAME_LENGTH = 20;
+export const MAX_ALIAS_TEXT_LENGTH = 200;
+/**
+ * 别名名称规则：`[A-Za-z_][A-Za-z0-9_]*`，≤20 字符，不能数字开头
+ * —— `$500`、`$3d` 这类正常文本永远不匹配，不会误展开。
+ */
+export const ALIAS_NAME_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
+/**
+ * 全局别名存储。
+ *
+ * 独立于 OrderStore（aliases.json），避免破坏 orders.json 向后兼容。
+ * 原子写（tmp + rename）+ 损坏恢复，复用 OrderStore/WorkspaceStore 同一模式。
+ */
+export class AliasStore {
+    filePath;
+    data;
+    constructor(filePath) {
+        this.filePath = filePath ?? path.join(os.homedir(), '.lark-remote', 'aliases.json');
+        this.data = [];
+        this.load();
+    }
+    /** Reload data from disk (useful when another process may have written). */
+    reload() {
+        this.load();
+    }
+    load() {
+        const parsed = loadJsonFile(this.filePath, undefined);
+        if (!parsed || !Array.isArray(parsed)) {
+            this.data = [];
+            return;
+        }
+        const valid = [];
+        for (const e of parsed) {
+            if (e &&
+                typeof e.name === 'string' &&
+                typeof e.text === 'string' &&
+                typeof e.createdAt === 'string' &&
+                ALIAS_NAME_PATTERN.test(e.name) &&
+                e.name.length <= MAX_ALIAS_NAME_LENGTH) {
+                valid.push({
+                    name: e.name,
+                    text: e.text.slice(0, MAX_ALIAS_TEXT_LENGTH),
+                    createdAt: e.createdAt,
+                });
+            }
+        }
+        this.data = valid;
+    }
+    persist() {
+        atomicWriteJson(this.filePath, this.data);
+    }
+    has(name) {
+        return this.data.some((a) => a.name === name);
+    }
+    get(name) {
+        return this.data.find((a) => a.name === name);
+    }
+    list() {
+        return [...this.data];
+    }
+    /**
+     * 注册/更新别名（同名覆盖文本，保留 createdAt）。返回写入后的条目。
+     * 名称/文本/数量超限时抛错，由调用方提示用户。
+     */
+    set(name, text) {
+        if (!ALIAS_NAME_PATTERN.test(name) || name.length > MAX_ALIAS_NAME_LENGTH) {
+            throw new Error(`别名名称只能包含字母/数字/下划线，不能数字开头，且不超过 ${MAX_ALIAS_NAME_LENGTH} 字符`);
+        }
+        if (text.length > MAX_ALIAS_TEXT_LENGTH) {
+            throw new Error(`别名文本超过 ${MAX_ALIAS_TEXT_LENGTH} 字符限制`);
+        }
+        if (!this.has(name) && this.data.length >= MAX_ALIASES) {
+            throw new Error(`别名数量已达上限 ${MAX_ALIASES}`);
+        }
+        const existing = this.get(name);
+        const entry = {
+            name,
+            text,
+            createdAt: existing?.createdAt ?? new Date().toISOString(),
+        };
+        const idx = this.data.findIndex((a) => a.name === name);
+        if (idx >= 0) {
+            this.data[idx] = entry;
+        }
+        else {
+            this.data.push(entry);
+        }
+        this.persist();
+        return entry;
+    }
+    /** 删除别名；不存在返回 false。 */
+    remove(name) {
+        const before = this.data.length;
+        this.data = this.data.filter((a) => a.name !== name);
+        if (this.data.length === before)
+            return false;
+        this.persist();
+        return true;
+    }
+}
+//# sourceMappingURL=alias-store.js.map

package/dist/persistence/atomic-write.d.ts

@@ -1,10 +1,16 @@
 /**
- * Atomically write string content to a file via tmp + rename.
+ * Atomically write content (string or binary Buffer) to a file via tmp + rename.
  * Falls back to copy+unlink when rename fails with EXDEV (cross-device).
  */
-export declare function atomicWrite(filePath: string, content: string, encoding?: BufferEncoding): void;
+export declare function atomicWrite(filePath: string, content: string | Buffer, encoding?: BufferEncoding): void;
 /**
  * Atomically write JSON data to a file via tmp + rename.
  * Ensures a crash mid-write cannot leave a truncated file.
  */
 export declare function atomicWriteJson(filePath: string, data: unknown): void;
+/**
+ * 把已写好的文件原子移动到目标位置（rename 同设备即原子；EXDEV 跨设备
+ * 回退 copy + unlink）。失败时抛出，由调用方负责清理源文件（best-effort）。
+ * 用于入站媒体：下载已流式写入临时文件，落盘只需一次 move，不再复制进内存。
+ */
+export declare function atomicMoveFile(srcPath: string, destPath: string): void;

package/dist/persistence/atomic-write.js

@@ -1,13 +1,15 @@
 import fs from 'node:fs';
 import path from 'node:path';
+import { silentlyUnlink } from '../common/fs.js';
 /**
- * Atomically write string content to a file via tmp + rename.
+ * Atomically write content (string or binary Buffer) to a file via tmp + rename.
  * Falls back to copy+unlink when rename fails with EXDEV (cross-device).
  */
 export function atomicWrite(filePath, content, encoding = 'utf-8') {
     const dir = path.dirname(filePath);
     fs.mkdirSync(dir, { recursive: true });
     const tmpPath = filePath + '.tmp';
+    // Buffer 内容忽略 encoding（writeFileSync 对 Buffer 自动以二进制写出）。
     fs.writeFileSync(tmpPath, content, encoding);
     // fsync the tmp file before rename so its data is durable on disk;
     // rename itself is only a metadata change, so without fsync a crash after
@@ -47,12 +49,7 @@ export function atomicWrite(filePath, content, encoding = 'utf-8') {
         // Best-effort cleanup: on success the tmp was renamed away (ENOENT here,
         // silently ignored); on EXDEV it was copied and now needs removal; on other
         // errors we must not leak the tmp file.
-        try {
-            fs.unlinkSync(tmpPath);
-        }
-        catch {
-            /* already moved or never created */
-        }
+        silentlyUnlink(tmpPath);
     }
 }
 /**
@@ -62,4 +59,23 @@ export function atomicWrite(filePath, content, encoding = 'utf-8') {
 export function atomicWriteJson(filePath, data) {
     atomicWrite(filePath, JSON.stringify(data, null, 2));
 }
+/**
+ * 把已写好的文件原子移动到目标位置（rename 同设备即原子；EXDEV 跨设备
+ * 回退 copy + unlink）。失败时抛出，由调用方负责清理源文件（best-effort）。
+ * 用于入站媒体：下载已流式写入临时文件，落盘只需一次 move，不再复制进内存。
+ */
+export function atomicMoveFile(srcPath, destPath) {
+    try {
+        fs.renameSync(srcPath, destPath);
+    }
+    catch (err) {
+        if (err.code === 'EXDEV') {
+            fs.copyFileSync(srcPath, destPath);
+            silentlyUnlink(srcPath);
+        }
+        else {
+            throw err;
+        }
+    }
+}
 //# sourceMappingURL=atomic-write.js.map

package/dist/restart.js

@@ -2,6 +2,7 @@ import { spawn } from 'node:child_process';
 import fs from 'node:fs';
 import path from 'node:path';
 import { getLogger } from './logger/index.js';
+import { sleep } from './common/sleep.js';
 /**
  * Self-restart without an external watchdog/cron: the only process that can
  * reliably start the successor is the dying bridge itself. The old process
@@ -66,7 +67,7 @@ export async function waitForPreviousInstance() {
             getLogger().info(`[restart] previous instance pid=${pid} exited, continuing startup`);
             return;
         }
-        await new Promise((resolve) => setTimeout(resolve, POLL_MS));
+        await sleep(POLL_MS);
     }
     getLogger().warn(`[restart] previous instance pid=${pid} still alive after ${WAIT_TIMEOUT_MS}ms, proceeding anyway`);
 }

package/dist/router/card-action-payload.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Card action payload assembly (entry layer).
+ *
+ * Feishu card callbacks arrive as a normalized `CardActionEvent` whose
+ * `action` only carries `value/tag/name/option/formValue` — the
+ * `@larksuite/channel` normalizer drops everything else (e.g. `input_value`,
+ * multi-select `options`). This module rebuilds the full payload that the
+ * router consumes, merging the button's behavior `value` with component
+ * out-of-band fields.
+ *
+ * Extracted from src/index.ts so the entry transform is behavior-testable
+ * (the main() wiring itself cannot be injected, see index-wiring.test.ts).
+ */
+import type { CardActionEvent } from '@larksuite/channel';
+import type { CardActionPayload } from './index.js';
+/**
+ * Build the full card action payload for router.handleCardAction.
+ *
+ * - `option`/`formValue`: select/form components deliver the user's choice
+ *   out-of-band in `action.option`/`action.formValue`; button callbacks carry
+ *   it in the behavior `value` instead (and `action.option` is absent). The
+ *   behavior-value field must survive for buttons, so the component field
+ *   only wins when it is actually present.
+ * - `inputValue`: CardKit 2.0 input submit-icon callbacks deliver the text in
+ *   the raw event (`action.raw.action.input_value`); the SDK normalizer drops
+ *   `action.action.input_value`.
+ * - `options`: reserved for multi-select components (future agent support);
+ *   the SDK normalizer drops `action.options`, so it is read from raw.
+ */
+export declare function buildCardActionFullValue(actionValue: CardActionPayload, action: CardActionEvent): CardActionPayload;

package/dist/router/card-action-payload.js

@@ -0,0 +1,39 @@
+/**
+ * Card action payload assembly (entry layer).
+ *
+ * Feishu card callbacks arrive as a normalized `CardActionEvent` whose
+ * `action` only carries `value/tag/name/option/formValue` — the
+ * `@larksuite/channel` normalizer drops everything else (e.g. `input_value`,
+ * multi-select `options`). This module rebuilds the full payload that the
+ * router consumes, merging the button's behavior `value` with component
+ * out-of-band fields.
+ *
+ * Extracted from src/index.ts so the entry transform is behavior-testable
+ * (the main() wiring itself cannot be injected, see index-wiring.test.ts).
+ */
+/**
+ * Build the full card action payload for router.handleCardAction.
+ *
+ * - `option`/`formValue`: select/form components deliver the user's choice
+ *   out-of-band in `action.option`/`action.formValue`; button callbacks carry
+ *   it in the behavior `value` instead (and `action.option` is absent). The
+ *   behavior-value field must survive for buttons, so the component field
+ *   only wins when it is actually present.
+ * - `inputValue`: CardKit 2.0 input submit-icon callbacks deliver the text in
+ *   the raw event (`action.raw.action.input_value`); the SDK normalizer drops
+ *   `action.action.input_value`.
+ * - `options`: reserved for multi-select components (future agent support);
+ *   the SDK normalizer drops `action.options`, so it is read from raw.
+ */
+export function buildCardActionFullValue(actionValue, action) {
+    return {
+        ...actionValue,
+        option: action.action.option ?? actionValue.option,
+        formValue: action.action.formValue ?? actionValue.formValue,
+        options: action.raw?.action?.options ??
+            actionValue.options,
+        inputValue: action.raw?.action?.input_value ??
+            action.action.input_value,
+    };
+}
+//# sourceMappingURL=card-action-payload.js.map

package/dist/router/card-helpers.d.ts

@@ -8,6 +8,8 @@
  */
 import { markdownDiv } from '../card/collapsible.js';
 import type { AgentSessionContentEvent } from '../runner/index.js';
+import { formatUsageStats } from './utils.js';
+type SessionUsageLike = Parameters<typeof formatUsageStats>[0];
 /**
  * Build a collapsible panel for a single session content event.
  *
@@ -26,3 +28,64 @@ import type { AgentSessionContentEvent } from '../runner/index.js';
  */
 export declare function sessionEventPanel(ev: AgentSessionContentEvent, index: number, totalEvents: number, tailExpandedCount?: number, agentKind?: string): object;
 export { markdownDiv };
+/**
+ * Build a CardKit 2.0 pagination bar (prev-button / page-label / next-button
+ * columns). Shared by /ls, /ws, /resume, /active, /order.
+ *
+ * Returns the `column_set` element (plus caller appends an `hr`). Each caller
+ * supplies its own callback cmd + extra value fields and label text (semantic
+ * differences are preserved, not silently unified).
+ *
+ * @param opts.cmd       The pagination callback command (e.g. 'ls.page').
+ * @param opts.offset    Current page offset.
+ * @param opts.pageSize  Items per page.
+ * @param opts.total     Total item count.
+ * @param opts.extra     Extra callback value fields (e.g. path, agent, pageSize).
+ * @param opts.label     Page-label markdown text (e.g. `**第 1/3 页**（共 30 项）`).
+ * @param opts.prevText / opts.nextText  Button labels (default '⬅ 上一页' / '下一页 ➡').
+ */
+export declare function paginationBar(opts: {
+    cmd: string;
+    offset: number;
+    pageSize: number;
+    total: number;
+    extra?: Record<string, unknown>;
+    label: string;
+    prevText?: string;
+    nextText?: string;
+}): object;
+/**
+ * Build a session-history resume card (shared by auto-restore, /resume <id>,
+ * config-switch resume, and run-completion notification).
+ *
+ * Encapsulates the common structure: header (cwd + sessionId + displayTitle/
+ * recap sections) → optional hidden-count indicator → folded event panels (or
+ * empty placeholder) → usage → trailing-hr removal → action column_set → card
+ * shell. Callers pass their specific header text, card title, usage result
+ * label, placeholders, and already-built action buttons via opts.
+ */
+export declare function buildSessionHistoryCard(state: {
+    sessionId: string;
+    cwd: string;
+    displayTitle?: string;
+    aiTitle?: string;
+    recap?: string;
+    events: AgentSessionContentEvent[];
+    usage?: SessionUsageLike;
+}, opts: {
+    agentKind: string;
+    /** Header first line, e.g. `📂 \`${cwd}\`\n已恢复最近会话: **id**`. */
+    headerText: string;
+    /** Card header title content. */
+    title: string;
+    /** Optional result label passed to formatUsageStats (showResult:true). */
+    usageResult?: string;
+    /** Empty-events placeholder (some callers show a hint instead of nothing). */
+    emptyPlaceholder?: string;
+    /** Hidden earlier-events count (auto-restore only). */
+    hiddenCount?: number;
+    /** Action buttons to render (already built, protocol-specific). */
+    actions?: object[];
+    /** Optional card header template (e.g. 'green' for completion cards). */
+    headerTemplate?: string;
+}): object;

package/dist/router/card-helpers.js

@@ -9,6 +9,7 @@
 import { agentDisplayName } from '../card/card-shared.js';
 import { collapsibleMarkdownPanel, markdownDiv } from '../card/collapsible.js';
 import { formatTimestamp } from '../card/time.js';
+import { formatUsageStats } from './utils.js';
 /**
  * Build a collapsible panel for a single session content event.
  *
@@ -62,4 +63,149 @@ function eventLabel(ev, agentKind) {
     }
 }
 export { markdownDiv };
+/**
+ * Build a CardKit 2.0 pagination bar (prev-button / page-label / next-button
+ * columns). Shared by /ls, /ws, /resume, /active, /order.
+ *
+ * Returns the `column_set` element (plus caller appends an `hr`). Each caller
+ * supplies its own callback cmd + extra value fields and label text (semantic
+ * differences are preserved, not silently unified).
+ *
+ * @param opts.cmd       The pagination callback command (e.g. 'ls.page').
+ * @param opts.offset    Current page offset.
+ * @param opts.pageSize  Items per page.
+ * @param opts.total     Total item count.
+ * @param opts.extra     Extra callback value fields (e.g. path, agent, pageSize).
+ * @param opts.label     Page-label markdown text (e.g. `**第 1/3 页**（共 30 项）`).
+ * @param opts.prevText / opts.nextText  Button labels (default '⬅ 上一页' / '下一页 ➡').
+ */
+export function paginationBar(opts) {
+    const hasPrev = opts.offset > 0;
+    const hasNext = opts.offset + opts.pageSize < opts.total;
+    const prevText = opts.prevText ?? '⬅ 上一页';
+    const nextText = opts.nextText ?? '下一页 ➡';
+    const pageColumns = [];
+    if (hasPrev) {
+        pageColumns.push({
+            tag: 'column',
+            width: 'auto',
+            vertical_align: 'center',
+            elements: [
+                {
+                    tag: 'button',
+                    text: { tag: 'plain_text', content: prevText },
+                    type: 'default',
+                    size: 'small',
+                    behaviors: [
+                        {
+                            type: 'callback',
+                            value: { cmd: opts.cmd, offset: opts.offset - opts.pageSize, ...opts.extra },
+                        },
+                    ],
+                },
+            ],
+        });
+    }
+    pageColumns.push({
+        tag: 'column',
+        width: 'weighted',
+        weight: 1,
+        vertical_align: 'center',
+        elements: [{ tag: 'div', text: { tag: 'lark_md', content: opts.label } }],
+    });
+    if (hasNext) {
+        pageColumns.push({
+            tag: 'column',
+            width: 'auto',
+            vertical_align: 'center',
+            elements: [
+                {
+                    tag: 'button',
+                    text: { tag: 'plain_text', content: nextText },
+                    type: 'default',
+                    size: 'small',
+                    behaviors: [
+                        {
+                            type: 'callback',
+                            value: { cmd: opts.cmd, offset: opts.offset + opts.pageSize, ...opts.extra },
+                        },
+                    ],
+                },
+            ],
+        });
+    }
+    return { tag: 'column_set', columns: pageColumns };
+}
+/**
+ * Build a session-history resume card (shared by auto-restore, /resume <id>,
+ * config-switch resume, and run-completion notification).
+ *
+ * Encapsulates the common structure: header (cwd + sessionId + displayTitle/
+ * recap sections) → optional hidden-count indicator → folded event panels (or
+ * empty placeholder) → usage → trailing-hr removal → action column_set → card
+ * shell. Callers pass their specific header text, card title, usage result
+ * label, placeholders, and already-built action buttons via opts.
+ */
+export function buildSessionHistoryCard(state, opts) {
+    const { displayTitle, aiTitle, recap, events, usage } = state;
+    let header = opts.headerText;
+    const sections = [];
+    // Reader 层不再截断 displayTitle/summary；统一在消费侧这里截到 200 字符。
+    if (displayTitle) {
+        const label = aiTitle ? 'AI 标题' : '最近输入';
+        const preview = displayTitle.length > 200 ? displayTitle.slice(0, 197) + '...' : displayTitle;
+        sections.push(`🏷️ **${label}**\n${preview}`);
+    }
+    if (recap) {
+        const recapPreview = recap.length > 200 ? recap.slice(0, 197) + '...' : recap;
+        sections.push(`📝 **Recap**\n${recapPreview}`);
+    }
+    if (sections.length > 0) {
+        header += '\n\n' + sections.join('\n\n──\n\n');
+    }
+    const elements = [markdownDiv(header), { tag: 'hr' }];
+    if (opts.hiddenCount && opts.hiddenCount > 0) {
+        elements.push(markdownDiv(`📜 还有 ${opts.hiddenCount} 个更早的事件未显示`));
+    }
+    if (events.length === 0 && opts.emptyPlaceholder) {
+        elements.push(markdownDiv(opts.emptyPlaceholder));
+    }
+    else {
+        events.forEach((ev, i) => {
+            elements.push(sessionEventPanel(ev, i, events.length, 2, opts.agentKind));
+        });
+    }
+    if (usage) {
+        const usageStr = opts.usageResult
+            ? formatUsageStats(usage, { showResult: true, result: opts.usageResult })
+            : formatUsageStats(usage);
+        elements.push(markdownDiv(usageStr));
+    }
+    // Remove trailing hr
+    if (elements.length > 0 && elements[elements.length - 1].tag === 'hr') {
+        elements.pop();
+    }
+    if (opts.actions && opts.actions.length > 0) {
+        elements.push({
+            tag: 'column_set',
+            columns: opts.actions.map((btn) => ({
+                tag: 'column',
+                width: 'auto',
+                elements: [btn],
+            })),
+        });
+    }
+    return {
+        schema: '2.0',
+        config: { wide_screen_mode: true },
+        header: {
+            ...(opts.headerTemplate ? { template: opts.headerTemplate } : {}),
+            title: {
+                tag: 'plain_text',
+                content: opts.title,
+            },
+        },
+        body: { elements },
+    };
+}
 //# sourceMappingURL=card-helpers.js.map

package/dist/router/config/claude.js

@@ -4,7 +4,24 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { MODEL_ID_TO_ALIAS, MODEL_ALIAS_TO_ID, getModelOptionsFromSettings, CLAUDE_EFFORTS, } from '../../config/index.js';
+import { MODEL_ID_TO_ALIAS, MODEL_ALIAS_TO_ID, getModelOptionsFromSettings, CLAUDE_EFFORTS, CLAUDE_PERMISSION_MODES, } from '../../config/index.js';
+/** Claude 官方 --permission-mode 中文注释（value 走 CLAUDE_PERMISSION_MODES SSOT）。 */
+const PERMISSION_MODE_LABELS = {
+    default: '默认（敏感操作逐项询问）',
+    acceptEdits: '自动接受文件编辑',
+    auto: '自动放行低风险操作',
+    bypassPermissions: '跳过所有权限检查',
+    dontAsk: '仅预先批准的工具',
+    plan: '计划模式（只读探索）',
+};
+/**
+ * 下拉选项排除 manual：manual 是 default 的别名（claude CLI 等价），
+ * 只保留 default 一个，避免下拉出现两个等价项。schema 仍接受 manual（旧配置向后兼容）。
+ */
+const PERMISSION_MODE_OPTIONS = CLAUDE_PERMISSION_MODES.filter((m) => m !== 'manual').map((m) => ({
+    text: `${m}（${PERMISSION_MODE_LABELS[m] ?? ''}）`,
+    value: m,
+}));
 export class ClaudeConfigBuilder {
     /** Find Claude settings.json path (for dynamic model reading). */
     findSettingsPath() {
@@ -61,6 +78,18 @@ export class ClaudeConfigBuilder {
             options: CLAUDE_EFFORTS,
             currentValue: currentEffort,
         });
+        // 权限模式（Claude 官方 --permission-mode 枚举；bypassPermissions 为 schema 默认，
+        // 保持旧行为无审批卡，配置为其他值后激活交互式审批）
+        const currentPermissionMode = displayConfig.claude?.permissionMode ?? 'bypassPermissions';
+        // manual 是 default 的别名：旧配置按 default 显示（下拉无 manual 项，避免空选）
+        const displayedPermissionMode = currentPermissionMode === 'manual' ? 'default' : currentPermissionMode;
+        fields.push({
+            key: 'claude.permissionMode',
+            label: '权限模式',
+            type: 'select',
+            options: PERMISSION_MODE_OPTIONS,
+            currentValue: displayedPermissionMode,
+        });
         return fields;
     }
     handleFieldChange(key, _value, _config) {