lark-remote 0.1.6 → 0.1.8

package/dist/config/index.d.ts

@@ -2,6 +2,14 @@ import { z } from 'zod';
 export { getConfigDir } from './dir.js';
 /** Valid effort values for Claude */
 export declare const CLAUDE_EFFORTS: readonly ["low", "medium", "high", "xhigh", "max"];
+/**
+ * Claude 官方 --permission-mode 枚举（claude --help 输出，2026-08 实测）。
+ * 额外支持 'default'：Claude settings.json 的官方未设置值，等价于不传
+ * --permission-mode（交互式默认：高风险工具逐个询问）。
+ * 'manual' 是 'default' 的别名（claude CLI 等价），schema 保留以向后兼容旧配置，
+ * 但 UI 下拉不展示（见 router/config/claude.ts）。
+ */
+export declare const CLAUDE_PERMISSION_MODES: readonly ["default", "acceptEdits", "auto", "bypassPermissions", "manual", "dontAsk", "plan"];
 /** Valid thinking levels for Pi */
 export declare const PI_THINKING_LEVELS: readonly ["off", "minimal", "low", "medium", "high", "xhigh"];
 /**
@@ -11,7 +19,10 @@ export declare const PI_THINKING_LEVELS: readonly ["off", "minimal", "low", "med
  */
 export declare const DEFAULT_STOP_GRACE_MS: 5000;
 /** Codex app-server turn idle timeout default (minutes). */
-export declare const DEFAULT_TURN_IDLE_TIMEOUT_MINUTES: 10;
+export declare const DEFAULT_TURN_IDLE_TIMEOUT_MINUTES: 30;
+/** 入站媒体默认配置（schema 默认与 connector 兜底共用，避免双源漂移）。 */
+export declare const DEFAULT_INBOUND_MEDIA_DIR_NAME = ".lark-remote-temp";
+export declare const DEFAULT_INBOUND_MEDIA_MAX_SIZE_MB = 50;
 /** 模型 ID → alias 映射。 */
 export declare const MODEL_ID_TO_ALIAS: Record<string, string>;
 /** alias → model ID 反向映射。 */
@@ -20,11 +31,22 @@ declare const ClaudeConfigSchema: z.ZodObject<{
     model: z.ZodDefault<z.ZodString>;
     effort: z.ZodDefault<z.ZodEnum<{
         medium: "medium";
-        max: "max";
         low: "low";
         high: "high";
         xhigh: "xhigh";
+        max: "max";
+    }>>;
+    permissionMode: z.ZodDefault<z.ZodEnum<{
+        default: "default";
+        plan: "plan";
+        bypassPermissions: "bypassPermissions";
+        auto: "auto";
+        manual: "manual";
+        acceptEdits: "acceptEdits";
+        dontAsk: "dontAsk";
     }>>;
+    approvalTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    idleTtlMinutes: z.ZodDefault<z.ZodNumber>;
     stopGraceMs: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strip>;
 /** Codex-specific configuration. */
@@ -32,20 +54,15 @@ export declare const CodexConfigSchema: z.ZodObject<{
     model: z.ZodOptional<z.ZodString>;
     modelProvider: z.ZodOptional<z.ZodString>;
     reasoningEffort: z.ZodOptional<z.ZodString>;
-    stopGraceMs: z.ZodDefault<z.ZodNumber>;
-    serviceMode: z.ZodOptional<z.ZodEnum<{
-        exec: "exec";
-        "app-server": "app-server";
-    }>>;
-    approvalPolicy: z.ZodOptional<z.ZodEnum<{
+    approvalPolicy: z.ZodDefault<z.ZodEnum<{
         untrusted: "untrusted";
         "on-request": "on-request";
         never: "never";
     }>>;
-    sandbox: z.ZodOptional<z.ZodEnum<{
-        "danger-full-access": "danger-full-access";
+    sandbox: z.ZodDefault<z.ZodEnum<{
         "read-only": "read-only";
         "workspace-write": "workspace-write";
+        "danger-full-access": "danger-full-access";
     }>>;
     appServer: z.ZodOptional<z.ZodObject<{
         binary: z.ZodDefault<z.ZodString>;
@@ -58,6 +75,10 @@ export declare const CodexConfigSchema: z.ZodObject<{
 declare const OpencodeConfigSchema: z.ZodObject<{
     providerID: z.ZodDefault<z.ZodString>;
     modelID: z.ZodDefault<z.ZodString>;
+    mode: z.ZodDefault<z.ZodEnum<{
+        plan: "plan";
+        build: "build";
+    }>>;
 }, z.core.$strip>;
 /** Pi-specific configuration. pi is a spawn-per-message CLI like Claude. */
 declare const PiConfigSchema: z.ZodObject<{
@@ -73,14 +94,34 @@ declare const PiConfigSchema: z.ZodObject<{
     }>>;
     tools: z.ZodDefault<z.ZodString>;
 }, z.core.$strip>;
-/** Kimi-specific configuration. kimi is a spawn-per-message CLI. */
+/** Kimi-specific configuration. Pure ACP mode (persistent `kimi acp` connection). */
 declare const KimiConfigSchema: z.ZodObject<{
     model: z.ZodDefault<z.ZodString>;
     thinkingEffort: z.ZodDefault<z.ZodEnum<{
-        max: "max";
         low: "low";
         high: "high";
+        max: "max";
     }>>;
+    permissionMode: z.ZodDefault<z.ZodEnum<{
+        auto: "auto";
+        yolo: "yolo";
+        manual: "manual";
+    }>>;
+    acp: z.ZodOptional<z.ZodObject<{
+        binary: z.ZodDefault<z.ZodString>;
+        requestTimeoutMs: z.ZodDefault<z.ZodNumber>;
+        idleTtlMs: z.ZodDefault<z.ZodNumber>;
+        turnIdleTimeoutMinutes: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+/** DSH (DeepSeek Harness) Web Host default base URL. */
+export declare const DEFAULT_DSH_HOST = "http://127.0.0.1:3080";
+/** DSH (DeepSeek Harness) Web Host connection config. */
+declare const DshConfigSchema: z.ZodObject<{
+    host: z.ZodDefault<z.ZodString>;
+    agentPreset: z.ZodOptional<z.ZodString>;
+    model: z.ZodOptional<z.ZodString>;
+    reasoningEffort: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export declare const AppConfigSchema: z.ZodObject<{
     feishu: z.ZodObject<{
@@ -91,32 +132,38 @@ export declare const AppConfigSchema: z.ZodObject<{
         model: z.ZodDefault<z.ZodString>;
         effort: z.ZodDefault<z.ZodEnum<{
             medium: "medium";
-            max: "max";
             low: "low";
             high: "high";
             xhigh: "xhigh";
+            max: "max";
         }>>;
+        permissionMode: z.ZodDefault<z.ZodEnum<{
+            default: "default";
+            plan: "plan";
+            bypassPermissions: "bypassPermissions";
+            auto: "auto";
+            manual: "manual";
+            acceptEdits: "acceptEdits";
+            dontAsk: "dontAsk";
+        }>>;
+        approvalTimeoutMs: z.ZodDefault<z.ZodNumber>;
+        idleTtlMinutes: z.ZodDefault<z.ZodNumber>;
         stopGraceMs: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strip>>;
-    agents: z.ZodOptional<z.ZodObject<{
-        codex: z.ZodOptional<z.ZodObject<{
+    agents: z.ZodDefault<z.ZodObject<{
+        codex: z.ZodDefault<z.ZodObject<{
             model: z.ZodOptional<z.ZodString>;
             modelProvider: z.ZodOptional<z.ZodString>;
             reasoningEffort: z.ZodOptional<z.ZodString>;
-            stopGraceMs: z.ZodDefault<z.ZodNumber>;
-            serviceMode: z.ZodOptional<z.ZodEnum<{
-                exec: "exec";
-                "app-server": "app-server";
-            }>>;
-            approvalPolicy: z.ZodOptional<z.ZodEnum<{
+            approvalPolicy: z.ZodDefault<z.ZodEnum<{
                 untrusted: "untrusted";
                 "on-request": "on-request";
                 never: "never";
             }>>;
-            sandbox: z.ZodOptional<z.ZodEnum<{
-                "danger-full-access": "danger-full-access";
+            sandbox: z.ZodDefault<z.ZodEnum<{
                 "read-only": "read-only";
                 "workspace-write": "workspace-write";
+                "danger-full-access": "danger-full-access";
             }>>;
             appServer: z.ZodOptional<z.ZodObject<{
                 binary: z.ZodDefault<z.ZodString>;
@@ -128,6 +175,10 @@ export declare const AppConfigSchema: z.ZodObject<{
         opencode: z.ZodOptional<z.ZodObject<{
             providerID: z.ZodDefault<z.ZodString>;
             modelID: z.ZodDefault<z.ZodString>;
+            mode: z.ZodDefault<z.ZodEnum<{
+                plan: "plan";
+                build: "build";
+            }>>;
         }, z.core.$strip>>;
         pi: z.ZodOptional<z.ZodObject<{
             provider: z.ZodDefault<z.ZodString>;
@@ -145,10 +196,27 @@ export declare const AppConfigSchema: z.ZodObject<{
         kimi: z.ZodOptional<z.ZodObject<{
             model: z.ZodDefault<z.ZodString>;
             thinkingEffort: z.ZodDefault<z.ZodEnum<{
-                max: "max";
                 low: "low";
                 high: "high";
+                max: "max";
+            }>>;
+            permissionMode: z.ZodDefault<z.ZodEnum<{
+                auto: "auto";
+                yolo: "yolo";
+                manual: "manual";
             }>>;
+            acp: z.ZodOptional<z.ZodObject<{
+                binary: z.ZodDefault<z.ZodString>;
+                requestTimeoutMs: z.ZodDefault<z.ZodNumber>;
+                idleTtlMs: z.ZodDefault<z.ZodNumber>;
+                turnIdleTimeoutMinutes: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        dsh: z.ZodOptional<z.ZodObject<{
+            host: z.ZodDefault<z.ZodString>;
+            agentPreset: z.ZodOptional<z.ZodString>;
+            model: z.ZodOptional<z.ZodString>;
+            reasoningEffort: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     agentChoices: z.ZodOptional<z.ZodObject<{
@@ -169,6 +237,9 @@ export declare const AppConfigSchema: z.ZodObject<{
             model: z.ZodOptional<z.ZodString>;
             thinkingEffort: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
+        dsh: z.ZodOptional<z.ZodObject<{
+            host: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
     }, z.core.$strip>>;
     idle: z.ZodDefault<z.ZodObject<{
         watchdogMinutes: z.ZodDefault<z.ZodNumber>;
@@ -186,12 +257,18 @@ export declare const AppConfigSchema: z.ZodObject<{
             error: "error";
         }>>;
     }, z.core.$strip>>;
+    inboundMedia: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        dirName: z.ZodDefault<z.ZodString>;
+        maxFileSizeMb: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
     defaultAgent: z.ZodDefault<z.ZodEnum<{
         claude: "claude";
         codex: "codex";
         opencode: "opencode";
         pi: "pi";
         kimi: "kimi";
+        dsh: "dsh";
     }>>;
     checkUpdateOnStartup: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>;
@@ -217,6 +294,15 @@ export declare function mapAgentKey(key: string): string;
  * config 路径中不存在，写/删/读三条路径统一拒绝。
  */
 export declare function assertSafeKeyPart(part: string): void;
+/**
+ * 按 dot-separated key 下钻到目标键的父容器（不含最后一段）。
+ *
+ * - create=true：中间缺失/非对象段自动补 `{}`（set 语义）
+ * - create=false：中间缺失/非对象段返回 undefined（get/delete 语义）
+ *
+ * 危险段（__proto__/prototype/constructor）在每段统一拒绝。
+ */
+export declare function walkNestedContainer(target: unknown, parts: string[], create: boolean): Record<string, unknown> | undefined;
 /** Get a nested value from config by dot-separated key, e.g. "feishu.appId" */
 export declare function getConfigValue(config: AppConfig, key: string): unknown;
 /** Set a nested value in config by dot-separated key, write back to YAML file */
@@ -234,12 +320,14 @@ type CodexConfig = z.infer<typeof CodexConfigSchema>;
 type OpencodeConfig = z.infer<typeof OpencodeConfigSchema>;
 type PiConfig = z.infer<typeof PiConfigSchema>;
 type KimiConfig = z.infer<typeof KimiConfigSchema>;
+export type DshConfig = z.infer<typeof DshConfigSchema>;
 /** Get configuration for a specific agent. Falls back to defaults if not configured. */
 export declare function getAgentConfig(config: AppConfig, kind: 'claude'): ClaudeConfig;
 export declare function getAgentConfig(config: AppConfig, kind: 'codex'): CodexConfig | undefined;
 export declare function getAgentConfig(config: AppConfig, kind: 'opencode'): OpencodeConfig | undefined;
 export declare function getAgentConfig(config: AppConfig, kind: 'pi'): PiConfig | undefined;
 export declare function getAgentConfig(config: AppConfig, kind: 'kimi'): KimiConfig | undefined;
+export declare function getAgentConfig(config: AppConfig, kind: 'dsh'): DshConfig | undefined;
 /**
  * 从 Claude settings.json 的 env 中读取所有以 MODEL 结尾的环境变量值，
  * 返回去重后的模型 ID 列表。

package/dist/config/index.js

@@ -9,6 +9,22 @@ export { getConfigDir } from './dir.js';
 import { KIMI_THINKING_EFFORTS } from './kimi-config.js';
 /** Valid effort values for Claude */
 export const CLAUDE_EFFORTS = ['low', 'medium', 'high', 'xhigh', 'max'];
+/**
+ * Claude 官方 --permission-mode 枚举（claude --help 输出，2026-08 实测）。
+ * 额外支持 'default'：Claude settings.json 的官方未设置值，等价于不传
+ * --permission-mode（交互式默认：高风险工具逐个询问）。
+ * 'manual' 是 'default' 的别名（claude CLI 等价），schema 保留以向后兼容旧配置，
+ * 但 UI 下拉不展示（见 router/config/claude.ts）。
+ */
+export const CLAUDE_PERMISSION_MODES = [
+    'default',
+    'acceptEdits',
+    'auto',
+    'bypassPermissions',
+    'manual',
+    'dontAsk',
+    'plan',
+];
 /** Valid thinking levels for Pi */
 export const PI_THINKING_LEVELS = ['off', 'minimal', 'low', 'medium', 'high', 'xhigh'];
 /** 默认值常量：schema 与 template 共享，避免双源不一致（G25 Magic Numbers）。 */
@@ -16,7 +32,13 @@ const DEFAULTS = {
     CLAUDE_MODEL: 'claude-opus-4-8',
     STOP_GRACE_MS: 5000,
     IDLE_WATCHDOG_MINUTES: 15,
-    TURN_IDLE_TIMEOUT_MINUTES: 10,
+    /** ACP/app-server turn idle 超时默认 30 分钟：Kimi/opencode/codex 常因
+     *  等待 SubAgent 或长思考长时间静默，10 分钟会误杀正常进行中的 run。 */
+    TURN_IDLE_TIMEOUT_MINUTES: 30,
+    /** 审批超时默认 5 分钟（对齐 codex 红线：勿随意改短）。 */
+    APPROVAL_TIMEOUT_MS: 5 * 60 * 1000,
+    /** Claude 会话级空闲回收默认 30 分钟（对齐 codex appServer.idleTtlMs）。 */
+    CLAUDE_IDLE_TTL_MINUTES: 30,
 };
 /**
  * Default SIGTERM→SIGKILL grace period (ms). Exported so runners (SpawningRunner)
@@ -26,6 +48,9 @@ const DEFAULTS = {
 export const DEFAULT_STOP_GRACE_MS = DEFAULTS.STOP_GRACE_MS;
 /** Codex app-server turn idle timeout default (minutes). */
 export const DEFAULT_TURN_IDLE_TIMEOUT_MINUTES = DEFAULTS.TURN_IDLE_TIMEOUT_MINUTES;
+/** 入站媒体默认配置（schema 默认与 connector 兜底共用，避免双源漂移）。 */
+export const DEFAULT_INBOUND_MEDIA_DIR_NAME = '.lark-remote-temp';
+export const DEFAULT_INBOUND_MEDIA_MAX_SIZE_MB = 50;
 /** 模型 ID → alias 映射。 */
 export const MODEL_ID_TO_ALIAS = {
     'claude-opus-4-8': 'opus',
@@ -47,7 +72,17 @@ const FeishuConfigSchema = z.object({
 const ClaudeConfigSchema = z.object({
     model: z.string().default(DEFAULTS.CLAUDE_MODEL),
     effort: z.enum(CLAUDE_EFFORTS).default('medium'),
-    // permissionMode 硬编码为 bypassPermissions（runner 内部），不通过 config 配置
+    /**
+     * Claude 权限模式（官方 --permission-mode 枚举 + 'default'=省略该参数）。
+     * 默认 bypassPermissions 保持现有行为（无审批卡）；配置为其他值后激活
+     * 交互式审批（control_request → run 卡审批区）。
+     */
+    permissionMode: z.enum(CLAUDE_PERMISSION_MODES).default('bypassPermissions'),
+    /** 审批请求超时（ms），默认 5 分钟；超时自动发送 cancel 并中断 turn。
+     *  0 = 立即过期（fail-fast，避免审批永久挂起），不推荐；勿随意改短。 */
+    approvalTimeoutMs: z.number().int().min(0).default(DEFAULTS.APPROVAL_TIMEOUT_MS),
+    /** 会话级空闲回收（分钟）：turn 之间无新消息超过该窗口则停止长驻进程。 */
+    idleTtlMinutes: z.number().int().min(0).default(DEFAULTS.CLAUDE_IDLE_TTL_MINUTES),
     stopGraceMs: z.number().int().min(0).default(DEFAULTS.STOP_GRACE_MS),
 });
 /** Codex app-server connection configuration. */
@@ -75,14 +110,12 @@ export const CodexConfigSchema = z.object({
      */
     // codex 拒绝空串档位（ReasoningEffort::from_str "" → Err，P3-3）
     reasoningEffort: z.string().min(1).optional(),
-    /** Stop grace period in milliseconds. */
-    stopGraceMs: z.number().int().min(0).default(5000),
-    /** Service mode: 'exec' (spawn-per-message) or 'app-server' (persistent connection). */
-    serviceMode: z.enum(['exec', 'app-server']).optional(),
-    /** Approval policy (Codex 官方 AskForApproval 标准值). 仅 app-server 模式有效（exec 固定 approval_policy="never"）。 */
-    approvalPolicy: z.enum(['untrusted', 'on-request', 'never']).optional(),
-    /** Sandbox mode (Codex 官方 SandboxMode 标准值). 仅 app-server 模式有效（exec 固定 --sandbox danger-full-access）。 */
-    sandbox: z.enum(['read-only', 'workspace-write', 'danger-full-access']).optional(),
+    /** Approval policy (Codex 官方 AskForApproval 标准值). 默认 on-request。 */
+    approvalPolicy: z.enum(['untrusted', 'on-request', 'never']).default('on-request'),
+    /** Sandbox mode (Codex 官方 SandboxMode 标准值). 默认 workspace-write。 */
+    sandbox: z
+        .enum(['read-only', 'workspace-write', 'danger-full-access'])
+        .default('workspace-write'),
     /** App-server connection configuration. */
     appServer: CodexAppServerConfigSchema.optional(),
 });
@@ -92,6 +125,8 @@ const OpencodeConfigSchema = z.object({
     providerID: z.string().default('anthropic'),
     /** Model ID for the LLM backend (e.g. 'claude-sonnet-4-20250514'). */
     modelID: z.string().default('claude-sonnet-4-20250514'),
+    /** Session mode (opencode agent name): 'build' (default) or 'plan'. */
+    mode: z.enum(['build', 'plan']).default('build'),
 });
 /** Pi-specific configuration. pi is a spawn-per-message CLI like Claude. */
 const PiConfigSchema = z.object({
@@ -104,19 +139,60 @@ const PiConfigSchema = z.object({
     /** Comma-separated tool whitelist. */
     tools: z.string().default('read,bash,edit,write,grep,find,ls'),
 });
-/** Kimi-specific configuration. kimi is a spawn-per-message CLI. */
+/** Kimi-specific configuration. Pure ACP mode (persistent `kimi acp` connection). */
 const KimiConfigSchema = z.object({
     /** Model ID or alias, e.g. 'kimi-code/k3'. */
     model: z.string().default('kimi-code/k3'),
     /** Thinking effort: 'on', 'max'. */
     thinkingEffort: z.enum(KIMI_THINKING_EFFORTS).default('max'),
+    /** Permission mode: 'manual' (approve each), 'auto' (engine decides), 'yolo' (allow all). */
+    permissionMode: z.enum(['manual', 'auto', 'yolo']).default('manual'),
+    /** ACP sub-configuration. */
+    acp: z
+        .object({
+        /** Path to kimi binary for ACP mode. */
+        binary: z.string().default('kimi'),
+        /** Request timeout in milliseconds. */
+        requestTimeoutMs: z.number().int().min(0).default(60000),
+        /** Idle TTL for ACP connection in milliseconds. */
+        idleTtlMs: z.number().int().min(0).default(1800000),
+        /** Turn idle timeout in minutes (0 disables). */
+        turnIdleTimeoutMinutes: z.number().int().min(0).default(DEFAULT_TURN_IDLE_TIMEOUT_MINUTES),
+    })
+        .optional(),
+});
+/** DSH (DeepSeek Harness) Web Host default base URL. */
+export const DEFAULT_DSH_HOST = 'http://127.0.0.1:3080';
+/** DSH (DeepSeek Harness) Web Host connection config. */
+const DshConfigSchema = z.object({
+    /** DSH Web Host base URL (no auth, local). */
+    host: z.string().url().default(DEFAULT_DSH_HOST),
+    /**
+     * Session preset（agentPreset）。preset 在 session 创建时固定，中途切换会被
+     * 服务端拒绝（agent-preset-conflict）。留空 = 跟随服务端默认（不传 agentPreset）。
+     * 枚举不在此硬编码：preset 清单随 DSH profile bundle 变化，合法性由配置卡下拉
+     * 控制 + 运行时 DSH API 报错兜底。
+     */
+    agentPreset: z.string().optional(),
+    /** 模型 ID。留空 = 跟随服务端默认。 */
+    model: z.string().optional(),
+    /**
+     * 推理强度（off / low / high / max，跟随 llm.models 实际档位）。留空 = 跟随
+     * 服务端默认。枚举不硬编码（理由同上 agentPreset）。
+     */
+    reasoningEffort: z.string().optional(),
 });
+/** 首次启动的默认 agents 配置：codex 默认 app-server / on-request / workspace-write。 */
+const DEFAULT_AGENTS_CONFIG = {
+    codex: CodexConfigSchema.parse({}),
+};
 /** Agents configuration: per-agent settings keyed by agent kind. */
 const AgentsConfigSchema = z.object({
-    codex: CodexConfigSchema.optional(),
+    codex: CodexConfigSchema.default(DEFAULT_AGENTS_CONFIG.codex),
     opencode: OpencodeConfigSchema.optional(),
     pi: PiConfigSchema.optional(),
     kimi: KimiConfigSchema.optional(),
+    dsh: DshConfigSchema.optional(),
 });
 const IdleConfigSchema = z.object({
     /**
@@ -134,6 +210,15 @@ const OutputConfigSchema = z.object({
 const LoggingConfigSchema = z.object({
     level: z.enum(['debug', 'info', 'warn', 'error']).default('info'),
 });
+/** 入站媒体落盘配置（预留可配置，默认即可用）。 */
+const InboundMediaConfigSchema = z.object({
+    /** 是否启用图片/文件落盘。 */
+    enabled: z.boolean().default(true),
+    /** 落盘根目录名（位于当前 cwd 下）。 */
+    dirName: z.string().min(1).default(DEFAULT_INBOUND_MEDIA_DIR_NAME),
+    /** 单文件大小上限（MiB）。 */
+    maxFileSizeMb: z.number().int().min(1).default(DEFAULT_INBOUND_MEDIA_MAX_SIZE_MB),
+});
 /** Agent-specific saved choices for quick switching. */
 const AgentChoicesSchema = z.object({
     codex: z
@@ -161,20 +246,27 @@ const AgentChoicesSchema = z.object({
         thinkingEffort: z.string().optional(),
     })
         .optional(),
+    dsh: z
+        .object({
+        host: z.string().optional(),
+    })
+        .optional(),
 });
 export const AppConfigSchema = z.object({
     feishu: FeishuConfigSchema,
     /** Claude config (top-level; other agents live under `agents`). */
     claude: ClaudeConfigSchema.default(ClaudeConfigSchema.parse({})),
-    /** Per-agent configuration for non-claude agents. */
-    agents: AgentsConfigSchema.optional(),
+    /** Per-agent configuration for non-claude agents. 首次启动默认含 codex（app-server / workspace-write / on-request）。 */
+    agents: AgentsConfigSchema.default(DEFAULT_AGENTS_CONFIG),
     /** Agent-specific saved choices for quick switching. */
     agentChoices: AgentChoicesSchema.optional(),
     idle: IdleConfigSchema.default(IdleConfigSchema.parse({})),
     output: OutputConfigSchema.default(OutputConfigSchema.parse({})),
     logging: LoggingConfigSchema.default(LoggingConfigSchema.parse({})),
+    /** 入站媒体（图片/文件）落盘配置。 */
+    inboundMedia: InboundMediaConfigSchema.default(InboundMediaConfigSchema.parse({})),
     /** Default agent for new runs. */
-    defaultAgent: z.enum(['claude', 'codex', 'opencode', 'pi', 'kimi']).default('claude'),
+    defaultAgent: z.enum(['claude', 'codex', 'opencode', 'pi', 'kimi', 'dsh']).default('claude'),
     /** Check for updates on bridge startup (default: false). */
     checkUpdateOnStartup: z.boolean().default(false),
 });
@@ -185,6 +277,9 @@ const TEMPLATE = `feishu:
 claude:
   model: ${DEFAULTS.CLAUDE_MODEL}
   effort: medium
+  permissionMode: bypassPermissions
+  approvalTimeoutMs: ${DEFAULTS.APPROVAL_TIMEOUT_MS}
+  idleTtlMinutes: ${DEFAULTS.CLAUDE_IDLE_TTL_MINUTES}
   stopGraceMs: ${DEFAULTS.STOP_GRACE_MS}
 
 idle:
@@ -224,7 +319,7 @@ export function loadConfig(configPath) {
  * Agent key 前缀，这些前缀的 key 会映射到 `agents.<key>` 路径下。
  * `claude.` 保持顶层（不映射到 agents.claude）。
  */
-const AGENT_PREFIXES = ['pi', 'codex', 'opencode', 'kimi'];
+const AGENT_PREFIXES = ['pi', 'codex', 'opencode', 'kimi', 'dsh'];
 /**
  * 将卡片短 key 映射到 schema 期望的路径：
  *   pi.xxx       → agents.pi.xxx
@@ -272,33 +367,45 @@ export function assertSafeKeyPart(part) {
         throw new Error(`[lark-remote] invalid config key segment: '${part}'`);
     }
 }
-/** 在对象上按 dot-separated key 设置嵌套值（仅修改内存对象，不写盘）。 */
-function setNestedValue(target, key, value) {
-    const parts = key.split('.');
+/**
+ * 按 dot-separated key 下钻到目标键的父容器（不含最后一段）。
+ *
+ * - create=true：中间缺失/非对象段自动补 `{}`（set 语义）
+ * - create=false：中间缺失/非对象段返回 undefined（get/delete 语义）
+ *
+ * 危险段（__proto__/prototype/constructor）在每段统一拒绝。
+ */
+export function walkNestedContainer(target, parts, create) {
     let current = target;
     for (let i = 0; i < parts.length - 1; i++) {
         assertSafeKeyPart(parts[i]);
         const next = current[parts[i]];
         if (next == null || typeof next !== 'object') {
+            if (!create)
+                return undefined;
             current[parts[i]] = {};
         }
         current = current[parts[i]];
     }
+    return current;
+}
+/** 在对象上按 dot-separated key 设置嵌套值（仅修改内存对象，不写盘）。 */
+function setNestedValue(target, key, value) {
+    const parts = key.split('.');
+    const container = walkNestedContainer(target, parts, true);
     const lastPart = parts[parts.length - 1];
     assertSafeKeyPart(lastPart);
-    current[lastPart] = value;
+    container[lastPart] = value;
 }
 /** Get a nested value from config by dot-separated key, e.g. "feishu.appId" */
 export function getConfigValue(config, key) {
     const parts = key.split('.');
-    let current = config;
-    for (const part of parts) {
-        assertSafeKeyPart(part);
-        if (current == null || typeof current !== 'object')
-            return undefined;
-        current = current[part];
-    }
-    return current;
+    const container = walkNestedContainer(config, parts, false);
+    if (!container)
+        return undefined;
+    const lastPart = parts[parts.length - 1];
+    assertSafeKeyPart(lastPart);
+    return container[lastPart];
 }
 /** Set a nested value in config by dot-separated key, write back to YAML file */
 export function setConfigValue(configPath, config, key, value) {
@@ -337,17 +444,12 @@ export function setConfigValues(configPath, config, updates) {
  */
 function deleteNestedValue(target, key) {
     const parts = key.split('.');
-    let current = target;
-    for (let i = 0; i < parts.length - 1; i++) {
-        assertSafeKeyPart(parts[i]);
-        const next = current[parts[i]];
-        if (next == null || typeof next !== 'object')
-            return;
-        current = next;
-    }
+    const container = walkNestedContainer(target, parts, false);
+    if (!container)
+        return;
     const lastPart = parts[parts.length - 1];
     assertSafeKeyPart(lastPart);
-    delete current[lastPart];
+    delete container[lastPart];
 }
 export function getAgentConfig(config, kind) {
     if (kind === 'claude') {

package/dist/connector/index.d.ts

@@ -1,4 +1,4 @@
-import { type CardActionEvent, type CardActionResponse, type CardStreamProducer } from '@larksuite/channel';
+import { type CardActionEvent, type CardActionResponse, type CardStreamProducer, type LarkChannel } from '@larksuite/channel';
 import type { AppConfig } from '../config/index.js';
 /**
  * dedup 缓存 TTL（毫秒）。控制飞书事件去重窗口，全局作用于 message + cardAction。
@@ -26,6 +26,54 @@ interface FeishuMessage {
     content: string;
 }
 type MessageHandler = (msg: FeishuMessage) => void;
+/**
+ * 入站媒体（image/file 消息的 resource）下载结果，交给 bridge 落盘。
+ * media 为通过大小限制、可落盘的项；failures 为下载失败或超限的项
+ * （bridge 负责把这些失败提示回用户）。
+ */
+export interface InboundMediaItem {
+    /** 资源类型：image 消息按 MIME 生成 image_<HHmmss>_<n>.<ext>，file 保留文件名。 */
+    type: 'image' | 'file';
+    /** 原始文件名（file 消息有；image 消息无，由 bridge 按 MIME 生成）。 */
+    fileName?: string;
+    /** 服务端 content-type（参数已剥离；可能缺失，bridge 有兜底）。 */
+    mimeType?: string;
+    /**
+     * 下载内容所在临时文件（流式落盘，避免大文件全量进堆内存）。
+     * 由 bridge 移动到最终位置；任何未移动路径都必须清理该文件。
+     */
+    tempPath: string;
+}
+export interface InboundMediaFailure {
+    fileName?: string;
+    reason: string;
+}
+export interface InboundMediaPayload {
+    userId: string;
+    chatId: string;
+    messageId: string;
+    /** 引用上下文：不同 replyTo 强制拆批。 */
+    replyToMessageId?: string;
+    media: InboundMediaItem[];
+    failures: InboundMediaFailure[];
+}
+/**
+ * 媒体消息到达的轻量描述（未下载）：供上层先做 owner/配置闸门，
+ * 通过后再调 downloadInboundMedia —— 下载发生在认证之后（P1 review 修复）。
+ */
+export interface InboundMediaMessage {
+    userId: string;
+    chatId: string;
+    messageId: string;
+    /** 引用上下文：不同 replyTo 强制拆批。 */
+    replyToMessageId?: string;
+    resources: Array<{
+        type: 'image' | 'file';
+        fileKey: string;
+        fileName?: string;
+    }>;
+}
+type InboundMediaDetectedHandler = (msg: InboundMediaMessage) => void | Promise<void>;
 /**
  * CardAction handler may return a CardActionResponse (e.g. `{ toast: {...} }`)
  * to give the clicking user native immediate feedback. The SDK passes the
@@ -34,9 +82,11 @@ type MessageHandler = (msg: FeishuMessage) => void;
  */
 type CardActionHandler = (action: CardActionEvent) => void | CardActionResponse | Promise<void | CardActionResponse>;
 export declare class FeishuConnector {
-    private channel;
+    /** 飞书 channel 实例（public：测试直接访问/注入 mock，替代 as unknown as）。 */
+    channel: LarkChannel;
     private onMessage?;
     private onCardAction?;
+    private onInboundMediaDetected?;
     private isConnected;
     private appId;
     private appSecret;
@@ -44,6 +94,23 @@ export declare class FeishuConnector {
     get connected(): boolean;
     setMessageHandler(handler: MessageHandler): void;
     setCardActionHandler(handler: CardActionHandler): void;
+    setInboundMediaDetectedHandler(handler: InboundMediaDetectedHandler): void;
+    /**
+     * 上报媒体消息到达（轻量，不含下载内容）。上层认证/配置闸门通过后
+     * 再调 downloadInboundMedia。
+     */
+    private handleInboundMediaDetected;
+    /**
+     * 下载消息里的全部资源（流式写临时文件，避免大文件全量进堆内存）。
+     * 逐资源 try/catch：单个失败不影响其他资源；超限项不进入 media（不落盘）。
+     * 下载失败/超限都随 failures 交给 bridge 提示用户（对齐"发送文件失败"文案风格）。
+     * 调用方必须已通过 owner/配置闸门（index.ts）；maxFileSizeMb 由调用方从
+     * 当前配置传入（避免 connector 持有过期的 config 快照）。
+     */
+    downloadInboundMedia(msg: InboundMediaMessage, opts?: {
+        maxFileSizeMb?: number;
+        downloadTimeoutMs?: number;
+    }): Promise<InboundMediaPayload>;
     connect(): Promise<void>;
     disconnect(): Promise<void>;
     reconnect(): Promise<void>;