lark-remote 0.3.0 → 0.4.1

package/dist/platform/terminator-win32.js

@@ -100,7 +100,7 @@ export function createWin32Terminator(deps) {
             // M0 真机验证项（§9.2 矩阵）：本方法在 process.on('exit') 里调用，而
             // killTree 依赖 libuv uv_spawn 在 exit handler 内同步发起 taskkill——
             // 大概率可用（uv_spawn 本身同步），但与 posix 路径（同步 process.kill）
-            // 可靠性不等价；失败表现为 win32 上 bridge 退出后 agent 变孤儿。
+            // 可靠性不等价；失败表现为 win32 上 lark-remote 退出后 agent 变孤儿。
             if (!isAlive(proc))
                 return;
             killTree(proc.pid);

package/dist/restart.d.ts

@@ -1,6 +1,6 @@
 /**
  * Self-restart without an external watchdog/cron: the only process that can
- * reliably start the successor is the dying bridge itself. The old process
+ * reliably start the successor is the dying lark-remote itself. The old process
  * spawns a detached replacement (same executable + argv, hence same
  * --config-dir), then exits cleanly. The child learns the old pid via env
  * and waits for it to die before acquiring the instance lock, so the lock
@@ -9,7 +9,7 @@
 /** Env var telling a replacement child which parent pid to wait for before acquiring the instance lock. */
 export declare const RESTART_WAIT_PID_ENV = "LARK_REMOTE_RESTART_WAIT_PID";
 /**
- * Spawn a detached bridge process (shared by /restart replacement and /clone
+ * Spawn a detached lark-remote process (shared by /restart replacement and /clone
  * new-instance) whose early output — before the child's own file logger
  * initializes — lands on logFilePath. Returns the child pid, or null when
  * spawn failed synchronously / no pid; filesystem errors (unwritable log
@@ -26,7 +26,7 @@ export declare function spawnDetachedBridge(args: string[], logFilePath: string,
     env?: NodeJS.ProcessEnv;
 }): number | null;
 /**
- * Spawn a detached replacement bridge with the same executable and argv
+ * Spawn a detached replacement lark-remote with the same executable and argv
  * (including --config-dir) and return its pid. The caller is expected to
  * exit right after. stdio is redirected to restart-child.log so early
  * startup failures (before the file logger initializes) are not lost.
@@ -34,7 +34,7 @@ export declare function spawnDetachedBridge(args: string[], logFilePath: string,
 export declare function spawnReplacementBridge(logsDir: string): number;
 /**
  * On startup, if this process was spawned as a restart replacement, wait for
- * the previous bridge process to exit (and release the instance lock) before
+ * the previous lark-remote process to exit (and release the instance lock) before
  * continuing. No-op for normal starts. On timeout, proceed anyway — lock
  * acquisition remains the authority.
  */

package/dist/restart.js

@@ -5,7 +5,7 @@ import { getLogger } from './logger/index.js';
 import { sleep } from './common/sleep.js';
 /**
  * Self-restart without an external watchdog/cron: the only process that can
- * reliably start the successor is the dying bridge itself. The old process
+ * reliably start the successor is the dying lark-remote itself. The old process
  * spawns a detached replacement (same executable + argv, hence same
  * --config-dir), then exits cleanly. The child learns the old pid via env
  * and waits for it to die before acquiring the instance lock, so the lock
@@ -16,7 +16,7 @@ export const RESTART_WAIT_PID_ENV = 'LARK_REMOTE_RESTART_WAIT_PID';
 const WAIT_TIMEOUT_MS = 20_000;
 const POLL_MS = 100;
 /**
- * Spawn a detached bridge process (shared by /restart replacement and /clone
+ * Spawn a detached lark-remote process (shared by /restart replacement and /clone
  * new-instance) whose early output — before the child's own file logger
  * initializes — lands on logFilePath. Returns the child pid, or null when
  * spawn failed synchronously / no pid; filesystem errors (unwritable log
@@ -51,7 +51,7 @@ export function spawnDetachedBridge(args, logFilePath, opts) {
     }
 }
 /**
- * Spawn a detached replacement bridge with the same executable and argv
+ * Spawn a detached replacement lark-remote with the same executable and argv
  * (including --config-dir) and return its pid. The caller is expected to
  * exit right after. stdio is redirected to restart-child.log so early
  * startup failures (before the file logger initializes) are not lost.
@@ -61,13 +61,13 @@ export function spawnReplacementBridge(logsDir) {
         env: { ...process.env, [RESTART_WAIT_PID_ENV]: String(process.pid) },
     });
     if (pid === null) {
-        throw new Error('spawn replacement bridge failed: no pid');
+        throw new Error('spawn replacement lark-remote failed: no pid');
     }
     return pid;
 }
 /**
  * On startup, if this process was spawned as a restart replacement, wait for
- * the previous bridge process to exit (and release the instance lock) before
+ * the previous lark-remote process to exit (and release the instance lock) before
  * continuing. No-op for normal starts. On timeout, proceed anyway — lock
  * acquisition remains the authority.
  */

package/dist/router/config/kimi.js

@@ -7,9 +7,10 @@
 import { loadKimiConfig, KIMI_THINKING_EFFORTS, FALLBACK_EFFORTS, } from '../../config/kimi-config.js';
 import { DEFAULT_TURN_IDLE_TIMEOUT_MINUTES } from '../../config/index.js';
 const PERMISSION_MODE_OPTIONS = [
-    { text: 'manual（逐项审批）', value: 'manual' },
-    { text: 'auto（引擎裁决）', value: 'auto' },
-    { text: 'yolo（全部放行）', value: 'yolo' },
+    // kimi 0.40.0（2026-09-02）起官方语义：manual=始终询问 / yolo=必要时询问 / auto=完全自动
+    { text: 'manual（始终询问）', value: 'manual' },
+    { text: 'auto（完全自动）', value: 'auto' },
+    { text: 'yolo（必要时询问）', value: 'yolo' },
 ];
 export class KimiConfigBuilder {
     buildFields(displayConfig) {

package/dist/router/config/opencode.d.ts

@@ -2,7 +2,7 @@
  * OpenCode config builder — builds fields and handles field changes for OpenCode agent.
  */
 import type { AgentConfigCardBuilder, ConfigField } from './types.js';
-import type { AppConfig } from '../../config/index.js';
+import { type AppConfig } from '../../config/index.js';
 export declare class OpencodeConfigBuilder implements AgentConfigCardBuilder {
     buildFields(displayConfig: AppConfig): ConfigField[];
     handleFieldChange(key: string, value: unknown, config: AppConfig): Array<{

package/dist/router/config/opencode.js

@@ -2,6 +2,7 @@
  * OpenCode config builder — builds fields and handles field changes for OpenCode agent.
  */
 import { loadOpencodeConfig } from '../../config/opencode-config.js';
+import { DEFAULT_TURN_IDLE_TIMEOUT_MINUTES } from '../../config/index.js';
 import { resetModelPatch } from './common/model-patch.js';
 const MODE_OPTIONS = [
     { text: 'build（默认，逐项审批）', value: 'build' },
@@ -38,6 +39,16 @@ export class OpencodeConfigBuilder {
             options: MODE_OPTIONS,
             currentValue: currentMode,
         });
+        // Turn 空闲超时（纯 ACP 对齐 kimi：卡片暴露 turnIdleTimeoutMinutes，
+        // binary/requestTimeoutMs/idleTtlMs 为 YAML-only 工程参数）
+        const currentTurnIdleTimeoutMinutes = displayConfig.agents?.opencode?.acp?.turnIdleTimeoutMinutes ??
+            DEFAULT_TURN_IDLE_TIMEOUT_MINUTES;
+        fields.push({
+            key: 'agents.opencode.acp.turnIdleTimeoutMinutes',
+            label: 'Turn 空闲超时(分钟, 0关闭)',
+            type: 'input',
+            currentValue: String(currentTurnIdleTimeoutMinutes),
+        });
         return fields;
     }
     handleFieldChange(key, value, config) {

package/dist/router/index.d.ts

@@ -121,6 +121,11 @@ export declare class CommandRouter {
      * returns its pid. Injected from index.ts; /restart is unavailable without it.
      */
     private restartSpawner?;
+    /**
+     * 冲刷装配器窗口内未提交的入站 turn（/exit、/restart 干净退出前调用，
+     * 避免静默期窗口内的内容丢失）。index.ts 注入。
+     */
+    private flushInbound?;
     private idleTimeoutMs;
     /** Dev mode flag: --dev means the bridge was started from source (bun src/index.ts). */
     private devMode;
@@ -197,12 +202,24 @@ export declare class CommandRouter {
      * The reader is fetched from the registry each time to reflect config changes.
      */
     private get sessionReader();
+    /**
+     * 注入入站装配器的冲刷回调（/exit、/restart 干净退出前调用，
+     * 避免静默期窗口内未提交的 turn 丢失）。index.ts 在构造后接线。
+     */
+    setInboundFlusher(flush: () => Promise<void>): void;
     /**
      * Route a message: if it starts with /, handle as command; if it starts with !, execute as bash; otherwise forward to Claude.
+     *
+     * 命令识别前置条件（2026-09-15 P0 修复）：
+     * 裸前缀判定会被结构占位符命中 —— SDK 把富文本里的图片渲染成 `![image](img_v3_…)`，
+     * 首字符恰好是 `!`，整段用户消息被当 shell 命令执行（`executeBash "[image](img_v3_…"`）。
+     * 因此命令前缀只在「调用方声明纯文本 + 剥离占位符后非空且无占位符 + 首字符是 / 或 !」
+     * 三条同时成立时生效，其余一律按文本转发。
      */
     handle(message: string, ctx: CommandContext, opts?: {
         cwdOverride?: string;
         binding?: AgentBinding;
+        allowCommandPrefix?: boolean;
     }): Promise<CommandResult | null>;
     /**
      * 一次别名展开：bridge 收到用户消息后、命令分发前调用。

package/dist/router/index.js

@@ -9,6 +9,7 @@ import { OrderStore } from '../order/index.js';
 import { resolveAlias } from '../order/alias-resolve.js';
 import { diffConfig, setNestedValue } from './config-diff.js';
 import { getLogger } from '../logger/index.js';
+import { stripPlaceholders } from '../inbound/placeholder.js';
 import { activeRunUsage, clampInt } from './utils.js';
 import { markdownDiv, buildSessionHistoryCard, paginationBar, parseJumpOffset, PAGE_JUMP_INVALID_HINT, } from './card-helpers.js';
 import { MAX_FILE_UPLOAD_SIZE } from '../connector/file-limits.js';
@@ -342,6 +343,11 @@ export class CommandRouter {
      * returns its pid. Injected from index.ts; /restart is unavailable without it.
      */
     restartSpawner;
+    /**
+     * 冲刷装配器窗口内未提交的入站 turn（/exit、/restart 干净退出前调用，
+     * 避免静默期窗口内的内容丢失）。index.ts 注入。
+     */
+    flushInbound;
     idleTimeoutMs;
     /** Dev mode flag: --dev means the bridge was started from source (bun src/index.ts). */
     devMode;
@@ -416,13 +422,33 @@ export class CommandRouter {
     get sessionReader() {
         return this.sessionReaderRegistry.get(this.config.defaultAgent);
     }
+    /**
+     * 注入入站装配器的冲刷回调（/exit、/restart 干净退出前调用，
+     * 避免静默期窗口内未提交的 turn 丢失）。index.ts 在构造后接线。
+     */
+    setInboundFlusher(flush) {
+        this.flushInbound = flush;
+    }
     /**
      * Route a message: if it starts with /, handle as command; if it starts with !, execute as bash; otherwise forward to Claude.
+     *
+     * 命令识别前置条件（2026-09-15 P0 修复）：
+     * 裸前缀判定会被结构占位符命中 —— SDK 把富文本里的图片渲染成 `![image](img_v3_…)`，
+     * 首字符恰好是 `!`，整段用户消息被当 shell 命令执行（`executeBash "[image](img_v3_…"`）。
+     * 因此命令前缀只在「调用方声明纯文本 + 剥离占位符后非空且无占位符 + 首字符是 / 或 !」
+     * 三条同时成立时生效，其余一律按文本转发。
      */
     async handle(message, ctx, opts) {
         const trimmed = message.trim();
-        const startsWithBang = trimmed.startsWith('!');
-        const startsWithSlash = trimmed.startsWith('/');
+        // 双保险：任何调用点都必须先剥离结构占位符，再判命令前缀
+        //（index.ts 传 allowCommandPrefix = rawContentType === 'text'，但那层不是唯一入口）。
+        const guard = stripPlaceholders(trimmed);
+        // 默认 true：order.exec 等既有内部调用点传的是用户已确认的指令文本，
+        // 且剥离后无占位符 —— 默认放行不改变它们的语义（见 command-guard.test.ts）。
+        const allowCommandPrefix = opts?.allowCommandPrefix ?? true;
+        const commandEligible = allowCommandPrefix && guard.kinds.length === 0 && guard.clean !== '';
+        const startsWithBang = commandEligible && guard.clean.startsWith('!');
+        const startsWithSlash = commandEligible && guard.clean.startsWith('/');
         getLogger().info(`[router] handle message="${message.slice(0, 50)}..." trimmed="${trimmed.slice(0, 50)}..." startsWithSlash=${startsWithSlash} startsWithBang=${startsWithBang}`);
         // 复制分身流程活跃期：一切消息（含命令）交给 clone 状态机处理，
         // 不转发 coding agent、不进命令分发（index.ts 已在入队前拦截，这里
@@ -432,20 +458,20 @@ export class CommandRouter {
             return null;
         }
         if (startsWithSlash) {
-            const result = await this.executeCommand(trimmed, ctx);
+            const result = await this.executeCommand(guard.clean, ctx);
             if (result) {
                 await this.bridge.sendResult(result, ctx);
             }
             if (this.pendingExit) {
-                // 干净退出前冲刷待合批的媒体保存提示，避免 500ms 窗口内的提示丢失。
-                await this.bridge.flushAllMediaNotifications();
+                // 干净退出前冲刷装配器窗口内未提交的入站 turn，避免静默期窗口内的内容丢失。
+                await this.flushInbound?.();
                 this.exitHandler();
             }
             return result;
         }
         // Handle bang commands (!command)
-        if (trimmed.startsWith('!')) {
-            const cmd = trimmed.slice(1).trim();
+        if (startsWithBang) {
+            const cmd = guard.clean.slice(1).trim();
             if (!cmd) {
                 await this.bridge.sendResult({ text: '请输入要执行的命令，例如 !ls' }, ctx);
                 return null;
@@ -456,7 +482,9 @@ export class CommandRouter {
         // Forward to Claude (P1-14: pass the enqueue-time workspace through so the
         // run uses the same cwd as the serial queue lane, even if /cd ran while
         // the message was queued)
-        await this.bridge.forwardToClaude(trimmed, ctx, opts);
+        // 剥离占位符后再转发：agent 只该看到用户文本（附图已转成 attachments 块，
+        // 那是装配器生成的协议块，stripPlaceholders 会原样保留）。
+        await this.bridge.forwardToClaude(guard.clean, ctx, opts);
         return null;
     }
     /**
@@ -607,7 +635,7 @@ export class CommandRouter {
                     // 必须同样消费，否则点击 /restart 按钮 spawn 成功后旧进程不退出，
                     // 新进程撞单例锁退出 → 重启两头落空（2026-08-01 红绿 anchor 锁定）。
                     if (this.pendingExit) {
-                        await this.bridge.flushAllMediaNotifications();
+                        await this.flushInbound?.();
                         this.exitHandler();
                     }
                     return;
@@ -2030,8 +2058,8 @@ export class CommandRouter {
             { cmd: 'ws', label: '/ws', desc: 'workspace 管理（save|use|remove）' },
             { cmd: 'config', label: '/config /c', desc: '查看和修改配置（卡片交互）' },
             { cmd: 'active', label: '/active', desc: '查看所有正在进行中的 session' },
-            { cmd: 'exit', label: '/exit /e', desc: '退出 bridge' },
-            { cmd: 'restart', label: '/restart', desc: '重启 bridge（新进程，config 不变）' },
+            { cmd: 'exit', label: '/exit /e', desc: '退出 lark-remote' },
+            { cmd: 'restart', label: '/restart', desc: '重启 lark-remote（新进程，config 不变）' },
             { cmd: 'update', label: '/update /u', desc: '检查并升级到最新版本' },
             {
                 cmd: 'clone',
@@ -2140,6 +2168,16 @@ export class CommandRouter {
                 content: '**Agent**\n通过 `/config` → 默认 Agent 切换：Claude / Codex / Opencode / Pi / Kimi',
             },
         });
+        // 系统休眠说明
+        bodyElements.push({ tag: 'hr' });
+        bodyElements.push({
+            tag: 'div',
+            text: {
+                tag: 'lark_md',
+                content: '**系统休眠**\nlark-remote 运行期间会阻止系统自动休眠，以免远程连接不上，' +
+                    '不影响显示器睡眠',
+            },
+        });
         return {
             card: {
                 schema: '2.0',
@@ -2228,7 +2266,7 @@ ${sessionCwdLine}${agentLines.map((l) => `- ${l}`).join('\n')}
     async cmdExit() {
         // Signal handle() to invoke exitHandler after the reply is sent.
         this.pendingExit = true;
-        return { text: 'bridge 正在退出...' };
+        return { text: 'lark-remote 正在退出...' };
     }
     cmdRestart() {
         if (!this.restartSpawner) {
@@ -2240,7 +2278,7 @@ ${sessionCwdLine}${agentLines.map((l) => `- ${l}`).join('\n')}
             // 链路——spawn 失败则旧进程保持存活，不会两头落空。
             const pid = this.restartSpawner();
             this.pendingExit = true;
-            return { text: `♻️ bridge 重启中（新进程 pid ${pid}），启动通知稍后送达…` };
+            return { text: `♻️ lark-remote 重启中（新进程 pid ${pid}），启动通知稍后送达…` };
         }
         catch (err) {
             getLogger().error('[router] restart spawn failed:', err);
@@ -3413,8 +3451,8 @@ ${sessionCwdLine}${agentLines.map((l) => `- ${l}`).join('\n')}
         return { card };
     }
     cmdActive(_args, _ctx, offset = 0) {
-        // List all active runs from bridge memory (not from file system scan)
-        // New semantics (2026-07-20): only shows runs started by THIS bridge process
+        // List all active runs from lark-remote memory (not from file system scan)
+        // New semantics (2026-07-20): only shows runs started by THIS lark-remote process
         const activeRuns = this.bridge.getActiveRuns();
         const activeBashRuns = this.bridge.getActiveBashRuns();
         if (activeRuns.length === 0 && activeBashRuns.length === 0) {

package/dist/runner/common/acp/base-acp-runner.js

@@ -1,4 +1,4 @@
-import { respondAcpApproval, sendAcpSetMode } from './protocol-helpers.js';
+import { respondAcpApproval, sendAcpSetMode, truncateWithEllipsis, } from './protocol-helpers.js';
 import { getLogger } from '../../../logger/index.js';
 import { ConnectionBasedRunner } from '../connection-based-runner.js';
 export class BaseAcpRunner extends ConnectionBasedRunner {
@@ -87,7 +87,12 @@ export class BaseAcpRunner extends ConnectionBasedRunner {
                     options,
                     ...(proto ? { proto } : {}),
                 });
-                getLogger().info(`[${this.logTag}] approval requested requestId=${ev.requestId} kind=${ev.kind}`);
+                // 命令预览进日志：审批卡在飞书侧，日志是本地唯一的事后追溯通道
+                // （kimi 的 request_permission 不带 rawInput，曾只剩 kind=command 可查）。
+                const commandPreview = ev.view.command
+                    ? ` command=${truncateWithEllipsis(ev.view.command, 120)}`
+                    : '';
+                getLogger().info(`[${this.logTag}] approval requested requestId=${ev.requestId} kind=${ev.kind}${commandPreview}`);
             }
         }
     }

package/dist/runner/common/acp/base-translator.d.ts

@@ -59,6 +59,16 @@ export declare abstract class BaseAcpTranslator {
     protected liveCostUsd?: number;
     /** Current turn id, set by produceTurnStarted. */
     protected currentTurnId: string;
+    /**
+     * Latest streaming-args text per tool call (keyed by wire toolCallId).
+     * kimi ACP sends the permission request BEFORE tool.call.started (verified
+     * live against kimi 0.42.0, 2026-09-13): the request_permission toolCall
+     * carries only title + a truncated summary in content, NO rawInput — the
+     * full args only ever reach the client as accumulated text in the
+     * tool_call/tool_call_update streaming deltas. Tracking them here lets the
+     * approval handler correlate by toolCallId and recover the real command.
+     */
+    private toolCallArgsByCallId;
     /**
      * Handle a notification from the ACP server and return translated events.
      * Wire envelope: {sessionId, update: {sessionUpdate: '<kind>', ...}} — the
@@ -115,6 +125,15 @@ export declare abstract class BaseAcpTranslator {
      * tool_call_update → user/tool_result. status:'failed' → is_error:true.
      */
     protected handleToolCallUpdate(event: ToolCallUpdateEvent, _sessionId: string): AcpTranslatorEvent[];
+    /**
+     * Latest tracked streaming-args text for a tool call (undefined when never
+     * seen or already terminated). Approval handlers correlate
+     * request_permission's toolCall.toolCallId against this to recover the real
+     * command (see toolCallArgsByCallId).
+     */
+    protected getTrackedToolCallArgs(toolCallId: string): string | undefined;
+    /** Record latest args text, bounded so a long session cannot grow it forever. */
+    private trackToolCallArgs;
     /**
      * tool_result content extraction. Default: rawOutput passthrough (kimi
      * semantics). opencode overrides — its rawOutput is an OBJECT

package/dist/runner/common/acp/base-translator.js

@@ -11,6 +11,36 @@ const KIND_TO_TOOL = {
     search: 'Grep',
     fetch: 'WebFetch',
 };
+/**
+ * Join the text payloads of a tool_call(/_update) content array
+ * (`[{type:'content', content:{type:'text', text}}]` entries). Returns
+ * undefined when no text entry exists (diff/terminal-only content).
+ */
+function extractToolCallContentText(content) {
+    if (!Array.isArray(content))
+        return undefined;
+    let text = '';
+    let found = false;
+    for (const entry of content) {
+        const e = entry;
+        if (e?.type === 'content' && e.content?.type === 'text' && typeof e.content.text === 'string') {
+            text += e.content.text;
+            found = true;
+        }
+    }
+    return found ? text : undefined;
+}
+/** Best-effort stringify for tracked rawInput objects (never throws). */
+function stringifyUnknown(value) {
+    if (typeof value === 'string')
+        return value;
+    try {
+        return JSON.stringify(value) ?? String(value);
+    }
+    catch {
+        return String(value);
+    }
+}
 // =============================================================================
 // Translator base class
 // =============================================================================
@@ -25,6 +55,16 @@ export class BaseAcpTranslator {
     liveCostUsd;
     /** Current turn id, set by produceTurnStarted. */
     currentTurnId = '';
+    /**
+     * Latest streaming-args text per tool call (keyed by wire toolCallId).
+     * kimi ACP sends the permission request BEFORE tool.call.started (verified
+     * live against kimi 0.42.0, 2026-09-13): the request_permission toolCall
+     * carries only title + a truncated summary in content, NO rawInput — the
+     * full args only ever reach the client as accumulated text in the
+     * tool_call/tool_call_update streaming deltas. Tracking them here lets the
+     * approval handler correlate by toolCallId and recover the real command.
+     */
+    toolCallArgsByCallId = new Map();
     /**
      * Handle a notification from the ACP server and return translated events.
      * Wire envelope: {sessionId, update: {sessionUpdate: '<kind>', ...}} — the
@@ -191,6 +231,13 @@ export class BaseAcpTranslator {
                 // Keep raw string as-is
             }
         }
+        const argsText = extractToolCallContentText(event.content);
+        if (argsText !== undefined) {
+            this.trackToolCallArgs(event.toolCallId, argsText);
+        }
+        else if (event.rawInput !== undefined && event.rawInput !== null) {
+            this.trackToolCallArgs(event.toolCallId, stringifyUnknown(event.rawInput));
+        }
         const mapped = event.kind ? KIND_TO_TOOL[event.kind] : undefined;
         const name = mapped ?? event.title;
         const summary = mapped && event.title && event.title !== name ? event.title : undefined;
@@ -218,6 +265,22 @@ export class BaseAcpTranslator {
     handleToolCallUpdate(event, _sessionId) {
         const isError = event.status === 'failed';
         const content = this.extractToolResultContent(event);
+        // Terminal updates end the args-streaming phase — drop the tracked entry.
+        // In-progress delta text is cumulative (events-map.ts
+        // toolCallDeltaToSessionUpdate: content.text = accumulator.args), so the
+        // latest text replaces the previous one rather than appending.
+        if (event.status === 'completed' || event.status === 'failed') {
+            this.toolCallArgsByCallId.delete(event.toolCallId);
+        }
+        else {
+            const argsText = extractToolCallContentText(event.content);
+            if (argsText !== undefined) {
+                this.trackToolCallArgs(event.toolCallId, argsText);
+            }
+            else if (event.rawInput !== undefined && event.rawInput !== null) {
+                this.trackToolCallArgs(event.toolCallId, stringifyUnknown(event.rawInput));
+            }
+        }
         return [
             {
                 type: 'user',
@@ -235,6 +298,25 @@ export class BaseAcpTranslator {
             },
         ];
     }
+    /**
+     * Latest tracked streaming-args text for a tool call (undefined when never
+     * seen or already terminated). Approval handlers correlate
+     * request_permission's toolCall.toolCallId against this to recover the real
+     * command (see toolCallArgsByCallId).
+     */
+    getTrackedToolCallArgs(toolCallId) {
+        return this.toolCallArgsByCallId.get(toolCallId);
+    }
+    /** Record latest args text, bounded so a long session cannot grow it forever. */
+    trackToolCallArgs(toolCallId, argsText) {
+        this.toolCallArgsByCallId.delete(toolCallId);
+        this.toolCallArgsByCallId.set(toolCallId, argsText);
+        if (this.toolCallArgsByCallId.size > 100) {
+            const oldest = this.toolCallArgsByCallId.keys().next().value;
+            if (oldest !== undefined)
+                this.toolCallArgsByCallId.delete(oldest);
+        }
+    }
     /**
      * tool_result content extraction. Default: rawOutput passthrough (kimi
      * semantics). opencode overrides — its rawOutput is an OBJECT

package/dist/runner/common/acp/protocol-types.d.ts

@@ -22,6 +22,9 @@
  *    以 `turn_diff` 快照发出——禁止把 delta 直接当快照或把全文当增量重复追加。
  * 4. `tool_call` 事件可能**没有 rawInput**（工具 lazy-create，参数在后续
  *    tool_call_update 才补齐）；translator 必须归一化为 `{}`，不得因缺失崩溃。
+ * 5. `session/request_permission` 的 toolCall **不一定带 rawInput**（kimi 实测：
+ *    审批门先于 tool.call.started，只有 title + content 截断摘要）；完整命令
+ *    需按 toolCallId 关联审批前的流式 args 文本恢复（BaseAcpTranslator 追踪）。
  */
 export type { JsonRpcRequest, JsonRpcNotification, JsonRpcSuccessResponse, JsonRpcErrorResponse, } from '../jsonrpc/types.js';
 /** Standard JSON-RPC error codes. */
@@ -226,9 +229,20 @@ export interface PermissionOption {
 }
 export interface RequestPermissionParams {
     sessionId: string;
+    /**
+     * Approval target. Divergence by server (2026-09-13 live probes):
+     *  - kimi 0.42: {toolCallId, title: toolName, content: [truncated summary
+     *    text]} — NO rawInput; the approval gate fires BEFORE tool.call.started,
+     *    so the full args only exist in the pre-approval tool_call/_update
+     *    streaming deltas (correlate by toolCallId, see BaseAcpTranslator).
+     *  - opencode: {toolCallId, title: full command for bash/shell, rawInput:
+     *    full input object} — title/rawInput are directly usable.
+     */
     toolCall?: {
-        title: string;
-        rawInput: string;
+        toolCallId?: string;
+        title?: string;
+        rawInput?: unknown;
+        content?: unknown[];
         [key: string]: unknown;
     };
     options: PermissionOption[];

package/dist/runner/common/acp/protocol-types.js

@@ -22,6 +22,9 @@
  *    以 `turn_diff` 快照发出——禁止把 delta 直接当快照或把全文当增量重复追加。
  * 4. `tool_call` 事件可能**没有 rawInput**（工具 lazy-create，参数在后续
  *    tool_call_update 才补齐）；translator 必须归一化为 `{}`，不得因缺失崩溃。
+ * 5. `session/request_permission` 的 toolCall **不一定带 rawInput**（kimi 实测：
+ *    审批门先于 tool.call.started，只有 title + content 截断摘要）；完整命令
+ *    需按 toolCallId 关联审批前的流式 args 文本恢复（BaseAcpTranslator 追踪）。
  */
 /** Standard JSON-RPC error codes. */
 export const RpcErrorCode = {

package/dist/runner/common/connection-based-runner.js

@@ -1,8 +1,12 @@
 import { ConnectionLostError } from './jsonrpc/client.js';
 import { getLogger } from '../../logger/index.js';
 import { syntheticInitEvent } from './runner-utils.js';
-/** How long to wait for turn output notifications before failing. */
-const TURN_IDLE_TIMEOUT_MS = 10 * 60 * 1000;
+import { DEFAULT_TURN_IDLE_TIMEOUT_MINUTES } from '../../config/index.js';
+/** How long to wait for turn output notifications before failing.
+ *  30 分钟（单源于 config 的 DEFAULT_TURN_IDLE_TIMEOUT_MINUTES）：ACP/app-server
+ *  类 agent 常因长工具调用（pip/npm install 等）或等待 SubAgent 长时间静默，
+ *  10 分钟会误杀正常进行中的 run。未接配置的 runner（如 opencode）直接吃此默认。 */
+const TURN_IDLE_TIMEOUT_MS = DEFAULT_TURN_IDLE_TIMEOUT_MINUTES * 60 * 1000;
 export class ConnectionBasedRunner {
     kind;
     sessionReader;

package/dist/runner/kimi/acp/runner.d.ts

@@ -36,7 +36,7 @@ export interface KimiAcpRunnerOptions {
     requestTimeoutMs?: number;
     /** Idle TTL for connection manager. */
     idleTtlMs?: number;
-    /** How long to wait for turn output before failing. Defaults to 10 min. */
+    /** How long to wait for turn output before failing. Defaults to 30 min. */
     turnIdleTimeoutMs?: number;
     /** §5.2: compaction 等待的沉默超时——距上次观察到任何新 compaction 记录
      *  （begin/terminal）超过该时长仍未终态才放弃（outcome unknown，卡片 error，

package/dist/runner/kimi/acp/runner.js

@@ -27,7 +27,7 @@ import { mapAnswersByIndex } from '../../question-common.js';
 import { getLogger } from '../../../logger/index.js';
 import { BaseAcpRunner } from '../../common/acp/base-acp-runner.js';
 import { ProcessStopper } from '../../common/process-stopper.js';
-/** §5.2: compaction 等待的默认沉默超时（对齐 turnIdleTimeoutMs 默认值）。 */
+/** §5.2: compaction 等待的默认沉默超时（10 分钟，独立于 turn idle 默认 30 分钟）。 */
 const COMPACT_IDLE_TIMEOUT_MS = 10 * 60_000;
 /** Poll interval for the wire.jsonl compaction record. */
 const COMPACT_POLL_INTERVAL_MS = 1_000;