lark-remote 0.5.12 → 0.5.14

package/dist/card/run-state.d.ts

@@ -1,4 +1,5 @@
 import type { AgentEvent, ApprovalView, ToolHint, GoalView } from '../runner/index.js';
+import type { UsageSnapshot } from '../session-contract.js';
 export type RunTerminal = 'running' | 'finalizing' | 'done' | 'error' | 'interrupted' | 'idle_timeout'
 /**
  * 本轮 turn 已结束，但会话的 goal 仍 active：宿主会自动开始下一轮，任务没有
@@ -13,10 +14,20 @@ export type RunTerminal = 'running' | 'finalizing' | 'done' | 'error' | 'interru
  * 禁止各自再抄一份字面量——三处漂移过一次（goal_continuing 只进白名单不进
  * 按钮判据），新增终态时必漏一处的风险是结构性的。
  */
-export declare const RUN_TERMINAL_STATES: readonly ["done", "error", "interrupted", "idle_timeout", "goal_continuing"];
+declare const RUN_TERMINAL_STATES: readonly ["done", "error", "interrupted", "idle_timeout", "goal_continuing"];
 export type RunFinalTerminal = (typeof RUN_TERMINAL_STATES)[number];
 /** 该状态是否已收尾（非 running/finalizing）。 */
 export declare function isRunTerminal(terminal: RunTerminal): terminal is RunFinalTerminal;
+/** 仍在推进的两个状态（`RunTerminal` 的非终态部分）。 */
+export type RunActiveTerminal = 'running' | 'finalizing';
+/**
+ * 该状态是否仍在推进（running 或 finalizing）。
+ *
+ * `finalizing` 是「result 已到、进程还在收尾」的非终态：卡片仍要处理事件、
+ * 仍要显示停止按钮。这个判据此前在 card/bridge 里逐字抄了四处，与
+ * `isRunTerminal` 互为反义却各写各的——收在这儿与终态判据并排。
+ */
+export declare function isRunActive(terminal: RunTerminal): terminal is RunActiveTerminal;
 export type RunFooter = 'thinking' | 'tool_running' | 'streaming' | null;
 /** 中断来源（interrupted 终态的原因），供卡片如实归因。 */
 export type InterruptedReason = 'approval_timeout' | 'user_stop' | 'approval_cancelled';
@@ -85,7 +96,18 @@ export interface RunNotice {
     text: string;
     timestamp?: string;
 }
-export interface RunState {
+export interface FinalAnswerState {
+    content: string;
+    timestamp?: string;
+    complete: boolean;
+    source: 'protocol' | 'inferred';
+}
+/**
+ * 一张 run 卡的状态。用量字段（context/tokens/cache/累计/推理）一律来自
+ * `UsageSnapshot` 单源——原先在这里、`FinishMeta`、`usage-format` 和桥侧各抄
+ * 一份（§9.21「五处一致」靠人记），加一个字段要改四遍。
+ */
+export interface RunState extends UsageSnapshot {
     runId: string;
     terminal: RunTerminal;
     footer: RunFooter;
@@ -94,34 +116,17 @@ export interface RunState {
     /** 本 run 结束时间（epoch ms）：终态后耗时定格，不再随渲染时刻增长。 */
     finishedAt?: number;
     blocks: RunBlock[];
+    /**
+     * The answer the user is waiting for. Kept outside `blocks` so progress
+     * traffic cannot evict or consume its display budget.
+     */
+    finalAnswer?: FinalAnswerState;
     sessionId?: string;
     resultSubtype?: 'success' | 'error' | 'interrupted';
     /** interrupted 终态的中断来源；undefined = 未归类（渲染默认文案）。 */
     interruptedReason?: InterruptedReason;
-    contextLength?: number;
-    /** 当前模型 context window 上限（codex jsonl 提供）；卡片据此渲染百分比。 */
-    contextLimit?: number;
     errorMsg?: string;
     idleTimeoutMinutes?: number;
-    compactCount?: number;
-    cacheReadTokens?: number;
-    cacheCreationTokens?: number;
-    /** Agent-declared total; the done card uses max(total, sum of parts). */
-    totalTokens?: number;
-    /** Real input tokens from the agent's result event (codex/opencode).
-     *  When present, the done card shows the real value instead of the
-     *  contextLength-based estimate. */
-    inputTokens?: number;
-    /** Real output tokens from the agent's result event. */
-    outputTokens?: number;
-    /** 会话累计 total/input/output（所有 run 之和），Run 卡片展示"累计"。 */
-    cumulativeTotalTokens?: number;
-    cumulativeInputTokens?: number;
-    cumulativeOutputTokens?: number;
-    /** 会话累计 cache read token（所有 run 之和）。 */
-    cumulativeCacheReadTokens?: number;
-    /** 会话累计 cache creation token（所有 run 之和）。 */
-    cumulativeCacheCreationTokens?: number;
     plan?: string;
     /** 实际生效模型（system.init 携带；失败兜底 synthetic init 为 ''，渲染须容忍）。 */
     model?: string;
@@ -135,12 +140,8 @@ export interface RunState {
     sessionTitle?: string;
     /** 当前模式（ACP current_mode_update.currentModeId）。 */
     mode?: string;
-    /** 推理 token（pi usage.reasoning 累加，经 finish meta 写入）。 */
-    reasoningTokens?: number;
     /** Codex 操作类型：'turn' 表示普通 run，'compaction' 表示 compact 运行。 */
     operationKind?: 'turn' | 'compaction';
-    /** 压缩前上下文水位（codex compact 卡展示「压缩前 X → 压缩后 Y」）。 */
-    compactPreContextLength?: number;
     /**
      * 待审批请求列表（app-server 模式）。同一 turn 内并发多个审批
      * 时全部渲染，避免后到者顶掉先到者的按钮（单槽会丢 UI，只能等超时 cancel）。
@@ -189,35 +190,23 @@ export interface RunState {
      */
     goalKnown?: boolean;
 }
-export interface FinishMeta {
+/** 终态卡片的一次性元信息；用量部分与 `RunState` 同源（`UsageSnapshot`）。 */
+export interface FinishMeta extends UsageSnapshot {
     resultSubtype?: 'success' | 'error' | 'interrupted';
     /** 中断来源：由桥侧在 finish 时显式传入（/stop → user_stop、审批卡取消 → approval_cancelled）。 */
     interruptedReason?: InterruptedReason;
-    contextLength?: number;
-    /** 当前模型 context window 上限；透传到 RunState 供 done 卡片显示百分比。 */
-    contextLimit?: number;
     errorMsg?: string;
     idleTimeoutMinutes?: number;
-    compactCount?: number;
-    compactPreContextLength?: number;
-    cacheReadTokens?: number;
-    cacheCreationTokens?: number;
-    /** Agent-declared total; threaded to RunState for the done card. */
-    totalTokens?: number;
-    /** Real input/output tokens from the agent's result event. Threaded through
-     *  to RunState so the done card can display real values instead of estimates. */
-    inputTokens?: number;
-    outputTokens?: number;
-    /** 会话累计 total/input/output（所有 run 之和），从 session jsonl 读取。 */
-    cumulativeTotalTokens?: number;
-    cumulativeInputTokens?: number;
-    cumulativeOutputTokens?: number;
-    cumulativeCacheReadTokens?: number;
-    cumulativeCacheCreationTokens?: number;
-    /** 推理 token（pi usage.reasoning 累加，经 usageMeta 透传）。 */
-    reasoningTokens?: number;
 }
 export declare function createInitialRunState(runId: string): RunState;
 export declare function reduceRunState(state: RunState, event: AgentEvent): RunState;
-export declare function finishRun(state: RunState, terminal: Exclude<RunTerminal, 'running' | 'finalizing'>, meta?: FinishMeta): RunState;
+/**
+ * 用户停止某个后台任务成功后，从卡片状态里摘掉它。
+ *
+ * run 此时已经收尾（没有流再消费事件），所以这条不走 reducer 的事件入口；但
+ * RunState 的形状只允许在本模块内拼装——bridge 直接展开 state 曾把「摘一条」
+ * 写成「整体重建」，字段一多就会漏带。
+ */
+export declare function removeBackgroundJob(state: RunState, jobId: string): RunState;
+export declare function finishRun(state: RunState, terminal: RunFinalTerminal, meta?: FinishMeta): RunState;
 export {};

package/dist/card/run-state.js

@@ -1,4 +1,5 @@
 import { keepTail } from '../common/truncate.js';
+import { asRecord } from '../common/tool-summary.js';
 const MAX_REASONING_CHARS = 4_000;
 const MAX_TEXT_CHARS = 12_000;
 const MAX_TOOL_DETAIL_CHARS = 3_000;
@@ -10,7 +11,7 @@ const MAX_BLOCKS = 24;
  * 禁止各自再抄一份字面量——三处漂移过一次（goal_continuing 只进白名单不进
  * 按钮判据），新增终态时必漏一处的风险是结构性的。
  */
-export const RUN_TERMINAL_STATES = [
+const RUN_TERMINAL_STATES = [
     'done',
     'error',
     'interrupted',
@@ -21,6 +22,16 @@ export const RUN_TERMINAL_STATES = [
 export function isRunTerminal(terminal) {
     return RUN_TERMINAL_STATES.includes(terminal);
 }
+/**
+ * 该状态是否仍在推进（running 或 finalizing）。
+ *
+ * `finalizing` 是「result 已到、进程还在收尾」的非终态：卡片仍要处理事件、
+ * 仍要显示停止按钮。这个判据此前在 card/bridge 里逐字抄了四处，与
+ * `isRunTerminal` 互为反义却各写各的——收在这儿与终态判据并排。
+ */
+export function isRunActive(terminal) {
+    return terminal === 'running' || terminal === 'finalizing';
+}
 export function createInitialRunState(runId) {
     return {
         runId,
@@ -50,6 +61,8 @@ export function reduceRunState(state, event) {
         return reduceBackgroundJobsEvent(state, event);
     if (event.type === 'result')
         return reduceResultEvent(state, event);
+    if (event.type === 'final_answer')
+        return reduceFinalAnswerEvent(state, event);
     if (event.type === 'assistant')
         return reduceAssistantEvent(state, event);
     if (event.type === 'user')
@@ -187,7 +200,7 @@ function reduceTurnDiffEvent(state, event) {
                     id: event.itemId,
                     name: event.toolName ?? 'command',
                     input: inputStr,
-                    parsedInput: tryParseRecord(inputStr),
+                    parsedInput: asRecord(inputStr),
                     ...(event.toolHint !== undefined ? { toolHint: event.toolHint } : {}),
                     output: keepTail(event.toolOutput, MAX_TOOL_DETAIL_CHARS),
                     status: complete ? (event.toolStatus ?? 'ok') : 'running',
@@ -320,31 +333,82 @@ function reduceResultEvent(state, event) {
     // sessionId is set by system.init; undefined means init hasn't arrived yet.
     if (state.sessionId === undefined)
         return state;
+    const withFinalAnswer = promoteFinalAnswer(state, 'inferred');
     const resultEvent = event;
     const incomingSubtype = event.subtype;
     const incomingErrorMsg = incomingSubtype === 'error' ? (resultEvent.errorMessage ?? 'Agent 返回错误结果') : undefined;
     // 合并 subtype：error 优先，其次 interrupted（任一为 error 即 error；
     // 否则任一为 interrupted 即 interrupted；interrupted 不得并入 success）。
-    const mergedSubtype = state.resultSubtype === 'error' || incomingSubtype === 'error'
+    const mergedSubtype = withFinalAnswer.resultSubtype === 'error' || incomingSubtype === 'error'
         ? 'error'
-        : state.resultSubtype === 'interrupted' || incomingSubtype === 'interrupted'
+        : withFinalAnswer.resultSubtype === 'interrupted' || incomingSubtype === 'interrupted'
             ? 'interrupted'
             : 'success';
     // 合并 errorMsg：首个非 undefined 胜出（existing ?? incoming）
-    const mergedErrorMsg = state.errorMsg ?? incomingErrorMsg;
+    const mergedErrorMsg = withFinalAnswer.errorMsg ?? incomingErrorMsg;
     return {
-        ...state,
+        ...withFinalAnswer,
         terminal: 'finalizing',
         footer: null,
-        blocks: markThinkingInactive(state.blocks),
+        blocks: markThinkingInactive(withFinalAnswer.blocks),
         resultSubtype: mergedSubtype,
         errorMsg: mergedErrorMsg,
         // costUsd：首个非 undefined 胜出（与 errorMsg 合并语义一致）
-        ...(event.total_cost_usd !== undefined && state.costUsd === undefined
+        ...(event.total_cost_usd !== undefined && withFinalAnswer.costUsd === undefined
             ? { costUsd: event.total_cost_usd }
             : {}),
     };
 }
+/** Record an authoritative protocol final answer and remove its progress copy. */
+function reduceFinalAnswerEvent(state, event) {
+    if (event.type !== 'final_answer')
+        return state;
+    if (!event.text.trim() && !state.finalAnswer)
+        return state;
+    const blocks = event.itemId
+        ? state.blocks.filter((block) => block.kind !== 'text' || block.itemId !== event.itemId)
+        : state.blocks;
+    const content = event.text.trim() ? event.text : (state.finalAnswer?.content ?? '');
+    return {
+        ...state,
+        blocks,
+        finalAnswer: {
+            content,
+            timestamp: state.finalAnswer?.timestamp ?? event.timestamp,
+            complete: event.complete ?? state.finalAnswer?.complete ?? false,
+            source: 'protocol',
+        },
+        footer: 'streaming',
+    };
+}
+/**
+ * Agents without an explicit final-answer marker use their last non-empty
+ * assistant text block. Moving it out of `blocks` protects it from
+ * MAX_BLOCKS and lets the renderer assign it first claim on card space.
+ */
+function promoteFinalAnswer(state, source) {
+    if (state.finalAnswer) {
+        return state.finalAnswer.complete
+            ? state
+            : { ...state, finalAnswer: { ...state.finalAnswer, complete: true } };
+    }
+    for (let i = state.blocks.length - 1; i >= 0; i--) {
+        const block = state.blocks[i];
+        if (block.kind !== 'text' || !block.content.trim())
+            continue;
+        return {
+            ...state,
+            blocks: state.blocks.filter((_, index) => index !== i),
+            finalAnswer: {
+                content: block.content,
+                timestamp: block.timestamp,
+                complete: true,
+                source,
+            },
+        };
+    }
+    return state;
+}
 /**
  * 后台任务名单 → RunState.backgroundJobs。
  *
@@ -357,6 +421,19 @@ function reduceBackgroundJobsEvent(state, event) {
         return state;
     return { ...state, backgroundJobs: event.jobs };
 }
+/**
+ * 用户停止某个后台任务成功后，从卡片状态里摘掉它。
+ *
+ * run 此时已经收尾（没有流再消费事件），所以这条不走 reducer 的事件入口；但
+ * RunState 的形状只允许在本模块内拼装——bridge 直接展开 state 曾把「摘一条」
+ * 写成「整体重建」，字段一多就会漏带。
+ */
+export function removeBackgroundJob(state, jobId) {
+    return {
+        ...state,
+        backgroundJobs: (state.backgroundJobs ?? []).filter((job) => job.id !== jobId),
+    };
+}
 /**
  * 运行期状态投影 → 状态行。
  *
@@ -458,7 +535,7 @@ function reduceAssistantEvent(state, event) {
                 id: content.id,
                 name: content.name,
                 input: inputStr,
-                parsedInput: tryParseRecord(inputStr),
+                parsedInput: asRecord(inputStr),
                 ...(content.summary !== undefined ? { summary: content.summary } : {}),
                 status: 'running',
                 startedAt: event.timestamp,
@@ -618,30 +695,33 @@ function reduceFileChangeEvent(state, event) {
     };
 }
 export function finishRun(state, terminal, meta = {}) {
+    const withFinalAnswer = promoteFinalAnswer(state, 'inferred');
     // 允许从 running 或 finalizing finish（/stop、idle watchdog、进程退出 finally）。
     // finalizing 是非终态（result 已收到，进程未退出），可被 finish 转终态。
     // 如果已经是终态，仍然允许补充 meta 信息（如 usage 等，bridge finally 的
     // else-if-sawResult 分支用此路径补充 token 统计）。
-    if (state.terminal !== 'running' && state.terminal !== 'finalizing') {
+    if (withFinalAnswer.terminal !== 'running' && withFinalAnswer.terminal !== 'finalizing') {
         // Already terminal: apply meta fields if provided (e.g. usage from jsonl)
         const hasMeta = Object.keys(meta).some((k) => meta[k] !== undefined);
         if (!hasMeta)
-            return state;
-        return { ...state, ...sanitizeMeta(meta) };
+            return withFinalAnswer;
+        return { ...withFinalAnswer, ...sanitizeMeta(meta) };
     }
     // interrupted 终态的中断来源：显式传入优先；否则从顶层持久标记推导
     // （approval_expired 已置位但调用方未传 reason 的路径，如协调器过期自动
     // cancel。原因必须在终态确定，不依赖调用方记得传参）。
     const derivedReason = meta.interruptedReason ??
-        (terminal === 'interrupted' && state.approvalExpired === true ? 'approval_timeout' : undefined);
+        (terminal === 'interrupted' && withFinalAnswer.approvalExpired === true
+            ? 'approval_timeout'
+            : undefined);
     return {
-        ...state,
+        ...withFinalAnswer,
         terminal,
         footer: null,
         // 耗时定格：终态之后再渲染（补 token 统计、点「详情」重渲染）都沿用同一
         // 结束时刻，否则每次 patch 的数字都会变大。
-        finishedAt: state.finishedAt ?? Date.now(),
-        blocks: markThinkingInactive(state.blocks),
+        finishedAt: withFinalAnswer.finishedAt ?? Date.now(),
+        blocks: markThinkingInactive(withFinalAnswer.blocks),
         ...sanitizeMeta(meta),
         ...(derivedReason !== undefined ? { interruptedReason: derivedReason } : {}),
     };
@@ -673,24 +753,6 @@ function stringifyUnknown(value) {
         return String(value);
     }
 }
-/**
- * parse a (possibly truncated) string into a record, mirroring what
- * `tool-render.ts`'s `asRecord` did on every render. Returns `null` when the
- * string is empty, non-JSON, or parses to a non-object — so a truncation-broken
- * JSON yields `null` exactly as the old per-render parse did. Computed once at
- * store time and cached on `ToolEntry.parsedInput`.
- */
-function tryParseRecord(input) {
-    if (!input)
-        return null;
-    try {
-        const p = JSON.parse(input);
-        return p && typeof p === 'object' ? p : null;
-    }
-    catch {
-        return null;
-    }
-}
 function keepLatestBlocks(blocks) {
     return blocks.length <= MAX_BLOCKS ? blocks : blocks.slice(-MAX_BLOCKS);
 }

package/dist/card/usage-format.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Format session/run usage stats (context, compact count, tokens, cost) into
+ * the display strings shown on cards. Pure — no Router state.
+ *
+ * 归属 card/：渲染层（run-renderer）与 router 都只消费它的展示字符串，此前
+ * 住在 router/ 让它成为 card→router 的唯一理由。
+ */
+import type { UsageSnapshot } from '../session-contract.js';
+/** `formatUsageStats` 只读这几项：会话/进度卡片上的紧凑用量行。 */
+export type SessionDisplayUsage = Pick<UsageSnapshot, 'contextLength' | 'contextLimit' | 'compactCount' | 'cacheReadTokens' | 'cacheCreationTokens'>;
+/**
+ * Format usage stats (context length, compact count, cache tokens) into a display string.
+ * Each stat on its own line with blank lines between sections.
+ * @param usage - Usage stats object
+ * @param options - Optional display options (showResult adds result line)
+ */
+export declare function formatUsageStats(usage?: UsageSnapshot & {
+    /** 实际生效模型（system.init 携带）。非空字符串才显示。 */
+    model?: string;
+    /** 本次 run 花费（USD）。存在才显示。 */
+    costUsd?: number;
+}, options?: {
+    showResult?: boolean;
+    result?: string;
+    /**
+     * 首行状态文案。默认 `✅ 已完成`；goal 仍 active 的收尾卡必须换掉它——
+     * 本轮 turn 结束不等于任务结束。
+     */
+    completedLabel?: string;
+}): string;

package/dist/{router → card}/usage-format.js

@@ -1,17 +1,10 @@
 /**
  * Format session/run usage stats (context, compact count, tokens, cost) into
  * the display strings shown on cards. Pure — no Router state.
+ *
+ * 归属 card/：渲染层（run-renderer）与 router 都只消费它的展示字符串，此前
+ * 住在 router/ 让它成为 card→router 的唯一理由。
  */
-export function activeRunUsage(activeRun) {
-    if (!activeRun || activeRun.contextLength === undefined)
-        return undefined;
-    return {
-        contextLength: activeRun.contextLength,
-        compactCount: activeRun.compactCount,
-        cacheReadTokens: activeRun.cacheReadTokens,
-        cacheCreationTokens: activeRun.cacheCreationTokens,
-    };
-}
 /**
  * Format number to human-readable unit string.
  * - >= 1M: one decimal, M suffix (e.g., 1200000 → 1.2M, 25000000 → 25M)

package/dist/clone.js

@@ -390,7 +390,12 @@ export class CloneSession {
             const raw = JSON.parse(fs.readFileSync(path.join(this.configDir, 'startup-contact.json'), 'utf-8'));
             return typeof raw.userId === 'string' && raw.userId ? raw.userId : undefined;
         }
-        catch {
+        catch (err) {
+            // ENOENT = 旧实例从未写过 startup-contact（正常）。其余（解析失败/权限）
+            // 留痕：否则下游会误归因成「旧 owner 无条目」。
+            if (err.code !== 'ENOENT') {
+                getLogger().debug(`[clone] cannot read startup-contact.json for previous owner: ${err?.message ?? String(err)}`);
+            }
             return undefined;
         }
     }

package/dist/config/codex-config.js

@@ -519,10 +519,10 @@ export function loadCodexConfig(opts = {}) {
     }
     catch {
         // config.toml 读取/解析失败：readModelCatalogJsonPath 对此返回
-        // TOML_PARSE_FAILED_SENTINEL（isCodexCatalogMode → false），进入本 catch
-        // 时 catalogMode 恒为 false——下面的 `if (catalogMode)` 分支实际不可达，
-        // 仅作防御保留。真正「catalog 声明退化」的场景（'' 哨兵）在 parse 之前
-        // 就已按 FALLBACK 兜底处理，不会走到这里。
+        // TOML_PARSE_FAILED_SENTINEL（isCodexCatalogMode → false），因此正常路径下
+        // catalogMode 恒为 false，下面的 `if (catalogMode)` 分支只在两次读取之间
+        // config.toml 被改写（TOCTOU）时可达；保留该防御，避免把“已声明 catalog、
+        // 随后配置损坏”误降级成 bundled 模型。
         if (catalogMode) {
             return {
                 currentModel: '',

package/dist/config/index.d.ts

@@ -22,6 +22,8 @@ export declare const PI_THINKING_LEVELS: readonly ["off", "minimal", "low", "med
 export declare const DEFAULT_STOP_GRACE_MS: 5000;
 /** Codex app-server turn idle timeout default (minutes). */
 export declare const DEFAULT_TURN_IDLE_TIMEOUT_MINUTES: 30;
+/** Approval timeout default (ms), shared by schema and bridge fallback. */
+export declare const DEFAULT_APPROVAL_TIMEOUT_MS: number;
 /**
  * 入站媒体默认配置（schema 默认与 connector 兜底共用，避免双源漂移）。
  *
@@ -32,27 +34,23 @@ export declare const DEFAULT_TURN_IDLE_TIMEOUT_MINUTES: 30;
  */
 export declare const DEFAULT_INBOUND_MEDIA_DIR_NAME = ".lark-remote-temp";
 export declare const DEFAULT_INBOUND_MEDIA_MAX_SIZE_MB = 100;
-/** 模型 ID → alias 映射。 */
-export declare const MODEL_ID_TO_ALIAS: Record<string, string>;
-/** alias → model ID 反向映射。 */
-export declare const MODEL_ALIAS_TO_ID: Record<string, string>;
 declare const ClaudeConfigSchema: z.ZodObject<{
     model: z.ZodDefault<z.ZodString>;
     effort: z.ZodDefault<z.ZodEnum<{
-        medium: "medium";
         low: "low";
         high: "high";
-        xhigh: "xhigh";
         max: "max";
+        medium: "medium";
+        xhigh: "xhigh";
     }>>;
     permissionMode: z.ZodDefault<z.ZodEnum<{
         default: "default";
-        plan: "plan";
-        bypassPermissions: "bypassPermissions";
+        acceptEdits: "acceptEdits";
         auto: "auto";
+        bypassPermissions: "bypassPermissions";
         manual: "manual";
-        acceptEdits: "acceptEdits";
         dontAsk: "dontAsk";
+        plan: "plan";
     }>>;
     approvalTimeoutMs: z.ZodDefault<z.ZodNumber>;
     idleTtlMinutes: z.ZodDefault<z.ZodNumber>;
@@ -100,11 +98,11 @@ declare const PiConfigSchema: z.ZodObject<{
     provider: z.ZodDefault<z.ZodString>;
     model: z.ZodDefault<z.ZodString>;
     thinking: z.ZodDefault<z.ZodEnum<{
-        medium: "medium";
-        off: "off";
         low: "low";
         high: "high";
+        medium: "medium";
         xhigh: "xhigh";
+        off: "off";
         minimal: "minimal";
     }>>;
     tools: z.ZodDefault<z.ZodString>;
@@ -119,8 +117,8 @@ declare const KimiConfigSchema: z.ZodObject<{
     }>>;
     permissionMode: z.ZodDefault<z.ZodEnum<{
         auto: "auto";
-        yolo: "yolo";
         manual: "manual";
+        yolo: "yolo";
     }>>;
     acp: z.ZodOptional<z.ZodObject<{
         binary: z.ZodDefault<z.ZodString>;
@@ -154,20 +152,20 @@ export declare const AppConfigSchema: z.ZodObject<{
     claude: z.ZodDefault<z.ZodObject<{
         model: z.ZodDefault<z.ZodString>;
         effort: z.ZodDefault<z.ZodEnum<{
-            medium: "medium";
             low: "low";
             high: "high";
-            xhigh: "xhigh";
             max: "max";
+            medium: "medium";
+            xhigh: "xhigh";
         }>>;
         permissionMode: z.ZodDefault<z.ZodEnum<{
             default: "default";
-            plan: "plan";
-            bypassPermissions: "bypassPermissions";
+            acceptEdits: "acceptEdits";
             auto: "auto";
+            bypassPermissions: "bypassPermissions";
             manual: "manual";
-            acceptEdits: "acceptEdits";
             dontAsk: "dontAsk";
+            plan: "plan";
         }>>;
         approvalTimeoutMs: z.ZodDefault<z.ZodNumber>;
         idleTtlMinutes: z.ZodDefault<z.ZodNumber>;
@@ -213,11 +211,11 @@ export declare const AppConfigSchema: z.ZodObject<{
             provider: z.ZodDefault<z.ZodString>;
             model: z.ZodDefault<z.ZodString>;
             thinking: z.ZodDefault<z.ZodEnum<{
-                medium: "medium";
-                off: "off";
                 low: "low";
                 high: "high";
+                medium: "medium";
                 xhigh: "xhigh";
+                off: "off";
                 minimal: "minimal";
             }>>;
             tools: z.ZodDefault<z.ZodString>;
@@ -231,8 +229,8 @@ export declare const AppConfigSchema: z.ZodObject<{
             }>>;
             permissionMode: z.ZodDefault<z.ZodEnum<{
                 auto: "auto";
-                yolo: "yolo";
                 manual: "manual";
+                yolo: "yolo";
             }>>;
             acp: z.ZodOptional<z.ZodObject<{
                 binary: z.ZodDefault<z.ZodString>;

package/dist/config/index.js

@@ -50,6 +50,8 @@ const DEFAULTS = {
 export const DEFAULT_STOP_GRACE_MS = DEFAULTS.STOP_GRACE_MS;
 /** Codex app-server turn idle timeout default (minutes). */
 export const DEFAULT_TURN_IDLE_TIMEOUT_MINUTES = DEFAULTS.TURN_IDLE_TIMEOUT_MINUTES;
+/** Approval timeout default (ms), shared by schema and bridge fallback. */
+export const DEFAULT_APPROVAL_TIMEOUT_MS = DEFAULTS.APPROVAL_TIMEOUT_MS;
 /**
  * 入站媒体默认配置（schema 默认与 connector 兜底共用，避免双源漂移）。
  *
@@ -60,20 +62,6 @@ export const DEFAULT_TURN_IDLE_TIMEOUT_MINUTES = DEFAULTS.TURN_IDLE_TIMEOUT_MINU
  */
 export const DEFAULT_INBOUND_MEDIA_DIR_NAME = '.lark-remote-temp';
 export const DEFAULT_INBOUND_MEDIA_MAX_SIZE_MB = 100;
-/** 模型 ID → alias 映射。 */
-export const MODEL_ID_TO_ALIAS = {
-    'claude-opus-4-8': 'opus',
-    'claude-sonnet-4-6': 'sonnet',
-    'claude-haiku-4-5-20250501': 'haiku',
-    'claude-fable-5': 'fable',
-};
-/** alias → model ID 反向映射。 */
-export const MODEL_ALIAS_TO_ID = {
-    opus: 'claude-opus-4-8',
-    sonnet: 'claude-sonnet-4-6',
-    haiku: 'claude-haiku-4-5-20250501',
-    fable: 'claude-fable-5',
-};
 const FeishuConfigSchema = z.object({
     appId: z.string().min(1),
     appSecret: z.string().min(1),
@@ -83,10 +71,10 @@ const ClaudeConfigSchema = z.object({
     effort: z.enum(CLAUDE_EFFORTS).default('medium'),
     /**
      * Claude 权限模式（官方 --permission-mode 枚举 + 'default'=省略该参数）。
-     * 默认 bypassPermissions 保持现有行为（无审批卡）；配置为其他值后激活
-     * 交互式审批（control_request → run 卡审批区）。
+     * 默认 auto：低风险操作自动放行，高风险操作走审批（control_request →
+     * run 卡审批区）；bypassPermissions 仍可选，但不再是默认值。
      */
-    permissionMode: z.enum(CLAUDE_PERMISSION_MODES).default('bypassPermissions'),
+    permissionMode: z.enum(CLAUDE_PERMISSION_MODES).default('auto'),
     /** 审批请求超时（ms），默认 5 分钟；超时自动发送 cancel 并中断 turn。
      *  0 = 立即过期（fail-fast，避免审批永久挂起），不推荐；勿随意改短。 */
     approvalTimeoutMs: z.number().int().min(0).default(DEFAULTS.APPROVAL_TIMEOUT_MS),
@@ -330,7 +318,7 @@ const TEMPLATE = `feishu:
 claude:
   model: ${DEFAULTS.CLAUDE_MODEL}
   effort: medium
-  permissionMode: bypassPermissions
+  permissionMode: auto
   approvalTimeoutMs: ${DEFAULTS.APPROVAL_TIMEOUT_MS}
   idleTtlMinutes: ${DEFAULTS.CLAUDE_IDLE_TTL_MINUTES}
   stopGraceMs: ${DEFAULTS.STOP_GRACE_MS}
@@ -566,8 +554,6 @@ export function getAgentConfig(config, kind) {
 export function getModelOptionsFromSettings(settingsPath) {
     if (!settingsPath)
         return [];
-    if (!fs.existsSync(settingsPath))
-        return [];
     try {
         const content = fs.readFileSync(settingsPath, 'utf-8');
         const settings = JSON.parse(content);

package/dist/config/pi-config.js

@@ -6,6 +6,7 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
+import { getLogger } from '../logger/index.js';
 /**
  * 解析 pi 配置目录。优先使用 PI_CONFIG_DIR 环境变量（测试隔离用），
  * 默认 ~/.pi/agent。每次调用时动态读取环境变量，避免模块级缓存导致
@@ -71,8 +72,9 @@ export function loadPiProviderConfig() {
         try {
             modelsData = JSON.parse(fs.readFileSync(modelsFile, 'utf-8'));
         }
-        catch {
-            // 文件格式错误，跳过
+        catch (err) {
+            // 解析失败 = pi 模型选项会静默消失，必须留痕（此前全文件零日志）。
+            getLogger().warn(`[pi-config] cannot parse ${modelsFile}: ${err.message}`);
         }
     }
     // 2. 读取 auth.json
@@ -81,8 +83,8 @@ export function loadPiProviderConfig() {
         try {
             authData = JSON.parse(fs.readFileSync(authFile, 'utf-8')) ?? {};
         }
-        catch {
-            // 文件格式错误，跳过
+        catch (err) {
+            getLogger().warn(`[pi-config] cannot parse ${authFile}: ${err.message}`);
         }
     }
     // 3. 从 models.json 提取 providers