larkin 0.2.70

package/dist/feishu/message-policy.cjs

@@ -0,0 +1,111 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decideWake = decideWake;
+exports.normalizeChannelMessage = normalizeChannelMessage;
+exports.slug10 = slug10;
+exports.targetFor = targetFor;
+exports.targetAliases = targetAliases;
+exports.xmlText = xmlText;
+exports.signatureDescription = signatureDescription;
+exports.createMessageEnvelope = createMessageEnvelope;
+const node_crypto_1 = __importDefault(require("node:crypto"));
+function decideWake(input) {
+    if (input.senderIsBot) {
+        const wake = input.mentionedBot && !input.mentionAll;
+        return { wake, reason: wake ? "bot-exact-mention" : "bot-not-exactly-mentioned" };
+    }
+    if (!input.isGroup)
+        return { wake: true, reason: "human-direct-message" };
+    if (input.mentionedBot || input.mentionAll)
+        return { wake: true, reason: "human-mentioned" };
+    if (input.mentionPolicy === "free" || input.noMentionChat)
+        return { wake: true, reason: "human-no-mention-chat" };
+    return { wake: false, reason: "human-group-not-mentioned" };
+}
+function normalizeChannelMessage(message) {
+    const messageId = String(message.messageId || "");
+    return {
+        chat_id: String(message.chatId || ""),
+        chat_type: message.chatMode === "topic" ? "group" : String(message.chatType || "group"),
+        sender_id: String(message.senderId || ""),
+        message_id: messageId,
+        event_id: messageId,
+        content: String(message.content || ""),
+        create_time: message.createTime,
+        thread_id: message.threadId || null,
+        _mentioned_bot: Boolean(message.mentionedBot || message.mentionAll),
+        _mention_all: Boolean(message.mentionAll),
+        _sender_is_bot: message.senderIsBot === true,
+    };
+}
+function slug10(value) {
+    return String(value || "").replace(/[^a-zA-Z0-9]/g, "").slice(-10);
+}
+function targetFor(event) {
+    const slug = `c${slug10(event.chat_id)}`;
+    const isDm = event.chat_type === "p2p";
+    const base = isDm ? `dm:@${slug}` : `#${slug}`;
+    if (event.thread_id) {
+        const threadSlug = slug10(event.thread_id);
+        return {
+            target: `${base}:${threadSlug.slice(0, 8)}`,
+            channel_type: "thread",
+            channel_name: threadSlug,
+            parent_channel_type: isDm ? "dm" : "channel",
+            parent_channel_name: slug,
+        };
+    }
+    return { target: base, channel_type: isDm ? "dm" : "channel", channel_name: slug };
+}
+function targetAliases(event, target = targetFor(event)) {
+    const slug = `c${slug10(event.chat_id)}`;
+    const base = event.chat_type === "p2p" ? `dm:@${slug}` : `#${slug}`;
+    const aliases = [base];
+    if (target.channel_type === "thread" && target.channel_name) {
+        aliases.push(`${base}:${target.channel_name}`, `${base}:${target.channel_name.slice(0, 8)}`);
+    }
+    return [...new Set(aliases)];
+}
+function xmlText(value) {
+    return String(value)
+        .replace(/&/g, "&")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/\"/g, "&quot;")
+        .replace(/'/g, "&apos;");
+}
+function signatureDescription(signature) {
+    return signature ? `<feishu_signature>${xmlText(signature)}</feishu_signature>` : null;
+}
+function createMessageEnvelope({ agent, event, seq, names = {}, signature = null, }) {
+    if (!Number.isSafeInteger(seq) || seq < 1)
+        throw new Error(`invalid message sequence: ${seq}`);
+    const target = targetFor(event);
+    const senderIsBot = Boolean(agent.botOpenId && event.sender_id === agent.botOpenId) || event._sender_is_bot;
+    const senderDescription = signatureDescription(signature);
+    const timestamp = event.create_time
+        ? new Date(Number(event.create_time)).toISOString()
+        : new Date().toISOString();
+    let content = event.content || "";
+    if (event._mentioned_bot && !event._mention_all) {
+        content += `\n[提及说明: 本消息 @ 的${agent.botName ? `“${agent.botName}”` : "机器人"}就是你自己，请按被点名处理]`;
+    }
+    return {
+        message_id: event.message_id || `m_${node_crypto_1.default.randomBytes(6).toString("hex")}`,
+        seq,
+        sender_id: event.sender_id || null,
+        sender_name: names[event.sender_id] || event.sender_id || "user",
+        ...(senderDescription ? { sender_description: senderDescription } : {}),
+        sender_type: senderIsBot ? "agent" : "human",
+        channel_type: target.channel_type,
+        channel_name: target.channel_name,
+        content,
+        timestamp,
+        thread_id: event.thread_id || null,
+        ...(target.parent_channel_type ? { parent_channel_type: target.parent_channel_type } : {}),
+        ...(target.parent_channel_name ? { parent_channel_name: target.parent_channel_name } : {}),
+    };
+}

package/dist/feishu/message-policy.mjs

@@ -0,0 +1,98 @@
+import crypto from "node:crypto";
+export function decideWake(input) {
+    if (input.senderIsBot) {
+        const wake = input.mentionedBot && !input.mentionAll;
+        return { wake, reason: wake ? "bot-exact-mention" : "bot-not-exactly-mentioned" };
+    }
+    if (!input.isGroup)
+        return { wake: true, reason: "human-direct-message" };
+    if (input.mentionedBot || input.mentionAll)
+        return { wake: true, reason: "human-mentioned" };
+    if (input.mentionPolicy === "free" || input.noMentionChat)
+        return { wake: true, reason: "human-no-mention-chat" };
+    return { wake: false, reason: "human-group-not-mentioned" };
+}
+export function normalizeChannelMessage(message) {
+    const messageId = String(message.messageId || "");
+    return {
+        chat_id: String(message.chatId || ""),
+        chat_type: message.chatMode === "topic" ? "group" : String(message.chatType || "group"),
+        sender_id: String(message.senderId || ""),
+        message_id: messageId,
+        event_id: messageId,
+        content: String(message.content || ""),
+        create_time: message.createTime,
+        thread_id: message.threadId || null,
+        _mentioned_bot: Boolean(message.mentionedBot || message.mentionAll),
+        _mention_all: Boolean(message.mentionAll),
+        _sender_is_bot: message.senderIsBot === true,
+    };
+}
+export function slug10(value) {
+    return String(value || "").replace(/[^a-zA-Z0-9]/g, "").slice(-10);
+}
+export function targetFor(event) {
+    const slug = `c${slug10(event.chat_id)}`;
+    const isDm = event.chat_type === "p2p";
+    const base = isDm ? `dm:@${slug}` : `#${slug}`;
+    if (event.thread_id) {
+        const threadSlug = slug10(event.thread_id);
+        return {
+            target: `${base}:${threadSlug.slice(0, 8)}`,
+            channel_type: "thread",
+            channel_name: threadSlug,
+            parent_channel_type: isDm ? "dm" : "channel",
+            parent_channel_name: slug,
+        };
+    }
+    return { target: base, channel_type: isDm ? "dm" : "channel", channel_name: slug };
+}
+export function targetAliases(event, target = targetFor(event)) {
+    const slug = `c${slug10(event.chat_id)}`;
+    const base = event.chat_type === "p2p" ? `dm:@${slug}` : `#${slug}`;
+    const aliases = [base];
+    if (target.channel_type === "thread" && target.channel_name) {
+        aliases.push(`${base}:${target.channel_name}`, `${base}:${target.channel_name.slice(0, 8)}`);
+    }
+    return [...new Set(aliases)];
+}
+export function xmlText(value) {
+    return String(value)
+        .replace(/&/g, "&")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/\"/g, "&quot;")
+        .replace(/'/g, "&apos;");
+}
+export function signatureDescription(signature) {
+    return signature ? `<feishu_signature>${xmlText(signature)}</feishu_signature>` : null;
+}
+export function createMessageEnvelope({ agent, event, seq, names = {}, signature = null, }) {
+    if (!Number.isSafeInteger(seq) || seq < 1)
+        throw new Error(`invalid message sequence: ${seq}`);
+    const target = targetFor(event);
+    const senderIsBot = Boolean(agent.botOpenId && event.sender_id === agent.botOpenId) || event._sender_is_bot;
+    const senderDescription = signatureDescription(signature);
+    const timestamp = event.create_time
+        ? new Date(Number(event.create_time)).toISOString()
+        : new Date().toISOString();
+    let content = event.content || "";
+    if (event._mentioned_bot && !event._mention_all) {
+        content += `\n[提及说明: 本消息 @ 的${agent.botName ? `“${agent.botName}”` : "机器人"}就是你自己，请按被点名处理]`;
+    }
+    return {
+        message_id: event.message_id || `m_${crypto.randomBytes(6).toString("hex")}`,
+        seq,
+        sender_id: event.sender_id || null,
+        sender_name: names[event.sender_id] || event.sender_id || "user",
+        ...(senderDescription ? { sender_description: senderDescription } : {}),
+        sender_type: senderIsBot ? "agent" : "human",
+        channel_type: target.channel_type,
+        channel_name: target.channel_name,
+        content,
+        timestamp,
+        thread_id: event.thread_id || null,
+        ...(target.parent_channel_type ? { parent_channel_type: target.parent_channel_type } : {}),
+        ...(target.parent_channel_name ? { parent_channel_name: target.parent_channel_name } : {}),
+    };
+}

package/dist/feishu/outbound-transport.cjs

@@ -0,0 +1,221 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createOutboundTransport = createOutboundTransport;
+const node_crypto_1 = __importDefault(require("node:crypto"));
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+function createOutboundTransport(options) {
+    const stateRoot = node_path_1.default.resolve(node_path_1.default.dirname(options.attachmentIndexFile));
+    const attachmentDir = node_path_1.default.resolve(options.attachmentDir);
+    if (node_path_1.default.dirname(attachmentDir) !== stateRoot)
+        throw new Error("attachment directory must be an Agent-state child");
+    const rejectSymlink = (target) => {
+        try {
+            if (node_fs_1.default.lstatSync(target).isSymbolicLink())
+                throw new Error(`attachment path must not be a symlink: ${target}`);
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+        }
+    };
+    const ensureAttachmentDirectory = () => {
+        rejectSymlink(stateRoot);
+        rejectSymlink(attachmentDir);
+        node_fs_1.default.mkdirSync(attachmentDir, { recursive: true, mode: 0o700 });
+        const stat = node_fs_1.default.lstatSync(attachmentDir);
+        if (!stat.isDirectory() || stat.isSymbolicLink()
+            || (typeof process.getuid === "function" && stat.uid !== process.getuid())) {
+            throw new Error("attachment directory security attributes are invalid");
+        }
+        node_fs_1.default.chmodSync(attachmentDir, 0o700);
+    };
+    const withIndexLock = (operation) => {
+        const lock = `${options.attachmentIndexFile}.lock`;
+        const deadline = Date.now() + 2_000;
+        for (;;) {
+            try {
+                node_fs_1.default.mkdirSync(lock, { mode: 0o700 });
+                break;
+            }
+            catch (error) {
+                if (error.code !== "EEXIST")
+                    throw error;
+                try {
+                    if (Date.now() - node_fs_1.default.statSync(lock).mtimeMs > 10_000) {
+                        node_fs_1.default.rmdirSync(lock);
+                        continue;
+                    }
+                }
+                catch { /* another process may be reclaiming the stale lock */ }
+                if (Date.now() > deadline)
+                    throw new Error("attachment index lock timeout");
+                const until = Date.now() + 15;
+                while (Date.now() < until) { /* bounded synchronous cross-process lock */ }
+            }
+        }
+        try {
+            return operation();
+        }
+        finally {
+            try {
+                node_fs_1.default.rmdirSync(lock);
+            }
+            catch { /* crash recovery reclaims stale locks */ }
+        }
+    };
+    const loadAttachmentIndex = () => {
+        try {
+            rejectSymlink(options.attachmentIndexFile);
+            return JSON.parse(node_fs_1.default.readFileSync(options.attachmentIndexFile, "utf8"));
+        }
+        catch {
+            return {};
+        }
+    };
+    const saveAttachmentIndex = (index) => {
+        if (!options.attachmentIndexFile)
+            return;
+        rejectSymlink(options.attachmentIndexFile);
+        const temporary = `${options.attachmentIndexFile}.${process.pid}.${node_crypto_1.default.randomUUID()}.tmp`;
+        let descriptor;
+        try {
+            descriptor = node_fs_1.default.openSync(temporary, node_fs_1.default.constants.O_WRONLY | node_fs_1.default.constants.O_CREAT | node_fs_1.default.constants.O_EXCL | node_fs_1.default.constants.O_NOFOLLOW, 0o600);
+            node_fs_1.default.writeFileSync(descriptor, `${JSON.stringify(index)}\n`);
+            node_fs_1.default.fsyncSync(descriptor);
+            node_fs_1.default.closeSync(descriptor);
+            descriptor = undefined;
+            node_fs_1.default.renameSync(temporary, options.attachmentIndexFile);
+            node_fs_1.default.chmodSync(options.attachmentIndexFile, 0o600);
+        }
+        finally {
+            if (descriptor !== undefined)
+                node_fs_1.default.closeSync(descriptor);
+            try {
+                node_fs_1.default.unlinkSync(temporary);
+            }
+            catch (error) {
+                if (error.code !== "ENOENT")
+                    throw error;
+            }
+        }
+    };
+    const stageUpload = async (form) => {
+        const candidate = form && typeof form.get === "function" ? form.get("file") : null;
+        const file = candidate;
+        if (!file || typeof file.arrayBuffer !== "function")
+            return { ok: false, status: 400, error: "multipart 缺少 file 字段" };
+        const buffer = Buffer.from(await file.arrayBuffer());
+        const filename = String(file.name || form?.get("filename") || "upload.bin");
+        const mimeType = String(form?.get("mimeType") || file.type || "application/octet-stream");
+        const id = `att_${node_crypto_1.default.createHash("sha256").update(buffer).update(filename).digest("hex").slice(0, 20)}`;
+        try {
+            ensureAttachmentDirectory();
+        }
+        catch (error) {
+            return { ok: false, status: 500, error: `附件目录不安全: ${error.message}` };
+        }
+        const safe = filename.replace(/[^\w.\-]+/g, "_").slice(0, 80) || "file.bin";
+        const stored = `${id}__${safe}`;
+        const destination = node_path_1.default.join(attachmentDir, stored);
+        const temporary = node_path_1.default.join(attachmentDir, `.${id}.${process.pid}.${node_crypto_1.default.randomUUID()}.tmp`);
+        try {
+            rejectSymlink(destination);
+            node_fs_1.default.writeFileSync(temporary, buffer, { mode: 0o600, flag: "wx" });
+            node_fs_1.default.renameSync(temporary, destination);
+            node_fs_1.default.chmodSync(destination, 0o600);
+        }
+        catch (error) {
+            return { ok: false, status: 500, error: `附件落盘失败: ${error.message}` };
+        }
+        finally {
+            try {
+                node_fs_1.default.unlinkSync(temporary);
+            }
+            catch (error) {
+                if (error.code !== "ENOENT")
+                    throw error;
+            }
+        }
+        try {
+            withIndexLock(() => {
+                const index = loadAttachmentIndex();
+                index[id] = { file: stored, filename, mimeType, sizeBytes: buffer.length };
+                saveAttachmentIndex(index);
+            });
+        }
+        catch (error) {
+            return { ok: false, status: 500, error: `附件索引写入失败: ${error.message}` };
+        }
+        options.log(`attachment staged id=${id} name=${filename} bytes=${buffer.length}`);
+        return { ok: true, status: 200, data: { id, filename, mimeType, sizeBytes: buffer.length, thumbnailUrl: null } };
+    };
+    const handleSend = (body) => {
+        const target = body.target || "";
+        const content = String(body.content ?? "").replace(/\n+$/, "");
+        const chatId = options.resolveChatId(target);
+        if (!chatId) {
+            return { ok: false, status: 400, error: `该 target 没有已知 chat_id：${JSON.stringify(target)}。只能回复 canonical Inbox 给出的确切会话；不会兜底发往默认群。` };
+        }
+        const idempotencyKey = body.idempotencyKey
+            || node_crypto_1.default.createHash("sha256").update(`${String(target)}\0${content}`).digest("hex").slice(0, 32);
+        const replyContext = options.replyContextFor(String(target)) || options.replyContextFor(chatId);
+        const attachmentIds = Array.isArray(body.attachmentIds) ? body.attachmentIds.filter(Boolean) : [];
+        let messageId = "sent";
+        if (content !== "" || attachmentIds.length === 0) {
+            const replyInThread = Boolean(replyContext?.in_topic && replyContext.reply_to);
+            const result = replyInThread
+                ? options.replyText(replyContext.reply_to, content, idempotencyKey, chatId)
+                : options.sendText(chatId, content, idempotencyKey);
+            if (result.code !== 0) {
+                options.log("send 失败 FULL:", `${result.stdout || ""} || ${result.stderr || ""}`);
+                return { ok: false, status: 502, error: `lark-cli send failed: ${(result.stdout || result.stderr || "").trim().split("\n")[0]}` };
+            }
+            try {
+                const parsed = JSON.parse(result.stdout);
+                messageId = parsed?.data?.message_id || parsed?.message_id || (options.dryRun ? "dryrun" : "sent");
+            }
+            catch {
+                messageId = options.dryRun ? "dryrun" : "sent";
+            }
+            options.log(`${replyInThread ? "reply-in-thread" : "send"} → chat=${chatId} len=${content.length} id=${messageId}${options.dryRun ? " (dry-run)" : ""}`);
+        }
+        if (attachmentIds.length) {
+            const index = loadAttachmentIndex();
+            for (let position = 0; position < attachmentIds.length; position += 1) {
+                const attachmentId = String(attachmentIds[position]);
+                const attachment = index[attachmentId];
+                if (!attachment) {
+                    options.log(`attachment 未找到 id=${attachmentId}（跳过）`);
+                    continue;
+                }
+                const result = options.sendMedia(chatId, replyContext, attachment, `${idempotencyKey}:a${position}`);
+                if (result.code !== 0) {
+                    options.log("attachment 发送失败 FULL:", `${result.stdout || ""} || ${result.stderr || ""}`);
+                    return { ok: false, status: 502, error: `lark-cli 发送附件失败: ${(result.stdout || result.stderr || "").trim().split("\n")[0]}` };
+                }
+                try {
+                    const parsed = JSON.parse(result.stdout);
+                    messageId = parsed?.data?.message_id || messageId;
+                }
+                catch { /* retain prior message id */ }
+                options.log(`attach → chat=${chatId} name=${attachment.filename} id=${messageId}${options.dryRun ? " (dry-run)" : ""}`);
+            }
+        }
+        options.appendConversation({
+            direction: "out",
+            from: options.botDisplayName() || options.agentName,
+            senderType: "agent",
+            target,
+            wake: false,
+            text: content || `[发送了 ${attachmentIds.length} 个附件]`,
+            messageId,
+            at: new Date().toISOString(),
+        });
+        return { ok: true, status: 200, data: { ok: true, state: "sent", messageId, messageSeq: 1 } };
+    };
+    return { handleSend, stageUpload };
+}

package/dist/feishu/outbound-transport.mjs

@@ -0,0 +1,215 @@
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+export function createOutboundTransport(options) {
+    const stateRoot = path.resolve(path.dirname(options.attachmentIndexFile));
+    const attachmentDir = path.resolve(options.attachmentDir);
+    if (path.dirname(attachmentDir) !== stateRoot)
+        throw new Error("attachment directory must be an Agent-state child");
+    const rejectSymlink = (target) => {
+        try {
+            if (fs.lstatSync(target).isSymbolicLink())
+                throw new Error(`attachment path must not be a symlink: ${target}`);
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+        }
+    };
+    const ensureAttachmentDirectory = () => {
+        rejectSymlink(stateRoot);
+        rejectSymlink(attachmentDir);
+        fs.mkdirSync(attachmentDir, { recursive: true, mode: 0o700 });
+        const stat = fs.lstatSync(attachmentDir);
+        if (!stat.isDirectory() || stat.isSymbolicLink()
+            || (typeof process.getuid === "function" && stat.uid !== process.getuid())) {
+            throw new Error("attachment directory security attributes are invalid");
+        }
+        fs.chmodSync(attachmentDir, 0o700);
+    };
+    const withIndexLock = (operation) => {
+        const lock = `${options.attachmentIndexFile}.lock`;
+        const deadline = Date.now() + 2_000;
+        for (;;) {
+            try {
+                fs.mkdirSync(lock, { mode: 0o700 });
+                break;
+            }
+            catch (error) {
+                if (error.code !== "EEXIST")
+                    throw error;
+                try {
+                    if (Date.now() - fs.statSync(lock).mtimeMs > 10_000) {
+                        fs.rmdirSync(lock);
+                        continue;
+                    }
+                }
+                catch { /* another process may be reclaiming the stale lock */ }
+                if (Date.now() > deadline)
+                    throw new Error("attachment index lock timeout");
+                const until = Date.now() + 15;
+                while (Date.now() < until) { /* bounded synchronous cross-process lock */ }
+            }
+        }
+        try {
+            return operation();
+        }
+        finally {
+            try {
+                fs.rmdirSync(lock);
+            }
+            catch { /* crash recovery reclaims stale locks */ }
+        }
+    };
+    const loadAttachmentIndex = () => {
+        try {
+            rejectSymlink(options.attachmentIndexFile);
+            return JSON.parse(fs.readFileSync(options.attachmentIndexFile, "utf8"));
+        }
+        catch {
+            return {};
+        }
+    };
+    const saveAttachmentIndex = (index) => {
+        if (!options.attachmentIndexFile)
+            return;
+        rejectSymlink(options.attachmentIndexFile);
+        const temporary = `${options.attachmentIndexFile}.${process.pid}.${crypto.randomUUID()}.tmp`;
+        let descriptor;
+        try {
+            descriptor = fs.openSync(temporary, fs.constants.O_WRONLY | fs.constants.O_CREAT | fs.constants.O_EXCL | fs.constants.O_NOFOLLOW, 0o600);
+            fs.writeFileSync(descriptor, `${JSON.stringify(index)}\n`);
+            fs.fsyncSync(descriptor);
+            fs.closeSync(descriptor);
+            descriptor = undefined;
+            fs.renameSync(temporary, options.attachmentIndexFile);
+            fs.chmodSync(options.attachmentIndexFile, 0o600);
+        }
+        finally {
+            if (descriptor !== undefined)
+                fs.closeSync(descriptor);
+            try {
+                fs.unlinkSync(temporary);
+            }
+            catch (error) {
+                if (error.code !== "ENOENT")
+                    throw error;
+            }
+        }
+    };
+    const stageUpload = async (form) => {
+        const candidate = form && typeof form.get === "function" ? form.get("file") : null;
+        const file = candidate;
+        if (!file || typeof file.arrayBuffer !== "function")
+            return { ok: false, status: 400, error: "multipart 缺少 file 字段" };
+        const buffer = Buffer.from(await file.arrayBuffer());
+        const filename = String(file.name || form?.get("filename") || "upload.bin");
+        const mimeType = String(form?.get("mimeType") || file.type || "application/octet-stream");
+        const id = `att_${crypto.createHash("sha256").update(buffer).update(filename).digest("hex").slice(0, 20)}`;
+        try {
+            ensureAttachmentDirectory();
+        }
+        catch (error) {
+            return { ok: false, status: 500, error: `附件目录不安全: ${error.message}` };
+        }
+        const safe = filename.replace(/[^\w.\-]+/g, "_").slice(0, 80) || "file.bin";
+        const stored = `${id}__${safe}`;
+        const destination = path.join(attachmentDir, stored);
+        const temporary = path.join(attachmentDir, `.${id}.${process.pid}.${crypto.randomUUID()}.tmp`);
+        try {
+            rejectSymlink(destination);
+            fs.writeFileSync(temporary, buffer, { mode: 0o600, flag: "wx" });
+            fs.renameSync(temporary, destination);
+            fs.chmodSync(destination, 0o600);
+        }
+        catch (error) {
+            return { ok: false, status: 500, error: `附件落盘失败: ${error.message}` };
+        }
+        finally {
+            try {
+                fs.unlinkSync(temporary);
+            }
+            catch (error) {
+                if (error.code !== "ENOENT")
+                    throw error;
+            }
+        }
+        try {
+            withIndexLock(() => {
+                const index = loadAttachmentIndex();
+                index[id] = { file: stored, filename, mimeType, sizeBytes: buffer.length };
+                saveAttachmentIndex(index);
+            });
+        }
+        catch (error) {
+            return { ok: false, status: 500, error: `附件索引写入失败: ${error.message}` };
+        }
+        options.log(`attachment staged id=${id} name=${filename} bytes=${buffer.length}`);
+        return { ok: true, status: 200, data: { id, filename, mimeType, sizeBytes: buffer.length, thumbnailUrl: null } };
+    };
+    const handleSend = (body) => {
+        const target = body.target || "";
+        const content = String(body.content ?? "").replace(/\n+$/, "");
+        const chatId = options.resolveChatId(target);
+        if (!chatId) {
+            return { ok: false, status: 400, error: `该 target 没有已知 chat_id：${JSON.stringify(target)}。只能回复 canonical Inbox 给出的确切会话；不会兜底发往默认群。` };
+        }
+        const idempotencyKey = body.idempotencyKey
+            || crypto.createHash("sha256").update(`${String(target)}\0${content}`).digest("hex").slice(0, 32);
+        const replyContext = options.replyContextFor(String(target)) || options.replyContextFor(chatId);
+        const attachmentIds = Array.isArray(body.attachmentIds) ? body.attachmentIds.filter(Boolean) : [];
+        let messageId = "sent";
+        if (content !== "" || attachmentIds.length === 0) {
+            const replyInThread = Boolean(replyContext?.in_topic && replyContext.reply_to);
+            const result = replyInThread
+                ? options.replyText(replyContext.reply_to, content, idempotencyKey, chatId)
+                : options.sendText(chatId, content, idempotencyKey);
+            if (result.code !== 0) {
+                options.log("send 失败 FULL:", `${result.stdout || ""} || ${result.stderr || ""}`);
+                return { ok: false, status: 502, error: `lark-cli send failed: ${(result.stdout || result.stderr || "").trim().split("\n")[0]}` };
+            }
+            try {
+                const parsed = JSON.parse(result.stdout);
+                messageId = parsed?.data?.message_id || parsed?.message_id || (options.dryRun ? "dryrun" : "sent");
+            }
+            catch {
+                messageId = options.dryRun ? "dryrun" : "sent";
+            }
+            options.log(`${replyInThread ? "reply-in-thread" : "send"} → chat=${chatId} len=${content.length} id=${messageId}${options.dryRun ? " (dry-run)" : ""}`);
+        }
+        if (attachmentIds.length) {
+            const index = loadAttachmentIndex();
+            for (let position = 0; position < attachmentIds.length; position += 1) {
+                const attachmentId = String(attachmentIds[position]);
+                const attachment = index[attachmentId];
+                if (!attachment) {
+                    options.log(`attachment 未找到 id=${attachmentId}（跳过）`);
+                    continue;
+                }
+                const result = options.sendMedia(chatId, replyContext, attachment, `${idempotencyKey}:a${position}`);
+                if (result.code !== 0) {
+                    options.log("attachment 发送失败 FULL:", `${result.stdout || ""} || ${result.stderr || ""}`);
+                    return { ok: false, status: 502, error: `lark-cli 发送附件失败: ${(result.stdout || result.stderr || "").trim().split("\n")[0]}` };
+                }
+                try {
+                    const parsed = JSON.parse(result.stdout);
+                    messageId = parsed?.data?.message_id || messageId;
+                }
+                catch { /* retain prior message id */ }
+                options.log(`attach → chat=${chatId} name=${attachment.filename} id=${messageId}${options.dryRun ? " (dry-run)" : ""}`);
+            }
+        }
+        options.appendConversation({
+            direction: "out",
+            from: options.botDisplayName() || options.agentName,
+            senderType: "agent",
+            target,
+            wake: false,
+            text: content || `[发送了 ${attachmentIds.length} 个附件]`,
+            messageId,
+            at: new Date().toISOString(),
+        });
+        return { ok: true, status: 200, data: { ok: true, state: "sent", messageId, messageSeq: 1 } };
+    };
+    return { handleSend, stageUpload };
+}

package/dist/platform/build-info.cjs

@@ -0,0 +1,25 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.packageVersion = packageVersion;
+exports.buildFingerprint = buildFingerprint;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const dashboard_lifecycle_js_1 = require("../dashboard/dashboard-lifecycle.cjs");
+function packageVersion(root) {
+    if (typeof LARKIN_BUILD_VERSION !== "undefined" && LARKIN_BUILD_VERSION)
+        return LARKIN_BUILD_VERSION;
+    try {
+        return String(JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.join(root, "package.json"), "utf8")).version || "dev");
+    }
+    catch {
+        return "dev";
+    }
+}
+function buildFingerprint(root) {
+    if (typeof LARKIN_BUILD_FINGERPRINT !== "undefined" && LARKIN_BUILD_FINGERPRINT)
+        return LARKIN_BUILD_FINGERPRINT;
+    return (0, dashboard_lifecycle_js_1.dashboardBuildFingerprint)(root);
+}