larkin 0.5.10 → 0.5.12

package/artifacts/release/THIRD_PARTY_NOTICES.txt

@@ -9,7 +9,7 @@ Runtime package versions: 97
 | Package | Version | Relationship | Declared license | License texts (SHA-256) | Lock integrity |
 | --- | ---: | --- | --- | --- | --- |
 | @larksuite/channel | 0.4.1 | runtime direct | MIT | LICENSE (c969fc7e3af68e6bf40b0d8dd9c3dcc377eb685a2139535b203b39fdcad739ee) | sha512-9xklkzGEnME9MCCKlSzgG0FERJV4HlNX52hthytpxxP2oqH5S8lQBixPsHYU0AQ8SBfzP+LaGz5QaDOlP4EY0A== |
-| @larksuiteoapi/node-sdk | 1.72.0 | runtime transitive | MIT | LICENSE (81f1894dbe3c15ce42310bdc8a39c664f270328b82e8c64c03f55de6aac626ac) | sha512-8oKnaTxRFRNPQfeeG69yafdLzWvvrvXlIqX3QRvozR1/6kvZyi9iMhp6lwC+hMgJA/GCFwMZRadkJzlUE+kyvQ== |
+| @larksuiteoapi/node-sdk | 1.74.0 | runtime transitive | MIT | LICENSE (81f1894dbe3c15ce42310bdc8a39c664f270328b82e8c64c03f55de6aac626ac) | sha512-K2WoGy6x97u2kPPSFsu0v9X8CY+0q4OwO3rhXiOSRXYjGS7ovydFpEH07AS5VYcBnbQCoc5sGezo0IEGVViuoA== |
 | @opentelemetry/api | 1.9.1 | runtime direct | Apache-2.0 | LICENSE (c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4) | sha512-gLyJlPHPZYdAk1JENA9LeHejZe1Ti77/pTeFm/nMXmQH/HFZlcS/O2XJB+L8fkbrNSqhdtlvjBVjxwUYanNH5Q== |
 | @opentelemetry/context-async-hooks | 2.10.0 | runtime transitive | Apache-2.0 | LICENSE (c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4) | sha512-bvyMcgLEkozzSzpEEEo1OMoeQ97bxj6Qs2uN3mPrSdDvObMI1myffD/BPqcLlzZO9//d1SqQA/WPw7Cz2AiqhA== |
 | @opentelemetry/core | 2.10.0 | runtime transitive | Apache-2.0 | LICENSE (c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4) | sha512-/wNZ8twnEQQA4HoHu22+vcsdru6pWPWxW+7w+FlxT6Id7PE/WIbZmVKkte+PF72e0F2dnImFeHD2syyE1Mw6MQ== |

package/dist/feishu/host-channel-business.cjs

@@ -103,8 +103,11 @@ class HostChannelBusiness {
      * Replace the SDK's action-value TTL dedup handler after channel.connect().
      * Durable callback event_id ownership lives in InteractionStateMachine, so
      * retries receive the same response while later state-version clicks remain legal.
+     * Unregister first (node-sdk >= 1.74, issue #220) so the deliberate replacement
+     * is not reported as a duplicate registration.
      */
     registerCardActions(agent, dispatcher) {
+        dispatcher.unregister?.("card.action.trigger");
         dispatcher.register({
             "card.action.trigger": async (raw) => {
                 const event = (0, channel_1.normalizeCardAction)(raw, { includeRaw: true });

package/dist/feishu/host-channel-business.mjs

@@ -100,8 +100,11 @@ export class HostChannelBusiness {
      * Replace the SDK's action-value TTL dedup handler after channel.connect().
      * Durable callback event_id ownership lives in InteractionStateMachine, so
      * retries receive the same response while later state-version clicks remain legal.
+     * Unregister first (node-sdk >= 1.74, issue #220) so the deliberate replacement
+     * is not reported as a duplicate registration.
      */
     registerCardActions(agent, dispatcher) {
+        dispatcher.unregister?.("card.action.trigger");
         dispatcher.register({
             "card.action.trigger": async (raw) => {
                 const event = normalizeCardAction(raw, { includeRaw: true });

package/dist/feishu/host-shell.cjs

@@ -1484,7 +1484,11 @@ function createHostShell({ env = process.env, runtimeHost, channelPackage, event
             }
             else {
                 const category = message.event.errorCategory || "provider";
-                hostState.recordStatusError(agent, `${category}: Runtime input failed ${message.event.retryable ? "retryably" : "non-retryably"}; inspect delivery health and Runtime/provider configuration`);
+                // Surface the provider's finish reason when the Runtime text names one we
+                // recognize (allow-listed token only; raw Runtime text never reaches status).
+                const finishReason = (0, provider_error_classifier_js_1.providerFinishReason)(message.event.message);
+                const detail = finishReason ? ` (provider finish_reason=${finishReason})` : "";
+                hostState.recordStatusError(agent, `${category}: Runtime input failed ${message.event.retryable ? "retryably" : "non-retryably"}${detail}; inspect delivery health and Runtime/provider configuration`);
             }
         }
     };

package/dist/feishu/host-shell.mjs

@@ -17,7 +17,7 @@ import { HostChannelBusiness } from "./host-channel-business.mjs";
 import { HostInteractionOrchestrator } from "./interaction-orchestrator.mjs";
 import { targetFor } from "./message-policy.mjs";
 import { authFailureAppliesTo, parsePersistedAuthFailure, providerAuthenticationFailureReadiness, readinessForPersistedAuthFailure, RuntimePrerequisiteError, } from "../runtime/runtime-readiness.mjs";
-import { safeProviderDiagnostic } from "../runtime/provider-error-classifier.mjs";
+import { providerFinishReason, safeProviderDiagnostic } from "../runtime/provider-error-classifier.mjs";
 import { readDocumentCommentSubscription, verifyCallbackProbe } from "../platform/callback-capability.mjs";
 import { loadConfig, resolveInboxAuditSchedule, resolveMentionPolicy } from "../platform/config.mjs";
 import { processCommandToken } from "../app/internal-command.mjs";
@@ -1444,7 +1444,11 @@ export function createHostShell({ env = process.env, runtimeHost, channelPackage
             }
             else {
                 const category = message.event.errorCategory || "provider";
-                hostState.recordStatusError(agent, `${category}: Runtime input failed ${message.event.retryable ? "retryably" : "non-retryably"}; inspect delivery health and Runtime/provider configuration`);
+                // Surface the provider's finish reason when the Runtime text names one we
+                // recognize (allow-listed token only; raw Runtime text never reaches status).
+                const finishReason = providerFinishReason(message.event.message);
+                const detail = finishReason ? ` (provider finish_reason=${finishReason})` : "";
+                hostState.recordStatusError(agent, `${category}: Runtime input failed ${message.event.retryable ? "retryably" : "non-retryably"}${detail}; inspect delivery health and Runtime/provider configuration`);
             }
         }
     };

package/dist/runtime/provider-error-classifier.cjs

@@ -4,6 +4,7 @@ exports.INTERNAL_CONTEXT_WINDOW_PROJECTION_REASON = exports.CANONICAL_CONTEXT_WI
 exports.safeProviderDiagnostic = safeProviderDiagnostic;
 exports.buildStrictProviderErrorInput = buildStrictProviderErrorInput;
 exports.classifyStrictProviderError = classifyStrictProviderError;
+exports.providerFinishReason = providerFinishReason;
 exports.CODEX_ERROR_PREFIX = "Codex error: ";
 exports.CANONICAL_CONTEXT_WINDOW_MESSAGE = "Your input exceeds the context window of this model. Please adjust your input and try again.";
 exports.INTERNAL_CONTEXT_WINDOW_PROJECTION_REASON = "provider rejected the input because the context window was exceeded";
@@ -51,3 +52,27 @@ function classifyStrictProviderError(error) {
     }
     return undefined;
 }
+/**
+ * Finish reasons we are willing to quote into user-visible status. The list is
+ * deliberately closed: Runtime/provider text is never echoed, so only a token
+ * validated against this vocabulary can reach `status`.
+ */
+const SURFACED_FINISH_REASONS = new Set([
+    "stop", "length", "content_filter", "tool_calls", "function_call",
+    "end_turn", "max_tokens", "stop_sequence", "tool_use", "refusal",
+    "safety", "recitation", "blocklist", "prohibited_content", "spii", "malformed_function_call", "other",
+    "error", "timeout", "rate_limit", "overloaded", "cancelled", "aborted",
+]);
+/**
+ * Narrow, allow-listed extraction of a provider finish reason from Runtime text
+ * (e.g. "Provider finish_reason: content_filter"). Returns the validated token
+ * only — the surrounding payload never leaves this function, so a status line
+ * can say why a reply was withheld without echoing raw Runtime data.
+ */
+function providerFinishReason(value) {
+    if (typeof value !== "string" || value.length === 0 || value.length > 8_192)
+        return null;
+    const match = /(?:finish[_-]?reason|rawstopreason)\s*[:=]\s*"?([A-Za-z_]{2,32})"?/i.exec(value);
+    const token = match?.[1]?.toLowerCase() ?? "";
+    return SURFACED_FINISH_REASONS.has(token) ? token : null;
+}

package/dist/runtime/provider-error-classifier.mjs

@@ -45,3 +45,27 @@ export function classifyStrictProviderError(error) {
     }
     return undefined;
 }
+/**
+ * Finish reasons we are willing to quote into user-visible status. The list is
+ * deliberately closed: Runtime/provider text is never echoed, so only a token
+ * validated against this vocabulary can reach `status`.
+ */
+const SURFACED_FINISH_REASONS = new Set([
+    "stop", "length", "content_filter", "tool_calls", "function_call",
+    "end_turn", "max_tokens", "stop_sequence", "tool_use", "refusal",
+    "safety", "recitation", "blocklist", "prohibited_content", "spii", "malformed_function_call", "other",
+    "error", "timeout", "rate_limit", "overloaded", "cancelled", "aborted",
+]);
+/**
+ * Narrow, allow-listed extraction of a provider finish reason from Runtime text
+ * (e.g. "Provider finish_reason: content_filter"). Returns the validated token
+ * only — the surrounding payload never leaves this function, so a status line
+ * can say why a reply was withheld without echoing raw Runtime data.
+ */
+export function providerFinishReason(value) {
+    if (typeof value !== "string" || value.length === 0 || value.length > 8_192)
+        return null;
+    const match = /(?:finish[_-]?reason|rawstopreason)\s*[:=]\s*"?([A-Za-z_]{2,32})"?/i.exec(value);
+    const token = match?.[1]?.toLowerCase() ?? "";
+    return SURFACED_FINISH_REASONS.has(token) ? token : null;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "larkin",
-  "version": "0.5.10",
+  "version": "0.5.12",
   "private": false,
   "larkinPackageRole": "npm-published",
   "files": [
@@ -116,5 +116,8 @@
     "typescript": "^7.0.2",
     "vite": "^8.1.5",
     "vitest": "^4.1.10"
+  },
+  "overrides": {
+    "@larksuiteoapi/node-sdk": "^1.74.0"
   }
 }