larkway 0.3.19 → 0.3.20

package/README.md

@@ -8,7 +8,7 @@
 
 You @ the bot in a Feishu thread. It runs on your machine — reading your real codebase, executing commands, opening MRs — and posts the result back. You define what the agent knows and what it can do. Larkway just carries the messages.
 
-**Current release: v0.3.19**
+**Current release: v0.3.20**
 
 ---
 

package/README.zh.md

@@ -8,7 +8,7 @@
 
 你在飞书话题里 @ bot，它在你的机器上运行——读真实代码库、执行命令、开 MR——把结果贴回飞书。你定义 agent 知道什么、能做什么。Larkway 只负责传递消息。
 
-**当前版本：v0.3.19**
+**当前版本：v0.3.20**
 
 ---
 

package/dist/cli/index.js

@@ -123677,12 +123677,13 @@ import path from "node:path";
 var NonEmptyString = external_exports.string().trim().min(1);
 function defaultResponseSurfacePrototypeConfig() {
   return {
-    enabled: false,
+    enabled: true,
     allowed_chats: [],
     allowed_threads: [],
     lazy_card_creation: false,
     kill_switch: false,
-    post_outbound_enabled: false,
+    post_outbound_enabled: true,
+    allow_agent_mentions: true,
     allowed_mention_open_ids: [],
     max_posts_per_turn: 1,
     max_posts_per_window: 4,
@@ -123693,12 +123694,13 @@ function defaultResponseSurfacePrototypeConfig() {
 }
 var DEFAULT_RESPONSE_SURFACE_PROTOTYPE = defaultResponseSurfacePrototypeConfig();
 var responseSurfacePrototypeConfigDefaults = () => ({
-  enabled: false,
+  enabled: true,
   allowed_chats: [],
   allowed_threads: [],
   lazy_card_creation: false,
   kill_switch: false,
-  post_outbound_enabled: false,
+  post_outbound_enabled: true,
+  allow_agent_mentions: true,
   allowed_mention_open_ids: [],
   max_posts_per_turn: 1,
   max_posts_per_window: 4,
@@ -123747,17 +123749,18 @@ var ResponseSurfaceStateSchema = external_exports.preprocess((value) => {
 }, StrictResponseSurfaceStateSchema.optional());
 var ResponseSurfacePrototypeConfigSchema = external_exports.object({
   /**
-   * Master gate. Default false keeps the legacy card-only response path.
+   * Master gate. Default true makes response surfaces available unless the
+   * runtime kill switch disables them.
    */
-  enabled: external_exports.boolean().default(false),
+  enabled: external_exports.boolean().default(true),
   /**
-   * Optional chat allowlist for dark-launch experiments. Empty means no chat
-   * is allowlisted by this gate.
+   * Optional chat allowlist for staged rollout. Empty means all chats are
+   * allowed by this gate.
    */
   allowed_chats: external_exports.array(external_exports.string().min(1)).default([]),
   /**
-   * Optional Larkway session/thread allowlist for narrow dogfood topics.
-   * Empty means no thread is allowlisted by this gate.
+   * Optional Larkway session/thread allowlist for staged rollout. Empty means
+   * all threads are allowed by this gate.
    */
   allowed_threads: external_exports.array(external_exports.string().min(1)).default([]),
   /**
@@ -123769,18 +123772,23 @@ var ResponseSurfacePrototypeConfigSchema = external_exports.object({
   /**
    * Runtime kill switch for emergency rollback. When true, every response
    * surface post path is treated as disabled even if enabled/allowlists are
-   * otherwise configured. Default false preserves current default-off behavior.
+   * otherwise configured.
    */
   kill_switch: external_exports.boolean().default(false),
   /**
-   * PR3 dark-launch gate for real post outbound. This must stay false by
-   * default. PR4's dispatcher also requires this gate before any post path.
+   * Gate for real post outbound. Defaults on, but the runtime still requires
+   * an injected post client and all safety gates before any post path.
    */
-  post_outbound_enabled: external_exports.boolean().default(false),
+  post_outbound_enabled: external_exports.boolean().default(true),
   /**
-   * Explicit target allowlist for future real post @ mentions. Empty means no
-   * mention target is authorized. Keep real IDs in private bot config, never
-   * in public docs/tests.
+   * Allows Agent-authored post mentions. This powers handoff to peer bots.
+   * Keep this false only when the operator wants to suppress every real @.
+   */
+  allow_agent_mentions: external_exports.boolean().default(true),
+  /**
+   * Optional target allowlist for real post @ mentions. Empty means the Agent
+   * may choose mention targets; non-empty narrows mentions to this exact set.
+   * Keep real IDs in private bot config, never in public docs/tests.
    */
   allowed_mention_open_ids: external_exports.array(external_exports.string().min(1)).default([]),
   /**

package/dist/main.js

@@ -118256,12 +118256,13 @@ import path6 from "node:path";
 var NonEmptyString = external_exports.string().trim().min(1);
 function defaultResponseSurfacePrototypeConfig() {
   return {
-    enabled: false,
+    enabled: true,
     allowed_chats: [],
     allowed_threads: [],
     lazy_card_creation: false,
     kill_switch: false,
-    post_outbound_enabled: false,
+    post_outbound_enabled: true,
+    allow_agent_mentions: true,
     allowed_mention_open_ids: [],
     max_posts_per_turn: 1,
     max_posts_per_window: 4,
@@ -118272,12 +118273,13 @@ function defaultResponseSurfacePrototypeConfig() {
 }
 var DEFAULT_RESPONSE_SURFACE_PROTOTYPE = defaultResponseSurfacePrototypeConfig();
 var responseSurfacePrototypeConfigDefaults = () => ({
-  enabled: false,
+  enabled: true,
   allowed_chats: [],
   allowed_threads: [],
   lazy_card_creation: false,
   kill_switch: false,
-  post_outbound_enabled: false,
+  post_outbound_enabled: true,
+  allow_agent_mentions: true,
   allowed_mention_open_ids: [],
   max_posts_per_turn: 1,
   max_posts_per_window: 4,
@@ -118326,17 +118328,18 @@ var ResponseSurfaceStateSchema = external_exports.preprocess((value) => {
 }, StrictResponseSurfaceStateSchema.optional());
 var ResponseSurfacePrototypeConfigSchema = external_exports.object({
   /**
-   * Master gate. Default false keeps the legacy card-only response path.
+   * Master gate. Default true makes response surfaces available unless the
+   * runtime kill switch disables them.
    */
-  enabled: external_exports.boolean().default(false),
+  enabled: external_exports.boolean().default(true),
   /**
-   * Optional chat allowlist for dark-launch experiments. Empty means no chat
-   * is allowlisted by this gate.
+   * Optional chat allowlist for staged rollout. Empty means all chats are
+   * allowed by this gate.
    */
   allowed_chats: external_exports.array(external_exports.string().min(1)).default([]),
   /**
-   * Optional Larkway session/thread allowlist for narrow dogfood topics.
-   * Empty means no thread is allowlisted by this gate.
+   * Optional Larkway session/thread allowlist for staged rollout. Empty means
+   * all threads are allowed by this gate.
    */
   allowed_threads: external_exports.array(external_exports.string().min(1)).default([]),
   /**
@@ -118348,18 +118351,23 @@ var ResponseSurfacePrototypeConfigSchema = external_exports.object({
   /**
    * Runtime kill switch for emergency rollback. When true, every response
    * surface post path is treated as disabled even if enabled/allowlists are
-   * otherwise configured. Default false preserves current default-off behavior.
+   * otherwise configured.
    */
   kill_switch: external_exports.boolean().default(false),
   /**
-   * PR3 dark-launch gate for real post outbound. This must stay false by
-   * default. PR4's dispatcher also requires this gate before any post path.
+   * Gate for real post outbound. Defaults on, but the runtime still requires
+   * an injected post client and all safety gates before any post path.
    */
-  post_outbound_enabled: external_exports.boolean().default(false),
+  post_outbound_enabled: external_exports.boolean().default(true),
   /**
-   * Explicit target allowlist for future real post @ mentions. Empty means no
-   * mention target is authorized. Keep real IDs in private bot config, never
-   * in public docs/tests.
+   * Allows Agent-authored post mentions. This powers handoff to peer bots.
+   * Keep this false only when the operator wants to suppress every real @.
+   */
+  allow_agent_mentions: external_exports.boolean().default(true),
+  /**
+   * Optional target allowlist for real post @ mentions. Empty means the Agent
+   * may choose mention targets; non-empty narrows mentions to this exact set.
+   * Keep real IDs in private bot config, never in public docs/tests.
    */
   allowed_mention_open_ids: external_exports.array(external_exports.string().min(1)).default([]),
   /**
@@ -118391,12 +118399,21 @@ var ResponseSurfacePrototypeConfigSchema = external_exports.object({
 function isResponseSurfacePrototypeAllowlisted(config, facts) {
   if (!config?.enabled) return false;
   if (config.kill_switch) return false;
+  const hasScopedAllowlist = config.allowed_chats.length > 0 || config.allowed_threads.length > 0;
+  if (!hasScopedAllowlist) return true;
   const chatAllowed = config.allowed_chats.length > 0 && config.allowed_chats.includes(facts.chatId);
   const threadAllowed = config.allowed_threads.length > 0 && config.allowed_threads.includes(facts.threadId);
   return chatAllowed || threadAllowed;
 }
+function isResponseSurfaceMentionAllowed(config, userId) {
+  if (!config?.allow_agent_mentions) return false;
+  const normalized = userId.trim().toLowerCase();
+  if (normalized === "all" || normalized === "@all") return false;
+  if (config.allowed_mention_open_ids.length === 0) return true;
+  return config.allowed_mention_open_ids.includes(userId);
+}
 function shouldProvideResponseSurfacePostClient(config) {
-  return !!(config?.enabled && !config.kill_switch && config.post_outbound_enabled && config.max_posts_per_turn >= 1 && config.max_posts_per_window >= 1 && (config.allowed_chats.length > 0 || config.allowed_threads.length > 0));
+  return !!(config?.enabled && !config.kill_switch && config.post_outbound_enabled && config.max_posts_per_turn >= 1 && config.max_posts_per_window >= 1);
 }
 function isResponseSurfacePostOutboundAvailable(config, facts, opts) {
   return !!(opts.postClientAvailable && shouldProvideResponseSurfacePostClient(config) && isResponseSurfacePrototypeAllowlisted(config, facts));
@@ -119228,7 +119245,7 @@ function policyBlockedCard(input) {
   return {
     ...input.baseCard,
     success: false,
-    failureReason: "response_surface post mention target is not in allowed_mention_open_ids; visible card fallback used"
+    failureReason: "response_surface post mention target is blocked by policy; visible card fallback used"
   };
 }
 function postText(input) {
@@ -119347,7 +119364,7 @@ async function dispatchResponseSurfaceInner(input) {
   }
   const mentions = surface.post?.mentions ?? [];
   const blockedMention = mentions.find(
-    (mention) => !cfg.allowed_mention_open_ids.includes(mention.user_id)
+    (mention) => !isResponseSurfaceMentionAllowed(cfg, mention.user_id)
   );
   const text = postText(input);
   const policyDigest = digestPostContent(text);
@@ -119363,7 +119380,7 @@ async function dispatchResponseSurfaceInner(input) {
   });
   const now = input.now?.() ?? (/* @__PURE__ */ new Date()).toISOString();
   if (blockedMention) {
-    const policyError = `mention target is not allowed: ${blockedMention.user_id}`;
+    const policyError = `mention target is not allowed by response surface policy: ${blockedMention.user_id}`;
     await writeLedger(
       input,
       newLedgerEntry({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "larkway",
-  "version": "0.3.19",
+  "version": "0.3.20",
   "description": "Thin bridge: Feishu thread to local Claude Code CLI",
   "license": "MIT",
   "author": "Chuck Wu (chuckwu0)",