larkway 0.3.19 → 0.3.21

package/README.md

@@ -8,7 +8,7 @@
 
 You @ the bot in a Feishu thread. It runs on your machine — reading your real codebase, executing commands, opening MRs — and posts the result back. You define what the agent knows and what it can do. Larkway just carries the messages.
 
-**Current release: v0.3.19**
+**Current release: v0.3.21**
 
 ---
 

package/README.zh.md

@@ -8,7 +8,7 @@
 
 你在飞书话题里 @ bot，它在你的机器上运行——读真实代码库、执行命令、开 MR——把结果贴回飞书。你定义 agent 知道什么、能做什么。Larkway 只负责传递消息。
 
-**当前版本：v0.3.19**
+**当前版本：v0.3.21**
 
 ---
 

package/dist/cli/index.js

@@ -111269,6 +111269,20 @@ var init_channelPostClient = __esm({
         }
         return { messageId };
       }
+      async updatePost(messageId, content) {
+        const res = await withPostRetry(
+          "updatePost",
+          () => this.channel().rawClient.im.v1.message.update({
+            path: { message_id: messageId },
+            data: {
+              content,
+              msg_type: "post"
+            }
+          }),
+          { maxAttempts: this.maxAttempts, baseDelayMs: this.baseDelayMs }
+        );
+        return { messageId: res.data?.message_id ?? messageId };
+      }
     };
   }
 });
@@ -123677,12 +123691,13 @@ import path from "node:path";
 var NonEmptyString = external_exports.string().trim().min(1);
 function defaultResponseSurfacePrototypeConfig() {
   return {
-    enabled: false,
+    enabled: true,
     allowed_chats: [],
     allowed_threads: [],
-    lazy_card_creation: false,
+    lazy_card_creation: true,
     kill_switch: false,
-    post_outbound_enabled: false,
+    post_outbound_enabled: true,
+    allow_agent_mentions: true,
     allowed_mention_open_ids: [],
     max_posts_per_turn: 1,
     max_posts_per_window: 4,
@@ -123693,12 +123708,13 @@ function defaultResponseSurfacePrototypeConfig() {
 }
 var DEFAULT_RESPONSE_SURFACE_PROTOTYPE = defaultResponseSurfacePrototypeConfig();
 var responseSurfacePrototypeConfigDefaults = () => ({
-  enabled: false,
+  enabled: true,
   allowed_chats: [],
   allowed_threads: [],
-  lazy_card_creation: false,
+  lazy_card_creation: true,
   kill_switch: false,
-  post_outbound_enabled: false,
+  post_outbound_enabled: true,
+  allow_agent_mentions: true,
   allowed_mention_open_ids: [],
   max_posts_per_turn: 1,
   max_posts_per_window: 4,
@@ -123747,40 +123763,46 @@ var ResponseSurfaceStateSchema = external_exports.preprocess((value) => {
 }, StrictResponseSurfaceStateSchema.optional());
 var ResponseSurfacePrototypeConfigSchema = external_exports.object({
   /**
-   * Master gate. Default false keeps the legacy card-only response path.
+   * Master gate. Default true makes response surfaces available unless the
+   * runtime kill switch disables them.
    */
-  enabled: external_exports.boolean().default(false),
+  enabled: external_exports.boolean().default(true),
   /**
-   * Optional chat allowlist for dark-launch experiments. Empty means no chat
-   * is allowlisted by this gate.
+   * Optional chat allowlist for staged rollout. Empty means all chats are
+   * allowed by this gate.
    */
   allowed_chats: external_exports.array(external_exports.string().min(1)).default([]),
   /**
-   * Optional Larkway session/thread allowlist for narrow dogfood topics.
-   * Empty means no thread is allowlisted by this gate.
+   * Optional Larkway session/thread allowlist for staged rollout. Empty means
+   * all threads are allowed by this gate.
    */
   allowed_threads: external_exports.array(external_exports.string().min(1)).default([]),
   /**
-   * Dark-launch hook for PR2. This does not enable post-only output by itself;
-   * the bridge still requires a visible card fallback until post outbound
-   * exists and is explicitly enabled in a later PR.
+   * Post-first gate. Default true means the bridge starts a lightweight post
+   * as the live main surface when post outbound is available, and creates a
+   * card only for fallback or card-only capabilities.
    */
-  lazy_card_creation: external_exports.boolean().default(false),
+  lazy_card_creation: external_exports.boolean().default(true),
   /**
    * Runtime kill switch for emergency rollback. When true, every response
    * surface post path is treated as disabled even if enabled/allowlists are
-   * otherwise configured. Default false preserves current default-off behavior.
+   * otherwise configured.
    */
   kill_switch: external_exports.boolean().default(false),
   /**
-   * PR3 dark-launch gate for real post outbound. This must stay false by
-   * default. PR4's dispatcher also requires this gate before any post path.
+   * Gate for real post outbound. Defaults on, but the runtime still requires
+   * an injected post client and all safety gates before any post path.
+   */
+  post_outbound_enabled: external_exports.boolean().default(true),
+  /**
+   * Allows Agent-authored post mentions. This powers handoff to peer bots.
+   * Keep this false only when the operator wants to suppress every real @.
    */
-  post_outbound_enabled: external_exports.boolean().default(false),
+  allow_agent_mentions: external_exports.boolean().default(true),
   /**
-   * Explicit target allowlist for future real post @ mentions. Empty means no
-   * mention target is authorized. Keep real IDs in private bot config, never
-   * in public docs/tests.
+   * Optional target allowlist for real post @ mentions. Empty means the Agent
+   * may choose mention targets; non-empty narrows mentions to this exact set.
+   * Keep real IDs in private bot config, never in public docs/tests.
    */
   allowed_mention_open_ids: external_exports.array(external_exports.string().min(1)).default([]),
   /**

package/dist/main.js

@@ -115497,6 +115497,20 @@ var ChannelPostClient = class {
     }
     return { messageId };
   }
+  async updatePost(messageId, content) {
+    const res = await withPostRetry(
+      "updatePost",
+      () => this.channel().rawClient.im.v1.message.update({
+        path: { message_id: messageId },
+        data: {
+          content,
+          msg_type: "post"
+        }
+      }),
+      { maxAttempts: this.maxAttempts, baseDelayMs: this.baseDelayMs }
+    );
+    return { messageId: res.data?.message_id ?? messageId };
+  }
 };
 
 // src/lark/channelClient.ts
@@ -117434,10 +117448,12 @@ function renderStateContract(stateFilePath) {
   const stateTarget = stateFilePath ? `\u6307\u5B9A\u8DEF\u5F84 \`${stateFilePath}\`` : "\u5DE5\u4F5C\u76EE\u5F55\u91CC\u7684 `.larkway/state.json`";
   return [
     "<state-contract>",
-    "\u4F60\u548C\u8FD0\u8425\u4E4B\u95F4\u7684\u754C\u9762\u662F\u98DE\u4E66\u8BDD\u9898\u91CC\u7684\u5361\u7247,\u4F46\u8FD9\u5F20\u5361\u7247\u662F\u4E00\u4E2A thin-channel \u5916\u58F3:",
-    "- bridge \u53EA\u8D1F\u8D23\u521B\u5EFA/\u66F4\u65B0\u98DE\u4E66\u5361\u7247\u3001\u8282\u6D41 PATCH\u3001\u663E\u793A\u901A\u7528\u5934\u90E8\u72B6\u6001\u3001\u6E32\u67D3\u6B63\u6587 markdown\u3001\u663E\u793A\u5FC5\u8981\u7684\u5DE5\u5177\u6458\u8981\u3001\u628A choices \u8F6C\u6210\u6309\u94AE\u5E76\u628A\u70B9\u51FB\u503C\u56DE\u4F20\u7ED9\u4F60\u3002",
-    "- \u4F60\u8D1F\u8D23\u51B3\u5B9A\u5361\u7247\u91CC\u8981\u544A\u8BC9\u8FD0\u8425\u4EC0\u4E48\u3001\u5F53\u524D\u662F\u4EC0\u4E48\u4E1A\u52A1\u72B6\u6001\u3001\u9700\u8981\u7528\u6237\u56DE\u590D\u4EC0\u4E48\u3001\u8981\u4E0D\u8981\u7ED9\u79BB\u6563\u6309\u94AE\u3002",
-    `\u4F60\u4E0D\u76F4\u63A5\u753B\u98DE\u4E66\u5361\u7247,\u4E5F\u4E0D\u76F4\u63A5 PATCH \u5361\u7247;\u4F60\u53EA\u5199 ${stateTarget},bridge \u8BFB\u5B83\u6765\u505A\u5B89\u5168\u6E32\u67D3\u3002`,
+    "\u4F60\u548C\u8FD0\u8425\u4E4B\u95F4\u7684\u754C\u9762\u662F\u98DE\u4E66\u8BDD\u9898\u91CC\u7684 response surface,\u8FD9\u662F\u4E00\u4E2A thin-channel \u5916\u58F3:",
+    "- \u9ED8\u8BA4\u4E3B\u56DE\u590D\u9762\u662F post/RichText:bridge \u8D77\u624B\u53D1\u4E00\u6761\u8F7B\u91CF\u201C\u6B63\u5728\u5904\u7406\u2026\u201Dpost,\u6267\u884C\u4E2D\u7528\u5206\u5757\u7EA7\u539F\u5730\u7F16\u8F91\u6A21\u62DF\u6D41\u5F0F\u8F93\u51FA,\u7ED3\u675F\u65F6\u7F16\u8F91\u6210\u5E72\u51C0\u7EC8\u7A3F\u3002",
+    "- \u5361\u7247\u662F\u4F8B\u5916\u8865\u5145\u9762,\u53EA\u5728\u9700\u8981\u79BB\u6563\u9009\u62E9/\u6309\u94AE(`choices`)\u6216 post \u8868\u8FBE\u4E0D\u4E86\u7684\u7ED3\u6784\u5316\u5185\u5BB9(`content_blocks`/`image_blocks`,\u4F8B\u5982\u56FE\u7247\u7EC4\u3001\u9A8C\u6536\u6E05\u5355\u3001dev \u9884\u89C8)\u65F6\u624D\u8865\u4E00\u5F20\u3002",
+    "- bridge \u8D1F\u8D23\u521B\u5EFA/\u7F16\u8F91 post\u3001\u5FC5\u8981\u65F6\u521B\u5EFA/\u66F4\u65B0\u98DE\u4E66\u5361\u7247\u3001\u8282\u6D41\u3001\u6E32\u67D3\u6B63\u6587\u3001\u628A choices \u8F6C\u6210\u6309\u94AE\u5E76\u628A\u70B9\u51FB\u503C\u56DE\u4F20\u7ED9\u4F60\u3002",
+    "- \u4F60\u8D1F\u8D23\u628A\u6700\u7EC8\u7ED9\u8FD0\u8425\u770B\u7684\u6B63\u6587\u3001\u72B6\u6001\u3001\u4E0B\u4E00\u6B65\u95EE\u9898\u3001\u662F\u5426\u9700\u8981 choices/\u7ED3\u6784\u5316\u5361\u7247\u5199\u8FDB state.json\u3002",
+    `\u4F60\u4E0D\u76F4\u63A5\u53D1/\u7F16\u8F91 bridge \u7BA1\u7406\u7684 post \u6216\u5361\u7247;\u4F60\u53EA\u5199 ${stateTarget},bridge \u8BFB\u5B83\u6765\u505A\u5B89\u5168\u6E32\u67D3\u3002`,
     "**\u5B8C\u6210\u672C\u6B21\u54CD\u5E94\u524D\u5FC5\u987B**\u6839\u636E\u5F53\u524D\u5B9E\u9645\u72B6\u6001\u66F4\u65B0\u8FD9\u4E2A\u6587\u4EF6(\u539F\u5B50\u5199:\u5199 .tmp \u518D mv)\u3002",
     "",
     "\u4F60\u80FD\u5199\u7684\u5B57\u6BB5:",
@@ -117448,18 +117464,19 @@ function renderStateContract(stateFilePath) {
     "- card_color: \u5361\u7247\u914D\u8272(\u53EF\u9009,success/failure/neutral,\u4E5F\u53EF\u76F4\u63A5\u5199 green/red/grey)",
     "- image_blocks: \u53EF\u9009\u56FE\u7247\u9884\u89C8\u5757\u6570\u7EC4,\u6700\u591A 4 \u4E2A\u3002\u6BCF\u9879 `{img_key, alt?, title?, mode?, preview?}`; `img_key` \u5FC5\u987B\u662F\u5DF2\u4E0A\u4F20/\u53EF\u7528\u4E8E\u5361\u7247\u7684 Feishu \u56FE\u7247 key,`alt` \u7701\u7565\u65F6 bridge \u9ED8\u8BA4\u201C\u56FE\u7247\u9884\u89C8\u201D,`mode` \u53EA\u5141\u8BB8 `crop_center`/`fit_horizontal` \u5E76\u6620\u5C04\u5230 Card JSON 2.0 `scale_type`,`preview` \u9ED8\u8BA4 true\u3002bridge \u4E0D\u8D1F\u8D23\u4E0B\u8F7D/\u4E0A\u4F20/\u9009\u62E9\u56FE\u7247;\u8FD9\u4E9B\u7531\u4F60\u7528 lark-cli \u7B49\u5DE5\u5177\u5148\u5B8C\u6210\u3002",
     '- content_blocks: \u53EF\u9009\u6709\u5E8F\u6B63\u6587\u5757\u6570\u7EC4,\u6700\u591A 12 \u4E2A block\u3001\u6700\u591A 4 \u4E2A image block\u3002\u53EA\u652F\u6301\u7A84 union:`{type:"markdown", content}` \u548C `{type:"image", img_key, alt?, title?, mode?, preview?}`;\u4E0D\u652F\u6301 raw card JSON\u3002\u7528\u4E8E\u6B63\u6587\u4E0E\u56FE\u7247\u4EA4\u9519\u6392\u7248,\u4F8B\u5982 markdown -> image -> markdown -> image\u3002\u82E5 `content_blocks` \u975E\u7A7A,bridge \u4EE5\u5B83\u4F5C\u4E3A\u4E3B\u6B63\u6587\u5E76\u5FFD\u7565 `last_message` + `image_blocks` \u7684\u6B63\u6587\u6E32\u67D3,\u907F\u514D\u91CD\u590D;\u82E5\u7701\u7565\u5219\u4FDD\u6301\u65E7 `last_message` + `image_blocks` \u884C\u4E3A\u3002',
-    '- response_surface: \u53EF\u9009\u539F\u578B\u5B57\u6BB5,\u5F62\u5982 `{mode:"card"|"post"|"hybrid", primary?:"card"|"post", post?:{mentions:[{user_id,label?}]}, card?:{compact?:boolean, capabilities?:[...]}}`\u3002\u5F53\u524D\u4EC5\u5728 bot \u914D\u7F6E\u663E\u5F0F\u542F\u7528\u4E14\u547D\u4E2D\u767D\u540D\u5355\u65F6\u624D\u53EF\u80FD\u88AB bridge \u8BFB\u53D6;PR3 \u771F\u5B9E post outbound/ledger \u672A\u5B9E\u73B0\u524D,bridge \u5FC5\u987B\u4FDD\u7559\u73B0\u6709\u53EF\u89C1 card \u515C\u5E95\u3002\u4E0D\u8981\u5199 raw Feishu post/card JSON\u3002',
+    '- response_surface: \u53EF\u9009\u8986\u76D6\u5B57\u6BB5,\u5F62\u5982 `{mode:"card"|"post"|"hybrid", primary?:"card"|"post", post?:{mentions:[{user_id,label?}]}, card?:{compact?:boolean, capabilities?:[...]}}`\u3002\u9ED8\u8BA4\u53EF\u4E0D\u5199;\u65E0\u663E\u5F0F card \u610F\u56FE\u65F6 bridge \u6309 post-first \u5904\u7406\u3002\u9700\u8981\u771F\u5B9E @ \u65F6\u628A\u76EE\u6807\u5199\u5165 `post.mentions`;\u4E0D\u8981\u5199 raw Feishu post/card JSON\u3002',
     "- scheduled reply / daily social ops review card \u7B49\u9700\u8981\u201C\u5E73\u53F0\u6B63\u6587 + \u5339\u914D\u56FE\u7247\u201D\u540C\u6BB5\u76F8\u90BB\u5C55\u793A\u7684\u573A\u666F,\u5E94\u5148\u53D6\u5F97\u5404\u56FE\u7247 `img_key`,\u518D\u5199 `content_blocks` \u4E3A `\u5E73\u53F0 markdown -> \u5BF9\u5E94 image -> \u4E0B\u4E2A\u5E73\u53F0 markdown -> \u5BF9\u5E94 image`;\u4E0D\u8981\u7528\u5355\u72EC\u8BDD\u9898\u56FE\u7247\u6D88\u606F\u6216\u5C3E\u90E8 `image_blocks` \u4EE3\u66FF\u9A8C\u6536\u9762\u3002",
     "- dev_url / mr_url / \u5176\u4F59\u4E1A\u52A1\u5B57\u6BB5:\u81EA\u7531\u5199\u5165,bridge \u4E0D\u611F\u77E5\u5176\u4E1A\u52A1\u542B\u4E49;\u8981\u8BA9\u8FD0\u8425\u770B\u5230,\u8BF7\u5199\u8FDB last_message",
     "- updated_at: ISO 8601 timestamp",
     "",
-    "**\u7EDD\u4E0D\u81EA\u5DF1 `lark-cli api PATCH .../im/v1/messages/...` \u6539\u5361\u7247** \u2014\u2014 \u90A3\u662F bridge \u7684\u6D3B;",
-    "\u81EA\u5DF1 PATCH \u4F1A\u548C bridge \u51B2\u7A81,\u8FD8\u4F1A\u8BA9\u672C\u8F6E turn \u4E0D\u7ED3\u675F\u3002\u4F60\u53EA\u5199 state.json,\u5361\u7247\u5916\u58F3\u548C\u7F51\u7EDC\u66F4\u65B0\u4EA4\u7ED9 bridge\u3002",
-    "\u5199\u5B8C state.json \u5C31**\u5E72\u51C0\u7ED3\u675F\u672C\u8F6E**(\u4F60\u7684\u8FDB\u7A0B\u9000\u51FA \u2192 bridge \u624D finalize \u5361\u7247;",
-    "\u6302\u7740\u4E0D\u9000\u51FA = \u5361\u7247\u6C38\u8FDC\u5361\u5728\u300C\u5904\u7406\u4E2D\u300D)\u3002",
+    "**\u7EDD\u4E0D\u81EA\u5DF1 `lark-cli api PATCH/PUT .../im/v1/messages/...` \u6539 bridge \u7BA1\u7406\u7684 post/card** \u2014\u2014 \u90A3\u662F bridge \u7684\u6D3B;",
+    "\u81EA\u5DF1\u53D1/\u6539\u4E3B\u56DE\u590D\u9762\u4F1A\u548C bridge \u7684 post \u7F16\u8F91\u3001\u5361\u7247 finalize\u3001\u6309\u94AE\u56DE\u4F20\u3001\u5D29\u6E83\u6062\u590D\u51B2\u7A81\u3002\u4F60\u53EA\u5199 state.json,\u7F51\u7EDC\u66F4\u65B0\u4EA4\u7ED9 bridge\u3002",
+    "\u5199\u5B8C state.json \u5C31**\u5E72\u51C0\u7ED3\u675F\u672C\u8F6E**(\u4F60\u7684\u8FDB\u7A0B\u9000\u51FA \u2192 bridge \u624D\u628A post/card \u6536\u655B\u6210\u7EC8\u6001;",
+    "\u6302\u7740\u4E0D\u9000\u51FA = \u8BDD\u9898\u6C38\u8FDC\u5361\u5728\u300C\u6B63\u5728\u5904\u7406\u2026\u300D)\u3002",
     "",
     "\u5361\u7247\u5C55\u793A\u539F\u5219:",
-    "- bridge \u53EF\u80FD\u5728\u8FD0\u884C\u4E2D\u5C55\u793A\u5DE5\u5177\u6458\u8981,\u8FD9\u662F\u901A\u7528\u8FDB\u5EA6\u4FE1\u53F7;\u6700\u7EC8\u6210\u529F\u5361\u7247\u4EE5\u4F60\u7684 `content_blocks`(\u82E5\u975E\u7A7A)\u6216 `last_message` \u4E3A\u4E3B\u3002",
+    "- \u8FD0\u884C\u4E2D\u4E3B\u9762\u662F post,bridge \u901A\u8FC7\u6574\u6761\u5BCC\u6587\u672C\u66FF\u6362\u505A\u5206\u5757\u5237\u65B0;\u5B83\u4E0D\u662F\u9010\u5B57 token streaming,\u4E0D\u8981\u4F9D\u8D56\u5DE5\u5177\u6D41/\u65E5\u5FD7\u8868\u8FBE\u4E1A\u52A1\u9636\u6BB5\u3002",
+    "- \u6700\u7EC8 post \u4EE5\u4F60\u7684 `last_message` \u4E3A\u4E3B;\u82E5\u5199\u4E86 `choices`\u3001`content_blocks` \u6216 `image_blocks`,bridge \u4F1A\u5728 post \u4E4B\u540E\u8865\u5361\u7247\u627F\u8F7D\u8FD9\u4E9B\u80FD\u529B\u3002",
     "- \u4E0D\u8981\u4F9D\u8D56 bridge \u4ECE\u8F93\u51FA\u91CC\u89E3\u6790\u4E1A\u52A1\u9636\u6BB5\u3001MR\u3001\u9884\u89C8\u5730\u5740\u6216\u4E0B\u4E00\u6B65\u52A8\u4F5C;\u9700\u8981\u5C55\u793A\u7684\u5185\u5BB9\u4F60\u81EA\u5DF1\u5199\u8FDB last_message\u3002",
     "- \u4E0D\u8981\u6C42\u56FA\u5B9A\u683C\u5F0F\u3002\u6839\u636E\u4EFB\u52A1\u9009\u62E9\u6700\u6E05\u695A\u7684\u8868\u8FBE:\u77ED\u7ED3\u8BBA\u3001\u5206\u70B9\u3001\u8868\u683C\u3001\u94FE\u63A5\u3001\u4E0B\u4E00\u6B65\u95EE\u9898\u90FD\u53EF\u4EE5\u3002",
     "- \u5982\u679C\u672C\u8F6E\u6D89\u53CA repo / \u4EE3\u7801 / \u6587\u6863\u4FEE\u6539,last_message \u5E94\u5305\u542B\u8DB3\u591F\u8BA9\u8FD0\u8425\u9A8C\u6536\u7684\u8BC1\u636E,\u4F8B\u5982\u4F60\u5B9E\u9645\u4F7F\u7528\u7684 workspace/repo\u3001\u5173\u952E diff \u6216\u94FE\u63A5\u3001\u8FD0\u884C\u8FC7\u7684\u6D4B\u8BD5/\u68C0\u67E5\u547D\u4EE4\u548C\u7ED3\u679C\u3002\u5177\u4F53\u8BC1\u636E\u7531\u4EFB\u52A1\u51B3\u5B9A;dogfood E2E \u7684\u4E25\u683C\u6E05\u5355\u53EA\u5728 dogfood guide \u4E2D\u8981\u6C42\u3002",
@@ -118256,12 +118273,13 @@ import path6 from "node:path";
 var NonEmptyString = external_exports.string().trim().min(1);
 function defaultResponseSurfacePrototypeConfig() {
   return {
-    enabled: false,
+    enabled: true,
     allowed_chats: [],
     allowed_threads: [],
-    lazy_card_creation: false,
+    lazy_card_creation: true,
     kill_switch: false,
-    post_outbound_enabled: false,
+    post_outbound_enabled: true,
+    allow_agent_mentions: true,
     allowed_mention_open_ids: [],
     max_posts_per_turn: 1,
     max_posts_per_window: 4,
@@ -118272,12 +118290,13 @@ function defaultResponseSurfacePrototypeConfig() {
 }
 var DEFAULT_RESPONSE_SURFACE_PROTOTYPE = defaultResponseSurfacePrototypeConfig();
 var responseSurfacePrototypeConfigDefaults = () => ({
-  enabled: false,
+  enabled: true,
   allowed_chats: [],
   allowed_threads: [],
-  lazy_card_creation: false,
+  lazy_card_creation: true,
   kill_switch: false,
-  post_outbound_enabled: false,
+  post_outbound_enabled: true,
+  allow_agent_mentions: true,
   allowed_mention_open_ids: [],
   max_posts_per_turn: 1,
   max_posts_per_window: 4,
@@ -118326,40 +118345,46 @@ var ResponseSurfaceStateSchema = external_exports.preprocess((value) => {
 }, StrictResponseSurfaceStateSchema.optional());
 var ResponseSurfacePrototypeConfigSchema = external_exports.object({
   /**
-   * Master gate. Default false keeps the legacy card-only response path.
+   * Master gate. Default true makes response surfaces available unless the
+   * runtime kill switch disables them.
    */
-  enabled: external_exports.boolean().default(false),
+  enabled: external_exports.boolean().default(true),
   /**
-   * Optional chat allowlist for dark-launch experiments. Empty means no chat
-   * is allowlisted by this gate.
+   * Optional chat allowlist for staged rollout. Empty means all chats are
+   * allowed by this gate.
    */
   allowed_chats: external_exports.array(external_exports.string().min(1)).default([]),
   /**
-   * Optional Larkway session/thread allowlist for narrow dogfood topics.
-   * Empty means no thread is allowlisted by this gate.
+   * Optional Larkway session/thread allowlist for staged rollout. Empty means
+   * all threads are allowed by this gate.
    */
   allowed_threads: external_exports.array(external_exports.string().min(1)).default([]),
   /**
-   * Dark-launch hook for PR2. This does not enable post-only output by itself;
-   * the bridge still requires a visible card fallback until post outbound
-   * exists and is explicitly enabled in a later PR.
+   * Post-first gate. Default true means the bridge starts a lightweight post
+   * as the live main surface when post outbound is available, and creates a
+   * card only for fallback or card-only capabilities.
    */
-  lazy_card_creation: external_exports.boolean().default(false),
+  lazy_card_creation: external_exports.boolean().default(true),
   /**
    * Runtime kill switch for emergency rollback. When true, every response
    * surface post path is treated as disabled even if enabled/allowlists are
-   * otherwise configured. Default false preserves current default-off behavior.
+   * otherwise configured.
    */
   kill_switch: external_exports.boolean().default(false),
   /**
-   * PR3 dark-launch gate for real post outbound. This must stay false by
-   * default. PR4's dispatcher also requires this gate before any post path.
+   * Gate for real post outbound. Defaults on, but the runtime still requires
+   * an injected post client and all safety gates before any post path.
    */
-  post_outbound_enabled: external_exports.boolean().default(false),
+  post_outbound_enabled: external_exports.boolean().default(true),
   /**
-   * Explicit target allowlist for future real post @ mentions. Empty means no
-   * mention target is authorized. Keep real IDs in private bot config, never
-   * in public docs/tests.
+   * Allows Agent-authored post mentions. This powers handoff to peer bots.
+   * Keep this false only when the operator wants to suppress every real @.
+   */
+  allow_agent_mentions: external_exports.boolean().default(true),
+  /**
+   * Optional target allowlist for real post @ mentions. Empty means the Agent
+   * may choose mention targets; non-empty narrows mentions to this exact set.
+   * Keep real IDs in private bot config, never in public docs/tests.
    */
   allowed_mention_open_ids: external_exports.array(external_exports.string().min(1)).default([]),
   /**
@@ -118391,12 +118416,21 @@ var ResponseSurfacePrototypeConfigSchema = external_exports.object({
 function isResponseSurfacePrototypeAllowlisted(config, facts) {
   if (!config?.enabled) return false;
   if (config.kill_switch) return false;
+  const hasScopedAllowlist = config.allowed_chats.length > 0 || config.allowed_threads.length > 0;
+  if (!hasScopedAllowlist) return true;
   const chatAllowed = config.allowed_chats.length > 0 && config.allowed_chats.includes(facts.chatId);
   const threadAllowed = config.allowed_threads.length > 0 && config.allowed_threads.includes(facts.threadId);
   return chatAllowed || threadAllowed;
 }
+function isResponseSurfaceMentionAllowed(config, userId) {
+  if (!config?.allow_agent_mentions) return false;
+  const normalized = userId.trim().toLowerCase();
+  if (normalized === "all" || normalized === "@all") return false;
+  if (config.allowed_mention_open_ids.length === 0) return true;
+  return config.allowed_mention_open_ids.includes(userId);
+}
 function shouldProvideResponseSurfacePostClient(config) {
-  return !!(config?.enabled && !config.kill_switch && config.post_outbound_enabled && config.max_posts_per_turn >= 1 && config.max_posts_per_window >= 1 && (config.allowed_chats.length > 0 || config.allowed_threads.length > 0));
+  return !!(config?.enabled && !config.kill_switch && config.post_outbound_enabled && config.max_posts_per_turn >= 1 && config.max_posts_per_window >= 1);
 }
 function isResponseSurfacePostOutboundAvailable(config, facts, opts) {
   return !!(opts.postClientAvailable && shouldProvideResponseSurfacePostClient(config) && isResponseSurfacePrototypeAllowlisted(config, facts));
@@ -119202,6 +119236,9 @@ function fullCard(input, reason) {
 function hasCardOnlyPayload(state) {
   return !!(state?.choices?.length || state?.image_blocks?.length || state?.content_blocks?.length);
 }
+function hasCardOnlyPayloadIn(input) {
+  return !!(hasCardOnlyPayload(input.state) || input.baseCard.choices?.length || input.baseCard.imageBlocks?.length || input.baseCard.contentBlocks?.length);
+}
 function compactAuditCard(input, post) {
   const status = input.state?.status ?? (input.baseCard.success ? "ready" : "failed");
   const title = input.baseCard.titleOverride ?? "Post \u5DF2\u53D1\u9001";
@@ -119228,7 +119265,7 @@ function policyBlockedCard(input) {
   return {
     ...input.baseCard,
     success: false,
-    failureReason: "response_surface post mention target is not in allowed_mention_open_ids; visible card fallback used"
+    failureReason: "response_surface post mention target is blocked by policy; visible card fallback used"
   };
 }
 function postText(input) {
@@ -119271,10 +119308,18 @@ async function existingLedgerEntry(input, idempotencyKey) {
   return ledger?.posts.find((post) => post.idempotencyKey === idempotencyKey) ?? null;
 }
 function sentResult(input, surface, post, reason) {
+  if (hasCardOnlyPayloadIn(input)) {
+    return {
+      card: input.baseCard,
+      reason: "post-sent-card-capability-required",
+      visible: true,
+      post
+    };
+  }
   if (surface.mode === "hybrid" || input.cardStarted) {
     return {
       card: compactAuditCard(input, post),
-      reason: reason === "post-ledger-already-sent" ? "post-ledger-already-sent" : surface.mode === "hybrid" ? "hybrid-post-sent-compact-card" : "post-sent",
+      reason: reason === "post-ledger-already-sent" ? "post-ledger-already-sent" : surface.mode === "hybrid" ? "hybrid-post-sent-compact-card" : reason,
       visible: true,
       post
     };
@@ -119317,10 +119362,11 @@ function emitSurfaceObservation(input) {
   );
 }
 async function dispatchResponseSurfaceInner(input) {
-  const surface = input.state?.response_surface;
-  if (!surface || surface.mode === "card" || surface.primary === "card") {
+  const declaredSurface = input.state?.response_surface;
+  if (declaredSurface?.mode === "card" || declaredSurface?.primary === "card") {
     return fullCard(input, "legacy-card-mode");
   }
+  const surface = declaredSurface ?? { mode: "post", primary: "post" };
   const cfg = input.prototypeConfig;
   if (!cfg?.enabled) return fullCard(input, "prototype-disabled");
   if (cfg.kill_switch) return fullCard(input, "kill-switch-active");
@@ -119339,15 +119385,12 @@ async function dispatchResponseSurfaceInner(input) {
   if (!input.visibleFallbackAvailable) {
     return fullCard(input, "visible-fallback-unavailable");
   }
-  if (hasCardOnlyPayload(input.state)) {
-    return fullCard(input, "card-capability-required");
-  }
   if (!input.postLedgerAvailable || !input.worktreePath) {
     return fullCard(input, "post-ledger-unavailable");
   }
   const mentions = surface.post?.mentions ?? [];
   const blockedMention = mentions.find(
-    (mention) => !cfg.allowed_mention_open_ids.includes(mention.user_id)
+    (mention) => !isResponseSurfaceMentionAllowed(cfg, mention.user_id)
   );
   const text = postText(input);
   const policyDigest = digestPostContent(text);
@@ -119363,7 +119406,17 @@ async function dispatchResponseSurfaceInner(input) {
   });
   const now = input.now?.() ?? (/* @__PURE__ */ new Date()).toISOString();
   if (blockedMention) {
-    const policyError = `mention target is not allowed: ${blockedMention.user_id}`;
+    const policyError = `mention target is not allowed by response surface policy: ${blockedMention.user_id}`;
+    if (input.livePost) {
+      try {
+        await input.postClient.updatePost(input.livePost.messageId, buildPostContent({ text }));
+      } catch (err) {
+        console.warn(
+          "[surface_dispatch] live post policy-blocked cleanup update failed:",
+          err
+        );
+      }
+    }
     await writeLedger(
       input,
       newLedgerEntry({
@@ -119398,7 +119451,7 @@ async function dispatchResponseSurfaceInner(input) {
     }))
   });
   const contentDigest = digestPostContent(content);
-  const idempotencyKey = derivePostIdempotencyKey({
+  const idempotencyKey = input.livePost?.idempotencyKey ?? derivePostIdempotencyKey({
     botId: input.facts.botId,
     threadId: input.facts.threadId,
     triggerMessageId: input.facts.triggerMessageId,
@@ -119451,7 +119504,7 @@ async function dispatchResponseSurfaceInner(input) {
       }
     };
   }
-  const budget = input.postBudget?.reserve();
+  const budget = input.livePost ? void 0 : input.postBudget?.reserve();
   if (budget && !budget.allowed) {
     return {
       ...fullCard(input, "post-rate-limit-exhausted"),
@@ -119485,7 +119538,7 @@ async function dispatchResponseSurfaceInner(input) {
     })
   );
   try {
-    const sent = await input.postClient.createPostReply(input.facts.replyToMessageId, content, {
+    const sent = input.livePost ? await input.postClient.updatePost(input.livePost.messageId, content) : await input.postClient.createPostReply(input.facts.replyToMessageId, content, {
       replyInThread: input.facts.replyInThread,
       idempotencyKey
     });
@@ -119511,7 +119564,10 @@ async function dispatchResponseSurfaceInner(input) {
       })
     );
     const post = { idempotencyKey, messageId: sent.messageId, role };
-    return { ...sentResult(input, surface, post, "post-sent"), budget };
+    return {
+      ...sentResult(input, surface, post, input.livePost ? "post-updated" : "post-sent"),
+      budget
+    };
   } catch (err) {
     const failedAt = input.now?.() ?? (/* @__PURE__ */ new Date()).toISOString();
     const error = err instanceof Error ? err.message : String(err);
@@ -119564,6 +119620,122 @@ async function dispatchResponseSurface(input) {
   return result;
 }
 
+// src/bridge/postProgress.ts
+var DEFAULT_PLACEHOLDER_TEXT = "\u6B63\u5728\u5904\u7406\u2026";
+var DEFAULT_PATCH_INTERVAL_MS = 1500;
+var DEFAULT_MAX_PROGRESS_EDITS = 16;
+function normalizeText2(text) {
+  return text.replace(/\r\n/g, "\n").trim();
+}
+function progressText(raw, fallback) {
+  const text = normalizeText2(raw);
+  if (!text) return fallback;
+  return text.length > 3500 ? `${text.slice(0, 3500)}
+
+_\u5904\u7406\u4E2D\u5185\u5BB9\u8F83\u957F\uFF0C\u7EC8\u7A3F\u4F1A\u6536\u655B\u3002_` : text;
+}
+var LivePostProgressHandle = class {
+  messageId;
+  idempotencyKey;
+  role = "primary";
+  postClient;
+  patchIntervalMs;
+  maxProgressEdits;
+  initialText;
+  textBuffer = "";
+  lastPatchedText = "";
+  progressEdits = 0;
+  pendingPatch = null;
+  inFlight = Promise.resolve();
+  closed = false;
+  constructor(opts) {
+    this.postClient = opts.postClient;
+    this.messageId = opts.messageId;
+    this.idempotencyKey = opts.idempotencyKey;
+    this.initialText = opts.initialText;
+    this.lastPatchedText = opts.initialText;
+    this.patchIntervalMs = opts.patchIntervalMs;
+    this.maxProgressEdits = opts.maxProgressEdits;
+  }
+  handle(event) {
+    if (this.closed) return;
+    if (event.type !== "text_delta") return;
+    this.textBuffer += event.text;
+    this.schedulePatch();
+  }
+  async finalize(opts) {
+    await this.drain();
+    const finalText = normalizeText2(opts.text) || this.initialText;
+    await this.update(finalText, opts.mentions);
+  }
+  async drain() {
+    this.closed = true;
+    if (this.pendingPatch) {
+      clearTimeout(this.pendingPatch);
+      this.pendingPatch = null;
+    }
+    await this.inFlight;
+  }
+  close() {
+    this.closed = true;
+    if (this.pendingPatch) {
+      clearTimeout(this.pendingPatch);
+      this.pendingPatch = null;
+    }
+  }
+  schedulePatch() {
+    if (this.pendingPatch || this.progressEdits >= this.maxProgressEdits) return;
+    this.pendingPatch = setTimeout(() => {
+      this.pendingPatch = null;
+      void this.patchProgress();
+    }, this.patchIntervalMs);
+    this.pendingPatch.unref?.();
+  }
+  async patchProgress() {
+    if (this.closed || this.progressEdits >= this.maxProgressEdits) return;
+    const nextText = progressText(this.textBuffer, this.initialText);
+    if (nextText === this.lastPatchedText) return;
+    this.progressEdits += 1;
+    this.inFlight = this.inFlight.then(() => this.update(nextText)).catch((err) => {
+      console.warn("[post_progress] progress update failed (continuing):", err);
+    });
+    await this.inFlight;
+  }
+  async update(text, mentions = []) {
+    const content = buildPostContent({ text, mentions });
+    await this.postClient.updatePost(this.messageId, content);
+    this.lastPatchedText = text;
+  }
+};
+async function createPostProgressHandle(opts) {
+  const role = "primary";
+  const initialText = normalizeText2(opts.initialText ?? DEFAULT_PLACEHOLDER_TEXT);
+  const idempotencyKey = derivePostIdempotencyKey({
+    botId: opts.facts.botId,
+    threadId: opts.facts.threadId,
+    triggerMessageId: opts.facts.triggerMessageId,
+    role,
+    logicalIndex: 0,
+    contentDigest: digestPostContent("live-progress-placeholder")
+  });
+  const sent = await opts.postClient.createPostReply(
+    opts.replyToMessageId,
+    buildPostContent({ text: initialText }),
+    {
+      replyInThread: opts.replyInThread,
+      idempotencyKey
+    }
+  );
+  return new LivePostProgressHandle({
+    postClient: opts.postClient,
+    messageId: sent.messageId,
+    idempotencyKey,
+    initialText,
+    patchIntervalMs: opts.patchIntervalMs ?? DEFAULT_PATCH_INTERVAL_MS,
+    maxProgressEdits: opts.maxProgressEdits ?? DEFAULT_MAX_PROGRESS_EDITS
+  });
+}
+
 // src/bridge/postBudget.ts
 function scopeKey(scope) {
   return `${scope.botId}\0${scope.chatId}\0${scope.threadId}`;
@@ -119945,6 +120117,8 @@ var BridgeHandler = class {
         visibleFallbackAvailable: true
       });
       let card;
+      let progressPost;
+      let progressPostStartFailed = false;
       if (surfaceController.shouldStartCardImmediately()) {
         try {
           card = await this.deps.cardRenderer.start(messageId, { replyInThread, threadId });
@@ -120108,6 +120282,55 @@ var BridgeHandler = class {
         } catch (err) {
           console.warn("[bridge.handler] ensureStateFile failed (continuing):", err);
         }
+        if (!card && postOutboundAvailable && this.deps.postClient) {
+          const budget = prototypeConfig ? this.responseSurfacePostBudget.reserve({
+            scope: {
+              botId: this.deps.botConfig?.id ?? "v1-default",
+              chatId: parsed.chatId,
+              threadId
+            },
+            maxPosts: prototypeConfig.max_posts_per_window,
+            windowMs: prototypeConfig.post_window_ms
+          }) : void 0;
+          if (budget?.allowed === false) {
+            console.warn("[bridge.handler] post progress budget exhausted; using card fallback");
+            progressPostStartFailed = true;
+          } else {
+            try {
+              progressPost = await createPostProgressHandle({
+                postClient: this.deps.postClient,
+                replyToMessageId: messageId,
+                replyInThread,
+                facts: {
+                  botId: this.deps.botConfig?.id ?? "v1-default",
+                  threadId,
+                  triggerMessageId: messageId
+                },
+                initialText: "\u6B63\u5728\u5904\u7406\u2026"
+              });
+              await this.deps.client.removeProcessingReaction?.(messageId);
+              await recordEvent({
+                status: "running",
+                startedAt: (/* @__PURE__ */ new Date()).toISOString(),
+                appendPath: "\u5DF2\u521B\u5EFA post",
+                reason: "response surface \u4F7F\u7528 post \u4F5C\u4E3A\u672C\u8F6E\u4E3B\u56DE\u590D\u9762\u3002"
+              });
+            } catch (err) {
+              progressPostStartFailed = true;
+              console.warn("[bridge.handler] create progress post failed; using card fallback:", err);
+            }
+          }
+        }
+        if (!card && progressPostStartFailed) {
+          card = await this.deps.cardRenderer.start(messageId, { replyInThread, threadId });
+          await this.deps.client.removeProcessingReaction?.(messageId);
+          await recordEvent({
+            status: "running",
+            startedAt: (/* @__PURE__ */ new Date()).toISOString(),
+            appendPath: "post \u5931\u8D25\uFF0C\u5DF2\u521B\u5EFA\u5361\u7247",
+            reason: "post \u4E3B\u9762\u521B\u5EFA\u5931\u8D25\uFF0Cbridge \u4F7F\u7528\u53EF\u89C1\u5361\u7247\u515C\u5E95\u3002"
+          });
+        }
         if (card) {
           try {
             await writeCardFile(worktreePath, {
@@ -120182,6 +120405,7 @@ var BridgeHandler = class {
           try {
             for await (const ev of handle.events) {
               if (card) card.handle(ev);
+              else progressPost?.handle(ev);
               if (ev.type === "system_init") {
                 sessionId = ev.sessionId;
               }
@@ -120249,6 +120473,7 @@ var BridgeHandler = class {
               imageBlocks: reportedState?.image_blocks,
               contentBlocks: reportedState?.content_blocks
             };
+            await progressPost?.drain();
             const surfaceDispatch = await dispatchResponseSurface({
               state: reportedState,
               prototypeConfig,
@@ -120263,10 +120488,15 @@ var BridgeHandler = class {
               worktreePath,
               baseCard: baseCardPayload,
               cardStarted: !!card,
-              postOutboundAvailable,
+              postOutboundAvailable: postOutboundAvailable && !progressPostStartFailed,
               postLedgerAvailable: true,
               visibleFallbackAvailable: true,
               postClient: this.deps.postClient,
+              livePost: progressPost ? {
+                messageId: progressPost.messageId,
+                idempotencyKey: progressPost.idempotencyKey,
+                role: progressPost.role
+              } : void 0,
               postBudget: prototypeConfig ? {
                 reserve: () => this.responseSurfacePostBudget.reserve({
                   scope: {
@@ -120370,6 +120600,23 @@ var BridgeHandler = class {
           reason: String(err)
         });
         settle(false);
+        if (!card && progressPost) {
+          try {
+            await progressPost.finalize({
+              text: `\u6267\u884C\u5931\u8D25: ${String(err)}`
+            });
+          } catch (postFinalizeErr) {
+            console.error(
+              "[bridge.handler] progress post failure update failed; creating card fallback:",
+              postFinalizeErr
+            );
+            try {
+              card = await this.deps.cardRenderer.start(messageId, { replyInThread, threadId });
+            } catch (cardStartErr) {
+              console.error("[bridge.handler] failure card start also failed:", cardStartErr);
+            }
+          }
+        }
         if (card) {
           try {
             await card.finalize({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "larkway",
-  "version": "0.3.19",
+  "version": "0.3.21",
   "description": "Thin bridge: Feishu thread to local Claude Code CLI",
   "license": "MIT",
   "author": "Chuck Wu (chuckwu0)",