larkway 0.3.26 → 0.3.28

package/dist/main.js

@@ -10379,6 +10379,769 @@ var require_proxy_from_env = __commonJS({
   }
 });
 
+// node_modules/.pnpm/ms@2.1.3/node_modules/ms/index.js
+var require_ms = __commonJS({
+  "node_modules/.pnpm/ms@2.1.3/node_modules/ms/index.js"(exports, module) {
+    var s = 1e3;
+    var m = s * 60;
+    var h = m * 60;
+    var d = h * 24;
+    var w = d * 7;
+    var y = d * 365.25;
+    module.exports = function(val, options) {
+      options = options || {};
+      var type2 = typeof val;
+      if (type2 === "string" && val.length > 0) {
+        return parse(val);
+      } else if (type2 === "number" && isFinite(val)) {
+        return options.long ? fmtLong(val) : fmtShort(val);
+      }
+      throw new Error(
+        "val is not a non-empty string or a valid number. val=" + JSON.stringify(val)
+      );
+    };
+    function parse(str2) {
+      str2 = String(str2);
+      if (str2.length > 100) {
+        return;
+      }
+      var match = /^(-?(?:\d+)?\.?\d+) *(milliseconds?|msecs?|ms|seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)?$/i.exec(
+        str2
+      );
+      if (!match) {
+        return;
+      }
+      var n = parseFloat(match[1]);
+      var type2 = (match[2] || "ms").toLowerCase();
+      switch (type2) {
+        case "years":
+        case "year":
+        case "yrs":
+        case "yr":
+        case "y":
+          return n * y;
+        case "weeks":
+        case "week":
+        case "w":
+          return n * w;
+        case "days":
+        case "day":
+        case "d":
+          return n * d;
+        case "hours":
+        case "hour":
+        case "hrs":
+        case "hr":
+        case "h":
+          return n * h;
+        case "minutes":
+        case "minute":
+        case "mins":
+        case "min":
+        case "m":
+          return n * m;
+        case "seconds":
+        case "second":
+        case "secs":
+        case "sec":
+        case "s":
+          return n * s;
+        case "milliseconds":
+        case "millisecond":
+        case "msecs":
+        case "msec":
+        case "ms":
+          return n;
+        default:
+          return void 0;
+      }
+    }
+    function fmtShort(ms) {
+      var msAbs = Math.abs(ms);
+      if (msAbs >= d) {
+        return Math.round(ms / d) + "d";
+      }
+      if (msAbs >= h) {
+        return Math.round(ms / h) + "h";
+      }
+      if (msAbs >= m) {
+        return Math.round(ms / m) + "m";
+      }
+      if (msAbs >= s) {
+        return Math.round(ms / s) + "s";
+      }
+      return ms + "ms";
+    }
+    function fmtLong(ms) {
+      var msAbs = Math.abs(ms);
+      if (msAbs >= d) {
+        return plural(ms, msAbs, d, "day");
+      }
+      if (msAbs >= h) {
+        return plural(ms, msAbs, h, "hour");
+      }
+      if (msAbs >= m) {
+        return plural(ms, msAbs, m, "minute");
+      }
+      if (msAbs >= s) {
+        return plural(ms, msAbs, s, "second");
+      }
+      return ms + " ms";
+    }
+    function plural(ms, msAbs, n, name) {
+      var isPlural = msAbs >= n * 1.5;
+      return Math.round(ms / n) + " " + name + (isPlural ? "s" : "");
+    }
+  }
+});
+
+// node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/common.js
+var require_common = __commonJS({
+  "node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/common.js"(exports, module) {
+    function setup(env) {
+      createDebug.debug = createDebug;
+      createDebug.default = createDebug;
+      createDebug.coerce = coerce2;
+      createDebug.disable = disable;
+      createDebug.enable = enable;
+      createDebug.enabled = enabled;
+      createDebug.humanize = require_ms();
+      createDebug.destroy = destroy;
+      Object.keys(env).forEach((key) => {
+        createDebug[key] = env[key];
+      });
+      createDebug.names = [];
+      createDebug.skips = [];
+      createDebug.formatters = {};
+      function selectColor(namespace) {
+        let hash = 0;
+        for (let i = 0; i < namespace.length; i++) {
+          hash = (hash << 5) - hash + namespace.charCodeAt(i);
+          hash |= 0;
+        }
+        return createDebug.colors[Math.abs(hash) % createDebug.colors.length];
+      }
+      createDebug.selectColor = selectColor;
+      function createDebug(namespace) {
+        let prevTime;
+        let enableOverride = null;
+        let namespacesCache;
+        let enabledCache;
+        function debug(...args) {
+          if (!debug.enabled) {
+            return;
+          }
+          const self2 = debug;
+          const curr = Number(/* @__PURE__ */ new Date());
+          const ms = curr - (prevTime || curr);
+          self2.diff = ms;
+          self2.prev = prevTime;
+          self2.curr = curr;
+          prevTime = curr;
+          args[0] = createDebug.coerce(args[0]);
+          if (typeof args[0] !== "string") {
+            args.unshift("%O");
+          }
+          let index = 0;
+          args[0] = args[0].replace(/%([a-zA-Z%])/g, (match, format) => {
+            if (match === "%%") {
+              return "%";
+            }
+            index++;
+            const formatter = createDebug.formatters[format];
+            if (typeof formatter === "function") {
+              const val = args[index];
+              match = formatter.call(self2, val);
+              args.splice(index, 1);
+              index--;
+            }
+            return match;
+          });
+          createDebug.formatArgs.call(self2, args);
+          const logFn = self2.log || createDebug.log;
+          logFn.apply(self2, args);
+        }
+        debug.namespace = namespace;
+        debug.useColors = createDebug.useColors();
+        debug.color = createDebug.selectColor(namespace);
+        debug.extend = extend3;
+        debug.destroy = createDebug.destroy;
+        Object.defineProperty(debug, "enabled", {
+          enumerable: true,
+          configurable: false,
+          get: () => {
+            if (enableOverride !== null) {
+              return enableOverride;
+            }
+            if (namespacesCache !== createDebug.namespaces) {
+              namespacesCache = createDebug.namespaces;
+              enabledCache = createDebug.enabled(namespace);
+            }
+            return enabledCache;
+          },
+          set: (v) => {
+            enableOverride = v;
+          }
+        });
+        if (typeof createDebug.init === "function") {
+          createDebug.init(debug);
+        }
+        return debug;
+      }
+      function extend3(namespace, delimiter) {
+        const newDebug = createDebug(this.namespace + (typeof delimiter === "undefined" ? ":" : delimiter) + namespace);
+        newDebug.log = this.log;
+        return newDebug;
+      }
+      function enable(namespaces) {
+        createDebug.save(namespaces);
+        createDebug.namespaces = namespaces;
+        createDebug.names = [];
+        createDebug.skips = [];
+        const split = (typeof namespaces === "string" ? namespaces : "").trim().replace(/\s+/g, ",").split(",").filter(Boolean);
+        for (const ns of split) {
+          if (ns[0] === "-") {
+            createDebug.skips.push(ns.slice(1));
+          } else {
+            createDebug.names.push(ns);
+          }
+        }
+      }
+      function matchesTemplate(search, template) {
+        let searchIndex = 0;
+        let templateIndex = 0;
+        let starIndex = -1;
+        let matchIndex = 0;
+        while (searchIndex < search.length) {
+          if (templateIndex < template.length && (template[templateIndex] === search[searchIndex] || template[templateIndex] === "*")) {
+            if (template[templateIndex] === "*") {
+              starIndex = templateIndex;
+              matchIndex = searchIndex;
+              templateIndex++;
+            } else {
+              searchIndex++;
+              templateIndex++;
+            }
+          } else if (starIndex !== -1) {
+            templateIndex = starIndex + 1;
+            matchIndex++;
+            searchIndex = matchIndex;
+          } else {
+            return false;
+          }
+        }
+        while (templateIndex < template.length && template[templateIndex] === "*") {
+          templateIndex++;
+        }
+        return templateIndex === template.length;
+      }
+      function disable() {
+        const namespaces = [
+          ...createDebug.names,
+          ...createDebug.skips.map((namespace) => "-" + namespace)
+        ].join(",");
+        createDebug.enable("");
+        return namespaces;
+      }
+      function enabled(name) {
+        for (const skip of createDebug.skips) {
+          if (matchesTemplate(name, skip)) {
+            return false;
+          }
+        }
+        for (const ns of createDebug.names) {
+          if (matchesTemplate(name, ns)) {
+            return true;
+          }
+        }
+        return false;
+      }
+      function coerce2(val) {
+        if (val instanceof Error) {
+          return val.stack || val.message;
+        }
+        return val;
+      }
+      function destroy() {
+        console.warn("Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.");
+      }
+      createDebug.enable(createDebug.load());
+      return createDebug;
+    }
+    module.exports = setup;
+  }
+});
+
+// node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/browser.js
+var require_browser = __commonJS({
+  "node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/browser.js"(exports, module) {
+    exports.formatArgs = formatArgs;
+    exports.save = save;
+    exports.load = load2;
+    exports.useColors = useColors;
+    exports.storage = localstorage();
+    exports.destroy = /* @__PURE__ */ (() => {
+      let warned = false;
+      return () => {
+        if (!warned) {
+          warned = true;
+          console.warn("Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.");
+        }
+      };
+    })();
+    exports.colors = [
+      "#0000CC",
+      "#0000FF",
+      "#0033CC",
+      "#0033FF",
+      "#0066CC",
+      "#0066FF",
+      "#0099CC",
+      "#0099FF",
+      "#00CC00",
+      "#00CC33",
+      "#00CC66",
+      "#00CC99",
+      "#00CCCC",
+      "#00CCFF",
+      "#3300CC",
+      "#3300FF",
+      "#3333CC",
+      "#3333FF",
+      "#3366CC",
+      "#3366FF",
+      "#3399CC",
+      "#3399FF",
+      "#33CC00",
+      "#33CC33",
+      "#33CC66",
+      "#33CC99",
+      "#33CCCC",
+      "#33CCFF",
+      "#6600CC",
+      "#6600FF",
+      "#6633CC",
+      "#6633FF",
+      "#66CC00",
+      "#66CC33",
+      "#9900CC",
+      "#9900FF",
+      "#9933CC",
+      "#9933FF",
+      "#99CC00",
+      "#99CC33",
+      "#CC0000",
+      "#CC0033",
+      "#CC0066",
+      "#CC0099",
+      "#CC00CC",
+      "#CC00FF",
+      "#CC3300",
+      "#CC3333",
+      "#CC3366",
+      "#CC3399",
+      "#CC33CC",
+      "#CC33FF",
+      "#CC6600",
+      "#CC6633",
+      "#CC9900",
+      "#CC9933",
+      "#CCCC00",
+      "#CCCC33",
+      "#FF0000",
+      "#FF0033",
+      "#FF0066",
+      "#FF0099",
+      "#FF00CC",
+      "#FF00FF",
+      "#FF3300",
+      "#FF3333",
+      "#FF3366",
+      "#FF3399",
+      "#FF33CC",
+      "#FF33FF",
+      "#FF6600",
+      "#FF6633",
+      "#FF9900",
+      "#FF9933",
+      "#FFCC00",
+      "#FFCC33"
+    ];
+    function useColors() {
+      if (typeof window !== "undefined" && window.process && (window.process.type === "renderer" || window.process.__nwjs)) {
+        return true;
+      }
+      if (typeof navigator !== "undefined" && navigator.userAgent && navigator.userAgent.toLowerCase().match(/(edge|trident)\/(\d+)/)) {
+        return false;
+      }
+      let m;
+      return typeof document !== "undefined" && document.documentElement && document.documentElement.style && document.documentElement.style.WebkitAppearance || // Is firebug? http://stackoverflow.com/a/398120/376773
+      typeof window !== "undefined" && window.console && (window.console.firebug || window.console.exception && window.console.table) || // Is firefox >= v31?
+      // https://developer.mozilla.org/en-US/docs/Tools/Web_Console#Styling_messages
+      typeof navigator !== "undefined" && navigator.userAgent && (m = navigator.userAgent.toLowerCase().match(/firefox\/(\d+)/)) && parseInt(m[1], 10) >= 31 || // Double check webkit in userAgent just in case we are in a worker
+      typeof navigator !== "undefined" && navigator.userAgent && navigator.userAgent.toLowerCase().match(/applewebkit\/(\d+)/);
+    }
+    function formatArgs(args) {
+      args[0] = (this.useColors ? "%c" : "") + this.namespace + (this.useColors ? " %c" : " ") + args[0] + (this.useColors ? "%c " : " ") + "+" + module.exports.humanize(this.diff);
+      if (!this.useColors) {
+        return;
+      }
+      const c = "color: " + this.color;
+      args.splice(1, 0, c, "color: inherit");
+      let index = 0;
+      let lastC = 0;
+      args[0].replace(/%[a-zA-Z%]/g, (match) => {
+        if (match === "%%") {
+          return;
+        }
+        index++;
+        if (match === "%c") {
+          lastC = index;
+        }
+      });
+      args.splice(lastC, 0, c);
+    }
+    exports.log = console.debug || console.log || (() => {
+    });
+    function save(namespaces) {
+      try {
+        if (namespaces) {
+          exports.storage.setItem("debug", namespaces);
+        } else {
+          exports.storage.removeItem("debug");
+        }
+      } catch (error) {
+      }
+    }
+    function load2() {
+      let r;
+      try {
+        r = exports.storage.getItem("debug") || exports.storage.getItem("DEBUG");
+      } catch (error) {
+      }
+      if (!r && typeof process !== "undefined" && "env" in process) {
+        r = process.env.DEBUG;
+      }
+      return r;
+    }
+    function localstorage() {
+      try {
+        return localStorage;
+      } catch (error) {
+      }
+    }
+    module.exports = require_common()(exports);
+    var { formatters } = module.exports;
+    formatters.j = function(v) {
+      try {
+        return JSON.stringify(v);
+      } catch (error) {
+        return "[UnexpectedJSONParseError]: " + error.message;
+      }
+    };
+  }
+});
+
+// node_modules/.pnpm/has-flag@4.0.0/node_modules/has-flag/index.js
+var require_has_flag = __commonJS({
+  "node_modules/.pnpm/has-flag@4.0.0/node_modules/has-flag/index.js"(exports, module) {
+    "use strict";
+    module.exports = (flag, argv = process.argv) => {
+      const prefix = flag.startsWith("-") ? "" : flag.length === 1 ? "-" : "--";
+      const position = argv.indexOf(prefix + flag);
+      const terminatorPosition = argv.indexOf("--");
+      return position !== -1 && (terminatorPosition === -1 || position < terminatorPosition);
+    };
+  }
+});
+
+// node_modules/.pnpm/supports-color@7.2.0/node_modules/supports-color/index.js
+var require_supports_color = __commonJS({
+  "node_modules/.pnpm/supports-color@7.2.0/node_modules/supports-color/index.js"(exports, module) {
+    "use strict";
+    var os2 = __require("os");
+    var tty = __require("tty");
+    var hasFlag = require_has_flag();
+    var { env } = process;
+    var forceColor;
+    if (hasFlag("no-color") || hasFlag("no-colors") || hasFlag("color=false") || hasFlag("color=never")) {
+      forceColor = 0;
+    } else if (hasFlag("color") || hasFlag("colors") || hasFlag("color=true") || hasFlag("color=always")) {
+      forceColor = 1;
+    }
+    if ("FORCE_COLOR" in env) {
+      if (env.FORCE_COLOR === "true") {
+        forceColor = 1;
+      } else if (env.FORCE_COLOR === "false") {
+        forceColor = 0;
+      } else {
+        forceColor = env.FORCE_COLOR.length === 0 ? 1 : Math.min(parseInt(env.FORCE_COLOR, 10), 3);
+      }
+    }
+    function translateLevel(level) {
+      if (level === 0) {
+        return false;
+      }
+      return {
+        level,
+        hasBasic: true,
+        has256: level >= 2,
+        has16m: level >= 3
+      };
+    }
+    function supportsColor(haveStream, streamIsTTY) {
+      if (forceColor === 0) {
+        return 0;
+      }
+      if (hasFlag("color=16m") || hasFlag("color=full") || hasFlag("color=truecolor")) {
+        return 3;
+      }
+      if (hasFlag("color=256")) {
+        return 2;
+      }
+      if (haveStream && !streamIsTTY && forceColor === void 0) {
+        return 0;
+      }
+      const min = forceColor || 0;
+      if (env.TERM === "dumb") {
+        return min;
+      }
+      if (process.platform === "win32") {
+        const osRelease = os2.release().split(".");
+        if (Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) {
+          return Number(osRelease[2]) >= 14931 ? 3 : 2;
+        }
+        return 1;
+      }
+      if ("CI" in env) {
+        if (["TRAVIS", "CIRCLECI", "APPVEYOR", "GITLAB_CI", "GITHUB_ACTIONS", "BUILDKITE"].some((sign) => sign in env) || env.CI_NAME === "codeship") {
+          return 1;
+        }
+        return min;
+      }
+      if ("TEAMCITY_VERSION" in env) {
+        return /^(9\.(0*[1-9]\d*)\.|\d{2,}\.)/.test(env.TEAMCITY_VERSION) ? 1 : 0;
+      }
+      if (env.COLORTERM === "truecolor") {
+        return 3;
+      }
+      if ("TERM_PROGRAM" in env) {
+        const version = parseInt((env.TERM_PROGRAM_VERSION || "").split(".")[0], 10);
+        switch (env.TERM_PROGRAM) {
+          case "iTerm.app":
+            return version >= 3 ? 3 : 2;
+          case "Apple_Terminal":
+            return 2;
+        }
+      }
+      if (/-256(color)?$/i.test(env.TERM)) {
+        return 2;
+      }
+      if (/^screen|^xterm|^vt100|^vt220|^rxvt|color|ansi|cygwin|linux/i.test(env.TERM)) {
+        return 1;
+      }
+      if ("COLORTERM" in env) {
+        return 1;
+      }
+      return min;
+    }
+    function getSupportLevel(stream) {
+      const level = supportsColor(stream, stream && stream.isTTY);
+      return translateLevel(level);
+    }
+    module.exports = {
+      supportsColor: getSupportLevel,
+      stdout: translateLevel(supportsColor(true, tty.isatty(1))),
+      stderr: translateLevel(supportsColor(true, tty.isatty(2)))
+    };
+  }
+});
+
+// node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/node.js
+var require_node = __commonJS({
+  "node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/node.js"(exports, module) {
+    var tty = __require("tty");
+    var util2 = __require("util");
+    exports.init = init;
+    exports.log = log;
+    exports.formatArgs = formatArgs;
+    exports.save = save;
+    exports.load = load2;
+    exports.useColors = useColors;
+    exports.destroy = util2.deprecate(
+      () => {
+      },
+      "Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`."
+    );
+    exports.colors = [6, 2, 3, 4, 5, 1];
+    try {
+      const supportsColor = require_supports_color();
+      if (supportsColor && (supportsColor.stderr || supportsColor).level >= 2) {
+        exports.colors = [
+          20,
+          21,
+          26,
+          27,
+          32,
+          33,
+          38,
+          39,
+          40,
+          41,
+          42,
+          43,
+          44,
+          45,
+          56,
+          57,
+          62,
+          63,
+          68,
+          69,
+          74,
+          75,
+          76,
+          77,
+          78,
+          79,
+          80,
+          81,
+          92,
+          93,
+          98,
+          99,
+          112,
+          113,
+          128,
+          129,
+          134,
+          135,
+          148,
+          149,
+          160,
+          161,
+          162,
+          163,
+          164,
+          165,
+          166,
+          167,
+          168,
+          169,
+          170,
+          171,
+          172,
+          173,
+          178,
+          179,
+          184,
+          185,
+          196,
+          197,
+          198,
+          199,
+          200,
+          201,
+          202,
+          203,
+          204,
+          205,
+          206,
+          207,
+          208,
+          209,
+          214,
+          215,
+          220,
+          221
+        ];
+      }
+    } catch (error) {
+    }
+    exports.inspectOpts = Object.keys(process.env).filter((key) => {
+      return /^debug_/i.test(key);
+    }).reduce((obj, key) => {
+      const prop = key.substring(6).toLowerCase().replace(/_([a-z])/g, (_, k) => {
+        return k.toUpperCase();
+      });
+      let val = process.env[key];
+      if (/^(yes|on|true|enabled)$/i.test(val)) {
+        val = true;
+      } else if (/^(no|off|false|disabled)$/i.test(val)) {
+        val = false;
+      } else if (val === "null") {
+        val = null;
+      } else {
+        val = Number(val);
+      }
+      obj[prop] = val;
+      return obj;
+    }, {});
+    function useColors() {
+      return "colors" in exports.inspectOpts ? Boolean(exports.inspectOpts.colors) : tty.isatty(process.stderr.fd);
+    }
+    function formatArgs(args) {
+      const { namespace: name, useColors: useColors2 } = this;
+      if (useColors2) {
+        const c = this.color;
+        const colorCode = "\x1B[3" + (c < 8 ? c : "8;5;" + c);
+        const prefix = `  ${colorCode};1m${name} \x1B[0m`;
+        args[0] = prefix + args[0].split("\n").join("\n" + prefix);
+        args.push(colorCode + "m+" + module.exports.humanize(this.diff) + "\x1B[0m");
+      } else {
+        args[0] = getDate() + name + " " + args[0];
+      }
+    }
+    function getDate() {
+      if (exports.inspectOpts.hideDate) {
+        return "";
+      }
+      return (/* @__PURE__ */ new Date()).toISOString() + " ";
+    }
+    function log(...args) {
+      return process.stderr.write(util2.formatWithOptions(exports.inspectOpts, ...args) + "\n");
+    }
+    function save(namespaces) {
+      if (namespaces) {
+        process.env.DEBUG = namespaces;
+      } else {
+        delete process.env.DEBUG;
+      }
+    }
+    function load2() {
+      return process.env.DEBUG;
+    }
+    function init(debug) {
+      debug.inspectOpts = {};
+      const keys = Object.keys(exports.inspectOpts);
+      for (let i = 0; i < keys.length; i++) {
+        debug.inspectOpts[keys[i]] = exports.inspectOpts[keys[i]];
+      }
+    }
+    module.exports = require_common()(exports);
+    var { formatters } = module.exports;
+    formatters.o = function(v) {
+      this.inspectOpts.colors = this.useColors;
+      return util2.inspect(v, this.inspectOpts).split("\n").map((str2) => str2.trim()).join(" ");
+    };
+    formatters.O = function(v) {
+      this.inspectOpts.colors = this.useColors;
+      return util2.inspect(v, this.inspectOpts);
+    };
+  }
+});
+
+// node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/index.js
+var require_src = __commonJS({
+  "node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/index.js"(exports, module) {
+    if (typeof process === "undefined" || process.type === "renderer" || process.browser === true || process.__nwjs) {
+      module.exports = require_browser();
+    } else {
+      module.exports = require_node();
+    }
+  }
+});
+
 // node_modules/.pnpm/follow-redirects@1.16.0/node_modules/follow-redirects/debug.js
 var require_debug = __commonJS({
   "node_modules/.pnpm/follow-redirects@1.16.0/node_modules/follow-redirects/debug.js"(exports, module) {
@@ -10386,7 +11149,7 @@ var require_debug = __commonJS({
     module.exports = function() {
       if (!debug) {
         try {
-          debug = __require("debug")("follow-redirects");
+          debug = require_src()("follow-redirects");
         } catch (error) {
         }
         if (typeof debug !== "function") {
@@ -115245,7 +116008,7 @@ See examples/config.example.json for the correct format.`
 // src/lark/channelClient.ts
 var import_node_sdk = __toESM(require_lib2(), 1);
 import { execFile as execFileCallback } from "node:child_process";
-import { mkdir, readFile as readFile2, writeFile } from "node:fs/promises";
+import { mkdir, readFile as readFile2, writeFile, rename, unlink } from "node:fs/promises";
 import path3 from "node:path";
 import { promisify } from "node:util";
 
@@ -115766,9 +116529,12 @@ var execFile = promisify(execFileCallback);
 var LEARNED_CHATS_LIMIT = 100;
 var SEEN_MESSAGES_LIMIT = 1e3;
 var MAX_MESSAGE_ATTEMPTS = 5;
-var OPEN_CHAT_DISCOVERY_LOOKBACK_MS = 9e4;
+var OPEN_CHAT_DISCOVERY_LOOKBACK_BUFFER_MS = 3e4;
 var OPEN_CHAT_DISCOVERY_BOOTSTRAP_LOOKBACK_MS = 30 * 60 * 1e3;
 var PROCESSING_REACTION_EMOJI = "Typing";
+var DEFAULT_OPEN_CHAT_DISCOVERY_MS = 3e5;
+var OPEN_CHAT_DISCOVERY_JITTER_CAP_MS = 3e4;
+var OPEN_CHAT_DISCOVERY_MAX_BACKOFF_CYCLES = 8;
 var GAP_FILL_MAX_ATTEMPTS = 3;
 var GAP_FILL_BACKOFF_BASE_MS = 1e3;
 var UNRESOLVED_WINDOW_MAX_CHATS = 50;
@@ -115798,7 +116564,7 @@ function resolveOpenChatDiscoveryMs(ctorValue) {
   } else {
     const env = process.env["LARKWAY_OPEN_CHAT_DISCOVERY_MS"];
     const parsed = env !== void 0 ? Number(env) : Number.NaN;
-    raw = Number.isFinite(parsed) ? parsed : 6e4;
+    raw = Number.isFinite(parsed) ? parsed : DEFAULT_OPEN_CHAT_DISCOVERY_MS;
   }
   return Number.isFinite(raw) && raw > 0 ? raw : 0;
 }
@@ -115997,6 +116763,25 @@ var ChannelClient = class {
   openChatDiscoveryTimer = null;
   openChatDiscoveryRunning = false;
   openChatDiscoveryBootstrapped = false;
+  /**
+   * Consecutive discovery-cycle failures. Used to SKIP cycles with exponential
+   * backoff (storm: a failing +chat-list/gap-fill shouldn't re-fire every
+   * interval). Reset to 0 on the first clean cycle. {@link openChatDiscoverySkips}
+   * counts how many remaining cycles to skip before the next real attempt.
+   */
+  openChatDiscoveryFailures = 0;
+  openChatDiscoverySkips = 0;
+  /**
+   * Per-instance jitter offset (ms) applied to discovery scheduling so multiple
+   * bots on one host don't run discovery (and its history-pull burst) in
+   * lockstep. Computed once at startup. `Math.random` is fine here — this is
+   * runtime scheduling code, not a determinism-sensitive workflow script.
+   */
+  openChatDiscoveryJitterMs = Math.floor(
+    Math.random() * OPEN_CHAT_DISCOVERY_JITTER_CAP_MS
+  );
+  /** Monotonic suffix so overlapping atomic writes get distinct temp files. */
+  atomicWriteSeq = 0;
   processingReactions = /* @__PURE__ */ new Map();
   /**
    * Shared messageId -> threadId map. Populated by ChannelCardClient.createCard
@@ -116028,10 +116813,31 @@ var ChannelClient = class {
   setGapFillSleepForTest(fn) {
     this.gapFillSleep = fn;
   }
+  /**
+   * TEST SEAM (deletable): override the per-instance open-chat discovery startup
+   * jitter so tests can make the FIRST discovery run fire deterministically
+   * (jitter=0) instead of waiting up to {@link OPEN_CHAT_DISCOVERY_JITTER_CAP_MS}.
+   * Must be called before connect()/startOpenChatDiscovery(). No-op in production.
+   */
+  setOpenChatDiscoveryJitterForTest(ms) {
+    this.openChatDiscoveryJitterMs = Math.max(0, ms);
+  }
   /** TEST-ONLY read of the per-chat unresolved-window replay map (chatId → windowStart). */
   unresolvedGapWindowsForTest() {
     return new Map(this.unresolvedGapWindowByChat);
   }
+  /**
+   * TEST-ONLY: run exactly ONE open-chat discovery cycle (same code path the
+   * interval timer invokes), awaited to completion. Lets tests assert the
+   * storm-control behaviour (steady-state no-pull, new-chat pull, failure
+   * backoff skip) deterministically without standing up real timers.
+   */
+  async discoverOpenChatsForTest() {
+    for (let i = 0; i < 200 && this.openChatDiscoveryRunning; i++) {
+      await sleep(5);
+    }
+    await this.discoverOpenChatsAndGapFill((s) => console.log(`[channel.client] ${s}`));
+  }
   /**
    * TEST-ONLY direct gapFill invocation with an explicit chat-set override —
    * mirrors exactly how open-chat discovery calls gapFill on a SUBSET of chats.
@@ -116126,12 +116932,26 @@ var ChannelClient = class {
       //     real network flap. If a future node-sdk / @larksuite/channel exposes
       //     the ws or attaches its own listener, prefer that and drop the guard.
       handshakeTimeoutMs: 15e3,
-      // Liveness watchdog (SECONDS): if no inbound frame arrives within this
-      // window after the last ping, treat the socket as dead and reconnect —
-      // catches silently half-open connections that never emit a close event.
-      // This IS the 1.64 keepalive fix; the app-level `keepalive` watchdog
-      // option only exists in the split-out @larksuite/channel package, not in
-      // node-sdk's bundled createLarkChannel, so we don't pass it here.
+      // HALF-OPEN DETECTION (SECONDS) — keep this on. It terminates a socket that
+      // has gone half-open (server stopped responding but never sent a FIN/close),
+      // so the SDK's 'close' handler runs the normal reconnect → our gap-fill
+      // recovers anything missed during the dead window.
+      //
+      // This does NOT mis-fire on healthy idle connections. Verified against
+      // node-sdk 1.67.0 source (WSClient liveness):
+      //   - clearLiveness() is called on EVERY inbound frame (incl. the server's
+      //     pong) — a live connection cancels the watchdog within ms, so an
+      //     idle-but-healthy socket that still answers the ~120s server ping is
+      //     never killed.
+      //   - armLiveness() only (re)arms for pingTimeout SECONDS after each ping and
+      //     is a NO-OP when pingTimeout is unset → unsetting it removes half-open
+      //     detection ENTIRELY (no 'close' event → no reconnect → no gap-fill).
+      //     A silently-half-open WS on a KNOWN chat would then drop an @ that
+      //     neither reconnect-gap-fill nor the (now targeted) steady-state
+      //     discovery — which pulls 0 for already-known chats — could recover.
+      //
+      // So this stays as the half-open safety net; the discovery-storm fix is
+      // orthogonal and SAFE precisely because this net still triggers reconnect.
       wsConfig: { pingTimeout: 60 }
     });
     channel.on("message", (msg) => {
@@ -116269,8 +117089,12 @@ var ChannelClient = class {
    *     profile. Reactions are intentionally skipped because gap-fill only needs
    *     message IDs and mentions.
    */
-  async gapFill(disconnectAt, log, chatIdsOverride) {
-    const MAX_GAP_FILL_WINDOW_MS = 5 * 60 * 1e3;
+  async gapFill(disconnectAt, log, chatIdsOverride, minWindowMs) {
+    const MAX_GAP_FILL_WINDOW_MS = Math.min(
+      Math.max(5 * 60 * 1e3, minWindowMs ?? 0),
+      // ≥5 minutes, or the caller's floor
+      UNRESOLVED_WINDOW_MAX_AGE_MS
+    );
     const BUFFER_MS = 3e4;
     const now = Date.now();
     const larkCli = this.opts.larkCliPath ?? "lark-cli";
@@ -116482,14 +117306,23 @@ var ChannelClient = class {
     if (this.openChatDiscoveryTimer) return;
     const intervalMs = resolveOpenChatDiscoveryMs(this.opts.openChatDiscoveryMs);
     if (intervalMs <= 0) return;
-    void this.discoverOpenChatsAndGapFill(log);
-    this.openChatDiscoveryTimer = setInterval(() => {
+    const firstDelay = Math.min(this.openChatDiscoveryJitterMs, intervalMs);
+    const startTimer = setTimeout(() => {
       void this.discoverOpenChatsAndGapFill(log);
-    }, intervalMs);
-    this.openChatDiscoveryTimer.unref?.();
+      this.openChatDiscoveryTimer = setInterval(() => {
+        void this.discoverOpenChatsAndGapFill(log);
+      }, intervalMs);
+      this.openChatDiscoveryTimer.unref?.();
+    }, firstDelay);
+    startTimer.unref?.();
+    this.openChatDiscoveryTimer = startTimer;
   }
   async discoverOpenChatsAndGapFill(log) {
     if (this.closed || this.openChatDiscoveryRunning) return;
+    if (this.openChatDiscoverySkips > 0) {
+      this.openChatDiscoverySkips--;
+      return;
+    }
     this.openChatDiscoveryRunning = true;
     try {
       const larkCli = this.opts.larkCliPath ?? "lark-cli";
@@ -116498,6 +117331,7 @@ var ChannelClient = class {
       let fetched = 0;
       let newlyLearned = 0;
       const discoveredChatIds = /* @__PURE__ */ new Set();
+      const newChatIds = /* @__PURE__ */ new Set();
       for (let page = 0; page < 10 && !this.closed; page++) {
         const args = [
           "im",
@@ -116521,7 +117355,10 @@ var ChannelClient = class {
           discoveredChatIds.add(chatId);
           const before = this.recentlySeenChatIds.size;
           this.noteSeenChat(chatId);
-          if (this.recentlySeenChatIds.size > before) newlyLearned++;
+          if (this.recentlySeenChatIds.size > before) {
+            newlyLearned++;
+            newChatIds.add(chatId);
+          }
         }
         const data = parsed && typeof parsed === "object" ? parsed["data"] : void 0;
         const hasMore = Boolean(
@@ -116535,17 +117372,34 @@ var ChannelClient = class {
           `open-chat discovery: learned ${newlyLearned} new chat(s) (known=${this.recentlySeenChatIds.size}, fetched=${fetched})`
         );
       }
-      if (discoveredChatIds.size > 0) {
-        const lookbackMs = this.openChatDiscoveryBootstrapped ? OPEN_CHAT_DISCOVERY_LOOKBACK_MS : OPEN_CHAT_DISCOVERY_BOOTSTRAP_LOOKBACK_MS;
-        this.openChatDiscoveryBootstrapped = true;
+      const isBootstrap = !this.openChatDiscoveryBootstrapped;
+      const targetChatIds = isBootstrap ? new Set(discoveredChatIds) : /* @__PURE__ */ new Set([
+        ...newChatIds,
+        ...[...discoveredChatIds].filter((c) => this.unresolvedGapWindowByChat.has(c))
+      ]);
+      this.openChatDiscoveryBootstrapped = true;
+      if (targetChatIds.size > 0) {
+        const intervalMs = resolveOpenChatDiscoveryMs(this.opts.openChatDiscoveryMs);
+        const targetedLookbackMs = intervalMs + OPEN_CHAT_DISCOVERY_LOOKBACK_BUFFER_MS;
+        const lookbackMs = isBootstrap ? OPEN_CHAT_DISCOVERY_BOOTSTRAP_LOOKBACK_MS : targetedLookbackMs;
         await this.gapFill(
           Date.now() - lookbackMs,
           log,
-          discoveredChatIds
+          targetChatIds,
+          isBootstrap ? void 0 : targetedLookbackMs
         );
       }
+      this.openChatDiscoveryFailures = 0;
+      this.openChatDiscoverySkips = 0;
     } catch (e) {
-      log(`open-chat discovery failed: ${e instanceof Error ? e.message : String(e)}`);
+      this.openChatDiscoveryFailures = Math.min(
+        this.openChatDiscoveryFailures + 1,
+        OPEN_CHAT_DISCOVERY_MAX_BACKOFF_CYCLES
+      );
+      this.openChatDiscoverySkips = 2 ** (this.openChatDiscoveryFailures - 1);
+      log(
+        `open-chat discovery failed (backing off ${this.openChatDiscoverySkips} cycle(s)): ${e instanceof Error ? e.message : String(e)}`
+      );
     } finally {
       this.openChatDiscoveryRunning = false;
     }
@@ -116621,25 +117475,44 @@ var ChannelClient = class {
     if (this.seenMessageIds.size === before) return;
     void this.persistSeenMessageIds();
   }
-  async persistSeenMessageIds() {
-    const file = this.seenMessagesPath();
-    if (!file) return;
-    const messages = [...this.seenMessageIds].slice(-SEEN_MESSAGES_LIMIT);
+  /**
+   * Atomic JSON write: serialize to a UNIQUE temp file, then `rename` over the
+   * destination. Two concerns motivate this:
+   *   1. Atomicity — `rename` is atomic on a POSIX filesystem, so a reader (or a
+   *      crash) never observes a half-written file. The persist methods are
+   *      fire-and-forget (`void persist…`), so under a multi-bot storm several
+   *      writes to the SAME path can overlap; a plain `writeFile` interleaves
+   *      their bytes → the "Bad control character in string literal" JSON
+   *      corruption we saw. With tmp+rename each write lands whole-or-not-at-all.
+   *   2. Per-write unique tmp name — a fixed `${file}.tmp` would itself be raced
+   *      by two concurrent writers. The pid + monotonic counter suffix gives each
+   *      in-flight write its own tmp so they can't clobber each other before the
+   *      rename. Best-effort cleanup on failure; losing the cache is non-fatal.
+   */
+  async atomicWriteJson(file, value) {
+    const tmp = `${file}.${process.pid}.${this.atomicWriteSeq++}.tmp`;
     try {
       await mkdir(path3.dirname(file), { recursive: true });
-      await writeFile(file, JSON.stringify(messages, null, 2), "utf8");
+      await writeFile(tmp, JSON.stringify(value, null, 2), "utf8");
+      await rename(tmp, file);
     } catch {
+      try {
+        await unlink(tmp);
+      } catch {
+      }
     }
   }
+  async persistSeenMessageIds() {
+    const file = this.seenMessagesPath();
+    if (!file) return;
+    const messages = [...this.seenMessageIds].slice(-SEEN_MESSAGES_LIMIT);
+    await this.atomicWriteJson(file, messages);
+  }
   async persistRecentlySeenChatIds() {
     const file = this.learnedChatsPath();
     if (!file) return;
     const chats = [...this.recentlySeenChatIds].sort().slice(-LEARNED_CHATS_LIMIT);
-    try {
-      await mkdir(path3.dirname(file), { recursive: true });
-      await writeFile(file, JSON.stringify(chats, null, 2), "utf8");
-    } catch {
-    }
+    await this.atomicWriteJson(file, chats);
   }
   async addProcessingReaction(messageId) {
     if (this.processingReactions.has(messageId)) return;
@@ -117200,7 +118073,7 @@ var CardRenderer = class {
 };
 
 // src/claude/sessionStore.ts
-import { rename, readFile as readFile3, writeFile as writeFile2, mkdir as mkdir2, copyFile } from "node:fs/promises";
+import { rename as rename2, readFile as readFile3, writeFile as writeFile2, mkdir as mkdir2, copyFile } from "node:fs/promises";
 import { dirname } from "node:path";
 var STORE_VERSION = 2;
 var TOUCH_DEBOUNCE_MS = 1e3;
@@ -117427,7 +118300,7 @@ var SessionStore = class _SessionStore {
     const tmpPath = `${this.#filePath}.tmp`;
     await mkdir2(dirname(this.#filePath), { recursive: true });
     await writeFile2(tmpPath, json2, "utf8");
-    await rename(tmpPath, this.#filePath);
+    await rename2(tmpPath, this.#filePath);
   }
 };
 function isStoredRecord(value) {
@@ -117438,8 +118311,8 @@ function isStoredRecord(value) {
 
 // src/bridge/handler.ts
 import child_process from "node:child_process";
-import fs7 from "node:fs/promises";
-import path10 from "node:path";
+import fs6 from "node:fs/promises";
+import path9 from "node:path";
 
 // src/lark/message.ts
 var AT_PLACEHOLDER_RE = /@_\w+\s*/g;
@@ -117810,7 +118683,7 @@ function renderStateContract(stateFilePath) {
     "- card_title/card_color: \u517C\u5BB9\u5B57\u6BB5; \u9ED8\u8BA4 CardKit \u4E0D\u6E32\u67D3\u9876\u90E8\u6807\u9898\u8272\u6761,legacy/fallback \u5361\u7247\u8DEF\u5F84\u53EF\u80FD\u4F7F\u7528",
     "- image_blocks: \u53EF\u9009\u56FE\u7247\u9884\u89C8\u5757\u6570\u7EC4,\u6700\u591A 4 \u4E2A\u3002\u6BCF\u9879 `{img_key, alt?, title?, mode?, preview?}`; `img_key` \u5FC5\u987B\u662F\u5DF2\u4E0A\u4F20/\u53EF\u7528\u4E8E\u5361\u7247\u7684 Feishu \u56FE\u7247 key,`alt` \u7701\u7565\u65F6 bridge \u9ED8\u8BA4\u201C\u56FE\u7247\u9884\u89C8\u201D,`mode` \u53EA\u5141\u8BB8 `crop_center`/`fit_horizontal` \u5E76\u6620\u5C04\u5230 Card JSON 2.0 `scale_type`,`preview` \u9ED8\u8BA4 true\u3002bridge \u4E0D\u8D1F\u8D23\u4E0B\u8F7D/\u4E0A\u4F20/\u9009\u62E9\u56FE\u7247;\u8FD9\u4E9B\u7531\u4F60\u7528 lark-cli \u7B49\u5DE5\u5177\u5148\u5B8C\u6210\u3002",
     '- content_blocks: \u53EF\u9009\u6709\u5E8F\u6B63\u6587\u5757\u6570\u7EC4,\u6700\u591A 12 \u4E2A block\u3001\u6700\u591A 4 \u4E2A image block\u3002\u53EA\u652F\u6301\u7A84 union:`{type:"markdown", content}` \u548C `{type:"image", img_key, alt?, title?, mode?, preview?}`;\u4E0D\u652F\u6301 raw card JSON\u3002\u7528\u4E8E\u6B63\u6587\u4E0E\u56FE\u7247\u4EA4\u9519\u6392\u7248,\u4F8B\u5982 markdown -> image -> markdown -> image\u3002\u82E5 `content_blocks` \u975E\u7A7A,bridge \u4EE5\u5B83\u4F5C\u4E3A\u4E3B\u6B63\u6587\u5E76\u5FFD\u7565 `last_message` + `image_blocks` \u7684\u6B63\u6587\u6E32\u67D3,\u907F\u514D\u91CD\u590D;\u82E5\u7701\u7565\u5219\u4FDD\u6301\u65E7 `last_message` + `image_blocks` \u884C\u4E3A\u3002',
-    '- response_surface: \u53EF\u9009\u8986\u76D6\u5B57\u6BB5,\u5F62\u5982 `{mode:"card"|"post"|"hybrid", primary?:"card"|"post", post?:{mentions:[{user_id,label?}]}, card?:{compact?:boolean, capabilities?:[...]}}`\u3002\u9ED8\u8BA4\u53EF\u4E0D\u5199;\u65E0\u663E\u5F0F card \u610F\u56FE\u65F6 bridge \u6309 CardKit \u6D41\u5F0F\u5361\u7247\u5904\u7406,\u6700\u7EC8\u6536\u6210\u5E72\u51C0\u603B\u7ED3\u5361\u3002\u9700\u8981\u771F\u5B9E @ \u65F6\u628A\u76EE\u6807\u5199\u5165 `post.mentions`;\u4E0D\u8981\u5199 raw Feishu post/card JSON\u3002',
+    "- response_surface: \u53EF\u9009\u8986\u76D6\u5B57\u6BB5,\u4E3B\u8981\u7528\u4E8E `{post:{mentions:[{user_id,label?}]}}` late peer @\u3002\u9ED8\u8BA4\u53EF\u4E0D\u5199;bridge \u6309 CardKit \u6D41\u5F0F\u5361\u7247\u5904\u7406,\u6700\u7EC8\u6536\u6210\u5E72\u51C0\u603B\u7ED3\u5361\u3002\u65E7 `mode`/`primary` \u4EC5\u517C\u5BB9\u89E3\u6790,\u4E0D\u518D\u9009\u62E9 post-only/hybrid \u4E3B\u54CD\u5E94\u9762\u3002\u9700\u8981\u771F\u5B9E @ \u65F6\u628A\u76EE\u6807\u5199\u5165 `post.mentions`;\u4E0D\u8981\u5199 raw Feishu post/card JSON\u3002",
     "- scheduled reply / daily social ops review card \u7B49\u9700\u8981\u201C\u5E73\u53F0\u6B63\u6587 + \u5339\u914D\u56FE\u7247\u201D\u540C\u6BB5\u76F8\u90BB\u5C55\u793A\u7684\u573A\u666F,\u5E94\u5148\u53D6\u5F97\u5404\u56FE\u7247 `img_key`,\u518D\u5199 `content_blocks` \u4E3A `\u5E73\u53F0 markdown -> \u5BF9\u5E94 image -> \u4E0B\u4E2A\u5E73\u53F0 markdown -> \u5BF9\u5E94 image`;\u4E0D\u8981\u7528\u5355\u72EC\u8BDD\u9898\u56FE\u7247\u6D88\u606F\u6216\u5C3E\u90E8 `image_blocks` \u4EE3\u66FF\u9A8C\u6536\u9762\u3002",
     "- dev_url / mr_url / \u5176\u4F59\u4E1A\u52A1\u5B57\u6BB5:\u81EA\u7531\u5199\u5165,bridge \u4E0D\u611F\u77E5\u5176\u4E1A\u52A1\u542B\u4E49;\u8981\u8BA9\u8FD0\u8425\u770B\u5230,\u8BF7\u5199\u8FDB last_message",
     "- updated_at: ISO 8601 timestamp",
@@ -118622,17 +119495,11 @@ function defaultResponseSurfacePrototypeConfig() {
     enabled: true,
     allowed_chats: [],
     allowed_threads: [],
-    lazy_card_creation: true,
     kill_switch: false,
     post_outbound_enabled: true,
     cardkit_streaming_enabled: true,
     allow_agent_mentions: true,
-    allowed_mention_open_ids: [],
-    max_posts_per_turn: 1,
-    max_posts_per_window: 4,
-    post_window_ms: 6e4,
-    max_post_attempts: 3,
-    text_threshold_chars: 1200
+    allowed_mention_open_ids: []
   };
 }
 var DEFAULT_RESPONSE_SURFACE_PROTOTYPE = defaultResponseSurfacePrototypeConfig();
@@ -118640,17 +119507,11 @@ var responseSurfacePrototypeConfigDefaults = () => ({
   enabled: true,
   allowed_chats: [],
   allowed_threads: [],
-  lazy_card_creation: true,
   kill_switch: false,
   post_outbound_enabled: true,
   cardkit_streaming_enabled: true,
   allow_agent_mentions: true,
-  allowed_mention_open_ids: [],
-  max_posts_per_turn: 1,
-  max_posts_per_window: 4,
-  post_window_ms: 6e4,
-  max_post_attempts: 3,
-  text_threshold_chars: 1200
+  allowed_mention_open_ids: []
 });
 var ResponseSurfaceModeSchema = external_exports.enum(["card", "post", "hybrid"]);
 var ResponseSurfacePrimarySchema = external_exports.enum(["card", "post"]);
@@ -118707,12 +119568,6 @@ var ResponseSurfacePrototypeConfigSchema = external_exports.object({
    * all threads are allowed by this gate.
    */
   allowed_threads: external_exports.array(external_exports.string().min(1)).default([]),
-  /**
-   * Post-first gate. Default true means the bridge starts a lightweight post
-   * as the live main surface when post outbound is available, and creates a
-   * card only for fallback or card-only capabilities.
-   */
-  lazy_card_creation: external_exports.boolean().default(true),
   /**
    * Runtime kill switch for emergency rollback. When true, every response
    * surface post path is treated as disabled even if enabled/allowlists are
@@ -118720,8 +119575,8 @@ var ResponseSurfacePrototypeConfigSchema = external_exports.object({
    */
   kill_switch: external_exports.boolean().default(false),
   /**
-   * Gate for real post outbound. Defaults on, but the runtime still requires
-   * an injected post client and all safety gates before any post path.
+   * Gate for real post outbound. Defaults on so create-only visible fallback
+   * posts remain available when CardKit and legacy card rendering both fail.
    */
   post_outbound_enabled: external_exports.boolean().default(true),
   /**
@@ -118741,32 +119596,7 @@ var ResponseSurfacePrototypeConfigSchema = external_exports.object({
    * may choose mention targets; non-empty narrows mentions to this exact set.
    * Keep real IDs in private bot config, never in public docs/tests.
    */
-  allowed_mention_open_ids: external_exports.array(external_exports.string().min(1)).default([]),
-  /**
-   * Hard cap for surface dispatch. PR4 still keeps production post outbound
-   * unavailable, but fake-channel dispatch tests enforce this bounded shape.
-   */
-  max_posts_per_turn: external_exports.number().int().min(0).max(10).default(1),
-  /**
-   * Sliding-window hard cap for real post sends within one bot/chat/thread
-   * runtime scope. This is enforced in the production handler before a post
-   * transport call is attempted; exhausted windows degrade to visible cards.
-   */
-  max_posts_per_window: external_exports.number().int().min(0).max(100).default(4),
-  /**
-   * Sliding-window duration for max_posts_per_window.
-   */
-  post_window_ms: external_exports.number().int().min(1e3).max(864e5).default(6e4),
-  /**
-   * Max attempts for one logical post. Retry classification is intentionally
-   * narrow in PR3: only 5xx errors are retryable.
-   */
-  max_post_attempts: external_exports.number().int().min(1).max(5).default(3),
-  /**
-   * Future channel threshold for lazy card creation. Bounded so config cannot
-   * grow unbounded or encode business rules.
-   */
-  text_threshold_chars: external_exports.number().int().min(1).max(2e4).default(1200)
+  allowed_mention_open_ids: external_exports.array(external_exports.string().min(1)).default([])
 }).default(responseSurfacePrototypeConfigDefaults);
 function isResponseSurfacePrototypeAllowlisted(config, facts) {
   if (!config?.enabled) return false;
@@ -118785,7 +119615,7 @@ function isResponseSurfaceMentionAllowed(config, userId) {
   return config.allowed_mention_open_ids.includes(userId);
 }
 function shouldProvideResponseSurfacePostClient(config) {
-  return !!(config?.enabled && !config.kill_switch && config.post_outbound_enabled && config.max_posts_per_turn >= 1 && config.max_posts_per_window >= 1);
+  return !!(config?.enabled && !config.kill_switch && config.post_outbound_enabled);
 }
 function shouldProvideResponseSurfaceCardKitClient(config) {
   return !!(config?.enabled && !config.kill_switch && config.cardkit_streaming_enabled);
@@ -118793,9 +119623,6 @@ function shouldProvideResponseSurfaceCardKitClient(config) {
 function isResponseSurfaceCardKitAvailable(config, facts, opts) {
   return !!(opts.cardKitClientAvailable && shouldProvideResponseSurfaceCardKitClient(config) && isResponseSurfacePrototypeAllowlisted(config, facts));
 }
-function isResponseSurfacePostOutboundAvailable(config, facts, opts) {
-  return !!(opts.postClientAvailable && shouldProvideResponseSurfacePostClient(config) && isResponseSurfacePrototypeAllowlisted(config, facts));
-}
 
 // src/bridge/stateFile.ts
 var optionalUrl = external_exports.preprocess(
@@ -119755,93 +120582,6 @@ async function finalizeExistingCardKitCard(opts) {
   return sequence;
 }
 
-// src/bridge/surfaceController.ts
-var SurfaceController = class _SurfaceController {
-  decision;
-  constructor(decision) {
-    this.decision = decision;
-  }
-  static create(input) {
-    const cfg = input.prototypeConfig;
-    if (!cfg?.enabled) {
-      return new _SurfaceController({
-        startCardImmediately: true,
-        prototypeEnabled: false,
-        lazyCardCreationEnabled: false,
-        reason: "prototype-disabled"
-      });
-    }
-    if (cfg.kill_switch) {
-      return new _SurfaceController({
-        startCardImmediately: true,
-        prototypeEnabled: false,
-        lazyCardCreationEnabled: false,
-        reason: "kill-switch-active"
-      });
-    }
-    if (!isResponseSurfacePrototypeAllowlisted(cfg, {
-      chatId: input.chatId,
-      threadId: input.threadId
-    })) {
-      return new _SurfaceController({
-        startCardImmediately: true,
-        prototypeEnabled: false,
-        lazyCardCreationEnabled: false,
-        reason: "not-allowlisted"
-      });
-    }
-    if (!cfg.lazy_card_creation) {
-      return new _SurfaceController({
-        startCardImmediately: true,
-        prototypeEnabled: true,
-        lazyCardCreationEnabled: false,
-        reason: "lazy-card-disabled"
-      });
-    }
-    if (!cfg.post_outbound_enabled) {
-      return new _SurfaceController({
-        startCardImmediately: true,
-        prototypeEnabled: true,
-        lazyCardCreationEnabled: false,
-        reason: "post-outbound-disabled"
-      });
-    }
-    if (!input.postOutboundAvailable) {
-      return new _SurfaceController({
-        startCardImmediately: true,
-        prototypeEnabled: true,
-        lazyCardCreationEnabled: false,
-        reason: "post-outbound-unavailable-card-fallback"
-      });
-    }
-    if (input.postLedgerAvailable === false) {
-      return new _SurfaceController({
-        startCardImmediately: true,
-        prototypeEnabled: true,
-        lazyCardCreationEnabled: false,
-        reason: "post-ledger-unavailable-card-fallback"
-      });
-    }
-    if (input.visibleFallbackAvailable === false) {
-      return new _SurfaceController({
-        startCardImmediately: true,
-        prototypeEnabled: true,
-        lazyCardCreationEnabled: false,
-        reason: "visible-fallback-unavailable-card-fallback"
-      });
-    }
-    return new _SurfaceController({
-      startCardImmediately: false,
-      prototypeEnabled: true,
-      lazyCardCreationEnabled: true,
-      reason: "lazy-card-ready"
-    });
-  }
-  shouldStartCardImmediately() {
-    return this.decision.startCardImmediately;
-  }
-};
-
 // src/lark/postContent.ts
 function assertSafeUserId(userId) {
   if (!/^[A-Za-z0-9_:-]+$/.test(userId)) {
@@ -119918,853 +120658,6 @@ function derivePostIdempotencyKey(input) {
   return key;
 }
 
-// src/bridge/postFile.ts
-import fs6 from "node:fs/promises";
-import path9 from "node:path";
-var PostLedgerStatusSchema = external_exports.enum([
-  "planned",
-  "pending",
-  "sent",
-  "failed",
-  "fallback_visible",
-  "policy_blocked"
-]);
-var POST_LEDGER_TRANSITIONS = {
-  planned: ["pending", "fallback_visible", "policy_blocked"],
-  pending: ["sent", "failed", "fallback_visible", "policy_blocked"],
-  sent: [],
-  failed: ["fallback_visible"],
-  fallback_visible: [],
-  policy_blocked: []
-};
-function canTransitionPostStatus(from, to) {
-  return from === to || POST_LEDGER_TRANSITIONS[from].includes(to);
-}
-function assertPostStatusTransition(from, to) {
-  if (!canTransitionPostStatus(from, to)) {
-    throw new Error(`invalid post ledger transition: ${from} -> ${to}`);
-  }
-}
-var PostAttemptSchema = external_exports.object({
-  attemptedAt: external_exports.string(),
-  status: external_exports.enum(["sent", "failed"]),
-  retryable: external_exports.boolean().default(false),
-  error: external_exports.string().optional(),
-  code: external_exports.string().optional()
-});
-var PostLedgerEntrySchema = external_exports.object({
-  idempotencyKey: external_exports.string().min(1).max(64),
-  status: PostLedgerStatusSchema,
-  botId: external_exports.string().min(1),
-  chatId: external_exports.string().min(1),
-  threadId: external_exports.string().min(1),
-  replyToMessageId: external_exports.string().min(1),
-  role: external_exports.enum(["primary", "secondary", "fallback"]),
-  logicalIndex: external_exports.number().int().nonnegative(),
-  contentDigest: external_exports.string().min(1),
-  mentionCount: external_exports.number().int().nonnegative().default(0),
-  postMessageId: external_exports.string().optional(),
-  fallbackCardMessageId: external_exports.string().optional(),
-  error: external_exports.string().optional(),
-  attempts: external_exports.array(PostAttemptSchema).default([]),
-  createdAt: external_exports.string(),
-  updatedAt: external_exports.string()
-});
-var PostFileSchema = external_exports.object({
-  version: external_exports.literal(1),
-  posts: external_exports.array(PostLedgerEntrySchema).max(50)
-});
-function emptyPostFile() {
-  return { version: 1, posts: [] };
-}
-function summarizePostLedger(data) {
-  const summary = {
-    total: 0,
-    planned: 0,
-    pending: 0,
-    sent: 0,
-    failed: 0,
-    fallback_visible: 0,
-    policy_blocked: 0,
-    withPostMessageId: 0,
-    withFallbackCardMessageId: 0
-  };
-  for (const post of data?.posts ?? []) {
-    summary.total += 1;
-    summary[post.status] += 1;
-    if (post.postMessageId) summary.withPostMessageId += 1;
-    if (post.fallbackCardMessageId) summary.withFallbackCardMessageId += 1;
-  }
-  return summary;
-}
-function postDirOf(worktreePath) {
-  return path9.join(worktreePath, ".larkway");
-}
-function postFilePathOf(worktreePath) {
-  return path9.join(postDirOf(worktreePath), "post.json");
-}
-async function readPostFile(worktreePath) {
-  const file = postFilePathOf(worktreePath);
-  let raw;
-  try {
-    raw = await fs6.readFile(file, "utf8");
-  } catch (err) {
-    if (err.code === "ENOENT") return null;
-    console.warn(`[postFile] read ${file} failed:`, err);
-    return null;
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch (err) {
-    console.warn(`[postFile] ${file} not valid JSON:`, err);
-    return null;
-  }
-  const result = PostFileSchema.safeParse(parsed);
-  if (!result.success) {
-    console.warn(`[postFile] ${file} failed schema validation:`, result.error.issues);
-    return null;
-  }
-  return result.data;
-}
-async function writePostFile(worktreePath, data) {
-  const dir = postDirOf(worktreePath);
-  const file = postFilePathOf(worktreePath);
-  await fs6.mkdir(dir, { recursive: true });
-  const parsed = PostFileSchema.parse(data);
-  const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
-  await fs6.writeFile(tmp, JSON.stringify(parsed, null, 2), "utf8");
-  try {
-    await fs6.rename(tmp, file);
-  } catch (err) {
-    await fs6.rm(tmp, { force: true }).catch(() => {
-    });
-    throw err;
-  }
-}
-async function upsertPostLedgerEntry(worktreePath, entry) {
-  const existing = await readPostFile(worktreePath) ?? emptyPostFile();
-  const idx = existing.posts.findIndex((p) => p.idempotencyKey === entry.idempotencyKey);
-  const nextPosts = [...existing.posts];
-  if (idx >= 0) {
-    assertPostStatusTransition(nextPosts[idx].status, entry.status);
-    nextPosts[idx] = entry;
-  } else {
-    nextPosts.push(entry);
-  }
-  const next = { version: 1, posts: nextPosts };
-  await writePostFile(worktreePath, next);
-  return next;
-}
-var DEFAULT_POST_RECONCILE_MIN_AGE_MS = 6e4;
-function timestampAgeMs(iso, nowMs) {
-  if (!Number.isFinite(nowMs)) return null;
-  const then = Date.parse(iso);
-  if (!Number.isFinite(then)) return null;
-  return nowMs - then;
-}
-function reconcilePostEntry(entry, opts) {
-  if (entry.botId !== opts.botId) {
-    return { entry, changed: false, sent: false, needsVisibleFallback: false };
-  }
-  if (entry.status === "sent" || entry.status === "fallback_visible" || entry.status === "policy_blocked") {
-    return { entry, changed: false, sent: false, needsVisibleFallback: false };
-  }
-  const now = opts.now();
-  const ageMs = timestampAgeMs(entry.updatedAt, Date.parse(now));
-  if (ageMs == null || ageMs < opts.minAgeMs) {
-    return { entry, changed: false, sent: false, needsVisibleFallback: false };
-  }
-  if (entry.postMessageId) {
-    return {
-      entry: {
-        ...entry,
-        status: "sent",
-        error: void 0,
-        updatedAt: now,
-        attempts: [
-          ...entry.attempts,
-          {
-            attemptedAt: now,
-            status: "sent",
-            retryable: false
-          }
-        ]
-      },
-      changed: true,
-      sent: true,
-      needsVisibleFallback: false
-    };
-  }
-  return {
-    entry,
-    changed: false,
-    sent: false,
-    needsVisibleFallback: true
-  };
-}
-function reconcilePostLedgerEntries(data, opts) {
-  const normalizedOpts = {
-    botId: opts.botId,
-    minAgeMs: opts.minAgeMs ?? DEFAULT_POST_RECONCILE_MIN_AGE_MS,
-    now: opts.now ?? (() => (/* @__PURE__ */ new Date()).toISOString())
-  };
-  let sent = 0;
-  const fallbackVisible = 0;
-  let needsVisibleFallback = 0;
-  let skippedLive = 0;
-  const visibleFallbackCandidates = [];
-  const posts = data.posts.map((post) => {
-    const reconciled = reconcilePostEntry(post, normalizedOpts);
-    if (reconciled.changed) {
-      if (reconciled.sent) sent += 1;
-    } else if (reconciled.needsVisibleFallback) {
-      needsVisibleFallback += 1;
-      visibleFallbackCandidates.push(reconciled.entry);
-    } else if (post.botId === normalizedOpts.botId && (post.status === "planned" || post.status === "pending" || post.status === "failed")) {
-      skippedLive += 1;
-    }
-    return reconciled.entry;
-  });
-  const changed = sent > 0 || fallbackVisible > 0;
-  return {
-    file: changed ? { version: 1, posts } : data,
-    result: { changed, sent, fallbackVisible, needsVisibleFallback, skippedLive },
-    visibleFallbackCandidates
-  };
-}
-async function reconcilePostFileOrphans(worktreePath, opts) {
-  const existing = await readPostFile(worktreePath);
-  if (!existing) {
-    return {
-      changed: false,
-      sent: 0,
-      fallbackVisible: 0,
-      needsVisibleFallback: 0,
-      skippedLive: 0,
-      visibleFallbackCandidates: []
-    };
-  }
-  const { file, result, visibleFallbackCandidates } = reconcilePostLedgerEntries(existing, opts);
-  if (result.changed) {
-    await writePostFile(worktreePath, file);
-  }
-  return { ...result, visibleFallbackCandidates };
-}
-async function markPostLedgerFallbackVisible(worktreePath, idempotencyKey2, opts) {
-  const existing = await readPostFile(worktreePath) ?? emptyPostFile();
-  const idx = existing.posts.findIndex((post) => post.idempotencyKey === idempotencyKey2);
-  if (idx < 0) {
-    throw new Error(`post ledger entry not found: ${idempotencyKey2}`);
-  }
-  const current = existing.posts[idx];
-  assertPostStatusTransition(current.status, "fallback_visible");
-  const now = opts.now?.() ?? (/* @__PURE__ */ new Date()).toISOString();
-  const nextPosts = [...existing.posts];
-  nextPosts[idx] = {
-    ...current,
-    status: "fallback_visible",
-    fallbackCardMessageId: opts.fallbackCardMessageId,
-    error: opts.error,
-    updatedAt: now,
-    attempts: [
-      ...current.attempts,
-      {
-        attemptedAt: now,
-        status: "failed",
-        retryable: false,
-        code: "orphan_reconcile",
-        error: opts.error
-      }
-    ]
-  };
-  const next = { version: 1, posts: nextPosts };
-  await writePostFile(worktreePath, next);
-  return next;
-}
-async function markPostLedgerPolicyBlockedVisible(worktreePath, idempotencyKey2, opts) {
-  const existing = await readPostFile(worktreePath) ?? emptyPostFile();
-  const idx = existing.posts.findIndex((post) => post.idempotencyKey === idempotencyKey2);
-  if (idx < 0) {
-    throw new Error(`post ledger entry not found: ${idempotencyKey2}`);
-  }
-  const current = existing.posts[idx];
-  assertPostStatusTransition(current.status, "policy_blocked");
-  const now = opts.now?.() ?? (/* @__PURE__ */ new Date()).toISOString();
-  const nextPosts = [...existing.posts];
-  nextPosts[idx] = {
-    ...current,
-    status: "policy_blocked",
-    fallbackCardMessageId: opts.fallbackCardMessageId,
-    error: opts.error,
-    updatedAt: now,
-    attempts: [
-      ...current.attempts,
-      {
-        attemptedAt: now,
-        status: "failed",
-        retryable: false,
-        code: "mention_policy_blocked",
-        error: opts.error
-      }
-    ]
-  };
-  const next = { version: 1, posts: nextPosts };
-  await writePostFile(worktreePath, next);
-  return next;
-}
-
-// src/bridge/surfaceDispatcher.ts
-function fullCard(input, reason) {
-  return {
-    card: input.baseCard,
-    reason,
-    visible: input.cardStarted || input.visibleFallbackAvailable
-  };
-}
-function hasCardOnlyPayload(state) {
-  return !!(state?.choices?.length || state?.image_blocks?.length || state?.content_blocks?.length);
-}
-function hasCardOnlyPayloadIn(input) {
-  return !!(hasCardOnlyPayload(input.state) || input.baseCard.choices?.length || input.baseCard.imageBlocks?.length || input.baseCard.contentBlocks?.length);
-}
-function compactAuditCard(input, post) {
-  const status = input.state?.status ?? (input.baseCard.success ? "ready" : "failed");
-  const title = input.baseCard.titleOverride ?? "Post \u5DF2\u53D1\u9001";
-  return {
-    success: input.baseCard.success,
-    failureReason: input.baseCard.failureReason,
-    titleOverride: title,
-    colorOverride: input.baseCard.colorOverride ?? "neutral",
-    finalText: `\u4E3B\u56DE\u590D\u5DF2\u901A\u8FC7 post \u53D1\u51FA\u3002
-status: ${status}
-post_message_id: ${post.messageId}
-idempotency_key: ${post.idempotencyKey}`
-  };
-}
-function fallbackFailureCard(input, error) {
-  const reason = error instanceof Error ? error.message : String(error);
-  return {
-    ...input.baseCard,
-    success: false,
-    failureReason: `post outbound failed; visible card fallback used: ${reason}`
-  };
-}
-function policyBlockedCard(input) {
-  return {
-    ...input.baseCard,
-    success: false,
-    failureReason: "response_surface post mention target is blocked by policy; visible card fallback used"
-  };
-}
-function postText(input) {
-  const text = input.baseCard.finalText?.trim() || input.state?.last_message?.trim();
-  if (text) return text;
-  if (input.baseCard.success) return "\u5B8C\u6210";
-  return input.baseCard.failureReason ?? "\u6267\u884C\u5931\u8D25";
-}
-function postRole(input) {
-  const surface = input.state?.response_surface;
-  if (surface?.mode === "hybrid") return "primary";
-  return "primary";
-}
-function newLedgerEntry(input) {
-  return {
-    idempotencyKey: input.idempotencyKey,
-    status: input.status,
-    botId: input.facts.botId,
-    chatId: input.facts.chatId,
-    threadId: input.facts.threadId,
-    replyToMessageId: input.facts.replyToMessageId,
-    role: input.role,
-    logicalIndex: input.logicalIndex,
-    contentDigest: input.contentDigest,
-    mentionCount: input.mentionCount,
-    postMessageId: input.postMessageId,
-    error: input.error,
-    attempts: input.attempts ?? [],
-    createdAt: input.now,
-    updatedAt: input.now
-  };
-}
-async function writeLedger(input, entry) {
-  if (!input.worktreePath) return;
-  await upsertPostLedgerEntry(input.worktreePath, entry);
-}
-async function existingLedgerEntry(input, idempotencyKey2) {
-  if (!input.worktreePath) return null;
-  const ledger = await readPostFile(input.worktreePath);
-  return ledger?.posts.find((post) => post.idempotencyKey === idempotencyKey2) ?? null;
-}
-function sentResult(input, surface, post, reason) {
-  if (hasCardOnlyPayloadIn(input)) {
-    return {
-      card: input.baseCard,
-      reason: "post-sent-card-capability-required",
-      visible: true,
-      post
-    };
-  }
-  if (surface.mode === "hybrid" || input.cardStarted) {
-    return {
-      card: compactAuditCard(input, post),
-      reason: reason === "post-ledger-already-sent" ? "post-ledger-already-sent" : surface.mode === "hybrid" ? "hybrid-post-sent-compact-card" : reason,
-      visible: true,
-      post
-    };
-  }
-  return {
-    card: null,
-    reason,
-    visible: true,
-    post
-  };
-}
-async function ledgerSummaryFor(input) {
-  if (!input.worktreePath) return summarizePostLedger(null);
-  return summarizePostLedger(await readPostFile(input.worktreePath));
-}
-function emitSurfaceObservation(input) {
-  console.log(
-    "[response_surface.dispatch]",
-    JSON.stringify({
-      event: "response_surface.dispatch",
-      botId: input.facts.botId,
-      chatId: input.facts.chatId,
-      threadId: input.facts.threadId,
-      reason: input.result.reason,
-      visible: input.result.visible,
-      hasCard: !!input.result.card,
-      hasPost: !!input.result.post,
-      postMessageIdPresent: !!input.result.post?.messageId,
-      budget: input.result.budget ? {
-        allowed: input.result.budget.allowed,
-        used: input.result.budget.used,
-        limit: input.result.budget.limit,
-        windowMs: input.result.budget.windowMs,
-        resetAt: input.result.budget.resetAt,
-        reason: input.result.budget.reason
-      } : void 0,
-      ledger: input.ledger,
-      durationMs: input.durationMs
-    })
-  );
-}
-async function dispatchResponseSurfaceInner(input) {
-  const declaredSurface = input.state?.response_surface;
-  if (declaredSurface?.mode === "card" || declaredSurface?.primary === "card") {
-    return fullCard(input, "legacy-card-mode");
-  }
-  const surface = declaredSurface ?? { mode: "post", primary: "post" };
-  const cfg = input.prototypeConfig;
-  if (!cfg?.enabled) return fullCard(input, "prototype-disabled");
-  if (cfg.kill_switch) return fullCard(input, "kill-switch-active");
-  if (!isResponseSurfacePrototypeAllowlisted(cfg, {
-    chatId: input.facts.chatId,
-    threadId: input.facts.threadId
-  })) {
-    return fullCard(input, "not-allowlisted");
-  }
-  if (!cfg.post_outbound_enabled) return fullCard(input, "post-outbound-disabled");
-  if (cfg.max_posts_per_turn < 1) return fullCard(input, "post-outbound-disabled");
-  if (cfg.max_posts_per_window < 1) return fullCard(input, "post-rate-limit-exhausted");
-  if (!input.postOutboundAvailable || !input.postClient) {
-    return fullCard(input, "post-outbound-unavailable");
-  }
-  if (!input.visibleFallbackAvailable) {
-    return fullCard(input, "visible-fallback-unavailable");
-  }
-  if (!input.postLedgerAvailable || !input.worktreePath) {
-    return fullCard(input, "post-ledger-unavailable");
-  }
-  const mentions = surface.post?.mentions ?? [];
-  const blockedMention = mentions.find(
-    (mention) => !isResponseSurfaceMentionAllowed(cfg, mention.user_id)
-  );
-  const text = postText(input);
-  const policyDigest = digestPostContent(text);
-  const role = postRole(input);
-  const logicalIndex = 0;
-  const policyIdempotencyKey = derivePostIdempotencyKey({
-    botId: input.facts.botId,
-    threadId: input.facts.threadId,
-    triggerMessageId: input.facts.triggerMessageId,
-    role,
-    logicalIndex,
-    contentDigest: policyDigest
-  });
-  const now = input.now?.() ?? (/* @__PURE__ */ new Date()).toISOString();
-  if (blockedMention) {
-    const policyError = `mention target is not allowed by response surface policy: ${blockedMention.user_id}`;
-    if (input.livePost) {
-      try {
-        await input.postClient.updatePost(input.livePost.messageId, buildPostContent({ text }));
-      } catch (err) {
-        console.warn(
-          "[surface_dispatch] live post policy-blocked cleanup update failed:",
-          err
-        );
-      }
-    }
-    await writeLedger(
-      input,
-      newLedgerEntry({
-        status: "planned",
-        idempotencyKey: policyIdempotencyKey,
-        now,
-        facts: input.facts,
-        role,
-        logicalIndex,
-        contentDigest: policyDigest,
-        mentionCount: mentions.length,
-        error: policyError
-      })
-    );
-    return {
-      card: policyBlockedCard(input),
-      reason: "mention-policy-blocked",
-      visible: true,
-      post: {
-        idempotencyKey: policyIdempotencyKey,
-        role,
-        requiresPolicyLedgerMark: true,
-        policyError
-      }
-    };
-  }
-  const content = buildPostContent({
-    text,
-    mentions: mentions.map((mention) => ({
-      userId: mention.user_id,
-      label: mention.label
-    }))
-  });
-  const contentDigest = digestPostContent(content);
-  const idempotencyKey2 = input.livePost?.idempotencyKey ?? derivePostIdempotencyKey({
-    botId: input.facts.botId,
-    threadId: input.facts.threadId,
-    triggerMessageId: input.facts.triggerMessageId,
-    role,
-    logicalIndex,
-    contentDigest
-  });
-  const existing = await existingLedgerEntry(input, idempotencyKey2);
-  if (existing?.status === "sent" && existing.postMessageId) {
-    return sentResult(
-      input,
-      surface,
-      { idempotencyKey: idempotencyKey2, messageId: existing.postMessageId, role },
-      "post-ledger-already-sent"
-    );
-  }
-  if (existing?.status === "sent") {
-    return fullCard(input, "post-orphan-reconciled-fallback-card");
-  }
-  if (existing?.status === "fallback_visible") {
-    return {
-      card: fallbackFailureCard(
-        input,
-        existing.error ?? "post ledger already reconciled to visible fallback"
-      ),
-      reason: "post-orphan-reconciled-fallback-card",
-      visible: true,
-      post: { idempotencyKey: idempotencyKey2, role }
-    };
-  }
-  if (existing?.status === "policy_blocked") {
-    return {
-      card: policyBlockedCard(input),
-      reason: "mention-policy-blocked",
-      visible: true,
-      post: { idempotencyKey: idempotencyKey2, role }
-    };
-  }
-  if (existing) {
-    const error = existing.status === "failed" && existing.error ? existing.error : "orphaned post ledger entry reconciled without resend; visible card fallback used";
-    return {
-      card: fallbackFailureCard(input, error),
-      reason: "post-orphan-reconciled-fallback-card",
-      visible: true,
-      post: {
-        idempotencyKey: idempotencyKey2,
-        role,
-        requiresFallbackLedgerMark: true,
-        fallbackError: error
-      }
-    };
-  }
-  const budget = input.livePost ? void 0 : input.postBudget?.reserve();
-  if (budget && !budget.allowed) {
-    return {
-      ...fullCard(input, "post-rate-limit-exhausted"),
-      budget
-    };
-  }
-  await writeLedger(
-    input,
-    newLedgerEntry({
-      status: "planned",
-      idempotencyKey: idempotencyKey2,
-      now,
-      facts: input.facts,
-      role,
-      logicalIndex,
-      contentDigest,
-      mentionCount: mentions.length
-    })
-  );
-  await writeLedger(
-    input,
-    newLedgerEntry({
-      status: "pending",
-      idempotencyKey: idempotencyKey2,
-      now,
-      facts: input.facts,
-      role,
-      logicalIndex,
-      contentDigest,
-      mentionCount: mentions.length
-    })
-  );
-  try {
-    const sent = input.livePost ? await input.postClient.updatePost(input.livePost.messageId, content) : await input.postClient.createPostReply(input.facts.replyToMessageId, content, {
-      replyInThread: input.facts.replyInThread,
-      idempotencyKey: idempotencyKey2
-    });
-    await writeLedger(
-      input,
-      newLedgerEntry({
-        status: "sent",
-        idempotencyKey: idempotencyKey2,
-        now: input.now?.() ?? (/* @__PURE__ */ new Date()).toISOString(),
-        facts: input.facts,
-        role,
-        logicalIndex,
-        contentDigest,
-        mentionCount: mentions.length,
-        postMessageId: sent.messageId,
-        attempts: [
-          {
-            attemptedAt: input.now?.() ?? (/* @__PURE__ */ new Date()).toISOString(),
-            status: "sent",
-            retryable: false
-          }
-        ]
-      })
-    );
-    const post = { idempotencyKey: idempotencyKey2, messageId: sent.messageId, role };
-    return {
-      ...sentResult(input, surface, post, input.livePost ? "post-updated" : "post-sent"),
-      budget
-    };
-  } catch (err) {
-    const failedAt = input.now?.() ?? (/* @__PURE__ */ new Date()).toISOString();
-    const error = err instanceof Error ? err.message : String(err);
-    await writeLedger(
-      input,
-      newLedgerEntry({
-        status: "failed",
-        idempotencyKey: idempotencyKey2,
-        now: failedAt,
-        facts: input.facts,
-        role,
-        logicalIndex,
-        contentDigest,
-        mentionCount: mentions.length,
-        error,
-        attempts: [
-          {
-            attemptedAt: failedAt,
-            status: "failed",
-            retryable: false,
-            error
-          }
-        ]
-      })
-    );
-    return {
-      card: fallbackFailureCard(input, err),
-      reason: "post-failed-fallback-card",
-      visible: true,
-      post: {
-        idempotencyKey: idempotencyKey2,
-        role,
-        requiresFallbackLedgerMark: true,
-        fallbackError: error
-      },
-      budget
-    };
-  }
-}
-async function dispatchResponseSurface(input) {
-  const startedAt = Date.now();
-  const result = await dispatchResponseSurfaceInner(input);
-  const ledger = await ledgerSummaryFor(input);
-  emitSurfaceObservation({
-    facts: input.facts,
-    result,
-    ledger,
-    durationMs: Date.now() - startedAt
-  });
-  return result;
-}
-
-// src/bridge/postProgress.ts
-var DEFAULT_PLACEHOLDER_TEXT = "\u52AA\u529B\u56DE\u7B54\u4E2D...";
-var DEFAULT_PATCH_INTERVAL_MS2 = 1500;
-var DEFAULT_MAX_PROGRESS_EDITS = 16;
-function normalizeText2(text) {
-  return text.replace(/\r\n/g, "\n").trim();
-}
-function progressText(raw, fallback) {
-  const text = normalizeText2(raw);
-  if (!text) return fallback;
-  return text.length > 3500 ? `${text.slice(0, 3500)}
-
-_\u5904\u7406\u4E2D\u5185\u5BB9\u8F83\u957F\uFF0C\u7EC8\u7A3F\u4F1A\u6536\u655B\u3002_` : text;
-}
-var LivePostProgressHandle = class {
-  messageId;
-  idempotencyKey;
-  role = "primary";
-  postClient;
-  patchIntervalMs;
-  maxProgressEdits;
-  initialText;
-  textBuffer = "";
-  lastPatchedText = "";
-  progressEdits = 0;
-  pendingPatch = null;
-  inFlight = Promise.resolve();
-  closed = false;
-  constructor(opts) {
-    this.postClient = opts.postClient;
-    this.messageId = opts.messageId;
-    this.idempotencyKey = opts.idempotencyKey;
-    this.initialText = opts.initialText;
-    this.lastPatchedText = opts.initialText;
-    this.patchIntervalMs = opts.patchIntervalMs;
-    this.maxProgressEdits = opts.maxProgressEdits;
-  }
-  handle(event) {
-    if (this.closed) return;
-    if (event.type === "answer_delta") {
-      this.textBuffer += event.text;
-    } else if (event.type === "answer_snapshot") {
-      this.textBuffer = event.text;
-    } else {
-      return;
-    }
-    this.schedulePatch();
-  }
-  async finalize(opts) {
-    await this.drain();
-    const finalText = normalizeText2(opts.text) || this.initialText;
-    await this.update(finalText, opts.mentions);
-  }
-  async drain() {
-    this.closed = true;
-    if (this.pendingPatch) {
-      clearTimeout(this.pendingPatch);
-      this.pendingPatch = null;
-    }
-    await this.inFlight;
-  }
-  close() {
-    this.closed = true;
-    if (this.pendingPatch) {
-      clearTimeout(this.pendingPatch);
-      this.pendingPatch = null;
-    }
-  }
-  schedulePatch() {
-    if (this.pendingPatch || this.progressEdits >= this.maxProgressEdits) return;
-    this.pendingPatch = setTimeout(() => {
-      this.pendingPatch = null;
-      void this.patchProgress();
-    }, this.patchIntervalMs);
-    this.pendingPatch.unref?.();
-  }
-  async patchProgress() {
-    if (this.closed || this.progressEdits >= this.maxProgressEdits) return;
-    const nextText = progressText(this.textBuffer, this.initialText);
-    if (nextText === this.lastPatchedText) return;
-    this.progressEdits += 1;
-    this.inFlight = this.inFlight.then(() => this.update(nextText)).catch((err) => {
-      console.warn("[post_progress] progress update failed (continuing):", err);
-    });
-    await this.inFlight;
-  }
-  async update(text, mentions = []) {
-    const content = buildPostContent({ text, mentions });
-    await this.postClient.updatePost(this.messageId, content);
-    this.lastPatchedText = text;
-  }
-};
-async function createPostProgressHandle(opts) {
-  const role = "primary";
-  const initialText = normalizeText2(opts.initialText ?? DEFAULT_PLACEHOLDER_TEXT);
-  const idempotencyKey2 = derivePostIdempotencyKey({
-    botId: opts.facts.botId,
-    threadId: opts.facts.threadId,
-    triggerMessageId: opts.facts.triggerMessageId,
-    role,
-    logicalIndex: 0,
-    contentDigest: digestPostContent("live-progress-placeholder")
-  });
-  const sent = await opts.postClient.createPostReply(
-    opts.replyToMessageId,
-    buildPostContent({ text: initialText }),
-    {
-      replyInThread: opts.replyInThread,
-      idempotencyKey: idempotencyKey2
-    }
-  );
-  return new LivePostProgressHandle({
-    postClient: opts.postClient,
-    messageId: sent.messageId,
-    idempotencyKey: idempotencyKey2,
-    initialText,
-    patchIntervalMs: opts.patchIntervalMs ?? DEFAULT_PATCH_INTERVAL_MS2,
-    maxProgressEdits: opts.maxProgressEdits ?? DEFAULT_MAX_PROGRESS_EDITS
-  });
-}
-
-// src/bridge/postBudget.ts
-function scopeKey(scope) {
-  return `${scope.botId}\0${scope.chatId}\0${scope.threadId}`;
-}
-var ResponseSurfacePostBudget = class {
-  buckets = /* @__PURE__ */ new Map();
-  reserve(input) {
-    const nowMs = input.nowMs ?? Date.now();
-    const limit = Math.max(0, Math.floor(input.maxPosts));
-    const windowMs = Math.max(1, Math.floor(input.windowMs));
-    const key = scopeKey(input.scope);
-    const cutoff = nowMs - windowMs;
-    const existing = (this.buckets.get(key) ?? []).filter((ts) => ts > cutoff);
-    if (limit < 1 || existing.length >= limit) {
-      this.buckets.set(key, existing);
-      return {
-        allowed: false,
-        used: existing.length,
-        limit,
-        windowMs,
-        resetAt: existing.length > 0 ? new Date(Math.min(...existing) + windowMs).toISOString() : void 0,
-        reason: "post-window-exhausted"
-      };
-    }
-    const next = [...existing, nowMs];
-    this.buckets.set(key, next);
-    return {
-      allowed: true,
-      used: next.length,
-      limit,
-      windowMs
-    };
-  }
-};
-
 // src/bridge/handler.ts
 var DEFAULT_CARDKIT_RESPONSE_SURFACE_TIMEOUT_MS = 20 * 60 * 1e3;
 function execGit(cwd, args) {
@@ -120790,7 +120683,7 @@ stderr: ${stderr}`)
 }
 async function pathExists(p) {
   try {
-    await fs7.stat(p);
+    await fs6.stat(p);
     return true;
   } catch {
     return false;
@@ -120808,7 +120701,7 @@ async function isWorktreeGitHealthy(worktreePath) {
   });
 }
 async function ensureRepoClone(basePath, url, token, label) {
-  const gitDir = path10.join(basePath, ".git");
+  const gitDir = path9.join(basePath, ".git");
   if (await pathExists(gitDir)) {
     return;
   }
@@ -120818,15 +120711,15 @@ async function ensureRepoClone(basePath, url, token, label) {
     );
   }
   const uniq = `${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2, 10)}`;
-  const tmpScript = path10.join(basePath, "..", `.askpass-${uniq}.sh`);
+  const tmpScript = path9.join(basePath, "..", `.askpass-${uniq}.sh`);
   const tokenEnvVar = `LARKWAY_GIT_TOKEN_${uniq.replace(/[^a-zA-Z0-9]/g, "_")}`;
   try {
-    await fs7.mkdir(path10.dirname(basePath), { recursive: true });
+    await fs6.mkdir(path9.dirname(basePath), { recursive: true });
     const scriptContent = [
       "#!/bin/sh",
       `echo "\${${tokenEnvVar}}"`
     ].join("\n") + "\n";
-    await fs7.writeFile(tmpScript, scriptContent, { mode: 448, encoding: "utf8" });
+    await fs6.writeFile(tmpScript, scriptContent, { mode: 448, encoding: "utf8" });
     console.log(`[bridge.handler] cloning ${label} into ${basePath} \u2026`);
     const env = {
       ...process.env,
@@ -120854,7 +120747,7 @@ stderr: ${stderr}`));
     console.log(`[bridge.handler] clone of ${label} complete.`);
     await execGit(basePath, ["remote", "set-url", "origin", url]);
   } finally {
-    await fs7.unlink(tmpScript).catch(() => {
+    await fs6.unlink(tmpScript).catch(() => {
     });
   }
 }
@@ -120908,8 +120801,8 @@ var CORE_DENY_RULES = [
   "Bash(npm publish *)"
 ];
 async function writeWorktreeSettings(worktreePath, opts = {}) {
-  const dir = path10.join(worktreePath, ".claude");
-  await fs7.mkdir(dir, { recursive: true });
+  const dir = path9.join(worktreePath, ".claude");
+  await fs6.mkdir(dir, { recursive: true });
   const allow = Array.from(/* @__PURE__ */ new Set([...CORE_ALLOW_RULES, ...opts.allowExtra ?? []]));
   const settings = {
     permissions: {
@@ -120917,17 +120810,17 @@ async function writeWorktreeSettings(worktreePath, opts = {}) {
       deny: CORE_DENY_RULES
     }
   };
-  await fs7.writeFile(
-    path10.join(dir, "settings.local.json"),
+  await fs6.writeFile(
+    path9.join(dir, "settings.local.json"),
     JSON.stringify(settings, null, 2),
     "utf8"
   );
 }
 async function ensureNodeModules(worktreePath) {
-  const monorepDir = path10.join(worktreePath, "monorep");
-  const pkgJson = path10.join(monorepDir, "package.json");
+  const monorepDir = path9.join(worktreePath, "monorep");
+  const pkgJson = path9.join(monorepDir, "package.json");
   if (!await pathExists(pkgJson)) return;
-  const modulesMarker = path10.join(monorepDir, "node_modules", ".modules.yaml");
+  const modulesMarker = path9.join(monorepDir, "node_modules", ".modules.yaml");
   if (await pathExists(modulesMarker)) return;
   const start = Date.now();
   try {
@@ -121021,7 +120914,6 @@ async function createOnlyPostFallback(opts) {
 }
 var BridgeHandler = class {
   deps;
-  responseSurfacePostBudget = new ResponseSurfacePostBudget();
   closed = false;
   constructor(deps) {
     this.deps = deps;
@@ -121134,31 +121026,19 @@ var BridgeHandler = class {
       const isTopLevel = !(typeof parsed.raw.root_id === "string" && parsed.raw.root_id);
       const replyInThread = isTopLevel;
       const prototypeConfig = this.deps.botConfig?.response_surface_prototype;
-      const postOutboundAvailable = isResponseSurfacePostOutboundAvailable(
-        prototypeConfig,
-        { chatId: parsed.chatId, threadId },
-        { postClientAvailable: !!this.deps.postClient }
-      );
       const cardKitAvailable = isResponseSurfaceCardKitAvailable(
         prototypeConfig,
         { chatId: parsed.chatId, threadId },
         { cardKitClientAvailable: !!this.deps.cardKitClient }
       );
-      const surfaceController = SurfaceController.create({
-        prototypeConfig,
-        chatId: parsed.chatId,
-        threadId,
-        postOutboundAvailable: false,
-        postLedgerAvailable: true,
-        visibleFallbackAvailable: true
-      });
       let card;
       let cardKitProgress;
       let cardKitRecord;
       let cardKitStartFailed = false;
-      let progressPost;
-      let progressPostStartFailed = false;
-      if (!cardKitAvailable && surfaceController.shouldStartCardImmediately()) {
+      let legacyCardStartFailed = false;
+      let legacyCardStartFailureReason;
+      let startFailurePostFallbackSent = false;
+      if (!cardKitAvailable) {
         try {
           card = await this.deps.cardRenderer.start(messageId, { replyInThread, threadId });
           await recordEvent({
@@ -121168,6 +121048,8 @@ var BridgeHandler = class {
             reason: "\u5DF2\u4EA4\u7ED9\u672C\u5730 Agent \u5904\u7406\u3002"
           });
         } catch (err) {
+          legacyCardStartFailed = true;
+          legacyCardStartFailureReason = String(err);
           console.error("[bridge.handler] Failed to start card for thread", threadId, err);
           await recordEvent({
             status: "running",
@@ -121183,7 +121065,7 @@ var BridgeHandler = class {
           status: "running",
           startedAt: (/* @__PURE__ */ new Date()).toISOString(),
           appendPath: "\u5EF6\u8FDF\u521B\u5EFA\u5361\u7247",
-          reason: "response_surface prototype lazy card creation is enabled."
+          reason: "CardKit response surface is available; legacy card is reserved for fallback."
         });
       }
       try {
@@ -121194,7 +121076,7 @@ var BridgeHandler = class {
             throw new Error("agent_workspace runtime requires workspace path conventions");
           }
         }
-        const worktreePath = isAgentWorkspace ? path10.join(conventions.workspaceSessionsDir, threadId) : path10.join(conventions.worktreesDir, threadId);
+        const worktreePath = isAgentWorkspace ? path9.join(conventions.workspaceSessionsDir, threadId) : path9.join(conventions.worktreesDir, threadId);
         const runCwd = isAgentWorkspace ? conventions.agentWorkspacePath : worktreePath;
         const hasRepo = !isAgentWorkspace && !!conventions.repoCachePath;
         const buildWorktree = hasRepo && !conventions.readOnly;
@@ -121265,7 +121147,7 @@ var BridgeHandler = class {
               `[bridge.handler] worktree ${worktreePath} exists but git health check failed \u2014 removing stale dir and rebuilding (BL-8: migrated worktree with dead .git pointer)`
             );
             try {
-              await fs7.rm(worktreePath, { recursive: true, force: true });
+              await fs6.rm(worktreePath, { recursive: true, force: true });
             } catch (rmErr) {
               console.warn("[bridge.handler] failed to remove stale worktree (will attempt rebuild anyway):", rmErr);
             }
@@ -121289,7 +121171,7 @@ var BridgeHandler = class {
               `[bridge.handler] created worktree ${worktreePath} on branch ${branchName}`
             );
           } else {
-            await fs7.mkdir(worktreePath, { recursive: true });
+            await fs6.mkdir(worktreePath, { recursive: true });
             if (conventions.readOnly && conventions.repoCachePath) {
               console.log(
                 `[bridge.handler] created scratch dir ${worktreePath} (read_only bot: repo read-only at ${conventions.repoCachePath}, no worktree)`
@@ -121405,72 +121287,34 @@ var BridgeHandler = class {
             }
           }
         }
-        if (!card && !cardKitAvailable && postOutboundAvailable && this.deps.postClient) {
-          const budget = prototypeConfig ? this.responseSurfacePostBudget.reserve({
-            scope: {
-              botId: this.deps.botConfig?.id ?? "v1-default",
-              chatId: parsed.chatId,
-              threadId
-            },
-            maxPosts: prototypeConfig.max_posts_per_window,
-            windowMs: prototypeConfig.post_window_ms
-          }) : void 0;
-          if (budget?.allowed === false) {
-            console.warn("[bridge.handler] post progress budget exhausted; using card fallback");
-            progressPostStartFailed = true;
-          } else {
-            try {
-              progressPost = await createPostProgressHandle({
-                postClient: this.deps.postClient,
-                replyToMessageId: messageId,
-                replyInThread,
-                facts: {
-                  botId: this.deps.botConfig?.id ?? "v1-default",
-                  threadId,
-                  triggerMessageId: messageId
-                },
-                initialText: "\u52AA\u529B\u56DE\u7B54\u4E2D..."
-              });
-              await this.deps.client.removeProcessingReaction?.(messageId);
-              await recordEvent({
-                status: "running",
-                startedAt: (/* @__PURE__ */ new Date()).toISOString(),
-                appendPath: "\u5DF2\u521B\u5EFA post",
-                reason: "response surface \u4F7F\u7528 post \u4F5C\u4E3A\u672C\u8F6E\u4E3B\u56DE\u590D\u9762\u3002"
-              });
-            } catch (err) {
-              progressPostStartFailed = true;
-              console.warn("[bridge.handler] create progress post failed; using card fallback:", err);
-            }
-          }
-        }
-        if (!card && (progressPostStartFailed || cardKitStartFailed)) {
+        if (!card && cardKitStartFailed) {
           try {
             card = await this.deps.cardRenderer.start(messageId, { replyInThread, threadId });
             await this.deps.client.removeProcessingReaction?.(messageId);
             await recordEvent({
               status: "running",
               startedAt: (/* @__PURE__ */ new Date()).toISOString(),
-              appendPath: cardKitStartFailed ? "CardKit \u5931\u8D25\uFF0C\u5DF2\u521B\u5EFA\u5361\u7247" : "post \u5931\u8D25\uFF0C\u5DF2\u521B\u5EFA\u5361\u7247",
-              reason: cardKitStartFailed ? "CardKit \u4E3B\u9762\u521B\u5EFA\u5931\u8D25\uFF0Cbridge \u4F7F\u7528\u53EF\u89C1\u5361\u7247\u515C\u5E95\u3002" : "post \u4E3B\u9762\u521B\u5EFA\u5931\u8D25\uFF0Cbridge \u4F7F\u7528\u53EF\u89C1\u5361\u7247\u515C\u5E95\u3002"
+              appendPath: "CardKit \u5931\u8D25\uFF0C\u5DF2\u521B\u5EFA\u5361\u7247",
+              reason: "CardKit \u4E3B\u9762\u521B\u5EFA\u5931\u8D25\uFF0Cbridge \u4F7F\u7528\u53EF\u89C1\u5361\u7247\u515C\u5E95\u3002"
             });
           } catch (err) {
             console.error(
               "[bridge.handler] visible card fallback start failed after primary surface start failure:",
               err
             );
-            await createOnlyPostFallback({
+            const postFallback = await createOnlyPostFallback({
               postClient: this.deps.postClient,
               replyToMessageId: messageId,
               replyInThread,
               botId: this.deps.botConfig?.id ?? "v1-default",
               threadId,
               triggerMessageId: messageId,
-              finalText: cardKitStartFailed ? "CardKit \u4E3B\u56DE\u590D\u9762\u521B\u5EFA\u5931\u8D25, legacy \u53EF\u89C1\u5361\u7247\u515C\u5E95\u4E5F\u521B\u5EFA\u5931\u8D25\u3002" : "post \u4E3B\u56DE\u590D\u9762\u521B\u5EFA\u5931\u8D25, legacy \u53EF\u89C1\u5361\u7247\u515C\u5E95\u4E5F\u521B\u5EFA\u5931\u8D25\u3002",
+              finalText: "CardKit \u4E3B\u56DE\u590D\u9762\u521B\u5EFA\u5931\u8D25, legacy \u53EF\u89C1\u5361\u7247\u515C\u5E95\u4E5F\u521B\u5EFA\u5931\u8D25\u3002",
               failureReason: String(err),
               title: "Larkway fallback",
               logPrefix: "[bridge.handler]"
             });
+            if (postFallback) startFailurePostFallbackSent = true;
             await this.deps.client.removeProcessingReaction?.(messageId);
             await recordEvent({
               status: "running",
@@ -121560,7 +121404,6 @@ var BridgeHandler = class {
             for await (const ev of handle.events) {
               if (cardKitProgress) cardKitProgress.handle(ev);
               else if (card) card.handle(ev);
-              else progressPost?.handle(ev);
               if (ev.type === "system_init") {
                 sessionId = ev.sessionId;
               }
@@ -121707,44 +121550,8 @@ var BridgeHandler = class {
                 }
               }
             } else {
-              await progressPost?.drain();
-              const surfaceDispatch = await dispatchResponseSurface({
-                state: reportedState,
-                prototypeConfig,
-                facts: {
-                  botId: this.deps.botConfig?.id ?? "v1-default",
-                  chatId: parsed.chatId,
-                  threadId,
-                  triggerMessageId: messageId,
-                  replyToMessageId: messageId,
-                  replyInThread
-                },
-                worktreePath,
-                baseCard: baseCardPayload,
-                cardStarted: !!card,
-                postOutboundAvailable: false,
-                postLedgerAvailable: true,
-                visibleFallbackAvailable: true,
-                postClient: this.deps.postClient,
-                livePost: progressPost ? {
-                  messageId: progressPost.messageId,
-                  idempotencyKey: progressPost.idempotencyKey,
-                  role: progressPost.role
-                } : void 0,
-                postBudget: prototypeConfig ? {
-                  reserve: () => this.responseSurfacePostBudget.reserve({
-                    scope: {
-                      botId: this.deps.botConfig?.id ?? "v1-default",
-                      chatId: parsed.chatId,
-                      threadId
-                    },
-                    maxPosts: prototypeConfig.max_posts_per_window,
-                    windowMs: prototypeConfig.post_window_ms
-                  })
-                } : void 0
-              });
-              if (surfaceDispatch.card) {
-                if (!card) {
+              if (!card) {
+                try {
                   card = await this.deps.cardRenderer.start(messageId, { replyInThread, threadId });
                   try {
                     await writeCardFile(worktreePath, {
@@ -121758,49 +121565,34 @@ var BridgeHandler = class {
                   } catch (err) {
                     console.warn("[bridge.handler] writeCardFile(late) failed (continuing):", err);
                   }
-                }
-                await card.finalize(surfaceDispatch.card);
-                let keepCardFileForRetry = false;
-                if (surfaceDispatch.post?.requiresFallbackLedgerMark) {
-                  try {
-                    await markPostLedgerFallbackVisible(
-                      worktreePath,
-                      surfaceDispatch.post.idempotencyKey,
-                      {
-                        fallbackCardMessageId: card.messageId,
-                        error: surfaceDispatch.post.fallbackError ?? surfaceDispatch.card.failureReason ?? "post outbound failed; visible card fallback used"
-                      }
-                    );
-                  } catch (err) {
-                    keepCardFileForRetry = true;
-                    console.warn(
-                      "[bridge.handler] fallback ledger mark failed after visible card finalize; keeping card.json for retry:",
-                      err
-                    );
-                  }
-                }
-                if (surfaceDispatch.post?.requiresPolicyLedgerMark) {
-                  try {
-                    await markPostLedgerPolicyBlockedVisible(
-                      worktreePath,
-                      surfaceDispatch.post.idempotencyKey,
-                      {
-                        fallbackCardMessageId: card.messageId,
-                        error: surfaceDispatch.post.policyError ?? surfaceDispatch.card.failureReason ?? "mention policy blocked; visible card fallback used"
-                      }
-                    );
-                  } catch (err) {
-                    keepCardFileForRetry = true;
-                    console.warn(
-                      "[bridge.handler] policy-blocked ledger mark failed after visible card finalize; keeping card.json for retry:",
-                      err
-                    );
-                  }
-                }
-                if (!keepCardFileForRetry) {
-                  await deleteCardFile(worktreePath);
+                } catch (err) {
+                  console.error(
+                    "[bridge.handler] late visible card fallback start failed; creating post fallback:",
+                    err
+                  );
+                  const failureReason2 = [
+                    legacyCardStartFailed ? `initial legacy visible card start failed: ${legacyCardStartFailureReason ?? "unknown"}` : void 0,
+                    `late legacy visible card fallback start failed: ${String(err)}`
+                  ].filter((part) => !!part).join("; ");
+                  const postFallback = await createOnlyPostFallback({
+                    postClient: this.deps.postClient,
+                    replyToMessageId: messageId,
+                    replyInThread,
+                    botId: this.deps.botConfig?.id ?? "v1-default",
+                    threadId,
+                    triggerMessageId: messageId,
+                    finalText: baseCardPayload.finalText,
+                    failureReason: failureReason2,
+                    title: baseCardPayload.titleOverride ?? "Larkway fallback",
+                    logPrefix: "[bridge.handler]"
+                  });
+                  if (!postFallback) throw err;
                 }
               }
+              if (card) {
+                await card.finalize(baseCardPayload);
+                await deleteCardFile(worktreePath);
+              }
             }
             settle(true);
             await recordEvent({
@@ -121835,7 +121627,7 @@ var BridgeHandler = class {
           reason: String(err)
         });
         settle(false);
-        const wtPath = this.deps.conventions.runtime === "agent_workspace" && this.deps.conventions.workspaceSessionsDir ? path10.join(this.deps.conventions.workspaceSessionsDir, threadId) : path10.join(this.deps.conventions.worktreesDir, threadId);
+        const wtPath = this.deps.conventions.runtime === "agent_workspace" && this.deps.conventions.workspaceSessionsDir ? path9.join(this.deps.conventions.workspaceSessionsDir, threadId) : path9.join(this.deps.conventions.worktreesDir, threadId);
         const hardFailureText = `\u6267\u884C\u5931\u8D25: ${String(err)}`;
         const createHardFailurePostFallback = async (failureReason) => {
           const fallback = await createOnlyPostFallback({
@@ -121877,25 +121669,10 @@ var BridgeHandler = class {
             }
           }
         }
-        if (!card && progressPost) {
-          try {
-            await progressPost.finalize({
-              text: `\u6267\u884C\u5931\u8D25: ${String(err)}`
-            });
-          } catch (postFinalizeErr) {
-            console.error(
-              "[bridge.handler] progress post failure update failed; creating card fallback:",
-              postFinalizeErr
-            );
-            try {
-              card = await this.deps.cardRenderer.start(messageId, { replyInThread, threadId });
-            } catch (cardStartErr) {
-              console.error("[bridge.handler] failure card start also failed:", cardStartErr);
-              await createHardFailurePostFallback(
-                `progress post failure update failed: ${String(postFinalizeErr)}; legacy visible card fallback also failed: ${String(cardStartErr)}`
-              );
-            }
-          }
+        if (!card && !cardKitProgress && !startFailurePostFallbackSent) {
+          await createHardFailurePostFallback(
+            legacyCardStartFailed ? `legacy visible card was unavailable before agent failure: ${legacyCardStartFailureReason ?? "unknown"}` : "no visible response surface was available before agent failure"
+          );
         }
         if (card) {
           try {
@@ -121921,18 +121698,18 @@ var BridgeHandler = class {
 };
 
 // src/bridge/eventLog.ts
-import fs8 from "node:fs/promises";
-import path11 from "node:path";
+import fs7 from "node:fs/promises";
+import path10 from "node:path";
 var DEFAULT_RUNTIME_EVENT_LIMIT = 20;
 var writeQueues = /* @__PURE__ */ new Map();
 function resolveRuntimeEventsPath(larkwayHome2, botId) {
-  const dir = botId ? path11.join(larkwayHome2, botId) : larkwayHome2;
-  return path11.join(dir, "recent-events.json");
+  const dir = botId ? path10.join(larkwayHome2, botId) : larkwayHome2;
+  return path10.join(dir, "recent-events.json");
 }
 async function readRuntimeEvents(larkwayHome2, botId, limit = DEFAULT_RUNTIME_EVENT_LIMIT) {
   const file = resolveRuntimeEventsPath(larkwayHome2, botId);
   try {
-    const raw = await fs8.readFile(file, "utf-8");
+    const raw = await fs7.readFile(file, "utf-8");
     const parsed = JSON.parse(raw);
     if (!Array.isArray(parsed)) return [];
     return parsed.filter(isRuntimeEventRecord).sort((a, b) => tsOf(b.receivedAt) - tsOf(a.receivedAt)).slice(0, limit);
@@ -121990,11 +121767,11 @@ async function enqueue(key, fn) {
   }
 }
 async function writeEvents(file, events) {
-  await fs8.mkdir(path11.dirname(file), { recursive: true });
+  await fs7.mkdir(path10.dirname(file), { recursive: true });
   const tmp = `${file}.${process.pid}.${Date.now()}.tmp`;
-  await fs8.writeFile(tmp, `${JSON.stringify(events, null, 2)}
+  await fs7.writeFile(tmp, `${JSON.stringify(events, null, 2)}
 `, "utf-8");
-  await fs8.rename(tmp, file);
+  await fs7.rename(tmp, file);
 }
 function mergeStatusPath(prev, next, append) {
   const out = [...next ?? prev ?? []];
@@ -122260,7 +122037,7 @@ async function cleanupWorktree(threadId, botId, dryRun) {
 
 // src/config/botLoader.ts
 import { readdir as readdir2, readFile as readFile5 } from "node:fs/promises";
-import path12 from "node:path";
+import path11 from "node:path";
 
 // node_modules/.pnpm/js-yaml@4.1.1/node_modules/js-yaml/dist/js-yaml.mjs
 function isNothing(subject) {
@@ -125096,7 +124873,7 @@ async function loadBots(botsDir) {
   }
   const bots = [];
   for (const filename of yamlFiles.sort()) {
-    const filePath = path12.join(botsDir, filename);
+    const filePath = path11.join(botsDir, filename);
     let raw;
     try {
       raw = await readFile5(filePath, "utf-8");
@@ -125117,7 +124894,7 @@ ${issues}`);
     }
     const bot = result.data;
     if (bot.memory_file) {
-      const memoryPath = path12.join(botsDir, bot.memory_file);
+      const memoryPath = path11.join(botsDir, bot.memory_file);
       try {
         bot.agent_memory = await readFile5(memoryPath, "utf-8");
       } catch (err) {
@@ -125150,6 +124927,239 @@ ${issues}`);
 // src/bridge/reconcile.ts
 import { readdir as readdir3, stat as stat2 } from "node:fs/promises";
 import { join as pathJoin2 } from "node:path";
+
+// src/bridge/postFile.ts
+import fs8 from "node:fs/promises";
+import path12 from "node:path";
+var PostLedgerStatusSchema = external_exports.enum([
+  "planned",
+  "pending",
+  "sent",
+  "failed",
+  "fallback_visible",
+  "policy_blocked"
+]);
+var POST_LEDGER_TRANSITIONS = {
+  planned: ["pending", "fallback_visible", "policy_blocked"],
+  pending: ["sent", "failed", "fallback_visible", "policy_blocked"],
+  sent: [],
+  failed: ["fallback_visible"],
+  fallback_visible: [],
+  policy_blocked: []
+};
+function canTransitionPostStatus(from, to) {
+  return from === to || POST_LEDGER_TRANSITIONS[from].includes(to);
+}
+function assertPostStatusTransition(from, to) {
+  if (!canTransitionPostStatus(from, to)) {
+    throw new Error(`invalid post ledger transition: ${from} -> ${to}`);
+  }
+}
+var PostAttemptSchema = external_exports.object({
+  attemptedAt: external_exports.string(),
+  status: external_exports.enum(["sent", "failed"]),
+  retryable: external_exports.boolean().default(false),
+  error: external_exports.string().optional(),
+  code: external_exports.string().optional()
+});
+var PostLedgerEntrySchema = external_exports.object({
+  idempotencyKey: external_exports.string().min(1).max(64),
+  status: PostLedgerStatusSchema,
+  botId: external_exports.string().min(1),
+  chatId: external_exports.string().min(1),
+  threadId: external_exports.string().min(1),
+  replyToMessageId: external_exports.string().min(1),
+  role: external_exports.enum(["primary", "secondary", "fallback"]),
+  logicalIndex: external_exports.number().int().nonnegative(),
+  contentDigest: external_exports.string().min(1),
+  mentionCount: external_exports.number().int().nonnegative().default(0),
+  postMessageId: external_exports.string().optional(),
+  fallbackCardMessageId: external_exports.string().optional(),
+  error: external_exports.string().optional(),
+  attempts: external_exports.array(PostAttemptSchema).default([]),
+  createdAt: external_exports.string(),
+  updatedAt: external_exports.string()
+});
+var PostFileSchema = external_exports.object({
+  version: external_exports.literal(1),
+  posts: external_exports.array(PostLedgerEntrySchema).max(50)
+});
+function emptyPostFile() {
+  return { version: 1, posts: [] };
+}
+function postDirOf(worktreePath) {
+  return path12.join(worktreePath, ".larkway");
+}
+function postFilePathOf(worktreePath) {
+  return path12.join(postDirOf(worktreePath), "post.json");
+}
+async function readPostFile(worktreePath) {
+  const file = postFilePathOf(worktreePath);
+  let raw;
+  try {
+    raw = await fs8.readFile(file, "utf8");
+  } catch (err) {
+    if (err.code === "ENOENT") return null;
+    console.warn(`[postFile] read ${file} failed:`, err);
+    return null;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (err) {
+    console.warn(`[postFile] ${file} not valid JSON:`, err);
+    return null;
+  }
+  const result = PostFileSchema.safeParse(parsed);
+  if (!result.success) {
+    console.warn(`[postFile] ${file} failed schema validation:`, result.error.issues);
+    return null;
+  }
+  return result.data;
+}
+async function writePostFile(worktreePath, data) {
+  const dir = postDirOf(worktreePath);
+  const file = postFilePathOf(worktreePath);
+  await fs8.mkdir(dir, { recursive: true });
+  const parsed = PostFileSchema.parse(data);
+  const tmp = `${file}.tmp-${process.pid}-${Date.now()}`;
+  await fs8.writeFile(tmp, JSON.stringify(parsed, null, 2), "utf8");
+  try {
+    await fs8.rename(tmp, file);
+  } catch (err) {
+    await fs8.rm(tmp, { force: true }).catch(() => {
+    });
+    throw err;
+  }
+}
+var DEFAULT_POST_RECONCILE_MIN_AGE_MS = 6e4;
+function timestampAgeMs(iso, nowMs) {
+  if (!Number.isFinite(nowMs)) return null;
+  const then = Date.parse(iso);
+  if (!Number.isFinite(then)) return null;
+  return nowMs - then;
+}
+function reconcilePostEntry(entry, opts) {
+  if (entry.botId !== opts.botId) {
+    return { entry, changed: false, sent: false, needsVisibleFallback: false };
+  }
+  if (entry.status === "sent" || entry.status === "fallback_visible" || entry.status === "policy_blocked") {
+    return { entry, changed: false, sent: false, needsVisibleFallback: false };
+  }
+  const now = opts.now();
+  const ageMs = timestampAgeMs(entry.updatedAt, Date.parse(now));
+  if (ageMs == null || ageMs < opts.minAgeMs) {
+    return { entry, changed: false, sent: false, needsVisibleFallback: false };
+  }
+  if (entry.postMessageId) {
+    return {
+      entry: {
+        ...entry,
+        status: "sent",
+        error: void 0,
+        updatedAt: now,
+        attempts: [
+          ...entry.attempts,
+          {
+            attemptedAt: now,
+            status: "sent",
+            retryable: false
+          }
+        ]
+      },
+      changed: true,
+      sent: true,
+      needsVisibleFallback: false
+    };
+  }
+  return {
+    entry,
+    changed: false,
+    sent: false,
+    needsVisibleFallback: true
+  };
+}
+function reconcilePostLedgerEntries(data, opts) {
+  const normalizedOpts = {
+    botId: opts.botId,
+    minAgeMs: opts.minAgeMs ?? DEFAULT_POST_RECONCILE_MIN_AGE_MS,
+    now: opts.now ?? (() => (/* @__PURE__ */ new Date()).toISOString())
+  };
+  let sent = 0;
+  const fallbackVisible = 0;
+  let needsVisibleFallback = 0;
+  let skippedLive = 0;
+  const visibleFallbackCandidates = [];
+  const posts = data.posts.map((post) => {
+    const reconciled = reconcilePostEntry(post, normalizedOpts);
+    if (reconciled.changed) {
+      if (reconciled.sent) sent += 1;
+    } else if (reconciled.needsVisibleFallback) {
+      needsVisibleFallback += 1;
+      visibleFallbackCandidates.push(reconciled.entry);
+    } else if (post.botId === normalizedOpts.botId && (post.status === "planned" || post.status === "pending" || post.status === "failed")) {
+      skippedLive += 1;
+    }
+    return reconciled.entry;
+  });
+  const changed = sent > 0 || fallbackVisible > 0;
+  return {
+    file: changed ? { version: 1, posts } : data,
+    result: { changed, sent, fallbackVisible, needsVisibleFallback, skippedLive },
+    visibleFallbackCandidates
+  };
+}
+async function reconcilePostFileOrphans(worktreePath, opts) {
+  const existing = await readPostFile(worktreePath);
+  if (!existing) {
+    return {
+      changed: false,
+      sent: 0,
+      fallbackVisible: 0,
+      needsVisibleFallback: 0,
+      skippedLive: 0,
+      visibleFallbackCandidates: []
+    };
+  }
+  const { file, result, visibleFallbackCandidates } = reconcilePostLedgerEntries(existing, opts);
+  if (result.changed) {
+    await writePostFile(worktreePath, file);
+  }
+  return { ...result, visibleFallbackCandidates };
+}
+async function markPostLedgerFallbackVisible(worktreePath, idempotencyKey2, opts) {
+  const existing = await readPostFile(worktreePath) ?? emptyPostFile();
+  const idx = existing.posts.findIndex((post) => post.idempotencyKey === idempotencyKey2);
+  if (idx < 0) {
+    throw new Error(`post ledger entry not found: ${idempotencyKey2}`);
+  }
+  const current = existing.posts[idx];
+  assertPostStatusTransition(current.status, "fallback_visible");
+  const now = opts.now?.() ?? (/* @__PURE__ */ new Date()).toISOString();
+  const nextPosts = [...existing.posts];
+  nextPosts[idx] = {
+    ...current,
+    status: "fallback_visible",
+    fallbackCardMessageId: opts.fallbackCardMessageId,
+    error: opts.error,
+    updatedAt: now,
+    attempts: [
+      ...current.attempts,
+      {
+        attemptedAt: now,
+        status: "failed",
+        retryable: false,
+        code: "orphan_reconcile",
+        error: opts.error
+      }
+    ]
+  };
+  const next = { version: 1, posts: nextPosts };
+  await writePostFile(worktreePath, next);
+  return next;
+}
+
+// src/bridge/reconcile.ts
 var DEFAULT_MIN_AGE_MS = 6e4;
 var RETRY_CAP = 3;
 function isStateFreshForCard(state, card) {
@@ -125696,7 +125706,7 @@ async function writeStatusFile(botId, w) {
 
 // src/claude/runner.ts
 import { spawn as spawn2 } from "node:child_process";
-import { writeFile as writeFile3, unlink, mkdir as mkdir3 } from "node:fs/promises";
+import { writeFile as writeFile3, unlink as unlink2, mkdir as mkdir3 } from "node:fs/promises";
 import { join as join2 } from "node:path";
 import { createInterface } from "node:readline";
 var SIGKILL_GRACE_MS = 5e3;
@@ -125903,7 +125913,7 @@ function runClaude(opts) {
         clearTimeout(totalTimeoutFallbackHandle);
         rlAbortController.abort();
         if (pidFilePath !== null) {
-          void unlink(pidFilePath).catch(() => {
+          void unlink2(pidFilePath).catch(() => {
           });
         }
         if (exitCode !== 0 && !killScheduled) {
@@ -125933,7 +125943,7 @@ stderr: ${stderr}` : "")
         clearTimeout(totalTimeoutFallbackHandle);
         rlAbortController.abort();
         if (pidFilePath !== null) {
-          void unlink(pidFilePath).catch(() => {
+          void unlink2(pidFilePath).catch(() => {
           });
         }
         if (err.code === "ENOENT") {
@@ -126045,127 +126055,104 @@ function buildCodexEnv(botGitIdentity, gitlabToken) {
   }
   return env;
 }
-function sandboxFlag(mode) {
-  switch (mode) {
-    case "bypassPermissions":
-      return ["--dangerously-bypass-approvals-and-sandbox"];
-    case "acceptEdits":
-      return ["--dangerously-bypass-approvals-and-sandbox"];
-    case "ask":
-      return ["--sandbox", "read-only"];
-  }
+function buildCodexCommand(opts, codexBinPath = "codex") {
+  void opts;
+  return [codexBinPath, ["app-server", "--stdio"]];
 }
-function resumePermissionFlag(mode) {
-  return mode === "bypassPermissions" || mode === "acceptEdits" ? ["--dangerously-bypass-approvals-and-sandbox"] : [];
+function codexThreadSandboxMode(mode) {
+  return mode === "ask" ? "read-only" : "danger-full-access";
 }
-function buildCodexCommand(opts, codexBinPath = "codex") {
-  const mode = opts.permissionMode ?? "acceptEdits";
-  const commonFlags = [
-    "--json",
-    "--skip-git-repo-check",
-    ...sandboxFlag(mode)
-  ];
-  if (opts.resumeSessionId != null) {
-    const resumeFlags = [
-      "--json",
-      "--skip-git-repo-check",
-      ...resumePermissionFlag(mode)
-    ];
-    return [
-      codexBinPath,
-      ["exec", "resume", opts.resumeSessionId, ...resumeFlags, "-"]
-    ];
-  }
-  const freshFlags = opts.cwd != null ? ["-C", opts.cwd, ...commonFlags] : commonFlags;
-  return [codexBinPath, ["exec", ...freshFlags]];
+function codexTurnSandboxPolicy(mode) {
+  if (mode === "ask") return { type: "readOnly", networkAccess: false };
+  return { type: "dangerFullAccess" };
+}
+function codexApprovalPolicy(mode) {
+  return mode === "ask" ? "on-request" : "never";
 }
-var CodexLineParser = class {
+var CodexAppServerLineParser = class {
   answerExtractor = new AnswerChannelExtractor();
-  *parseLine(line) {
-    const trimmed = line.trim();
-    if (trimmed === "") return;
-    let obj;
-    try {
-      obj = JSON.parse(trimmed);
-    } catch {
-      yield { type: "raw", raw: trimmed };
-      return;
-    }
+  *parseMessage(obj) {
     if (typeof obj !== "object" || obj === null) {
       yield { type: "raw", raw: obj };
       return;
     }
     const record = obj;
-    const topType = record["type"];
-    if (topType === "thread.started" && typeof record["thread_id"] === "string") {
-      yield { type: "system_init", sessionId: record["thread_id"], raw: obj };
+    const method = record["method"];
+    if (typeof method !== "string") {
+      yield { type: "raw", raw: obj };
+      return;
+    }
+    const params = asRecord(record["params"]);
+    if (method === "thread/started") {
+      const thread = asRecord(params?.["thread"]);
+      const threadId = typeof thread?.["id"] === "string" ? thread["id"] : void 0;
+      if (threadId) yield { type: "system_init", sessionId: threadId, raw: obj };
       return;
     }
-    if (topType === "turn.completed") {
+    if (method === "turn/completed") {
       yield { type: "result", stopReason: "end_turn", raw: obj };
       return;
     }
-    const agentMessageText = agentMessageTextFrom(record);
-    if (agentMessageText !== void 0) {
-      if (topType === "item.completed") {
-        yield* this.answerExtractor.ingestSnapshot(agentMessageText, obj);
-        return;
-      }
-      yield* this.answerExtractor.ingestGrowingSnapshot(agentMessageText, obj);
+    if (method === "item/agentMessage/delta") {
+      const delta = typeof params?.["delta"] === "string" ? params["delta"] : "";
+      yield* this.answerExtractor.ingestDelta(delta, obj);
       return;
     }
-    if (topType === "item.started") {
-      const item = record["item"];
-      if (typeof item === "object" && item !== null) {
-        const itemRecord = item;
-        if (itemRecord["type"] === "command_execution" && typeof itemRecord["command"] === "string") {
-          yield {
-            type: "tool_use",
-            toolName: "shell",
-            toolInput: { command: itemRecord["command"] },
-            raw: obj
-          };
-          return;
-        }
+    if (method === "item/started") {
+      const item = asRecord(params?.["item"]);
+      if (item?.["type"] === "commandExecution" && typeof item["command"] === "string") {
+        yield {
+          type: "tool_use",
+          toolName: "shell",
+          toolInput: { command: item["command"] },
+          raw: obj
+        };
+        return;
       }
-      yield { type: "raw", raw: obj };
       return;
     }
-    if (topType === "item.completed") {
-      const item = record["item"];
-      if (typeof item === "object" && item !== null) {
-        const itemRecord = item;
-        if (itemRecord["type"] === "command_execution") {
-          yield { type: "tool_result", raw: obj };
-          return;
-        }
+    if (method === "item/completed") {
+      const item = asRecord(params?.["item"]);
+      if (item?.["type"] === "commandExecution") {
+        yield { type: "tool_result", raw: obj };
+        return;
+      }
+      if (item?.["type"] === "agentMessage" && typeof item["text"] === "string") {
+        yield* this.answerExtractor.ingestSnapshot(item["text"], obj);
+        return;
       }
-      yield { type: "raw", raw: obj };
       return;
     }
     yield { type: "raw", raw: obj };
   }
 };
-function agentMessageTextFrom(record) {
-  const item = record["item"];
-  if (typeof item !== "object" || item === null) return void 0;
-  const itemRecord = item;
-  if (itemRecord["type"] !== "agent_message") return void 0;
-  const text = itemRecord["text"];
-  return typeof text === "string" ? text : void 0;
+function asRecord(value) {
+  return typeof value === "object" && value !== null ? value : void 0;
+}
+function extractThreadIdFromThreadResponse(obj) {
+  const record = asRecord(obj);
+  const result = asRecord(record?.["result"]);
+  const thread = asRecord(result?.["thread"]);
+  const threadId = thread?.["id"];
+  return typeof threadId === "string" ? threadId : void 0;
 }
 function runCodex(opts, codexBinPath = "codex") {
   const timeoutMs = opts.timeoutMs ?? 15 * 60 * 1e3;
   const [bin, args] = buildCodexCommand(opts, codexBinPath);
   const env = buildCodexEnv(opts.botGitIdentity, opts.gitlabToken);
+  const mode = opts.permissionMode ?? "acceptEdits";
+  const requestById = /* @__PURE__ */ new Map();
+  let nextRequestId = 1;
   const child = spawn3(bin, args, {
     env,
     stdio: ["pipe", "pipe", "pipe"],
     ...opts.cwd != null ? { cwd: opts.cwd } : {}
   });
-  if (child.stdin != null) {
-    child.stdin.write(opts.prompt, "utf8");
-    child.stdin.end();
+  function sendRequest(method, params) {
+    const id = nextRequestId++;
+    requestById.set(id, method);
+    child.stdin?.write(JSON.stringify({ jsonrpc: "2.0", id, method, params }) + "\n");
+    return id;
   }
   let discoveredSessionId;
   let killScheduled = false;
@@ -126179,6 +126166,10 @@ function runCodex(opts, codexBinPath = "codex") {
     }, SIGKILL_GRACE_MS2);
     killTimer.unref();
   }
+  function stopAppServerAfterTurn() {
+    if (child.killed || killScheduled) return;
+    child.kill("SIGTERM");
+  }
   const TOTAL_TIMEOUT_EXTRA_MS = SIGKILL_GRACE_MS2 + 2e3;
   let totalTimeoutFallbackHandle;
   let _forceFinalizeForTimeout = () => {
@@ -126201,6 +126192,8 @@ function runCodex(opts, codexBinPath = "codex") {
   const stderrChunks = [];
   child.stderr.on("data", (chunk) => stderrChunks.push(chunk));
   const rlAbortController = new AbortController();
+  let finishAppServerTurn;
+  let failAppServerTurn;
   const done = new Promise(
     (resolve2, reject) => {
       let settled = false;
@@ -126230,6 +126223,17 @@ stderr: ${stderr}` : "")
         }
         resolve2({ exitCode, sessionId: discoveredSessionId });
       };
+      const finalizeReject = (err) => {
+        if (settled) return;
+        settled = true;
+        clearTimeout(timeoutHandle);
+        clearTimeout(killTimer);
+        clearTimeout(totalTimeoutFallbackHandle);
+        rlAbortController.abort();
+        reject(err);
+      };
+      finishAppServerTurn = finalizeResolve;
+      failAppServerTurn = finalizeReject;
       _forceFinalizeForTimeout = () => {
         if (settled) return;
         console.warn(
@@ -126277,15 +126281,76 @@ stderr: ${stderr}` : "")
       crlfDelay: Infinity,
       signal: rlAbortController.signal
     });
-    const parser = new CodexLineParser();
+    const parser = new CodexAppServerLineParser();
+    let turnCompleted = false;
+    sendRequest("initialize", {
+      clientInfo: { name: "larkway", version: "0.3" },
+      capabilities: {}
+    });
     try {
       for await (const line of rl) {
-        for (const event of parser.parseLine(line)) {
+        const trimmed = line.trim();
+        if (!trimmed) continue;
+        let obj;
+        try {
+          obj = JSON.parse(trimmed);
+        } catch {
+          yield { type: "raw", raw: trimmed };
+          continue;
+        }
+        const response = asRecord(obj);
+        if (typeof response?.["id"] === "number") {
+          const id = response["id"];
+          const method = requestById.get(id);
+          requestById.delete(id);
+          const error = asRecord(response["error"]);
+          if (error) {
+            const message = typeof error["message"] === "string" ? error["message"] : JSON.stringify(error);
+            failAppServerTurn?.(new Error(`codex app-server ${method ?? "request"} failed: ${message}`));
+            stopAppServerAfterTurn();
+            return;
+          }
+          if (method === "initialize") {
+            const threadMethod = opts.resumeSessionId != null ? "thread/resume" : "thread/start";
+            const threadParams = opts.resumeSessionId != null ? { threadId: opts.resumeSessionId } : { ephemeral: false, sessionStartSource: "startup" };
+            if (opts.cwd != null) threadParams["cwd"] = opts.cwd;
+            threadParams["approvalPolicy"] = codexApprovalPolicy(mode);
+            threadParams["sandbox"] = codexThreadSandboxMode(mode);
+            sendRequest(threadMethod, threadParams);
+            continue;
+          }
+          if (method === "thread/start" || method === "thread/resume") {
+            const threadId = extractThreadIdFromThreadResponse(obj);
+            if (threadId) {
+              discoveredSessionId = threadId;
+              yield { type: "system_init", sessionId: threadId, raw: obj };
+              const turnParams = {
+                threadId,
+                input: [{ type: "text", text: opts.prompt, text_elements: [] }],
+                approvalPolicy: codexApprovalPolicy(mode),
+                sandboxPolicy: codexTurnSandboxPolicy(mode)
+              };
+              if (opts.cwd != null) turnParams["cwd"] = opts.cwd;
+              sendRequest("turn/start", turnParams);
+            }
+            continue;
+          }
+          continue;
+        }
+        for (const event of parser.parseMessage(obj)) {
           if (event.type === "system_init") {
             discoveredSessionId = event.sessionId;
           }
+          if (event.type === "result") {
+            turnCompleted = true;
+          }
           yield event;
         }
+        if (turnCompleted) {
+          stopAppServerAfterTurn();
+          finishAppServerTurn?.(0);
+          return;
+        }
       }
     } catch (err) {
       const isAbort = err instanceof Error && (err.name === "AbortError" || err.code === "ABORT_ERR");