larkway 0.3.28 → 0.3.30

package/README.md

@@ -8,7 +8,7 @@
 
 You @ the bot in a Feishu thread. It runs on your machine — reading your real codebase, executing commands, opening MRs — and posts the result back. You define what the agent knows and what it can do. Larkway just carries the messages.
 
-**Current release: v0.3.28**
+**Current release: v0.3.30**
 
 ---
 

package/README.zh.md

@@ -8,7 +8,7 @@
 
 你在飞书话题里 @ bot，它在你的机器上运行——读真实代码库、执行命令、开 MR——把结果贴回飞书。你定义 agent 知道什么、能做什么。Larkway 只负责传递消息。
 
-**当前版本：v0.3.28**
+**当前版本：v0.3.30**
 
 ---
 

package/dist/cli/index.js

@@ -124829,6 +124829,9 @@ import path from "node:path";
 
 // src/responseSurface.ts
 var NonEmptyString = external_exports.string().trim().min(1);
+var CardKitMentionUserIdSchema = NonEmptyString.max(128).regex(/^[A-Za-z0-9_:-]+$/, {
+  message: "mention user_id must contain only letters, numbers, underscore, colon, or hyphen"
+});
 function defaultResponseSurfacePrototypeConfig() {
   return {
     enabled: true,
@@ -124838,6 +124841,7 @@ function defaultResponseSurfacePrototypeConfig() {
     post_outbound_enabled: true,
     cardkit_streaming_enabled: true,
     allow_agent_mentions: true,
+    denied_mention_open_ids: [],
     allowed_mention_open_ids: []
   };
 }
@@ -124850,6 +124854,7 @@ var responseSurfacePrototypeConfigDefaults = () => ({
   post_outbound_enabled: true,
   cardkit_streaming_enabled: true,
   allow_agent_mentions: true,
+  denied_mention_open_ids: [],
   allowed_mention_open_ids: []
 });
 var ResponseSurfaceModeSchema = external_exports.enum(["card", "post", "hybrid"]);
@@ -124862,7 +124867,7 @@ var ResponseSurfaceCapabilitySchema = external_exports.enum([
   "audit"
 ]);
 var MentionTargetSchema = external_exports.object({
-  user_id: NonEmptyString.max(128),
+  user_id: CardKitMentionUserIdSchema,
   label: external_exports.string().trim().min(1).max(80).optional()
 });
 var ResponseSurfacePostSchema = external_exports.object({
@@ -124873,7 +124878,7 @@ var ResponseSurfaceCardSchema = external_exports.object({
   capabilities: external_exports.array(ResponseSurfaceCapabilitySchema).max(8).default([])
 });
 var StrictResponseSurfaceStateSchema = external_exports.object({
-  mode: ResponseSurfaceModeSchema,
+  mode: ResponseSurfaceModeSchema.optional().default("card"),
   primary: ResponseSurfacePrimarySchema.optional(),
   post: ResponseSurfacePostSchema.optional(),
   card: ResponseSurfaceCardSchema.optional()
@@ -124888,9 +124893,18 @@ var StrictResponseSurfaceStateSchema = external_exports.object({
 });
 var ResponseSurfaceStateSchema = external_exports.preprocess((value) => {
   if (value === void 0) return void 0;
-  const result = StrictResponseSurfaceStateSchema.safeParse(value);
-  return result.success ? result.data : void 0;
+  return parseResponseSurfaceState(value).state;
 }, StrictResponseSurfaceStateSchema.optional());
+function parseResponseSurfaceState(value) {
+  const result = StrictResponseSurfaceStateSchema.safeParse(value);
+  if (result.success) return { state: result.data, diagnostics: [] };
+  return {
+    diagnostics: result.error.issues.map((issue) => {
+      const path25 = issue.path.length > 0 ? issue.path.join(".") : "<root>";
+      return `${path25}: ${issue.message}`;
+    })
+  };
+}
 var ResponseSurfacePrototypeConfigSchema = external_exports.object({
   /**
    * Master gate. Default true makes response surfaces available unless the
@@ -124931,10 +124945,16 @@ var ResponseSurfacePrototypeConfigSchema = external_exports.object({
    */
   allow_agent_mentions: external_exports.boolean().default(true),
   /**
-   * Optional target allowlist for real post @ mentions. Empty means the Agent
-   * may choose mention targets; non-empty narrows mentions to this exact set.
+   * Optional deny-list for Agent-authored @ mentions. Empty means the Agent
+   * may choose mention targets, except broadcast aliases such as @all.
    * Keep real IDs in private bot config, never in public docs/tests.
    */
+  denied_mention_open_ids: external_exports.array(external_exports.string().min(1)).default([]),
+  /**
+   * Deprecated compatibility field. It is still parsed so older private
+   * configs do not fail, but mention policy is deny-list/default-allow.
+   * Use denied_mention_open_ids for new restrictions.
+   */
   allowed_mention_open_ids: external_exports.array(external_exports.string().min(1)).default([])
 }).default(responseSurfacePrototypeConfigDefaults);
 

package/dist/main.js

@@ -115875,6 +115875,10 @@ function resolveAgentWorkspacePath(agentId) {
 function resolveAgentWorkspaceSessionsDir(agentId) {
   return join(resolveAgentWorkspacePath(agentId), "sessions");
 }
+function resolveAgentSessionPath(agentId, threadId) {
+  assertSafePathSegment("threadId", threadId);
+  return join(resolveAgentWorkspaceSessionsDir(agentId), threadId);
+}
 function resolveAgentWorkspaceReposDir(agentId) {
   return join(resolveAgentWorkspacePath(agentId), "repos");
 }
@@ -118683,7 +118687,7 @@ function renderStateContract(stateFilePath) {
     "- card_title/card_color: \u517C\u5BB9\u5B57\u6BB5; \u9ED8\u8BA4 CardKit \u4E0D\u6E32\u67D3\u9876\u90E8\u6807\u9898\u8272\u6761,legacy/fallback \u5361\u7247\u8DEF\u5F84\u53EF\u80FD\u4F7F\u7528",
     "- image_blocks: \u53EF\u9009\u56FE\u7247\u9884\u89C8\u5757\u6570\u7EC4,\u6700\u591A 4 \u4E2A\u3002\u6BCF\u9879 `{img_key, alt?, title?, mode?, preview?}`; `img_key` \u5FC5\u987B\u662F\u5DF2\u4E0A\u4F20/\u53EF\u7528\u4E8E\u5361\u7247\u7684 Feishu \u56FE\u7247 key,`alt` \u7701\u7565\u65F6 bridge \u9ED8\u8BA4\u201C\u56FE\u7247\u9884\u89C8\u201D,`mode` \u53EA\u5141\u8BB8 `crop_center`/`fit_horizontal` \u5E76\u6620\u5C04\u5230 Card JSON 2.0 `scale_type`,`preview` \u9ED8\u8BA4 true\u3002bridge \u4E0D\u8D1F\u8D23\u4E0B\u8F7D/\u4E0A\u4F20/\u9009\u62E9\u56FE\u7247;\u8FD9\u4E9B\u7531\u4F60\u7528 lark-cli \u7B49\u5DE5\u5177\u5148\u5B8C\u6210\u3002",
     '- content_blocks: \u53EF\u9009\u6709\u5E8F\u6B63\u6587\u5757\u6570\u7EC4,\u6700\u591A 12 \u4E2A block\u3001\u6700\u591A 4 \u4E2A image block\u3002\u53EA\u652F\u6301\u7A84 union:`{type:"markdown", content}` \u548C `{type:"image", img_key, alt?, title?, mode?, preview?}`;\u4E0D\u652F\u6301 raw card JSON\u3002\u7528\u4E8E\u6B63\u6587\u4E0E\u56FE\u7247\u4EA4\u9519\u6392\u7248,\u4F8B\u5982 markdown -> image -> markdown -> image\u3002\u82E5 `content_blocks` \u975E\u7A7A,bridge \u4EE5\u5B83\u4F5C\u4E3A\u4E3B\u6B63\u6587\u5E76\u5FFD\u7565 `last_message` + `image_blocks` \u7684\u6B63\u6587\u6E32\u67D3,\u907F\u514D\u91CD\u590D;\u82E5\u7701\u7565\u5219\u4FDD\u6301\u65E7 `last_message` + `image_blocks` \u884C\u4E3A\u3002',
-    "- response_surface: \u53EF\u9009\u8986\u76D6\u5B57\u6BB5,\u4E3B\u8981\u7528\u4E8E `{post:{mentions:[{user_id,label?}]}}` late peer @\u3002\u9ED8\u8BA4\u53EF\u4E0D\u5199;bridge \u6309 CardKit \u6D41\u5F0F\u5361\u7247\u5904\u7406,\u6700\u7EC8\u6536\u6210\u5E72\u51C0\u603B\u7ED3\u5361\u3002\u65E7 `mode`/`primary` \u4EC5\u517C\u5BB9\u89E3\u6790,\u4E0D\u518D\u9009\u62E9 post-only/hybrid \u4E3B\u54CD\u5E94\u9762\u3002\u9700\u8981\u771F\u5B9E @ \u65F6\u628A\u76EE\u6807\u5199\u5165 `post.mentions`;\u4E0D\u8981\u5199 raw Feishu post/card JSON\u3002",
+    "- response_surface: \u53EF\u9009\u8986\u76D6\u5B57\u6BB5,\u4E3B\u8981\u7528\u4E8E `{post:{mentions:[{user_id,label?}]}}` late peer @\u3002\u9ED8\u8BA4\u53EF\u4E0D\u5199;bridge \u6309 CardKit \u6D41\u5F0F\u5361\u7247\u5904\u7406,\u6700\u7EC8\u6536\u6210\u5E72\u51C0\u603B\u7ED3\u5361\u3002\u65E7 `mode`/`primary` \u4EC5\u517C\u5BB9\u89E3\u6790,\u4E0D\u518D\u9009\u62E9 post-only/hybrid \u4E3B\u54CD\u5E94\u9762\u3002\u8FD9\u91CC\u7684 late @ \u53EA\u662F\u6700\u7EC8\u5361\u7247\u91CC\u7684\u89C6\u89C9\u63D0\u793A;\u9700\u8981 peer bot \u6D88\u8D39\u6B63\u6587\u7684 handoff \u5FC5\u987B\u7531 Agent/\u56E2\u961F\u5DE5\u4F5C\u6D41\u53D1\u9001\u771F\u5B9E Feishu post + at \u6807\u7B7E\u3002\u4E0D\u8981\u5199 raw Feishu post/card JSON\u3002",
     "- scheduled reply / daily social ops review card \u7B49\u9700\u8981\u201C\u5E73\u53F0\u6B63\u6587 + \u5339\u914D\u56FE\u7247\u201D\u540C\u6BB5\u76F8\u90BB\u5C55\u793A\u7684\u573A\u666F,\u5E94\u5148\u53D6\u5F97\u5404\u56FE\u7247 `img_key`,\u518D\u5199 `content_blocks` \u4E3A `\u5E73\u53F0 markdown -> \u5BF9\u5E94 image -> \u4E0B\u4E2A\u5E73\u53F0 markdown -> \u5BF9\u5E94 image`;\u4E0D\u8981\u7528\u5355\u72EC\u8BDD\u9898\u56FE\u7247\u6D88\u606F\u6216\u5C3E\u90E8 `image_blocks` \u4EE3\u66FF\u9A8C\u6536\u9762\u3002",
     "- dev_url / mr_url / \u5176\u4F59\u4E1A\u52A1\u5B57\u6BB5:\u81EA\u7531\u5199\u5165,bridge \u4E0D\u611F\u77E5\u5176\u4E1A\u52A1\u542B\u4E49;\u8981\u8BA9\u8FD0\u8425\u770B\u5230,\u8BF7\u5199\u8FDB last_message",
     "- updated_at: ISO 8601 timestamp",
@@ -118734,6 +118738,9 @@ function renderPeersBlock(peers) {
     "- \u4E0D\u8981\u628A\u540C\u4E00\u4EFB\u52A1\u540C\u65F6\u8F6C\u53D1\u7ED9\u591A\u4E2A peer",
     '- @ peer \u5FC5\u987B\u7528 **post \u6D88\u606F** + at \u6807\u7B7E `{"tag":"at","user_id":"ou_xxx"}`(\u7528\u4E0A\u9762\u7684 open_id),',
     "  **\u4E25\u7981\u7528\u7EAF text \u7684 @xxx**(\u7EAF\u6587\u672C @ \u4E0D\u4F1A\u771F\u6B63\u89E6\u8FBE\u5BF9\u65B9 bot)",
+    "- \u53D1\u8D77 peer handoff \u540E,\u5728\u4F60\u7684\u534F\u8C03\u5C42/\u5DE5\u4F5C\u533A\u53F0\u8D26\u8BB0\u5F55 task_id\u3001assignee\u3001\u6765\u6E90\u3001\u671F\u671B\u4EA7\u51FA\u3001deadline \u548C\u5347\u7EA7\u4EBA;\u6CA1\u6709\u4E13\u7528 skill \u65F6\u81F3\u5C11\u5199\u5165\u672C session summary\u3002",
+    "- \u6536\u5230 peer handoff \u540E,\u5148\u7528\u771F\u5B9E post \u8F7B\u91CF ack(\u6536\u5230/\u5F00\u59CB)\u518D\u505A\u957F\u4EFB\u52A1;\u5B8C\u6210\u3001\u5931\u8D25\u6216\u963B\u585E\u65F6\u5FC5\u987B\u7528\u771F\u5B9E post \u56DE\u62A5\u7EC8\u6001,\u4E0D\u8981\u8BA9\u94FE\u8DEF\u9759\u9ED8\u505C\u5728\u4F60\u8FD9\u91CC\u3002",
+    "- \u9ED8\u8BA4 deadline \u53EF\u6309\u56E2\u961F\u5DE5\u4F5C\u6D41\u8BBE\u7F6E(\u5E38\u89C1\u9ED8\u8BA4 15 \u5206\u949F);\u8D85\u65F6\u68C0\u6D4B\u3001\u91CD\u8BD5/\u91CD\u6D3E/\u5347\u7EA7\u5C5E\u4E8E\u534F\u8C03\u5C42 skill/workspace \u903B\u8F91,\u4E0D\u8981\u671F\u5F85 bridge \u66FF\u4F60\u7F16\u6392\u3002",
     "</peer-bots>"
   ];
 }
@@ -119490,6 +119497,9 @@ import path6 from "node:path";
 
 // src/responseSurface.ts
 var NonEmptyString = external_exports.string().trim().min(1);
+var CardKitMentionUserIdSchema = NonEmptyString.max(128).regex(/^[A-Za-z0-9_:-]+$/, {
+  message: "mention user_id must contain only letters, numbers, underscore, colon, or hyphen"
+});
 function defaultResponseSurfacePrototypeConfig() {
   return {
     enabled: true,
@@ -119499,6 +119509,7 @@ function defaultResponseSurfacePrototypeConfig() {
     post_outbound_enabled: true,
     cardkit_streaming_enabled: true,
     allow_agent_mentions: true,
+    denied_mention_open_ids: [],
     allowed_mention_open_ids: []
   };
 }
@@ -119511,6 +119522,7 @@ var responseSurfacePrototypeConfigDefaults = () => ({
   post_outbound_enabled: true,
   cardkit_streaming_enabled: true,
   allow_agent_mentions: true,
+  denied_mention_open_ids: [],
   allowed_mention_open_ids: []
 });
 var ResponseSurfaceModeSchema = external_exports.enum(["card", "post", "hybrid"]);
@@ -119523,7 +119535,7 @@ var ResponseSurfaceCapabilitySchema = external_exports.enum([
   "audit"
 ]);
 var MentionTargetSchema = external_exports.object({
-  user_id: NonEmptyString.max(128),
+  user_id: CardKitMentionUserIdSchema,
   label: external_exports.string().trim().min(1).max(80).optional()
 });
 var ResponseSurfacePostSchema = external_exports.object({
@@ -119534,7 +119546,7 @@ var ResponseSurfaceCardSchema = external_exports.object({
   capabilities: external_exports.array(ResponseSurfaceCapabilitySchema).max(8).default([])
 });
 var StrictResponseSurfaceStateSchema = external_exports.object({
-  mode: ResponseSurfaceModeSchema,
+  mode: ResponseSurfaceModeSchema.optional().default("card"),
   primary: ResponseSurfacePrimarySchema.optional(),
   post: ResponseSurfacePostSchema.optional(),
   card: ResponseSurfaceCardSchema.optional()
@@ -119549,9 +119561,18 @@ var StrictResponseSurfaceStateSchema = external_exports.object({
 });
 var ResponseSurfaceStateSchema = external_exports.preprocess((value) => {
   if (value === void 0) return void 0;
-  const result = StrictResponseSurfaceStateSchema.safeParse(value);
-  return result.success ? result.data : void 0;
+  return parseResponseSurfaceState(value).state;
 }, StrictResponseSurfaceStateSchema.optional());
+function parseResponseSurfaceState(value) {
+  const result = StrictResponseSurfaceStateSchema.safeParse(value);
+  if (result.success) return { state: result.data, diagnostics: [] };
+  return {
+    diagnostics: result.error.issues.map((issue) => {
+      const path16 = issue.path.length > 0 ? issue.path.join(".") : "<root>";
+      return `${path16}: ${issue.message}`;
+    })
+  };
+}
 var ResponseSurfacePrototypeConfigSchema = external_exports.object({
   /**
    * Master gate. Default true makes response surfaces available unless the
@@ -119592,10 +119613,16 @@ var ResponseSurfacePrototypeConfigSchema = external_exports.object({
    */
   allow_agent_mentions: external_exports.boolean().default(true),
   /**
-   * Optional target allowlist for real post @ mentions. Empty means the Agent
-   * may choose mention targets; non-empty narrows mentions to this exact set.
+   * Optional deny-list for Agent-authored @ mentions. Empty means the Agent
+   * may choose mention targets, except broadcast aliases such as @all.
    * Keep real IDs in private bot config, never in public docs/tests.
    */
+  denied_mention_open_ids: external_exports.array(external_exports.string().min(1)).default([]),
+  /**
+   * Deprecated compatibility field. It is still parsed so older private
+   * configs do not fail, but mention policy is deny-list/default-allow.
+   * Use denied_mention_open_ids for new restrictions.
+   */
   allowed_mention_open_ids: external_exports.array(external_exports.string().min(1)).default([])
 }).default(responseSurfacePrototypeConfigDefaults);
 function isResponseSurfacePrototypeAllowlisted(config, facts) {
@@ -119607,12 +119634,30 @@ function isResponseSurfacePrototypeAllowlisted(config, facts) {
   const threadAllowed = config.allowed_threads.length > 0 && config.allowed_threads.includes(facts.threadId);
   return chatAllowed || threadAllowed;
 }
-function isResponseSurfaceMentionAllowed(config, userId) {
-  if (!config?.allow_agent_mentions) return false;
+function evaluateResponseSurfaceMentionPolicy(config, userId) {
+  if (!config?.allow_agent_mentions) {
+    return {
+      allowed: false,
+      rule: "agent_mentions_disabled",
+      reason: "Agent-authored mentions are disabled by allow_agent_mentions=false."
+    };
+  }
   const normalized = userId.trim().toLowerCase();
-  if (normalized === "all" || normalized === "@all") return false;
-  if (config.allowed_mention_open_ids.length === 0) return true;
-  return config.allowed_mention_open_ids.includes(userId);
+  if (normalized === "all" || normalized === "@all") {
+    return {
+      allowed: false,
+      rule: "broadcast_blocked",
+      reason: "Broadcast mentions such as @all are blocked."
+    };
+  }
+  if (config.denied_mention_open_ids.includes(userId)) {
+    return {
+      allowed: false,
+      rule: "denied_target",
+      reason: "Mention target is denied by denied_mention_open_ids."
+    };
+  }
+  return { allowed: true, rule: "allowed" };
 }
 function shouldProvideResponseSurfacePostClient(config) {
   return !!(config?.enabled && !config.kill_switch && config.post_outbound_enabled);
@@ -119797,14 +119842,19 @@ async function ensureStateFile(worktreePath) {
   await fs3.writeFile(file, JSON.stringify(initial, null, 2), "utf8");
 }
 async function readStateFile(worktreePath) {
+  return (await readStateFileDetailed(worktreePath)).state;
+}
+async function readStateFileDetailed(worktreePath) {
   const file = stateFilePathOf(worktreePath);
   let raw;
   try {
     raw = await fs3.readFile(file, "utf8");
   } catch (err) {
-    if (err.code === "ENOENT") return null;
+    if (err.code === "ENOENT") {
+      return { state: null, diagnostics: [] };
+    }
     console.warn(`[stateFile] read ${file} failed:`, err);
-    return null;
+    return { state: null, diagnostics: [] };
   }
   let parsed;
   try {
@@ -119822,11 +119872,11 @@ async function readStateFile(worktreePath) {
           `[stateFile] ${file} not valid JSON (repair also failed):`,
           err2
         );
-        return null;
+        return { state: null, diagnostics: [] };
       }
     } else {
       console.warn(`[stateFile] ${file} not valid JSON:`, err);
-      return null;
+      return { state: null, diagnostics: [] };
     }
   }
   const result = StateFileSchema.safeParse(parsed);
@@ -119835,9 +119885,22 @@ async function readStateFile(worktreePath) {
       `[stateFile] ${file} failed schema validation:`,
       result.error.issues
     );
-    return null;
+    return { state: null, diagnostics: [] };
   }
-  return result.data;
+  const diagnostics = diagnoseStateFile(parsed, result.data);
+  for (const diagnostic of diagnostics) {
+    console.warn(`[stateFile] ${file}: ${diagnostic}`);
+  }
+  return { state: result.data, diagnostics };
+}
+function diagnoseStateFile(parsed, state) {
+  if (parsed === null || typeof parsed !== "object") return [];
+  if (!Object.prototype.hasOwnProperty.call(parsed, "response_surface")) return [];
+  const rawSurface = parsed.response_surface;
+  if (rawSurface === void 0 || state.response_surface !== void 0) return [];
+  const parsedSurface = parseResponseSurfaceState(rawSurface);
+  const details = parsedSurface.diagnostics.length > 0 ? parsedSurface.diagnostics.join("; ") : "unknown parse failure";
+  return [`response_surface ignored: ${details}`];
 }
 function tryRepairBareQuotesInLastMessage(raw) {
   const startRe = /"last_message"\s*:\s*"/;
@@ -120660,6 +120723,13 @@ function derivePostIdempotencyKey(input) {
 
 // src/bridge/handler.ts
 var DEFAULT_CARDKIT_RESPONSE_SURFACE_TIMEOUT_MS = 20 * 60 * 1e3;
+function summarizeMentionPolicyRules(rules) {
+  const counts = /* @__PURE__ */ new Map();
+  for (const rule of rules) {
+    counts.set(rule, (counts.get(rule) ?? 0) + 1);
+  }
+  return Array.from(counts.entries()).map(([rule, count]) => `${rule}=${count}`).join(", ");
+}
 function execGit(cwd, args) {
   return new Promise((resolve2, reject) => {
     const child = child_process.spawn("git", args, {
@@ -121398,6 +121468,13 @@ var BridgeHandler = class {
             botGitIdentity: this.deps.botConfig?.git_identity,
             gitlabToken: this.deps.gitlabToken
           });
+          if (isAgentWorkspace && handle.pid != null) {
+            const sessionPidFile = path9.join(worktreePath, ".larkway", "runner.pid");
+            void fs6.mkdir(path9.dirname(sessionPidFile), { recursive: true }).then(
+              () => fs6.writeFile(sessionPidFile, JSON.stringify({ pid: handle.pid }), "utf8")
+            ).catch(() => {
+            });
+          }
           let sessionId;
           let trustedAnswerText = "";
           try {
@@ -121415,8 +121492,23 @@ var BridgeHandler = class {
             }
             const result = await handle.done;
             const cardKitTurnTimedOut = cardKitProgress != null && result.exitCode !== 0 && Date.now() - runnerStartedAt >= timeoutMs;
-            const rawReportedState = await readStateFile(worktreePath);
+            const reportedStateRead = await readStateFileDetailed(worktreePath);
+            const rawReportedState = reportedStateRead.state;
             const reportedState = rawReportedState?.updated_at != null && rawReportedState.updated_at !== preRunUpdatedAt ? rawReportedState : null;
+            if (reportedStateRead.diagnostics.length > 0 && reportedState !== null) {
+              await recordEvent({
+                status: "running",
+                appendPath: "state \u8BCA\u65AD",
+                reason: reportedStateRead.diagnostics.join("; ")
+              });
+            }
+            if (reportedState === null) {
+              await recordEvent({
+                status: "running",
+                appendPath: "\u672A\u66F4\u65B0 state.json",
+                reason: rawReportedState === null ? "\u672C\u8F6E\u7ED3\u675F\u65F6\u672A\u8BFB\u53D6\u5230 state.json\u3002" : "\u672C\u8F6E state.json \u6CA1\u6709 fresh updated_at\uFF0C\u5DF2\u5FFD\u7565\u65E7\u72B6\u6001\u3002"
+              });
+            }
             const now = Date.now();
             if (sessionId !== void 0 && currentExisting === void 0) {
               await this.deps.sessionStore.put({
@@ -121455,11 +121547,21 @@ var BridgeHandler = class {
             } else if (cardKitTimeoutFailure) {
               success = false;
               failureReason = `agent turn timed out after ${timeoutMs}ms; CardKit running card was finalized as interrupted`;
+              await recordEvent({
+                status: "running",
+                appendPath: "Agent \u8D85\u65F6",
+                reason: failureReason
+              });
             } else if (result.exitCode === 0) {
               success = true;
             } else {
               success = false;
               failureReason = `claude exited ${result.exitCode} \u4E14 bot \u672A\u66F4\u65B0 state.json status \u2014 \u53EF\u80FD\u5D29\u6E83`;
+              await recordEvent({
+                status: "running",
+                appendPath: "Agent \u5F02\u5E38\u9000\u51FA",
+                reason: failureReason
+              });
             }
             const fallbackAnswer = trustedAnswerText.trim() || cardKitProgress?.answerText.trim() || "";
             const cardBody = cardKitTimeoutFailure ? "\u26A0\uFE0F \u672C\u8F6E\u5904\u7406\u8D85\u65F6\uFF0C\u5DF2\u4E2D\u65AD\u3002\u8BF7\u518D @ \u6211\u4E00\u6B21\u91CD\u8BD5\u3002" : reportedState?.last_message ?? (fallbackAnswer ? fallbackAnswer : "\u26A0\uFE0F \u672C\u8F6E\u6CA1\u6709\u62FF\u5230 agent \u7684\u65B0\u56DE\u590D(\u53EF\u80FD\u88AB\u4E2D\u65AD\u6216\u672A\u66F4\u65B0\u72B6\u6001),\u518D @ \u6211\u4E00\u6B21\u91CD\u8BD5\u3002");
@@ -121480,9 +121582,31 @@ var BridgeHandler = class {
               contentBlocks: reportedState?.content_blocks
             };
             if (cardKitProgress) {
-              const mentions = (reportedState?.response_surface?.post?.mentions ?? []).filter(
-                (mention) => isResponseSurfaceMentionAllowed(prototypeConfig, mention.user_id)
-              );
+              const declaredMentions = reportedState?.response_surface?.post?.mentions ?? [];
+              const responseSurfacePostDeclared = reportedState?.response_surface?.post !== void 0;
+              const mentionPolicyResults = declaredMentions.map((mention) => ({
+                mention,
+                policy: evaluateResponseSurfaceMentionPolicy(prototypeConfig, mention.user_id)
+              }));
+              const mentions = mentionPolicyResults.filter(({ policy }) => policy.allowed).map(({ mention }) => mention);
+              const blockedMentionRules = mentionPolicyResults.filter(({ policy }) => !policy.allowed).map(({ policy }) => policy.rule);
+              if (responseSurfacePostDeclared && declaredMentions.length === 0) {
+                const reason = "response_surface.post was declared with an empty mentions array.";
+                console.warn("[bridge.handler] response_surface post has no mentions");
+                await recordEvent({
+                  status: "running",
+                  appendPath: "mention \u8BCA\u65AD",
+                  reason
+                });
+              } else if (declaredMentions.length > mentions.length) {
+                const reason = `response_surface mentions filtered by policy: ${mentions.length}/${declaredMentions.length} allowed; blocked rules: ${summarizeMentionPolicyRules(blockedMentionRules)}.`;
+                console.warn("[bridge.handler] response_surface mention policy filtered targets");
+                await recordEvent({
+                  status: "running",
+                  appendPath: "mention \u8BCA\u65AD",
+                  reason
+                });
+              }
               try {
                 await cardKitProgress.finalize({
                   title: baseCardPayload.titleOverride,
@@ -121793,7 +121917,7 @@ function isRuntimeEventRecord(value) {
 
 // src/housekeeping/gc.ts
 import { spawn } from "node:child_process";
-import { readFile as readFile4, readdir, stat } from "node:fs/promises";
+import { readFile as readFile4, readdir, rm, stat } from "node:fs/promises";
 import { join as pathJoin } from "node:path";
 var DEFAULT_SCAN_INTERVAL_MS = 30 * 60 * 1e3;
 var DEFAULT_IDLE_NOTIFY_MS = 4 * 60 * 60 * 1e3;
@@ -121805,12 +121929,20 @@ var Housekeeping = class {
   #idleCleanupMs;
   /** This housekeeping's bot scope — resolves which worktrees dir to sweep. */
   #botId;
+  /**
+   * Bot runtime. "agent_workspace" reclaims per-thread session dirs under
+   * agents/<id>/workspace/sessions/ via rm -rf (they are plain dirs / full
+   * clones, not git worktrees). Anything else (legacy) reclaims git worktrees
+   * under <botId>/worktrees/ via `git worktree remove`.
+   */
+  #runtime;
   /** thread_ids that have already received an idle-notify warn this session */
   #notified = /* @__PURE__ */ new Set();
   #timer;
   constructor(deps, opts) {
     this.#sessionStore = deps.sessionStore;
     this.#botId = deps.botId;
+    this.#runtime = deps.runtime;
     this.#scanIntervalMs = opts?.scanIntervalMs ?? DEFAULT_SCAN_INTERVAL_MS;
     this.#idleNotifyMs = opts?.idleNotifyMs ?? DEFAULT_IDLE_NOTIFY_MS;
     this.#idleCleanupMs = opts?.idleCleanupMs ?? DEFAULT_IDLE_CLEANUP_MS;
@@ -121855,9 +121987,9 @@ var Housekeeping = class {
       if (idleMs >= this.#idleCleanupMs) {
         const idleHours = Math.floor(idleMs / (60 * 60 * 1e3));
         console.warn(
-          `[housekeeping] \u8BDD\u9898 ${tid} idle ${idleHours}h+,worktree \u53EF\u6E05\u7406`
+          `[housekeeping] \u8BDD\u9898 ${tid} idle ${idleHours}h+,\u5DE5\u4F5C\u76EE\u5F55\u53EF\u6E05\u7406`
         );
-        void cleanupWorktree(tid, record.botId, dryRun);
+        void this.#cleanupThread(tid, record.botId, dryRun);
         this.#notified.delete(tid);
         continue;
       }
@@ -121878,32 +122010,46 @@ var Housekeeping = class {
    * cleanupWorktree (kill PIDs → git worktree remove --force).
    */
   async #sweepOrphans(liveThreadIds, now, dryRun) {
-    const worktreesDir = resolveWorktreesDir(this.#botId);
+    const reclaimDir = this.#runtime === "agent_workspace" ? resolveAgentWorkspaceSessionsDir(this.#botId ?? "") : resolveWorktreesDir(this.#botId);
     let dirNames;
     try {
-      const entries = await readdir(worktreesDir, { withFileTypes: true });
+      const entries = await readdir(reclaimDir, { withFileTypes: true });
       dirNames = entries.filter((e) => e.isDirectory()).map((e) => e.name);
     } catch (err) {
       if (err.code !== "ENOENT") {
-        console.error(`[gc] orphan sweep: cannot read ${worktreesDir}:`, err);
+        console.error(`[gc] orphan sweep: cannot read ${reclaimDir}:`, err);
       }
       return;
     }
     for (const name of selectOrphanWorktreeNames(dirNames, liveThreadIds)) {
-      const wtPath = pathJoin(worktreesDir, name);
+      if (name.startsWith("_")) continue;
+      const dirPath = pathJoin(reclaimDir, name);
       let ageMs;
       try {
-        ageMs = now - (await stat(wtPath)).mtimeMs;
+        ageMs = now - (await stat(dirPath)).mtimeMs;
       } catch {
         continue;
       }
       if (ageMs < this.#idleCleanupMs) continue;
       const ageHours = Math.floor(ageMs / (60 * 60 * 1e3));
       console.warn(
-        `[housekeeping] orphan worktree ${name}(\u65E0 session \u8BB0\u5F55, idle ${ageHours}h+)\u2014 \u6E05\u7406`
+        `[housekeeping] orphan ${name}(\u65E0 session \u8BB0\u5F55, idle ${ageHours}h+)\u2014 \u6E05\u7406`
       );
-      await cleanupWorktree(name, this.#botId, dryRun);
+      await this.#cleanupThread(name, this.#botId, dryRun);
+    }
+  }
+  /**
+   * Runtime-aware reclaim of one thread's working dir.
+   * - agent_workspace: rm -rf agents/<id>/workspace/sessions/<tid> (plain dir /
+   *   full clones — `git worktree remove` cannot reclaim these).
+   * - legacy:          git worktree remove --force <botId>/worktrees/<tid>.
+   * Both kill any lingering runner PIDs first (idle >24h → normally dead).
+   */
+  #cleanupThread(threadId, botId, dryRun) {
+    if (this.#runtime === "agent_workspace") {
+      return cleanupAgentSession(threadId, botId ?? this.#botId, dryRun);
     }
+    return cleanupWorktree(threadId, botId, dryRun);
   }
 };
 function selectOrphanWorktreeNames(dirNames, liveThreadIds) {
@@ -122034,6 +122180,61 @@ async function cleanupWorktree(threadId, botId, dryRun) {
     console.error(`[gc] worktree remove failed for path=${worktreePath}:`, err);
   }
 }
+function isReclaimableSessionPath(p) {
+  const m = /[/\\]workspace[/\\]sessions[/\\]([^/\\]+)[/\\]?$/.exec(p);
+  if (m === null) return false;
+  const seg = m[1];
+  return seg !== "." && seg !== "..";
+}
+async function removeSessionDir(sessionPath, dryRun) {
+  if (!isReclaimableSessionPath(sessionPath)) {
+    console.error(`[gc] refusing to rm -rf non-session path: ${sessionPath}`);
+    return;
+  }
+  if (dryRun) {
+    console.log(`[gc] dry-run: would rm -rf ${sessionPath}`);
+    return;
+  }
+  console.log(`[gc] rm -rf ${sessionPath}`);
+  try {
+    await rm(sessionPath, { recursive: true, force: true });
+  } catch (err) {
+    console.error(`[gc] rm -rf failed for ${sessionPath}:`, err);
+  }
+}
+async function cleanupAgentSession(threadId, agentId, dryRun) {
+  if (!agentId) {
+    console.error(
+      `[gc] cleanupAgentSession: missing agentId for thread=${threadId}`
+    );
+    return;
+  }
+  let sessionPath;
+  try {
+    sessionPath = resolveAgentSessionPath(agentId, threadId);
+  } catch (err) {
+    console.error(`[gc] invalid session threadId=${threadId}:`, err);
+    return;
+  }
+  console.log(
+    `[gc] cleanup session thread=${threadId} path=${sessionPath} dryRun=${dryRun}`
+  );
+  let pids;
+  try {
+    pids = await findPidsByWorktree(sessionPath);
+  } catch (err) {
+    console.error(`[gc] pid lookup failed for path=${sessionPath}:`, err);
+    pids = [];
+  }
+  const alivePids = pids.filter(isPidAlive);
+  if (alivePids.length > 0) {
+    console.warn(
+      `[gc] skip live session thread=${threadId} path=${sessionPath}: runner pid(s) [${alivePids.join(", ")}] still alive \u2014 not reclaiming in-flight work`
+    );
+    return;
+  }
+  await removeSessionDir(sessionPath, dryRun);
+}
 
 // src/config/botLoader.ts
 import { readdir as readdir2, readFile as readFile5 } from "node:fs/promises";
@@ -126008,7 +126209,8 @@ stderr: ${stderr}` : "")
   return {
     events: generateEvents(),
     done,
-    kill: doKill
+    kill: doKill,
+    pid: child.pid ?? void 0
   };
 }
 var ClaudeRunner = class {
@@ -126365,7 +126567,8 @@ stderr: ${stderr}` : "")
   return {
     events: generateEvents(),
     done,
-    kill: doKill
+    kill: doKill,
+    pid: child.pid ?? void 0
   };
 }
 var CodexRunner = class {
@@ -126839,7 +127042,11 @@ async function runV2Mode({
         await upsertRuntimeEvent(larkwayHome(), bot.id, patch);
       }
     });
-    const housekeeping = new Housekeeping({ sessionStore, botId: bot.id });
+    const housekeeping = new Housekeeping({
+      sessionStore,
+      botId: bot.id,
+      runtime: bot.runtime
+    });
     const inst = {
       bot,
       client,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "larkway",
-  "version": "0.3.28",
+  "version": "0.3.30",
   "description": "Thin bridge: Feishu thread to local Claude Code CLI",
   "license": "MIT",
   "author": "Chuck Wu (chuckwu0)",