larkway 0.3.29 → 0.3.30

package/README.md

@@ -8,7 +8,7 @@
 
 You @ the bot in a Feishu thread. It runs on your machine — reading your real codebase, executing commands, opening MRs — and posts the result back. You define what the agent knows and what it can do. Larkway just carries the messages.
 
-**Current release: v0.3.29**
+**Current release: v0.3.30**
 
 ---
 

package/README.zh.md

@@ -8,7 +8,7 @@
 
 你在飞书话题里 @ bot，它在你的机器上运行——读真实代码库、执行命令、开 MR——把结果贴回飞书。你定义 agent 知道什么、能做什么。Larkway 只负责传递消息。
 
-**当前版本：v0.3.29**
+**当前版本：v0.3.30**
 
 ---
 

package/dist/cli/index.js

@@ -124829,6 +124829,9 @@ import path from "node:path";
 
 // src/responseSurface.ts
 var NonEmptyString = external_exports.string().trim().min(1);
+var CardKitMentionUserIdSchema = NonEmptyString.max(128).regex(/^[A-Za-z0-9_:-]+$/, {
+  message: "mention user_id must contain only letters, numbers, underscore, colon, or hyphen"
+});
 function defaultResponseSurfacePrototypeConfig() {
   return {
     enabled: true,
@@ -124838,6 +124841,7 @@ function defaultResponseSurfacePrototypeConfig() {
     post_outbound_enabled: true,
     cardkit_streaming_enabled: true,
     allow_agent_mentions: true,
+    denied_mention_open_ids: [],
     allowed_mention_open_ids: []
   };
 }
@@ -124850,6 +124854,7 @@ var responseSurfacePrototypeConfigDefaults = () => ({
   post_outbound_enabled: true,
   cardkit_streaming_enabled: true,
   allow_agent_mentions: true,
+  denied_mention_open_ids: [],
   allowed_mention_open_ids: []
 });
 var ResponseSurfaceModeSchema = external_exports.enum(["card", "post", "hybrid"]);
@@ -124862,7 +124867,7 @@ var ResponseSurfaceCapabilitySchema = external_exports.enum([
   "audit"
 ]);
 var MentionTargetSchema = external_exports.object({
-  user_id: NonEmptyString.max(128),
+  user_id: CardKitMentionUserIdSchema,
   label: external_exports.string().trim().min(1).max(80).optional()
 });
 var ResponseSurfacePostSchema = external_exports.object({
@@ -124873,7 +124878,7 @@ var ResponseSurfaceCardSchema = external_exports.object({
   capabilities: external_exports.array(ResponseSurfaceCapabilitySchema).max(8).default([])
 });
 var StrictResponseSurfaceStateSchema = external_exports.object({
-  mode: ResponseSurfaceModeSchema,
+  mode: ResponseSurfaceModeSchema.optional().default("card"),
   primary: ResponseSurfacePrimarySchema.optional(),
   post: ResponseSurfacePostSchema.optional(),
   card: ResponseSurfaceCardSchema.optional()
@@ -124888,9 +124893,18 @@ var StrictResponseSurfaceStateSchema = external_exports.object({
 });
 var ResponseSurfaceStateSchema = external_exports.preprocess((value) => {
   if (value === void 0) return void 0;
-  const result = StrictResponseSurfaceStateSchema.safeParse(value);
-  return result.success ? result.data : void 0;
+  return parseResponseSurfaceState(value).state;
 }, StrictResponseSurfaceStateSchema.optional());
+function parseResponseSurfaceState(value) {
+  const result = StrictResponseSurfaceStateSchema.safeParse(value);
+  if (result.success) return { state: result.data, diagnostics: [] };
+  return {
+    diagnostics: result.error.issues.map((issue) => {
+      const path25 = issue.path.length > 0 ? issue.path.join(".") : "<root>";
+      return `${path25}: ${issue.message}`;
+    })
+  };
+}
 var ResponseSurfacePrototypeConfigSchema = external_exports.object({
   /**
    * Master gate. Default true makes response surfaces available unless the
@@ -124931,10 +124945,16 @@ var ResponseSurfacePrototypeConfigSchema = external_exports.object({
    */
   allow_agent_mentions: external_exports.boolean().default(true),
   /**
-   * Optional target allowlist for real post @ mentions. Empty means the Agent
-   * may choose mention targets; non-empty narrows mentions to this exact set.
+   * Optional deny-list for Agent-authored @ mentions. Empty means the Agent
+   * may choose mention targets, except broadcast aliases such as @all.
    * Keep real IDs in private bot config, never in public docs/tests.
    */
+  denied_mention_open_ids: external_exports.array(external_exports.string().min(1)).default([]),
+  /**
+   * Deprecated compatibility field. It is still parsed so older private
+   * configs do not fail, but mention policy is deny-list/default-allow.
+   * Use denied_mention_open_ids for new restrictions.
+   */
   allowed_mention_open_ids: external_exports.array(external_exports.string().min(1)).default([])
 }).default(responseSurfacePrototypeConfigDefaults);
 

package/dist/main.js

@@ -118687,7 +118687,7 @@ function renderStateContract(stateFilePath) {
     "- card_title/card_color: \u517C\u5BB9\u5B57\u6BB5; \u9ED8\u8BA4 CardKit \u4E0D\u6E32\u67D3\u9876\u90E8\u6807\u9898\u8272\u6761,legacy/fallback \u5361\u7247\u8DEF\u5F84\u53EF\u80FD\u4F7F\u7528",
     "- image_blocks: \u53EF\u9009\u56FE\u7247\u9884\u89C8\u5757\u6570\u7EC4,\u6700\u591A 4 \u4E2A\u3002\u6BCF\u9879 `{img_key, alt?, title?, mode?, preview?}`; `img_key` \u5FC5\u987B\u662F\u5DF2\u4E0A\u4F20/\u53EF\u7528\u4E8E\u5361\u7247\u7684 Feishu \u56FE\u7247 key,`alt` \u7701\u7565\u65F6 bridge \u9ED8\u8BA4\u201C\u56FE\u7247\u9884\u89C8\u201D,`mode` \u53EA\u5141\u8BB8 `crop_center`/`fit_horizontal` \u5E76\u6620\u5C04\u5230 Card JSON 2.0 `scale_type`,`preview` \u9ED8\u8BA4 true\u3002bridge \u4E0D\u8D1F\u8D23\u4E0B\u8F7D/\u4E0A\u4F20/\u9009\u62E9\u56FE\u7247;\u8FD9\u4E9B\u7531\u4F60\u7528 lark-cli \u7B49\u5DE5\u5177\u5148\u5B8C\u6210\u3002",
     '- content_blocks: \u53EF\u9009\u6709\u5E8F\u6B63\u6587\u5757\u6570\u7EC4,\u6700\u591A 12 \u4E2A block\u3001\u6700\u591A 4 \u4E2A image block\u3002\u53EA\u652F\u6301\u7A84 union:`{type:"markdown", content}` \u548C `{type:"image", img_key, alt?, title?, mode?, preview?}`;\u4E0D\u652F\u6301 raw card JSON\u3002\u7528\u4E8E\u6B63\u6587\u4E0E\u56FE\u7247\u4EA4\u9519\u6392\u7248,\u4F8B\u5982 markdown -> image -> markdown -> image\u3002\u82E5 `content_blocks` \u975E\u7A7A,bridge \u4EE5\u5B83\u4F5C\u4E3A\u4E3B\u6B63\u6587\u5E76\u5FFD\u7565 `last_message` + `image_blocks` \u7684\u6B63\u6587\u6E32\u67D3,\u907F\u514D\u91CD\u590D;\u82E5\u7701\u7565\u5219\u4FDD\u6301\u65E7 `last_message` + `image_blocks` \u884C\u4E3A\u3002',
-    "- response_surface: \u53EF\u9009\u8986\u76D6\u5B57\u6BB5,\u4E3B\u8981\u7528\u4E8E `{post:{mentions:[{user_id,label?}]}}` late peer @\u3002\u9ED8\u8BA4\u53EF\u4E0D\u5199;bridge \u6309 CardKit \u6D41\u5F0F\u5361\u7247\u5904\u7406,\u6700\u7EC8\u6536\u6210\u5E72\u51C0\u603B\u7ED3\u5361\u3002\u65E7 `mode`/`primary` \u4EC5\u517C\u5BB9\u89E3\u6790,\u4E0D\u518D\u9009\u62E9 post-only/hybrid \u4E3B\u54CD\u5E94\u9762\u3002\u9700\u8981\u771F\u5B9E @ \u65F6\u628A\u76EE\u6807\u5199\u5165 `post.mentions`;\u4E0D\u8981\u5199 raw Feishu post/card JSON\u3002",
+    "- response_surface: \u53EF\u9009\u8986\u76D6\u5B57\u6BB5,\u4E3B\u8981\u7528\u4E8E `{post:{mentions:[{user_id,label?}]}}` late peer @\u3002\u9ED8\u8BA4\u53EF\u4E0D\u5199;bridge \u6309 CardKit \u6D41\u5F0F\u5361\u7247\u5904\u7406,\u6700\u7EC8\u6536\u6210\u5E72\u51C0\u603B\u7ED3\u5361\u3002\u65E7 `mode`/`primary` \u4EC5\u517C\u5BB9\u89E3\u6790,\u4E0D\u518D\u9009\u62E9 post-only/hybrid \u4E3B\u54CD\u5E94\u9762\u3002\u8FD9\u91CC\u7684 late @ \u53EA\u662F\u6700\u7EC8\u5361\u7247\u91CC\u7684\u89C6\u89C9\u63D0\u793A;\u9700\u8981 peer bot \u6D88\u8D39\u6B63\u6587\u7684 handoff \u5FC5\u987B\u7531 Agent/\u56E2\u961F\u5DE5\u4F5C\u6D41\u53D1\u9001\u771F\u5B9E Feishu post + at \u6807\u7B7E\u3002\u4E0D\u8981\u5199 raw Feishu post/card JSON\u3002",
     "- scheduled reply / daily social ops review card \u7B49\u9700\u8981\u201C\u5E73\u53F0\u6B63\u6587 + \u5339\u914D\u56FE\u7247\u201D\u540C\u6BB5\u76F8\u90BB\u5C55\u793A\u7684\u573A\u666F,\u5E94\u5148\u53D6\u5F97\u5404\u56FE\u7247 `img_key`,\u518D\u5199 `content_blocks` \u4E3A `\u5E73\u53F0 markdown -> \u5BF9\u5E94 image -> \u4E0B\u4E2A\u5E73\u53F0 markdown -> \u5BF9\u5E94 image`;\u4E0D\u8981\u7528\u5355\u72EC\u8BDD\u9898\u56FE\u7247\u6D88\u606F\u6216\u5C3E\u90E8 `image_blocks` \u4EE3\u66FF\u9A8C\u6536\u9762\u3002",
     "- dev_url / mr_url / \u5176\u4F59\u4E1A\u52A1\u5B57\u6BB5:\u81EA\u7531\u5199\u5165,bridge \u4E0D\u611F\u77E5\u5176\u4E1A\u52A1\u542B\u4E49;\u8981\u8BA9\u8FD0\u8425\u770B\u5230,\u8BF7\u5199\u8FDB last_message",
     "- updated_at: ISO 8601 timestamp",
@@ -118738,6 +118738,9 @@ function renderPeersBlock(peers) {
     "- \u4E0D\u8981\u628A\u540C\u4E00\u4EFB\u52A1\u540C\u65F6\u8F6C\u53D1\u7ED9\u591A\u4E2A peer",
     '- @ peer \u5FC5\u987B\u7528 **post \u6D88\u606F** + at \u6807\u7B7E `{"tag":"at","user_id":"ou_xxx"}`(\u7528\u4E0A\u9762\u7684 open_id),',
     "  **\u4E25\u7981\u7528\u7EAF text \u7684 @xxx**(\u7EAF\u6587\u672C @ \u4E0D\u4F1A\u771F\u6B63\u89E6\u8FBE\u5BF9\u65B9 bot)",
+    "- \u53D1\u8D77 peer handoff \u540E,\u5728\u4F60\u7684\u534F\u8C03\u5C42/\u5DE5\u4F5C\u533A\u53F0\u8D26\u8BB0\u5F55 task_id\u3001assignee\u3001\u6765\u6E90\u3001\u671F\u671B\u4EA7\u51FA\u3001deadline \u548C\u5347\u7EA7\u4EBA;\u6CA1\u6709\u4E13\u7528 skill \u65F6\u81F3\u5C11\u5199\u5165\u672C session summary\u3002",
+    "- \u6536\u5230 peer handoff \u540E,\u5148\u7528\u771F\u5B9E post \u8F7B\u91CF ack(\u6536\u5230/\u5F00\u59CB)\u518D\u505A\u957F\u4EFB\u52A1;\u5B8C\u6210\u3001\u5931\u8D25\u6216\u963B\u585E\u65F6\u5FC5\u987B\u7528\u771F\u5B9E post \u56DE\u62A5\u7EC8\u6001,\u4E0D\u8981\u8BA9\u94FE\u8DEF\u9759\u9ED8\u505C\u5728\u4F60\u8FD9\u91CC\u3002",
+    "- \u9ED8\u8BA4 deadline \u53EF\u6309\u56E2\u961F\u5DE5\u4F5C\u6D41\u8BBE\u7F6E(\u5E38\u89C1\u9ED8\u8BA4 15 \u5206\u949F);\u8D85\u65F6\u68C0\u6D4B\u3001\u91CD\u8BD5/\u91CD\u6D3E/\u5347\u7EA7\u5C5E\u4E8E\u534F\u8C03\u5C42 skill/workspace \u903B\u8F91,\u4E0D\u8981\u671F\u5F85 bridge \u66FF\u4F60\u7F16\u6392\u3002",
     "</peer-bots>"
   ];
 }
@@ -119494,6 +119497,9 @@ import path6 from "node:path";
 
 // src/responseSurface.ts
 var NonEmptyString = external_exports.string().trim().min(1);
+var CardKitMentionUserIdSchema = NonEmptyString.max(128).regex(/^[A-Za-z0-9_:-]+$/, {
+  message: "mention user_id must contain only letters, numbers, underscore, colon, or hyphen"
+});
 function defaultResponseSurfacePrototypeConfig() {
   return {
     enabled: true,
@@ -119503,6 +119509,7 @@ function defaultResponseSurfacePrototypeConfig() {
     post_outbound_enabled: true,
     cardkit_streaming_enabled: true,
     allow_agent_mentions: true,
+    denied_mention_open_ids: [],
     allowed_mention_open_ids: []
   };
 }
@@ -119515,6 +119522,7 @@ var responseSurfacePrototypeConfigDefaults = () => ({
   post_outbound_enabled: true,
   cardkit_streaming_enabled: true,
   allow_agent_mentions: true,
+  denied_mention_open_ids: [],
   allowed_mention_open_ids: []
 });
 var ResponseSurfaceModeSchema = external_exports.enum(["card", "post", "hybrid"]);
@@ -119527,7 +119535,7 @@ var ResponseSurfaceCapabilitySchema = external_exports.enum([
   "audit"
 ]);
 var MentionTargetSchema = external_exports.object({
-  user_id: NonEmptyString.max(128),
+  user_id: CardKitMentionUserIdSchema,
   label: external_exports.string().trim().min(1).max(80).optional()
 });
 var ResponseSurfacePostSchema = external_exports.object({
@@ -119538,7 +119546,7 @@ var ResponseSurfaceCardSchema = external_exports.object({
   capabilities: external_exports.array(ResponseSurfaceCapabilitySchema).max(8).default([])
 });
 var StrictResponseSurfaceStateSchema = external_exports.object({
-  mode: ResponseSurfaceModeSchema,
+  mode: ResponseSurfaceModeSchema.optional().default("card"),
   primary: ResponseSurfacePrimarySchema.optional(),
   post: ResponseSurfacePostSchema.optional(),
   card: ResponseSurfaceCardSchema.optional()
@@ -119553,9 +119561,18 @@ var StrictResponseSurfaceStateSchema = external_exports.object({
 });
 var ResponseSurfaceStateSchema = external_exports.preprocess((value) => {
   if (value === void 0) return void 0;
-  const result = StrictResponseSurfaceStateSchema.safeParse(value);
-  return result.success ? result.data : void 0;
+  return parseResponseSurfaceState(value).state;
 }, StrictResponseSurfaceStateSchema.optional());
+function parseResponseSurfaceState(value) {
+  const result = StrictResponseSurfaceStateSchema.safeParse(value);
+  if (result.success) return { state: result.data, diagnostics: [] };
+  return {
+    diagnostics: result.error.issues.map((issue) => {
+      const path16 = issue.path.length > 0 ? issue.path.join(".") : "<root>";
+      return `${path16}: ${issue.message}`;
+    })
+  };
+}
 var ResponseSurfacePrototypeConfigSchema = external_exports.object({
   /**
    * Master gate. Default true makes response surfaces available unless the
@@ -119596,10 +119613,16 @@ var ResponseSurfacePrototypeConfigSchema = external_exports.object({
    */
   allow_agent_mentions: external_exports.boolean().default(true),
   /**
-   * Optional target allowlist for real post @ mentions. Empty means the Agent
-   * may choose mention targets; non-empty narrows mentions to this exact set.
+   * Optional deny-list for Agent-authored @ mentions. Empty means the Agent
+   * may choose mention targets, except broadcast aliases such as @all.
    * Keep real IDs in private bot config, never in public docs/tests.
    */
+  denied_mention_open_ids: external_exports.array(external_exports.string().min(1)).default([]),
+  /**
+   * Deprecated compatibility field. It is still parsed so older private
+   * configs do not fail, but mention policy is deny-list/default-allow.
+   * Use denied_mention_open_ids for new restrictions.
+   */
   allowed_mention_open_ids: external_exports.array(external_exports.string().min(1)).default([])
 }).default(responseSurfacePrototypeConfigDefaults);
 function isResponseSurfacePrototypeAllowlisted(config, facts) {
@@ -119611,12 +119634,30 @@ function isResponseSurfacePrototypeAllowlisted(config, facts) {
   const threadAllowed = config.allowed_threads.length > 0 && config.allowed_threads.includes(facts.threadId);
   return chatAllowed || threadAllowed;
 }
-function isResponseSurfaceMentionAllowed(config, userId) {
-  if (!config?.allow_agent_mentions) return false;
+function evaluateResponseSurfaceMentionPolicy(config, userId) {
+  if (!config?.allow_agent_mentions) {
+    return {
+      allowed: false,
+      rule: "agent_mentions_disabled",
+      reason: "Agent-authored mentions are disabled by allow_agent_mentions=false."
+    };
+  }
   const normalized = userId.trim().toLowerCase();
-  if (normalized === "all" || normalized === "@all") return false;
-  if (config.allowed_mention_open_ids.length === 0) return true;
-  return config.allowed_mention_open_ids.includes(userId);
+  if (normalized === "all" || normalized === "@all") {
+    return {
+      allowed: false,
+      rule: "broadcast_blocked",
+      reason: "Broadcast mentions such as @all are blocked."
+    };
+  }
+  if (config.denied_mention_open_ids.includes(userId)) {
+    return {
+      allowed: false,
+      rule: "denied_target",
+      reason: "Mention target is denied by denied_mention_open_ids."
+    };
+  }
+  return { allowed: true, rule: "allowed" };
 }
 function shouldProvideResponseSurfacePostClient(config) {
   return !!(config?.enabled && !config.kill_switch && config.post_outbound_enabled);
@@ -119801,14 +119842,19 @@ async function ensureStateFile(worktreePath) {
   await fs3.writeFile(file, JSON.stringify(initial, null, 2), "utf8");
 }
 async function readStateFile(worktreePath) {
+  return (await readStateFileDetailed(worktreePath)).state;
+}
+async function readStateFileDetailed(worktreePath) {
   const file = stateFilePathOf(worktreePath);
   let raw;
   try {
     raw = await fs3.readFile(file, "utf8");
   } catch (err) {
-    if (err.code === "ENOENT") return null;
+    if (err.code === "ENOENT") {
+      return { state: null, diagnostics: [] };
+    }
     console.warn(`[stateFile] read ${file} failed:`, err);
-    return null;
+    return { state: null, diagnostics: [] };
   }
   let parsed;
   try {
@@ -119826,11 +119872,11 @@ async function readStateFile(worktreePath) {
           `[stateFile] ${file} not valid JSON (repair also failed):`,
           err2
         );
-        return null;
+        return { state: null, diagnostics: [] };
       }
     } else {
       console.warn(`[stateFile] ${file} not valid JSON:`, err);
-      return null;
+      return { state: null, diagnostics: [] };
     }
   }
   const result = StateFileSchema.safeParse(parsed);
@@ -119839,9 +119885,22 @@ async function readStateFile(worktreePath) {
       `[stateFile] ${file} failed schema validation:`,
       result.error.issues
     );
-    return null;
+    return { state: null, diagnostics: [] };
   }
-  return result.data;
+  const diagnostics = diagnoseStateFile(parsed, result.data);
+  for (const diagnostic of diagnostics) {
+    console.warn(`[stateFile] ${file}: ${diagnostic}`);
+  }
+  return { state: result.data, diagnostics };
+}
+function diagnoseStateFile(parsed, state) {
+  if (parsed === null || typeof parsed !== "object") return [];
+  if (!Object.prototype.hasOwnProperty.call(parsed, "response_surface")) return [];
+  const rawSurface = parsed.response_surface;
+  if (rawSurface === void 0 || state.response_surface !== void 0) return [];
+  const parsedSurface = parseResponseSurfaceState(rawSurface);
+  const details = parsedSurface.diagnostics.length > 0 ? parsedSurface.diagnostics.join("; ") : "unknown parse failure";
+  return [`response_surface ignored: ${details}`];
 }
 function tryRepairBareQuotesInLastMessage(raw) {
   const startRe = /"last_message"\s*:\s*"/;
@@ -120664,6 +120723,13 @@ function derivePostIdempotencyKey(input) {
 
 // src/bridge/handler.ts
 var DEFAULT_CARDKIT_RESPONSE_SURFACE_TIMEOUT_MS = 20 * 60 * 1e3;
+function summarizeMentionPolicyRules(rules) {
+  const counts = /* @__PURE__ */ new Map();
+  for (const rule of rules) {
+    counts.set(rule, (counts.get(rule) ?? 0) + 1);
+  }
+  return Array.from(counts.entries()).map(([rule, count]) => `${rule}=${count}`).join(", ");
+}
 function execGit(cwd, args) {
   return new Promise((resolve2, reject) => {
     const child = child_process.spawn("git", args, {
@@ -121426,8 +121492,23 @@ var BridgeHandler = class {
             }
             const result = await handle.done;
             const cardKitTurnTimedOut = cardKitProgress != null && result.exitCode !== 0 && Date.now() - runnerStartedAt >= timeoutMs;
-            const rawReportedState = await readStateFile(worktreePath);
+            const reportedStateRead = await readStateFileDetailed(worktreePath);
+            const rawReportedState = reportedStateRead.state;
             const reportedState = rawReportedState?.updated_at != null && rawReportedState.updated_at !== preRunUpdatedAt ? rawReportedState : null;
+            if (reportedStateRead.diagnostics.length > 0 && reportedState !== null) {
+              await recordEvent({
+                status: "running",
+                appendPath: "state \u8BCA\u65AD",
+                reason: reportedStateRead.diagnostics.join("; ")
+              });
+            }
+            if (reportedState === null) {
+              await recordEvent({
+                status: "running",
+                appendPath: "\u672A\u66F4\u65B0 state.json",
+                reason: rawReportedState === null ? "\u672C\u8F6E\u7ED3\u675F\u65F6\u672A\u8BFB\u53D6\u5230 state.json\u3002" : "\u672C\u8F6E state.json \u6CA1\u6709 fresh updated_at\uFF0C\u5DF2\u5FFD\u7565\u65E7\u72B6\u6001\u3002"
+              });
+            }
             const now = Date.now();
             if (sessionId !== void 0 && currentExisting === void 0) {
               await this.deps.sessionStore.put({
@@ -121466,11 +121547,21 @@ var BridgeHandler = class {
             } else if (cardKitTimeoutFailure) {
               success = false;
               failureReason = `agent turn timed out after ${timeoutMs}ms; CardKit running card was finalized as interrupted`;
+              await recordEvent({
+                status: "running",
+                appendPath: "Agent \u8D85\u65F6",
+                reason: failureReason
+              });
             } else if (result.exitCode === 0) {
               success = true;
             } else {
               success = false;
               failureReason = `claude exited ${result.exitCode} \u4E14 bot \u672A\u66F4\u65B0 state.json status \u2014 \u53EF\u80FD\u5D29\u6E83`;
+              await recordEvent({
+                status: "running",
+                appendPath: "Agent \u5F02\u5E38\u9000\u51FA",
+                reason: failureReason
+              });
             }
             const fallbackAnswer = trustedAnswerText.trim() || cardKitProgress?.answerText.trim() || "";
             const cardBody = cardKitTimeoutFailure ? "\u26A0\uFE0F \u672C\u8F6E\u5904\u7406\u8D85\u65F6\uFF0C\u5DF2\u4E2D\u65AD\u3002\u8BF7\u518D @ \u6211\u4E00\u6B21\u91CD\u8BD5\u3002" : reportedState?.last_message ?? (fallbackAnswer ? fallbackAnswer : "\u26A0\uFE0F \u672C\u8F6E\u6CA1\u6709\u62FF\u5230 agent \u7684\u65B0\u56DE\u590D(\u53EF\u80FD\u88AB\u4E2D\u65AD\u6216\u672A\u66F4\u65B0\u72B6\u6001),\u518D @ \u6211\u4E00\u6B21\u91CD\u8BD5\u3002");
@@ -121491,9 +121582,31 @@ var BridgeHandler = class {
               contentBlocks: reportedState?.content_blocks
             };
             if (cardKitProgress) {
-              const mentions = (reportedState?.response_surface?.post?.mentions ?? []).filter(
-                (mention) => isResponseSurfaceMentionAllowed(prototypeConfig, mention.user_id)
-              );
+              const declaredMentions = reportedState?.response_surface?.post?.mentions ?? [];
+              const responseSurfacePostDeclared = reportedState?.response_surface?.post !== void 0;
+              const mentionPolicyResults = declaredMentions.map((mention) => ({
+                mention,
+                policy: evaluateResponseSurfaceMentionPolicy(prototypeConfig, mention.user_id)
+              }));
+              const mentions = mentionPolicyResults.filter(({ policy }) => policy.allowed).map(({ mention }) => mention);
+              const blockedMentionRules = mentionPolicyResults.filter(({ policy }) => !policy.allowed).map(({ policy }) => policy.rule);
+              if (responseSurfacePostDeclared && declaredMentions.length === 0) {
+                const reason = "response_surface.post was declared with an empty mentions array.";
+                console.warn("[bridge.handler] response_surface post has no mentions");
+                await recordEvent({
+                  status: "running",
+                  appendPath: "mention \u8BCA\u65AD",
+                  reason
+                });
+              } else if (declaredMentions.length > mentions.length) {
+                const reason = `response_surface mentions filtered by policy: ${mentions.length}/${declaredMentions.length} allowed; blocked rules: ${summarizeMentionPolicyRules(blockedMentionRules)}.`;
+                console.warn("[bridge.handler] response_surface mention policy filtered targets");
+                await recordEvent({
+                  status: "running",
+                  appendPath: "mention \u8BCA\u65AD",
+                  reason
+                });
+              }
               try {
                 await cardKitProgress.finalize({
                   title: baseCardPayload.titleOverride,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "larkway",
-  "version": "0.3.29",
+  "version": "0.3.30",
   "description": "Thin bridge: Feishu thread to local Claude Code CLI",
   "license": "MIT",
   "author": "Chuck Wu (chuckwu0)",