larkway 0.3.64 → 0.3.66

package/README.md

@@ -8,7 +8,7 @@
 
 You @ the bot in a Feishu thread. It runs on your machine — reading your real codebase, executing commands, opening MRs — and posts the result back. You define what the agent knows and what it can do. Larkway just carries the messages.
 
-**Current release: v0.3.64**
+**Current release: v0.3.66**
 
 ---
 
@@ -141,6 +141,12 @@ not enforcement.
 - Secrets in `~/.larkway/.env` are shared across all bots on the bridge and
   visible to any agent that can read your home directory — don't mix a
   low-trust open bot and high-value credentials on the same host.
+- By default all bots share the host's global lark-cli config dir — including
+  any personal `lark-cli auth login` you did there (calendar/mail/drive).
+  Set `lark_cli_isolated: true` in a bot's yaml to give it a private config
+  dir (`~/.larkway/<botId>/lark-cli/`) holding only its own app profile:
+  bot-only identity by default, personal access only if you explicitly
+  authorize inside that dir.
 
 ---
 

package/README.zh.md

@@ -8,7 +8,7 @@
 
 你在飞书话题里 @ bot，它在你的机器上运行——读真实代码库、执行命令、开 MR——把结果贴回飞书。你定义 agent 知道什么、能做什么。Larkway 只负责传递消息。
 
-**当前版本：v0.3.64**
+**当前版本：v0.3.66**
 
 ---
 
@@ -115,6 +115,8 @@ Larkway 不注入 `ANTHROPIC_API_KEY` 或任何其他 API key。子进程继承
 
 密钥只存在本机 `~/.larkway/.env`（权限 0600）。配置和 memory 不含密钥。
 
+默认所有 bot 共享宿主机的全局 lark-cli 配置目录——包括你在里面做过的个人 `lark-cli auth login`(日历/邮箱/云盘)。在 bot 的 yaml 里设 `lark_cli_isolated: true` 可给它一个私有配置目录(`~/.larkway/<botId>/lark-cli/`),里面只有它自己的应用 profile:默认 bot-only 身份,只有你显式在该目录内授权,agent 才能获得个人资源访问。
+
 ---
 
 ## 功能

package/dist/cli/index.js

@@ -53,6 +53,7 @@ __export(paths_exports, {
   resolveAgentWorkspacePathFromHome: () => resolveAgentWorkspacePathFromHome,
   resolveAgentWorkspaceReposDir: () => resolveAgentWorkspaceReposDir,
   resolveAgentWorkspaceSessionsDir: () => resolveAgentWorkspaceSessionsDir,
+  resolveBotLarkCliDir: () => resolveBotLarkCliDir,
   resolveCandidateAlertsPath: () => resolveCandidateAlertsPath,
   resolveKnowledgeDir: () => resolveKnowledgeDir,
   resolveLarkwayDir: () => resolveLarkwayDir,
@@ -70,6 +71,9 @@ function larkwayHome() {
   if (env && env.trim() !== "") return resolve(env);
   return join(homedir(), ".larkway");
 }
+function resolveBotLarkCliDir(botId) {
+  return join(resolveLarkwayDir(botId), "lark-cli");
+}
 function resolveLarkwayDir(botId) {
   if (botId === void 0 || botId === LEGACY_BOT_ID) {
     return larkwayHome();
@@ -111848,6 +111852,9 @@ import { execFile as execFileCallback } from "node:child_process";
 import { mkdir as mkdir3, readFile as readFile5, writeFile as writeFile4, rename as rename3, unlink as unlink4 } from "node:fs/promises";
 import path9 from "node:path";
 import { promisify as promisify4 } from "node:util";
+function larkCliEnvFor(configDir) {
+  return configDir ? { ...process.env, LARKSUITE_CLI_CONFIG_DIR: configDir } : void 0;
+}
 function isChatAccessGoneError(e) {
   const parts = [];
   if (e instanceof Error) parts.push(e.message);
@@ -112783,7 +112790,10 @@ var init_channelClient = __esm({
         for (let attempt = 1; attempt <= GAP_FILL_MAX_ATTEMPTS; attempt++) {
           if (this.closed) throw lastErr ?? new Error("closed");
           try {
-            return await execFile4(larkCli, args);
+            {
+              const isoEnv = larkCliEnvFor(this.opts.larkCliConfigDir);
+              return isoEnv ? await execFile4(larkCli, args, { env: isoEnv }) : await execFile4(larkCli, args);
+            }
           } catch (e) {
             lastErr = e;
             if (isChatAccessGoneError(e)) throw e;
@@ -112945,7 +112955,8 @@ var init_channelClient = __esm({
               ...profileArgs
             ];
             if (pageToken) args.push("--page-token", pageToken);
-            const { stdout: stdout2 } = await execFile4(larkCli, args);
+            const isoEnv = larkCliEnvFor(this.opts.larkCliConfigDir);
+            const { stdout: stdout2 } = isoEnv ? await execFile4(larkCli, args, { env: isoEnv }) : await execFile4(larkCli, args);
             const parsed = JSON.parse(stdout2);
             const chats = parseLarkCliMessages(stdout2) ?? [];
             fetched += chats.length;
@@ -126009,6 +126020,17 @@ var BotConfigSchema = external_exports.object({
    * V1 single-bot path doesn't need this (uses default profile naturally).
    */
   lark_cli_profile: external_exports.string().min(1).optional(),
+  /**
+   * BL-50: per-bot lark-cli identity isolation. When true, every lark-cli
+   * invocation for this bot (agent subprocess, gap-fill, roster, health scan)
+   * runs with LARKSUITE_CLI_CONFIG_DIR pointed at ~/.larkway/<botId>/lark-cli/
+   * — a private config dir holding ONLY this bot's app profile. The
+   * maintainer's personal lark-cli login (calendar/mail/drive access) in the
+   * shared global dir becomes invisible to this bot's agent ("bot-only" by
+   * default; grant user identity by running `lark-cli auth login` with the
+   * same LARKSUITE_CLI_CONFIG_DIR). Default false = shared dir (pre-BL-50).
+   */
+  lark_cli_isolated: external_exports.boolean().optional(),
   /**
    * Env-var *name* (not value) that holds this bot's Git PAT.
    * Read from process.env at startup and injected as GITLAB_TOKEN into the
@@ -130180,6 +130202,7 @@ import { spawn as spawn2, execFile as execFile7 } from "node:child_process";
 import { openSync, constants as fsConstants2 } from "node:fs";
 import { readFile as readFile10, writeFile as writeFile9, unlink as unlink6, mkdir as mkdir8, readdir as readdir5, access as access8 } from "node:fs/promises";
 import { promisify as promisify7 } from "node:util";
+import { fileURLToPath } from "node:url";
 import path17 from "node:path";
 import process5 from "node:process";
 import { stat as stat4 } from "node:fs/promises";
@@ -130555,7 +130578,7 @@ function bridgePidPath(larkwayDir) {
   return path17.join(larkwayDir, "bridge.pid");
 }
 function resolveRepoRoot() {
-  const here = new URL(import.meta.url).pathname;
+  const here = fileURLToPath(import.meta.url);
   return path17.resolve(path17.dirname(here), "..", "..");
 }
 async function resolveDistMain() {
@@ -131532,7 +131555,7 @@ import { randomBytes } from "node:crypto";
 import { existsSync } from "node:fs";
 import { readFile as readFile14, stat as stat6 } from "node:fs/promises";
 import path27 from "node:path";
-import { fileURLToPath as fileURLToPath2 } from "node:url";
+import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // src/web/api.ts
 import { readdir as readdir6, readFile as readFile13, stat as stat5 } from "node:fs/promises";
@@ -131694,10 +131717,10 @@ async function summarizeMemoryMetrics(filePath = resolveMemoryMetricsPath(), sin
 
 // src/version.ts
 import { readFileSync } from "node:fs";
-import { fileURLToPath } from "node:url";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
 import path23 from "node:path";
 function resolveLarkwayVersion(importMetaUrl, fallback = "unknown") {
-  const here = path23.dirname(fileURLToPath(importMetaUrl));
+  const here = path23.dirname(fileURLToPath2(importMetaUrl));
   const candidates = [
     path23.join(here, "..", "package.json"),
     path23.join(here, "..", "..", "package.json")
@@ -132395,7 +132418,12 @@ async function runHealthScan(bot, hostConfigStore) {
       ["--profile", profile, "auth", "status", "--json"],
       // commandProbeEnv:补齐 ~/.local/bin 等用户级安装目录(mini 实测:精简
       // PATH 的 UI 进程探测不到工具,与登录态探测自相矛盾)
-      { timeout: HEALTH_SCAN_PROBE_TIMEOUT_MS, maxBuffer: 1024 * 1024, env: commandProbeEnv() }
+      {
+        timeout: HEALTH_SCAN_PROBE_TIMEOUT_MS,
+        maxBuffer: 1024 * 1024,
+        // BL-50: probe an isolated bot inside its private config dir.
+        env: bot.lark_cli_isolated ? { ...commandProbeEnv(), LARKSUITE_CLI_CONFIG_DIR: resolveBotLarkCliDir(bot.id) } : commandProbeEnv()
+      }
     );
     const payload = healthScanParseJson(stdout2);
     const botIdentity = payload?.identities?.bot;
@@ -133462,7 +133490,7 @@ function splitPath(p) {
 
 // src/web/server.ts
 var HOST = "127.0.0.1";
-var __dirname2 = path27.dirname(fileURLToPath2(import.meta.url));
+var __dirname2 = path27.dirname(fileURLToPath3(import.meta.url));
 var PUBLIC_DIR = resolvePublicDir();
 function resolvePublicDir() {
   const candidates = [

package/dist/main.js

@@ -115576,6 +115576,9 @@ function larkwayHome() {
   if (env && env.trim() !== "") return resolve(env);
   return join(homedir(), ".larkway");
 }
+function resolveBotLarkCliDir(botId) {
+  return join(resolveLarkwayDir(botId), "lark-cli");
+}
 function resolveLarkwayDir(botId) {
   if (botId === void 0 || botId === LEGACY_BOT_ID) {
     return larkwayHome();
@@ -116486,6 +116489,9 @@ var ChannelMessageLookupClient = class {
 
 // src/lark/channelClient.ts
 var execFile = promisify(execFileCallback);
+function larkCliEnvFor(configDir) {
+  return configDir ? { ...process.env, LARKSUITE_CLI_CONFIG_DIR: configDir } : void 0;
+}
 var LEARNED_CHATS_LIMIT = 100;
 var SEEN_MESSAGES_LIMIT = 1e3;
 var MAX_MESSAGE_ATTEMPTS = 5;
@@ -117409,7 +117415,10 @@ var ChannelClient = class {
     for (let attempt = 1; attempt <= GAP_FILL_MAX_ATTEMPTS; attempt++) {
       if (this.closed) throw lastErr ?? new Error("closed");
       try {
-        return await execFile(larkCli, args);
+        {
+          const isoEnv = larkCliEnvFor(this.opts.larkCliConfigDir);
+          return isoEnv ? await execFile(larkCli, args, { env: isoEnv }) : await execFile(larkCli, args);
+        }
       } catch (e) {
         lastErr = e;
         if (isChatAccessGoneError(e)) throw e;
@@ -117571,7 +117580,8 @@ var ChannelClient = class {
           ...profileArgs
         ];
         if (pageToken) args.push("--page-token", pageToken);
-        const { stdout } = await execFile(larkCli, args);
+        const isoEnv = larkCliEnvFor(this.opts.larkCliConfigDir);
+        const { stdout } = isoEnv ? await execFile(larkCli, args, { env: isoEnv }) : await execFile(larkCli, args);
         const parsed = JSON.parse(stdout);
         const chats = parseLarkCliMessages(stdout) ?? [];
         fetched += chats.length;
@@ -118952,6 +118962,7 @@ function deriveTriggerFacts(parsed, isNewThread, larkCliProfile) {
 var ANSWER_BEGIN_MARKER = "LARKWAY_ANSWER_BEGIN";
 var ANSWER_END_MARKER = "LARKWAY_ANSWER_END";
 var STREAM_HOLD_CHARS = ANSWER_END_MARKER.length + 2;
+var WAITING_CATCH_UP_MAX_CHARS = 16 * 1024;
 function stripLeadingNewline(text) {
   return text.replace(/^\r?\n/, "");
 }
@@ -118989,6 +119000,7 @@ var AnswerChannelExtractor = class {
   buffer = "";
   visibleText = "";
   lastSnapshotText = "";
+  lastWaitingCatchUpText = "";
   ingestDelta(text, raw) {
     if (!text || this.mode === "closed") return [];
     this.buffer += text;
@@ -119018,15 +119030,45 @@ var AnswerChannelExtractor = class {
     if (this.lastSnapshotText && text.startsWith(this.lastSnapshotText)) {
       const delta = text.slice(this.lastSnapshotText.length);
       this.lastSnapshotText = text;
-      return delta ? this.ingestDelta(delta, raw) : [];
+      const events = delta ? this.ingestDelta(delta, raw) : [];
+      return this.withWaitingCatchUp(events, text, raw);
     }
     if (this.lastSnapshotText === "") {
       this.lastSnapshotText = text;
-      return this.ingestDelta(text, raw);
+      return this.withWaitingCatchUp(this.ingestDelta(text, raw), text, raw);
     }
     this.lastSnapshotText = text;
     return this.ingestSnapshot(text, raw);
   }
+  /**
+   * Markerless catch-up for the growing-snapshot (delta-routed) path.
+   *
+   * The two ingestDelta-backed branches above emit NOTHING while the
+   * extractor is still waiting for ANSWER_BEGIN — drain() just trims the
+   * waiting buffer. For a turn whose entire reply carries no marker at all
+   * (the agent forgot to write LARKWAY_ANSWER_BEGIN), the claude streaming
+   * path therefore produced ZERO events, so the bridge's untrusted-text
+   * rescue (handler.ts lastInternalText) could never fire and the user got
+   * the "没有产出正文" error card while the full answer existed in the
+   * transcript. The plain ingestSnapshot path already emits such text as
+   * internal_text (splitAnswerChannelText's no-marker branch) — this aligns
+   * the growing-snapshot path with that behavior: after a snapshot has been
+   * delta-routed, if the WHOLE snapshot still contains no BEGIN marker,
+   * re-emit it (bounded, deduped against the previous catch-up) as
+   * internal_text.
+   *
+   * Marker semantics are untouched: the moment BEGIN appears anywhere in the
+   * snapshot, ingestDelta's drain() has already transitioned out of waiting
+   * mode (emitting the before-text exactly once), so the catch-up never
+   * fires for marker-bearing turns.
+   */
+  withWaitingCatchUp(events, snapshotText, raw) {
+    if (this.mode !== "waiting") return events;
+    const bounded = snapshotText.length > WAITING_CATCH_UP_MAX_CHARS ? snapshotText.slice(snapshotText.length - WAITING_CATCH_UP_MAX_CHARS) : snapshotText;
+    if (!bounded.trim() || bounded === this.lastWaitingCatchUpText) return events;
+    this.lastWaitingCatchUpText = bounded;
+    return [...events, { type: "internal_text", text: bounded, raw }];
+  }
   drain(raw) {
     const events = [];
     if (this.mode === "waiting") {
@@ -119687,7 +119729,7 @@ async function resolveChatBotRoster(chatId, opts = {}) {
   const cli = opts.larkCliPath ?? "lark-cli";
   const args = ["im", "chat.members", "bots", "--chat-id", chatId, "--as", "bot"];
   if (opts.profile) args.push("--profile", opts.profile);
-  const exec = opts.exec ?? defaultExec(opts.timeoutMs ?? 1e4);
+  const exec = opts.exec ?? defaultExec(opts.timeoutMs ?? 1e4, opts.larkCliConfigDir);
   try {
     const stdout = await exec(cli, args);
     const roster = parseBotRoster(stdout);
@@ -119696,9 +119738,10 @@ async function resolveChatBotRoster(chatId, opts = {}) {
     return null;
   }
 }
-function defaultExec(timeoutMs) {
+function defaultExec(timeoutMs, larkCliConfigDir) {
+  const env = larkCliConfigDir ? { ...process.env, LARKSUITE_CLI_CONFIG_DIR: larkCliConfigDir } : void 0;
   return (cmd, args) => new Promise((resolve2, reject) => {
-    execFile2(cmd, args, { timeout: timeoutMs, maxBuffer: 1024 * 1024 }, (err, stdout) => {
+    execFile2(cmd, args, { timeout: timeoutMs, maxBuffer: 1024 * 1024, ...env ? { env } : {} }, (err, stdout) => {
       if (err) reject(err);
       else resolve2(stdout);
     });
@@ -124194,6 +124237,8 @@ var BridgeHandler = class {
             // V2: inject per-bot git identity; absent in V1 → runner.ts uses "larkway-bot" fallback
             botGitIdentity: this.deps.botConfig?.git_identity,
             gitlabToken: this.deps.gitlabToken,
+            // BL-50: isolated bots get a private lark-cli config dir.
+            ...this.deps.botConfig?.lark_cli_isolated && this.deps.botConfig.id ? { larkCliConfigDir: resolveBotLarkCliDir(this.deps.botConfig.id) } : {},
             model: this.deps.botConfig?.model,
             effort: this.deps.botConfig?.effort,
             onPerfMarker: (marker, atMs) => {
@@ -128438,6 +128483,17 @@ var BotConfigSchema = external_exports.object({
    * V1 single-bot path doesn't need this (uses default profile naturally).
    */
   lark_cli_profile: external_exports.string().min(1).optional(),
+  /**
+   * BL-50: per-bot lark-cli identity isolation. When true, every lark-cli
+   * invocation for this bot (agent subprocess, gap-fill, roster, health scan)
+   * runs with LARKSUITE_CLI_CONFIG_DIR pointed at ~/.larkway/<botId>/lark-cli/
+   * — a private config dir holding ONLY this bot's app profile. The
+   * maintainer's personal lark-cli login (calendar/mail/drive access) in the
+   * shared global dir becomes invisible to this bot's agent ("bot-only" by
+   * default; grant user identity by running `lark-cli auth login` with the
+   * same LARKSUITE_CLI_CONFIG_DIR). Default false = shared dir (pre-BL-50).
+   */
+  lark_cli_isolated: external_exports.boolean().optional(),
   /**
    * Env-var *name* (not value) that holds this bot's Git PAT.
    * Read from process.env at startup and injected as GITLAB_TOKEN into the
@@ -129669,9 +129725,12 @@ import { writeFile as writeFile3, unlink as unlink3, mkdir as mkdir3 } from "nod
 import { join as join2 } from "node:path";
 import { createInterface } from "node:readline";
 var SIGKILL_GRACE_MS = 5e3;
-function buildEnv(botGitIdentity, gitlabToken) {
+function buildEnv(botGitIdentity, gitlabToken, larkCliConfigDir) {
   const env = { ...process.env };
   delete env["ANTHROPIC_API_KEY"];
+  if (larkCliConfigDir !== void 0) {
+    env["LARKSUITE_CLI_CONFIG_DIR"] = larkCliConfigDir;
+  }
   if (botGitIdentity) {
     env["GIT_AUTHOR_NAME"] = botGitIdentity.name;
     env["GIT_AUTHOR_EMAIL"] = botGitIdentity.email;
@@ -129831,7 +129890,7 @@ function* parseLinesMulti(line, answerExtractor = new AnswerChannelExtractor())
 function runClaude(opts) {
   const timeoutMs = opts.timeoutMs ?? 15 * 60 * 1e3;
   const [bin, args] = buildCommand(opts);
-  const env = buildEnv(opts.botGitIdentity, opts.gitlabToken);
+  const env = buildEnv(opts.botGitIdentity, opts.gitlabToken, opts.larkCliConfigDir);
   const markPerf = createPerfMarker(opts.onPerfMarker);
   const child = spawnPipedOutput(bin, args, {
     env,
@@ -130078,6 +130137,7 @@ var ClaudeProcessPool = class {
   #botId;
   #botGitIdentity;
   #gitlabToken;
+  #larkCliConfigDir;
   #idleMs;
   #maxProcesses;
   #pidListFilePath;
@@ -130120,6 +130180,7 @@ var ClaudeProcessPool = class {
     this.#botId = opts.botId;
     this.#botGitIdentity = opts.botGitIdentity;
     this.#gitlabToken = opts.gitlabToken;
+    this.#larkCliConfigDir = opts.larkCliConfigDir;
     this.#idleMs = opts.idleMs ?? DEFAULT_WARM_PROCESS_IDLE_MS;
     this.#maxProcesses = opts.maxProcesses ?? DEFAULT_MAX_PROCESSES;
     this.#pidListFilePath = opts.pidListFilePath;
@@ -130524,7 +130585,7 @@ var ClaudeProcessPool = class {
   }
   #spawnEntry(key, threadId, opts, flags) {
     const [bin, args] = buildWarmCommand(opts);
-    const env = buildEnv(this.#botGitIdentity, this.#gitlabToken);
+    const env = buildEnv(this.#botGitIdentity, this.#gitlabToken, this.#larkCliConfigDir);
     const child = spawnPiped(bin, args, {
       env,
       ...opts.cwd != null ? { cwd: opts.cwd } : {}
@@ -130872,10 +130933,13 @@ function productizeCodexFailure(stderr) {
   }
   return void 0;
 }
-function buildCodexEnv(botGitIdentity, gitlabToken) {
+function buildCodexEnv(botGitIdentity, gitlabToken, larkCliConfigDir) {
   const env = { ...process.env };
   delete env["OPENAI_API_KEY"];
   delete env["ANTHROPIC_API_KEY"];
+  if (larkCliConfigDir !== void 0) {
+    env["LARKSUITE_CLI_CONFIG_DIR"] = larkCliConfigDir;
+  }
   if (botGitIdentity) {
     env["GIT_AUTHOR_NAME"] = botGitIdentity.name;
     env["GIT_AUTHOR_EMAIL"] = botGitIdentity.email;
@@ -131002,7 +131066,7 @@ function extractThreadIdFromThreadResponse(obj) {
 function runCodex(opts, codexBinPath = "codex") {
   const timeoutMs = opts.timeoutMs ?? 15 * 60 * 1e3;
   const [bin, args] = buildCodexCommand(opts, codexBinPath);
-  const env = buildCodexEnv(opts.botGitIdentity, opts.gitlabToken);
+  const env = buildCodexEnv(opts.botGitIdentity, opts.gitlabToken, opts.larkCliConfigDir);
   const mode = opts.permissionMode ?? "acceptEdits";
   const requestById = /* @__PURE__ */ new Map();
   let nextRequestId = 1;
@@ -131262,6 +131326,7 @@ var CodexProcessPool = class {
   #codexBinPath;
   #botGitIdentity;
   #gitlabToken;
+  #larkCliConfigDir;
   #idleMs;
   #pidFilePath;
   #child;
@@ -131290,6 +131355,7 @@ var CodexProcessPool = class {
     this.#codexBinPath = opts.codexBinPath;
     this.#botGitIdentity = opts.botGitIdentity;
     this.#gitlabToken = opts.gitlabToken;
+    this.#larkCliConfigDir = opts.larkCliConfigDir;
     this.#idleMs = opts.idleMs ?? DEFAULT_WARM_PROCESS_IDLE_MS2;
     this.#pidFilePath = opts.pidFilePath;
   }
@@ -131521,7 +131587,7 @@ var CodexProcessPool = class {
   // -- process lifecycle -------------------------------------------------------
   #spawnChild() {
     const [bin, args] = buildCodexCommand({ prompt: "" }, this.#codexBinPath);
-    const env = buildCodexEnv(this.#botGitIdentity, this.#gitlabToken);
+    const env = buildCodexEnv(this.#botGitIdentity, this.#gitlabToken, this.#larkCliConfigDir);
     const child = spawnPiped(bin, args, { env });
     this.#child = child;
     this.#pending.clear();
@@ -131807,7 +131873,7 @@ async function reapOrphanedWarmProcess(pidFilePath) {
 }
 
 // src/lark/profileBootstrap.ts
-function ensureLarkCliProfile(botId, profileName, appId, appSecret, _spawnSync = spawnProcessSync, _console = console) {
+function ensureLarkCliProfile(botId, profileName, appId, appSecret, _spawnSync = spawnProcessSync, _console = console, opts) {
   _console.log(
     `[larkway] bot "${botId}": provisioning lark-cli profile "${profileName}" for app ${appId.slice(0, 8)}\u2026`
   );
@@ -131818,7 +131884,9 @@ function ensureLarkCliProfile(botId, profileName, appId, appSecret, _spawnSync =
       {
         input: appSecret,
         encoding: "utf-8",
-        timeout: 1e4
+        timeout: 1e4,
+        // BL-50: provision inside the bot's private config dir when isolated.
+        ...opts?.configDir ? { env: { ...process.env, LARKSUITE_CLI_CONFIG_DIR: opts.configDir } } : {}
       }
     );
     if (initResult.status === 0) {
@@ -134578,7 +134646,14 @@ async function runV2Mode({
       );
     }
     const larkCliProfile = deriveLarkCliProfile(bot.lark_cli_profile, bot.app_id);
-    ensureLarkCliProfile(bot.id, larkCliProfile, bot.app_id, appSecret);
+    const larkCliConfigDir = bot.lark_cli_isolated ? resolveBotLarkCliDir(bot.id) : void 0;
+    if (larkCliConfigDir) {
+      mkdirSync(larkCliConfigDir, { recursive: true });
+      console.log(`[larkway] bot "${bot.id}": lark-cli identity isolation ON (${larkCliConfigDir})`);
+    }
+    ensureLarkCliProfile(bot.id, larkCliProfile, bot.app_id, appSecret, void 0, void 0, {
+      ...larkCliConfigDir ? { configDir: larkCliConfigDir } : {}
+    });
     const botDir = resolveLarkwayDir(bot.id);
     const sharedReposDir = path25.join(larkwayHome(), "repos");
     const worktreesDir = path25.join(botDir, "worktrees");
@@ -134605,6 +134680,7 @@ async function runV2Mode({
       appId: bot.app_id,
       appSecret,
       larkCliProfile,
+      ...larkCliConfigDir ? { larkCliConfigDir } : {},
       larkwayDir: larkwayHome()
     });
     client.seedTrackedChats(
@@ -134868,6 +134944,7 @@ async function runV2Mode({
       codexPool = new CodexProcessPool({
         botGitIdentity: bot.git_identity,
         gitlabToken: effectiveGitlabToken,
+        ...larkCliConfigDir ? { larkCliConfigDir } : {},
         idleMs: bot.warmProcessIdleMs,
         pidFilePath
       });
@@ -134885,6 +134962,7 @@ async function runV2Mode({
         botId: bot.id,
         botGitIdentity: bot.git_identity,
         gitlabToken: effectiveGitlabToken,
+        ...larkCliConfigDir ? { larkCliConfigDir } : {},
         idleMs: bot.warmProcessIdleMs,
         maxProcesses: bot.warmProcessMaxProcesses,
         pidListFilePath
@@ -134938,7 +135016,8 @@ async function runV2Mode({
         p2pStickyIdleMs: bot.p2pStickyIdleMs,
         owner_open_id: bot.owner_open_id,
         cot: bot.cot,
-        cotSurface: bot.cotSurface
+        cotSurface: bot.cotSurface,
+        lark_cli_isolated: bot.lark_cli_isolated
       },
       cardKitClient,
       cotClient,
@@ -134953,7 +135032,7 @@ async function runV2Mode({
       larkCliProfile,
       // PRB-6/§11.3: resolve peer @ targets to same-app-scope open_ids from the
       // live chat roster (per-chat cached), only when this bot actually has peers.
-      resolveLiveRoster: resolvedPeers.length > 0 ? createCachedRosterResolver({ profile: larkCliProfile }) : void 0,
+      resolveLiveRoster: resolvedPeers.length > 0 ? createCachedRosterResolver({ profile: larkCliProfile, ...larkCliConfigDir ? { larkCliConfigDir } : {} }) : void 0,
       runtimeRequirements: runtimeRequirementsForBots([bot]),
       recordRuntimeEvent: async (patch) => {
         await upsertRuntimeEvent(larkwayHome(), bot.id, patch);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "larkway",
-  "version": "0.3.64",
+  "version": "0.3.66",
   "description": "Thin bridge: Feishu thread to local Claude Code CLI",
   "license": "MIT",
   "author": "Chuck Wu (chuckwu0)",