Skip to content

v0.36.0 — lark-cli 1.0.63 + in-meeting messaging, app file storage & observability

Choose a tag to compare

View all tags
@ddpie ddpie released this 02 Jul 08:31
v0.36.0
8a82501
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

中文

升级 lark-cli 1.0.60 → 1.0.63，按 docs/skills/bump-lark-cli.md 重新提取 scope、生成白名单、增量 re-adapt 技能，并刷新 CDK 快照。

上游变更亮点（v1.0.61 · v1.0.62 · v1.0.63）

  • lark-apps — 改动最大：新增 env（变量增删查）、file（应用文件存储）、observability（日志/Trace/指标/PV·UV）、openapi-key（对外 API Key 管理）、plugin（插件装/卸/列）五组共 39 个 shortcut；db 参考重构，db-table-get/db-table-list/db-env-create 三篇合并进统一的 db.md。
  • lark-vc-agent — 新增 vc +meeting-message-send：向进行中的会议发送会中文本或表情（会中 reaction）。
  • lark-doc — 新增 docs +word-stat 文档字数统计（含随附脚本 doc_word_stat.py，通过 lark_exec_script 调用）；media 下载/预览的标签重命名、update 的 reference_map 参数。
  • lark-drive — drive search 上游新增 bot 身份支持；本服务为用户身份，仅保留用户路径，不暴露 bot 选项。
  • lark-base — field-json 参考补充 datetime style.format 显示精度说明（1 行）。
  • scope：唯一新引入 vc:meeting.message:write（user scope，非 bot-only），已入 scope-allowlist.ts；不在 tier1，config/oauth-scopes.json 无需改动。

身份安全

  • 全程用户身份不变。vc-agent 里应用（bot）身份专属路径（应用机器人入会、应用身份发现 meeting_id）均以 ⚠️「MCP server 不可用」标注，不作为用户可调操作呈现。drive search 的 bot 身份能力未暴露；无 bot-only scope 进入白名单。

变更清单

  • docker/Dockerfile — 版本 pin 1.0.60 → 1.0.63
  • docker/shortcut-scopes.json — 重新提取（393 → 433 shortcuts）
  • docker/rawapi-scopes.json、lambda/token-refresh-shim/scope-allowlist.ts — 重新生成（新增 vc:meeting.message:write）
  • docker/skills/lark-apps/ — SKILL.md + 4 篇改写；新增 db.md、env.md、file.md、observability.md、openapi-key.md、plugin-install.md、plugin-list.md、plugin-uninstall.md；删除 db-env-create.md、db-table-get.md、db-table-list.md
  • docker/skills/lark-doc/ — SKILL.md + media/update 改写；新增 references/lark-doc-word-stat.md、scripts/doc_word_stat.py（逐字节复制自上游）
  • docker/skills/lark-vc-agent/ — SKILL.md；新增 references/lark-vc-agent-meeting-message-send.md
  • docker/skills/lark-drive/、docker/skills/lark-base/ — 小幅 re-adapt
  • infra/test/__snapshots__/snapshot.test.ts.snap — CDK 快照更新

升级

git pull && ./scripts/deploy.sh

终端用户无需操作。会中发消息、应用文件存储、observability 等新能力会随镜像重建自动可用。

English

Bump lark-cli 1.0.60 → 1.0.63 — re-extract scopes, regenerate the allowlist, do a diff-guided skill re-adapt per docs/skills/bump-lark-cli.md, and refresh the CDK snapshot.

Upstream highlights (v1.0.61 · v1.0.62 · v1.0.63)

  • lark-apps — the biggest change: 39 new shortcuts across env (var CRUD), file (app file storage), observability (logs/traces/metrics/PV·UV), openapi-key (outbound API key management), and plugin (install/uninstall/list); the db reference was restructured, folding db-table-get/db-table-list/db-env-create into a single db.md.
  • lark-vc-agent — new vc +meeting-message-send: send an in-meeting text message or reaction to a live meeting.
  • lark-doc — new docs +word-stat word-count helper (with bundled doc_word_stat.py, invoked via lark_exec_script); media download/preview tag renames and an update reference_map param.
  • lark-drive — upstream added bot-identity support to drive search; this service is user-identity only, so only the user path is kept, no bot option exposed.
  • lark-base — field-json reference gained a datetime style.format display-precision note (1 line).
  • scope: the only newly introduced scope is vc:meeting.message:write (a user scope, not bot-only), now in scope-allowlist.ts; it is not tier1, so config/oauth-scopes.json needs no change.

Identity safety

  • User identity throughout, unchanged. In vc-agent, bot-identity-only paths (app bot joining a meeting, discovering a meeting_id as the app) are flagged ⚠️ "not available via the MCP server" rather than presented as user-callable. drive search's bot-identity capability is not exposed; no bot-only scope entered the allowlist.

Changes

  • docker/Dockerfile — pin 1.0.60 → 1.0.63
  • docker/shortcut-scopes.json — re-extracted (393 → 433 shortcuts)
  • docker/rawapi-scopes.json, lambda/token-refresh-shim/scope-allowlist.ts — regenerated (adds vc:meeting.message:write)
  • docker/skills/lark-apps/ — SKILL.md + 4 rewrites; new db.md, env.md, file.md, observability.md, openapi-key.md, plugin-install.md, plugin-list.md, plugin-uninstall.md; deleted db-env-create.md, db-table-get.md, db-table-list.md
  • docker/skills/lark-doc/ — SKILL.md + media/update rewrites; new references/lark-doc-word-stat.md, scripts/doc_word_stat.py (copied verbatim from upstream)
  • docker/skills/lark-vc-agent/ — SKILL.md; new references/lark-vc-agent-meeting-message-send.md
  • docker/skills/lark-drive/, docker/skills/lark-base/ — minor re-adapt
  • infra/test/__snapshots__/snapshot.test.ts.snap — CDK snapshot updated

Upgrading

git pull && ./scripts/deploy.sh

No action required from end users. The new capabilities (in-meeting messaging, app file storage, observability, etc.) become available automatically once the image is rebuilt.

Assets 2
Loading