Skip to content

v0.37.0 — lark-cli 1.0.65 + approval 全流程、卡片 2.0、文档历史版本

Choose a tag to compare

View all tags
@ddpie ddpie released this 05 Jul 09:39
· 17 commits to main since this release
v0.37.0
cc5877a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

中文

升级 lark-cli 1.0.63 → 1.0.65，按 docs/skills/bump-lark-cli.md 重新提取 scope、生成白名单、增量 re-adapt 技能；另附一次存量适配泄漏的全库清理。

上游变更亮点（v1.0.64 · v1.0.65）

  • lark-approval — 改动最大：SKILL.md 重写（路由优先级、1395001 决策树、错误码驱动原则），新增 13 篇命令级参考（任务同意/拒绝/转交/加签/回退/催办、实例查询/撤销/抄送、我发起的实例等）。approval 无 shortcut，全部经 lark_invoke 调原生 API，14 个 tool_name 逐一对照注册表核实。
  • lark-im — 卡片能力升级：新增 references/card/ 子树（卡片 2.0 schema、27 个组件、颜色/图标资源，约 33 个文件），发交互卡片前必须先读卡片构建指南；新增 im +chat-members-list 群成员列表 shortcut。
  • lark-okr — 新增 okr +patch 快捷更新；progress/contentblock 全面引入 simple/richtext 双风格（style 参数，semi-plain 文本保留 @ 提及位置）；新增 alignments（对齐关系）、indicators（量化指标）两篇原生 API 指南。
  • lark-doc — 新增 docs +history-list / +history-revert / +history-revert-status 文档历史版本三件套；新增 mindnote（思维笔记）参考；写作原则与创建/更新工作流改为单 Agent 串行模型；doc_word_stat.py 复合词统计对齐。
  • lark-slides — 上游移除整个模板系统：42 个模板 XML、template-catalog、template-index、template_tool.py 一并删除；规划层改为纯 plan 驱动。
  • lark-drive / lark-minutes — 文档澄清：+search 的 query 上限 30 字符（超限报错不截断）；+speaker-replace 必须先查 speakerlist 拿 speaker_id。
  • scope：新增依赖的 4 个 scope（docx:document:readonly/write_only、im:chat.members:read、okr:okr.content:writeonly）均为 user scope 且此前已在白名单，scope-allowlist.ts 与 config/oauth-scopes.json 零改动。

存量清理（随本版一并发布）

  • 历史适配遗留的裸 +cmd 记号（slides/drive/task/minutes/markdown 等 15 个文件）改为真实注册工具名；skill 内部 ](xxx.md) 文件系统链接改为 lark_get_skill(domain, section)。均逐一验证工具存在、section 可解析。

身份安全

  • 全程用户身份不变。im 卡片回调监听为 bot-only，以 ⚠️「MCP server 不可用」标注；无 bot-only scope 进入白名单。

变更清单

  • docker/Dockerfile — 版本 pin 1.0.63 → 1.0.65
  • docker/shortcut-scopes.json — 重新提取（433 → 438 shortcuts）
  • docker/rawapi-scopes.json — 重新生成（221 raw APIs）
  • docker/skills/lark-approval|doc|drive|im|minutes|okr|slides/ — 增量 re-adapt（+51 新文件，-46 删除）
  • docker/skills/（15 文件）— 存量泄漏清理

升级

git pull && ./scripts/deploy.sh

终端用户无需操作。文档历史版本、群成员列表、OKR patch、卡片 2.0 组件指南等新能力随镜像重建自动可用。

English

Bump lark-cli 1.0.63 → 1.0.65 — re-extract scopes, regenerate the allowlist, and do a diff-guided skill re-adapt per docs/skills/bump-lark-cli.md; ships with a repo-wide cleanup of legacy adaptation leaks.

Upstream highlights (v1.0.64 · v1.0.65)

  • lark-approval — the biggest change: SKILL.md rewritten (routing priorities, the 1395001 decision tree, error-code-driven principles) plus 13 new command-level references (task approve/reject/transfer/add-sign/rollback/remind, instance get/cancel/cc, my-initiated instances, …). Approval has no shortcuts — everything goes through lark_invoke, all 14 tool_names verified against the registry.
  • lark-im — card upgrade: new references/card/ subtree (card 2.0 schema, 27 components, color/icon resources, ~33 files); building an interactive card now requires reading the card guide first. New im +chat-members-list shortcut.
  • lark-okr — new okr +patch quick-update; the progress/contentblock family gains simple/richtext dual style (style param; semi-plain text preserves @-mention positions); new alignments and indicators raw-API guides.
  • lark-doc — new docs +history-list / +history-revert / +history-revert-status document-history trio; new mindnote reference; writing principles and create/update workflows moved to a single-agent serial model; doc_word_stat.py compound-token alignment.
  • lark-slides — upstream removed the whole template system: 42 template XMLs, template-catalog, template-index, and template_tool.py deleted; the planning layer is now purely plan-driven.
  • lark-drive / lark-minutes — doc clarifications: +search's query caps at 30 characters (server rejects, no truncation); +speaker-replace requires fetching the speakerlist first for speaker_id.
  • scope: the 4 newly required scopes (docx:document:readonly/write_only, im:chat.members:read, okr:okr.content:writeonly) are all user scopes already present in the allowlist — zero changes to scope-allowlist.ts and config/oauth-scopes.json.

Legacy cleanup (shipped alongside)

  • Pre-existing bare +cmd notation (15 files across slides/drive/task/minutes/markdown, …) rewritten to real registered tool names; intra-skill ](xxx.md) filesystem links converted to lark_get_skill(domain, section). Every tool name and section value verified.

Identity safety

  • User identity throughout, unchanged. im card-callback listening is bot-only and flagged ⚠️ "not available via the MCP server"; no bot-only scope entered the allowlist.

Changes

  • docker/Dockerfile — pin 1.0.63 → 1.0.65
  • docker/shortcut-scopes.json — re-extracted (433 → 438 shortcuts)
  • docker/rawapi-scopes.json — regenerated (221 raw APIs)
  • docker/skills/lark-approval|doc|drive|im|minutes|okr|slides/ — incremental re-adapt (+51 new files, −46 deleted)
  • docker/skills/ (15 files) — legacy leak cleanup

Upgrade

git pull && ./scripts/deploy.sh

No end-user action needed. Document history, chat member listing, OKR patch, and the card 2.0 component guides become available automatically with the image rebuild.

Assets 2
Loading