feat: add session-level profile selection and identity diagnostics - #1776

Open

luozhixiong01 wants to merge 50 commits into

mainfrom

feat/session-profile-selection

Commits on Jul 27, 2026

feat: add LARKSUITE_CLI_PROFILE session env with flag precedence

luozhixiong01
authored and
review
committed
1845162
feat: add profile selection error subtypes and machine-readable fields

luozhixiong01
authored and
review
committed
b1d4489
feat: add IdentitySelection type for explainable credential selection

luozhixiong01
authored and
review
committed
b6c19f5
feat: unify credential selection with profile conflict detection

luozhixiong01
authored and
review
committed
deb16ce
fix(credential): gate success-account direct-credential treatment on env provider

luozhixiong01
authored and
review
committed
e6466b9
test(credential): lock profile_secret_invalid against secret-bearing cause

luozhixiong01
authored and
review
committed
c24a382
feat: surface credentialSource and directCredentialEnv in whoami

luozhixiong01
authored and
review
committed
8666365
refactor: drop whoami suggestion field and IdentitySelection.Suggestion

luozhixiong01
authored and
review
committed
9b1f3fa
docs: add profile selection help to profile and whoami commands

luozhixiong01
authored and
review
committed
c4f5022
docs: add profile selection entry hint to lark-shared skill

luozhixiong01
authored and
review
committed
1d9f48b
fix(credential): add credential_source to config errors and report profile_secret_invalid for broken default secret

luozhixiong01
authored and
review
committed
71521b9
docs: forbid hollow identity promises in lark-shared profile hint

luozhixiong01
authored and
review
committed
fe3d949
docs: broaden lark-shared trigger to profile selection and add session-env persistence guidance

luozhixiong01
authored and
review
committed
5a0f022
docs: trim lark-shared profile rule to lark-cli scope, drop agent-shell env mechanics

luozhixiong01
authored and
review
committed
417777f
docs: clarify whoami vs auth status boundary in lark-shared profile rule

luozhixiong01
authored and
review
committed
4eb068f
docs: use imperative one-line whoami vs auth status routing boundary

luozhixiong01
authored and
review
committed
70b611a
feat: distinguish auth status from whoami identity in help and skill

luozhixiong01
authored and
review
committed
6aa8dec
docs: guide per-command LARKSUITE_CLI_PROFILE prefix for non-persistent shells

luozhixiong01
authored and
review
committed
d8f877f
docs: point to auth status --json --verify for token validity checks

luozhixiong01
authored and
review
committed
4306f41
docs: require auth status --json --verify for login/token checks

luozhixiong01
authored and
review
committed
9cad3ca
test(credential): use recognized placeholders for secret fixtures

luozhixiong01
authored and
review
committed
eabc855
docs(lark-shared): refine profile-selection guidance

luozhixiong01
authored and
review
committed
7c04a1a
fix(credential): propagate malformed-config error for explicit profile

luozhixiong01
authored and
review
committed
beeeb71
feat(profile): distinguish saved default from effective identity

luozhixiong01
authored and
review
committed
ccc6dd3
docs(lark-shared): write profile-selection guidance in Chinese

luozhixiong01
authored and
review
committed
a340417
fix(credential): surface malformed config on the config-default path

luozhixiong01
authored and
review
committed
7cc881c
fix(credential): make profile arbitration explicit

luozhixiong01
authored and
review
committed
ce00fdc
test: use recognized credential placeholders

luozhixiong01
authored and
review
committed
0c8bf43
docs(lark-shared): restore the trigger description to main's version

luozhixiong01
authored and
review
committed
7b32b22
fix(credential): surface precise causes instead of flattened selection errors

luozhixiong01
authored and
review
committed
cf2af70
fix(config): pin saved-config commands to the saved default

luozhixiong01
authored and
review
committed
76ee4cd
chore: guard empty profile source and document credential wire fields

luozhixiong01
authored and
review
committed
f01f7ab
fix(credential): surface the real keychain out-of-sync cause

luozhixiong01
authored and
review
committed
fd9940c
fix(credential): refuse cross-app tokens after a config edit

luozhixiong01
authored and
review
committed
dd42477
fix(credential): keep policy mistakes and saved-config inspection off the external gate

luozhixiong01
authored and
review
committed
e28f917
fix(profile): keep only the renamed default field in profile list

luozhixiong01
authored and
review
committed
f6732c9
fix(credential): refuse mismatched tokens before any token work

luozhixiong01
authored and
review
committed
76bd47a
fix(credential): unforgeable AccountDirect reservation, gate aligned with arbitration

luozhixiong01
authored and
review
committed
6b80706
test(credential): pin the TAT mint-then-cache happy path

luozhixiong01
authored and
review
committed
16ed512
docs(lark-shared): route pin/clear-session-identity intents from eval evidence

luozhixiong01
authored and
review
committed
51f3f07
chore: use a recognized token placeholder and trim skill routing prose

luozhixiong01
authored and
review
committed
3a9cfdd
docs(lark-shared): format profile selection guidance

luozhixiong01
authored and
review
committed
01fdf2f
fix(auth): enforce app binding before token resolution

luozhixiong01
authored and
review
committed
5442811
test(auth): assert token dispatch call counts

luozhixiong01
authored and
review
committed
8bcb04c
test(auth): align token fixtures with account selection

luozhixiong01
authored and
review
committed
754f471
fix(auth): classify invalid sidecar policy

luozhixiong01
authored and
review
committed
0fef066
fix(profile): honor an explicit empty profile flag

luozhixiong01
authored and
review
committed
48b0ade
test(sidecar): align fake provider with app binding

luozhixiong01
authored and
review
committed
8587203
fix(auth): reserve incomplete credential arbitration for env
luozhixiong01
committed
c86c348
docs(profile): clarify identity diagnostics heading
luozhixiong01
committed
4769b5c