iris-YMY Operate the Lark-Codex bridge
Detect the host operating system and read exactly one platform reference:
- macOS: references/macos-bridge-setup.md
- Windows: references/windows-bridge-setup.md
Required behavior
- Inspect the existing installation, configuration, authentication, service registration, processes, state, and logs before changing anything.
- Preserve allowlisted private chats, read-only isolated Codex workspaces, event deduplication, serialized per-chat work, bounded replies, stable idempotency keys, and no secrets or full message bodies in logs.
- Use the official Lark CLI package and verify its absolute executable path for unattended operation.
- Validate receive, send, reply, Codex execution, session resume,
/status,/new, reaction cleanup, deduplication, and restart recovery. - Keep credentials in supported authentication storage. Never place secrets in service definitions, arguments, source control, Skill files, or logs.
- Back up configuration and state before edits. Make the smallest reversible change.
- Request authorization before installs, authentication flows, service changes, process termination, or other external state changes unless explicitly authorized.
- Report paths, checks, changes, and remaining manual steps without exposing sensitive values.