修复: 飞书走查六项 + 停靠状态写侧根因解 + agentic/audit 加固

飞书集成走查六项(feishu_channel.rs +420):
1. 审批卡按钮化: on_card_action + handle_card_action(解析 {approval_id,approved}
   → ai_approve) + send_approval_button_card(Card JSON 1.0 双按钮, 失败降级文本卡)
2. 首帧流式提速: AiTextDelta 首个 delta 立即刷占位卡, 不等 3s ticker
3. 断线重连通知: 按 run_loop 时长判据(≥30s 推断开 / <30s 累计 3 次推不稳定),
   新增 notify_monitor()
4. 占位卡带任务原文回显(truncate 60)
5. 白名单配置引导: 后端分步自助引导 + FeishuPanel hintFeishuWhitelist + i18n
6. 审批决议后追加执行结果: spawn_approval_result_watcher 订阅 AiToolCallCompleted
   (匹配 tool_call_id, 60s 超时兜底); 订阅须在 ai_approve 前完成(无订阅者跳过序列化)

停靠(parked)写侧根因解(904):
emit_task_parked(ai/mod.rs) 升级为「写 parked + 发事件 + 通知」三件套——
新增 set_loop_state(conv_id, Some("parked")) fire-and-forget; 8 个业务调用点
(H2 三闸/熔断两路/挂起取消/max_rounds/midstream/fatal + 审批超时) 全经单点。
治「停靠卡继续必报 AI 未在暂停态」(全仓原无写 parked 路径)。

agentic/audit 加固: context_lifecycle/stream_relay/mod 调整 + audit record 完善 +
tool_failure_memory/tool_result_offload/tools/task/settings 同步。

验收: cargo check -p devflow EXIT 0。

src/components/ToolCard.vue

@@ -84,28 +84,28 @@
                  :disabled="approving"
                  @click="onAuthorizeOnce">
             <span v-if="approving" class="ai-tool-btn-spinner" />
-            <svg aria-hidden="true" v-else width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"><polyline points="20 6 9 17 4 12"/></svg>
+            <span v-else class="ai-tool-btn-icon" v-html="ICON_CHECK" />
             {{ $t('aiChat.dirAuthOnce') }}
           </button>
           <button class="ai-tool-btn ai-tool-btn--session"
                  :disabled="approving"
                  @click="onAuthorizeSession">
             <span v-if="approving" class="ai-tool-btn-spinner" />
-            <svg aria-hidden="true" v-else width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"><polyline points="20 6 9 17 4 12"/></svg>
+            <span v-else class="ai-tool-btn-icon" v-html="ICON_CHECK" />
             {{ $t('aiChat.dirAuthSession') }}
           </button>
           <button class="ai-tool-btn ai-tool-btn--always"
                  :disabled="approving"
                  @click="onAuthorizeAlways">
             <span v-if="approving" class="ai-tool-btn-spinner" />
-            <svg aria-hidden="true" v-else width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"><polyline points="20 6 9 17 4 12"/></svg>
+            <span v-else class="ai-tool-btn-icon" v-html="ICON_CHECK" />
             {{ $t('aiChat.dirAuthAlways') }}
           </button>
           <button class="ai-tool-btn ai-tool-btn--reject"
                  :disabled="approving"
                  @click="onDeny">
             <span v-if="approving" class="ai-tool-btn-spinner" />
-            <svg aria-hidden="true" v-else width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"><line x1="18" y1="6" x2="6" y2="18"/><line x1="6" y1="6" x2="18" y2="18"/></svg>
+            <span v-else class="ai-tool-btn-icon" v-html="ICON_CROSS" />
             {{ $t('aiChat.dirAuthDeny') }}
           </button>
         </div>
@@ -114,14 +114,14 @@
                  :disabled="approving"
                  @click="onApprove">
             <span v-if="approving" class="ai-tool-btn-spinner" />
-            <svg aria-hidden="true" v-else width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"><polyline points="20 6 9 17 4 12"/></svg>
+            <span v-else class="ai-tool-btn-icon" v-html="ICON_CHECK" />
             {{ $t('aiTool.approve') }}
           </button>
           <button class="ai-tool-btn ai-tool-btn--reject"
                   :disabled="approving"
                   @click="onReject">
             <span v-if="approving" class="ai-tool-btn-spinner" />
-            <svg aria-hidden="true" v-else width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"><line x1="18" y1="6" x2="6" y2="18"/><line x1="6" y1="6" x2="18" y2="18"/></svg>
+            <span v-else class="ai-tool-btn-icon" v-html="ICON_CROSS" />
             {{ $t('aiTool.reject') }}
           </button>
         </div>
@@ -180,6 +180,10 @@ import type { AiToolCallInfo } from '@/api/types'
 import ConfirmDialog from './ConfirmDialog.vue'
 import ToolResultBody from './ToolResultBody.vue'
 
+// 审批按钮图标 SVG 常量(消除模板 6 处内联重复;v-html 渲染完整 svg 元素)
+const ICON_CHECK = '<svg aria-hidden="true" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"><polyline points="20 6 9 17 4 12"/></svg>'
+const ICON_CROSS = '<svg aria-hidden="true" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"><line x1="18" y1="6" x2="6" y2="18"/><line x1="6" y1="6" x2="18" y2="18"/></svg>'
+
 const { t } = useI18n()
 
 const props = defineProps<{
@@ -511,6 +515,11 @@ const visibleArgs = computed(() => {
 .ai-tool-btn:disabled { opacity: 0.6; cursor: not-allowed; }
 .ai-tool-btn--approve:disabled:hover { background: var(--df-success-bg); color: var(--df-success); border-color: var(--df-border); }
 .ai-tool-btn--reject:disabled:hover { background: var(--df-danger-bg); color: var(--df-danger); border-color: var(--df-border); }
+.ai-tool-btn-icon {
+  display: inline-flex; align-items: center; justify-content: center;
+  width: 12px; height: 12px; flex-shrink: 0;
+}
+.ai-tool-btn-icon :deep(svg) { display: block; }
 .ai-tool-btn-spinner {
   width: 12px; height: 12px; border: 1.5px solid currentColor; border-top-color: transparent;
   border-radius: 50%; display: inline-block; flex-shrink: 0; animation: aiToolBtnSpin 0.7s linear infinite;

src/components/settings/FeishuPanel.vue

@@ -43,6 +43,9 @@
         ></textarea>
       </SettingRow>
 
+      <!-- 白名单配置引导(2026-10-08):用户不知 open_id 从哪来,给出自助获取路径 -->
+      <p class="feishu-hint">{{ $t('settings.hintFeishuWhitelist') }}</p>
+
       <div class="actions">
         <button class="btn btn-primary btn-sm" :disabled="saving" @click="save">
           {{ $t('settings.feishuSave') }}
@@ -76,7 +79,7 @@ interface FeishuConfig {
   enabled: boolean
   app_id: string
   app_secret: string
-  /** 逗号分隔 open_id,空 = 放行所有 */
+  /** 逗号分隔 open_id,空 = 放行所有(表单态;落库时拆为数组) */
   whitelist: string
 }
 
@@ -93,11 +96,17 @@ const saving = ref(false)
 onMounted(() => {
   // KV 值由 store 启动 loadAll 统一 JSON.parse 进缓存,此处同步读;
   // 逐字段回退默认,防历史脏数据缺字段时 v-model 绑到 undefined
-  const saved = appSettings.get<Partial<FeishuConfig>>(FEISHU_CONFIG_KEY, {})
+  const saved = appSettings.get<Record<string, unknown>>(FEISHU_CONFIG_KEY, {})
   form.enabled = saved.enabled === true
   form.app_id = typeof saved.app_id === 'string' ? saved.app_id : ''
   form.app_secret = typeof saved.app_secret === 'string' ? saved.app_secret : ''
-  form.whitelist = typeof saved.whitelist === 'string' ? saved.whitelist : ''
+  // 白名单落库形态为数组(后端契约 Vec<String>);兼容历史字符串脏数据,
+  // 统一转逗号分隔字符串回填表单
+  form.whitelist = Array.isArray(saved.whitelist)
+    ? (saved.whitelist as unknown[]).filter((x): x is string => typeof x === 'string').join(',')
+    : typeof saved.whitelist === 'string'
+      ? saved.whitelist
+      : ''
 })
 
 /** 保存:enabled=true 时 id/secret 必填,不过校验不落库;整体替换写单一 KV 键 */
@@ -106,13 +115,19 @@ async function save() {
     emit('toast', t('settings.feishuValidateIncomplete'), 'warning')
     return
   }
+  // 白名单落库为数组(后端 FeishuConfig.whitelist: Vec<String> 契约):
+  // 表单逗号分隔字符串拆分为去空数组,空串 → 空数组(=放行所有)
+  const whitelist = form.whitelist
+    .split(',')
+    .map((s) => s.trim())
+    .filter((s) => s.length > 0)
   saving.value = true
   try {
     await appSettings.set(FEISHU_CONFIG_KEY, {
       enabled: form.enabled,
       app_id: form.app_id.trim(),
       app_secret: form.app_secret.trim(),
-      whitelist: form.whitelist.trim(),
+      whitelist,
     })
     emit('toast', t('settings.feishuSaveOk'), 'success')
   } catch (e) {
@@ -134,5 +149,11 @@ async function save() {
   resize: vertical;
   font-family: var(--df-font-mono, monospace);
 }
+.feishu-hint {
+  margin: 0 0 4px;
+  font-size: 12px;
+  line-height: 1.5;
+  color: var(--df-text-tertiary, #888);
+}
 .actions { display: flex; gap: 8px; margin-top: 8px; }
 </style>