test(slides): avoid credential-like history test text

internal/errclass/codemeta_drive.go

@@ -10,20 +10,15 @@ import "github.com/larksuite/cli/errs"
 // ambiguous codes fall back to CategoryAPI via BuildAPIError.
 // BuildAPIError consumes this map via mergeCodeMeta + LookupCodeMeta.
 var driveCodeMeta = map[int]CodeMeta{
-	1061001:  {Category: errs.CategoryAPI, Subtype: errs.SubtypeServerError, Retryable: true}, // Drive "unknown error"
-	1061002:  {Category: errs.CategoryAPI, Subtype: errs.SubtypeInvalidParameters},            // params error
-	1061004:  {Category: errs.CategoryAuthorization, Subtype: errs.SubtypePermissionDenied},   // forbidden
-	1061007:  {Category: errs.CategoryAPI, Subtype: errs.SubtypeNotFound},                     // file has been deleted
-	1061043:  {Category: errs.CategoryAPI, Subtype: errs.SubtypeQuotaExceeded},                // file size beyond limit
-	1061044:  {Category: errs.CategoryAPI, Subtype: errs.SubtypeNotFound},                     // parent folder does not exist (upload)
-	1062009:  {Category: errs.CategoryAPI, Subtype: errs.SubtypeInvalidParameters},            // actual size inconsistent with declared size
-	1063001:  {Category: errs.CategoryAPI, Subtype: errs.SubtypeInvalidParameters},            // secure label invalid parameter
-	1063002:  {Category: errs.CategoryAuthorization, Subtype: errs.SubtypePermissionDenied},   // secure label permission denied
-	1063013:  {Category: errs.CategoryValidation, Subtype: errs.SubtypeFailedPrecondition},    // secure label downgrade requires approval
-	1069302:  {Category: errs.CategoryAPI, Subtype: errs.SubtypeInvalidParameters},            // comment endpoint "Invalid or missing parameters"
-	99992402: {Category: errs.CategoryAPI, Subtype: errs.SubtypeInvalidParameters},            // platform field validation failed
-	9499:     {Category: errs.CategoryAPI, Subtype: errs.SubtypeInvalidParameters},            // invalid parameter type in JSON field
-	2200:     {Category: errs.CategoryAPI, Subtype: errs.SubtypeServerError, Retryable: true}, // Drive tenant/internal errors
+	1061001: {Category: errs.CategoryAPI, Subtype: errs.SubtypeServerError, Retryable: true}, // Drive "unknown error"
+	1061002: {Category: errs.CategoryAPI, Subtype: errs.SubtypeInvalidParameters},            // params error
+	1061004: {Category: errs.CategoryAuthorization, Subtype: errs.SubtypePermissionDenied},   // forbidden
+	1061007: {Category: errs.CategoryAPI, Subtype: errs.SubtypeNotFound},                     // file has been deleted
+	1061043: {Category: errs.CategoryAPI, Subtype: errs.SubtypeQuotaExceeded},                // file size beyond limit
+	1061044: {Category: errs.CategoryAPI, Subtype: errs.SubtypeNotFound},                     // parent folder does not exist (upload)
+	1062009: {Category: errs.CategoryAPI, Subtype: errs.SubtypeInvalidParameters},            // actual size inconsistent with declared size
+	1069302: {Category: errs.CategoryAPI, Subtype: errs.SubtypeInvalidParameters},            // comment endpoint "Invalid or missing parameters"
+	2200:    {Category: errs.CategoryAPI, Subtype: errs.SubtypeServerError, Retryable: true}, // Drive tenant/internal errors
 }
 
 func init() { mergeCodeMeta(driveCodeMeta, "drive") }

internal/errclass/codemeta_drive_test.go

@@ -27,13 +27,6 @@ func TestLookupCodeMeta_DriveCodes(t *testing.T) {
 		// 1069302: comment endpoint's opaque "Invalid or missing parameters"
 		// (shortcuts/drive/drive_add_comment.go) → API-side parameter rejection.
 		{1069302, errs.CategoryAPI, errs.SubtypeInvalidParameters, false},
-		// Secure label endpoint codes observed from drive +secure-label-update
-		// failure telemetry.
-		{1063001, errs.CategoryAPI, errs.SubtypeInvalidParameters, false},
-		{1063002, errs.CategoryAuthorization, errs.SubtypePermissionDenied, false},
-		{1063013, errs.CategoryValidation, errs.SubtypeFailedPrecondition, false},
-		{99992402, errs.CategoryAPI, errs.SubtypeInvalidParameters, false},
-		{9499, errs.CategoryAPI, errs.SubtypeInvalidParameters, false},
 	}
 	for _, tc := range cases {
 		t.Run(fmt.Sprintf("%d", tc.code), func(t *testing.T) {

shortcuts/doc/docs_create_v2.go

@@ -18,7 +18,6 @@ func v2CreateFlags() []common.Flag {
 	return []common.Flag{
 		{Name: "title", Desc: "document title; when provided, the CLI prepends it to --content as <title>...</title> so the title wins over later content titles"},
 		{Name: "content", Desc: "document body; XML by default or Markdown when --doc-format markdown. " + docsContentSkillHelp + "; use --help for the latest command flags", Input: []string{common.File, common.Stdin}},
-		{Name: "reference-map", Desc: docsReferenceMapFlagDesc, Input: []string{common.File, common.Stdin}},
 		{Name: "doc-format", Desc: "content format; xml is default and supports richer DocxXML blocks, markdown imports plain Markdown", Default: "xml", Enum: []string{"xml", "markdown"}},
 		{Name: "parent-token", Desc: "parent folder token or wiki node token; mutually exclusive with --parent-position"},
 		{Name: "parent-position", Desc: "parent position such as my_library; mutually exclusive with --parent-token"},
@@ -33,8 +32,8 @@ func validateCreateV2(_ context.Context, runtime *common.RuntimeContext) error {
 	if runtime.Changed("title") && title == "" {
 		return errs.NewValidationError(errs.SubtypeInvalidArgument, "--title must not be empty").WithParam("--title")
 	}
-	if err := validateDocsV2ReferenceMapFlags(runtime); err != nil {
-		return err
+	if runtime.Str("content") == "" && title == "" {
+		return errs.NewValidationError(errs.SubtypeInvalidArgument, "--content is required unless --title is provided").WithParam("--content")
 	}
 	if runtime.Str("parent-token") != "" && runtime.Str("parent-position") != "" {
 		return errs.NewValidationError(errs.SubtypeInvalidArgument, "--parent-token and --parent-position are mutually exclusive").WithParams(
@@ -42,21 +41,11 @@ func validateCreateV2(_ context.Context, runtime *common.RuntimeContext) error {
 			errs.InvalidParam{Name: "--parent-position", Reason: "mutually exclusive with --parent-token"},
 		)
 	}
-	if runtime.Str("content") == "" && title == "" {
-		return errs.NewValidationError(errs.SubtypeInvalidArgument, "--content is required unless --title is provided").WithParam("--content")
-	}
-	if runtime.Str("content") != "" {
-		_, err := resolveDocsV2ContentReferenceMap(runtime)
-		return err
-	}
 	return nil
 }
 
 func dryRunCreateV2(_ context.Context, runtime *common.RuntimeContext) *common.DryRunAPI {
-	body, err := buildCreateBodyWithHTML5ReferenceMap(runtime)
-	if err != nil {
-		return common.NewDryRunAPI().Set("error", err.Error())
-	}
+	body := buildCreateBody(runtime)
 	desc := "OpenAPI: create document"
 	if runtime.IsBot() {
 		desc += ". After document creation succeeds in bot mode, the CLI will also try to grant the current CLI user full_access (可管理权限) on the new document."
@@ -68,10 +57,7 @@ func dryRunCreateV2(_ context.Context, runtime *common.RuntimeContext) *common.D
 }
 
 func executeCreateV2(_ context.Context, runtime *common.RuntimeContext) error {
-	body, err := buildCreateBodyWithHTML5ReferenceMap(runtime)
-	if err != nil {
-		return err
-	}
+	body := buildCreateBody(runtime)
 
 	data, err := doDocAPI(runtime, "POST", "/open-apis/docs_ai/v1/documents", body)
 	if err != nil {
@@ -100,10 +86,7 @@ func buildCreateBody(runtime *common.RuntimeContext) map[string]interface{} {
 }
 
 func buildCreateContent(runtime *common.RuntimeContext) string {
-	return buildCreateContentWithBody(runtime, runtime.Str("content"))
-}
-
-func buildCreateContentWithBody(runtime *common.RuntimeContext, content string) string {
+	content := runtime.Str("content")
 	title := strings.TrimSpace(runtime.Str("title"))
 	if title == "" {
 		return content

shortcuts/doc/docs_fetch_v2.go

@@ -14,7 +14,7 @@ import (
 	"github.com/larksuite/cli/shortcuts/common"
 )
 
-const docsFetchExtraParam = `{"enable_user_cite_reference_map":true,"return_html5_block_data":true}`
+const docsFetchExtraParam = `{"enable_user_cite_reference_map":true}`
 
 // v2FetchFlags returns the flag definitions for the v2 (OpenAPI) fetch path.
 func v2FetchFlags() []common.Flag {
@@ -71,9 +71,6 @@ func executeFetchV2(_ context.Context, runtime *common.RuntimeContext) error {
 	if err != nil {
 		return err
 	}
-	if err := processHTML5BlockReferenceMapForFetch(runtime, effectiveFetchFormat(runtime), ref.Token, data); err != nil {
-		return err
-	}
 	if warning := addFetchDetailDowngradeWarning(runtime, data); warning != "" && runtime.Format == "pretty" {
 		fmt.Fprintf(runtime.IO().ErrOut, "warning: %s\n", warning)
 	}

shortcuts/doc/docs_fetch_v2_test.go

@@ -505,14 +505,14 @@ func TestBuildFetchBodyIncludesFetchExtraParamByDefault(t *testing.T) {
 	if got["enable_user_cite_reference_map"] != true {
 		t.Fatalf("enable_user_cite_reference_map = %#v, want true in %#v", got["enable_user_cite_reference_map"], got)
 	}
-	if got["return_html5_block_data"] != true {
-		t.Fatalf("return_html5_block_data = %#v, want true in %#v", got["return_html5_block_data"], got)
+	if _, ok := got["return_html5_block_data"]; ok {
+		t.Fatalf("extra_param should not request html5 block data: %#v", got)
 	}
 	if _, ok := got["reference_map_mode"]; ok {
 		t.Fatalf("extra_param should not use legacy reference_map_mode: %#v", got)
 	}
-	if len(got) != 2 {
-		t.Fatalf("extra_param should only contain fetch reference_map and html5 data toggles: %#v", got)
+	if len(got) != 1 {
+		t.Fatalf("extra_param should only contain fetch reference_map toggle: %#v", got)
 	}
 }
 
@@ -579,46 +579,6 @@ func TestDocsFetchIMMarkdownRequestsMarkdownFromAPI(t *testing.T) {
 	}
 }
 
-func TestDocsFetchIMMarkdownIgnoresHTML5BlockInsideCodeFence(t *testing.T) {
-	t.Setenv("LARKSUITE_CLI_CONFIG_DIR", t.TempDir())
-
-	f, stdout, _, reg := cmdutil.TestFactory(t, docsTestConfigWithAppID("docs-fetch-im-markdown-code-fence"))
-	registerDocsAIStub(reg, "POST", "/open-apis/docs_ai/v1/documents/doxcnFetchIMMarkdownFence/fetch", map[string]interface{}{
-		"document": map[string]interface{}{
-			"document_id": "doxcnFetchIMMarkdownFence",
-			"revision_id": float64(1),
-			"content":     "```xml\n<html5-block data-ref=\"html5_1\"></html5-block>\n```\n",
-		},
-	})
-
-	err := mountAndRunDocs(t, DocsFetch, []string{
-		"+fetch",
-		"--doc", "doxcnFetchIMMarkdownFence",
-		"--doc-format", "im-markdown",
-		"--format", "json",
-		"--as", "bot",
-	}, f, stdout)
-	if err != nil {
-		t.Fatalf("unexpected error: %v", err)
-	}
-	var envelope map[string]interface{}
-	if err := json.Unmarshal(stdout.Bytes(), &envelope); err != nil {
-		t.Fatalf("decode output: %v\nraw=%s", err, stdout.String())
-	}
-	if errField, ok := envelope["error"]; ok {
-		t.Fatalf("fetch output should not contain error: %#v", errField)
-	}
-	data, _ := envelope["data"].(map[string]interface{})
-	doc, _ := data["document"].(map[string]interface{})
-	content, _ := doc["content"].(string)
-	if !strings.Contains(content, "```xml\n<html5-block data-ref=\"html5_1\"></html5-block>\n```") {
-		t.Fatalf("fenced html5-block should stay in content, got:\n%s", content)
-	}
-	if _, ok := doc["reference_map"]; ok {
-		t.Fatalf("fenced html5-block should not create reference_map side effects: %#v", doc["reference_map"])
-	}
-}
-
 func TestDocsFetchMarkdownDetailDowngradesToSimple(t *testing.T) {
 	t.Parallel()
 

shortcuts/doc/docs_update_test.go

@@ -5,7 +5,6 @@ package doc
 import (
 	"context"
 	"errors"
-	"os"
 	"strings"
 	"testing"
 
@@ -64,39 +63,6 @@ func TestDocsUpdateDryRunIgnoresAPIVersionCompatFlag(t *testing.T) {
 	}
 }
 
-func TestBuildUpdateBodyWithHTML5ReferenceMapReportsPathError(t *testing.T) {
-	t.Parallel()
-
-	runtime := newUpdateShortcutTestRuntime(t, "", map[string]string{
-		"content": `<html5-block path="@missing.html"></html5-block>`,
-	})
-
-	_, err := buildUpdateBodyWithHTML5ReferenceMap(runtime)
-	if err == nil {
-		t.Fatal("buildUpdateBodyWithHTML5ReferenceMap() succeeded, want error")
-	}
-	p, ok := errs.ProblemOf(err)
-	if !ok {
-		t.Fatalf("ProblemOf() ok = false for %T (%v)", err, err)
-	}
-	if p.Category != errs.CategoryValidation {
-		t.Fatalf("category = %q, want %q", p.Category, errs.CategoryValidation)
-	}
-	if p.Subtype != errs.SubtypeInvalidArgument {
-		t.Fatalf("subtype = %q, want %q", p.Subtype, errs.SubtypeInvalidArgument)
-	}
-	var validationErr *errs.ValidationError
-	if !errors.As(err, &validationErr) {
-		t.Fatalf("error type = %T, want *errs.ValidationError", err)
-	}
-	if validationErr.Param != "path" {
-		t.Fatalf("param = %q, want path", validationErr.Param)
-	}
-	if !errors.Is(err, os.ErrNotExist) {
-		t.Fatalf("error should preserve os.ErrNotExist cause, got: %v", err)
-	}
-}
-
 func TestDocsUpdateV2ReferenceMapFlagIsPublicFileInput(t *testing.T) {
 	t.Parallel()
 

shortcuts/doc/docs_update_v2.go

@@ -24,9 +24,7 @@ var validCommandsV2 = map[string]bool{
 	"append":                  true,
 }
 
-const docsReferenceMapFlagDesc = "结构化 `reference_map` JSON object；必须与 `--content` 一起使用。普通写入优先把结构写在正文里；`--reference-map` 主要用于保留或回放已有 `document.reference_map`。支持直接 JSON、`@reference-map.json`（相对路径）或 `-` 从 stdin 读取。"
-
-const docsUpdateReferenceMapFlagDesc = docsReferenceMapFlagDesc
+const docsUpdateReferenceMapFlagDesc = "结构化 `reference_map` JSON object；当 `--content` 使用正文外部载荷 / 引用映射时与内容一起传给服务，支持直接 JSON、`@reference-map.json`（相对路径）或 `-` 从 stdin 读取。通常用于回写已有 `document.reference_map`。"
 
 // v2UpdateFlags returns the flag definitions for the v2 (OpenAPI) update path.
 func v2UpdateFlags() []common.Flag {
@@ -117,20 +115,13 @@ func validateUpdateV2(_ context.Context, runtime *common.RuntimeContext) error {
 			return errs.NewValidationError(errs.SubtypeInvalidArgument, "--command append requires --content").WithParam("--content")
 		}
 	}
-	if content != "" {
-		_, err := resolveDocsV2ContentReferenceMap(runtime)
-		return err
-	}
 	return nil
 }
 
 func dryRunUpdateV2(_ context.Context, runtime *common.RuntimeContext) *common.DryRunAPI {
 	// Validate has already accepted --doc; parseDocumentRef cannot fail here.
 	ref, _ := parseDocumentRef(runtime.Str("doc"))
-	body, err := buildUpdateBodyWithHTML5ReferenceMap(runtime)
-	if err != nil {
-		return common.NewDryRunAPI().Set("error", err.Error())
-	}
+	body, _ := buildUpdateBodyWithReferenceMap(runtime)
 	apiPath := fmt.Sprintf("/open-apis/docs_ai/v1/documents/%s", ref.Token)
 	return common.NewDryRunAPI().
 		PUT(apiPath).
@@ -143,7 +134,7 @@ func executeUpdateV2(_ context.Context, runtime *common.RuntimeContext) error {
 	ref, _ := parseDocumentRef(runtime.Str("doc"))
 
 	apiPath := fmt.Sprintf("/open-apis/docs_ai/v1/documents/%s", ref.Token)
-	body, err := buildUpdateBodyWithHTML5ReferenceMap(runtime)
+	body, err := buildUpdateBodyWithReferenceMap(runtime)
 	if err != nil {
 		return err
 	}

shortcuts/doc/html5_block_resources.go

@@ -1,696 +0,0 @@
-// Copyright (c) 2026 Lark Technologies Pte. Ltd.
-// SPDX-License-Identifier: MIT
-
-package doc
-
-import (
-	"bytes"
-	"encoding/json"
-	"encoding/xml"
-	"errors"
-	"fmt"
-	"io"
-	"path/filepath"
-	"regexp"
-	"strings"
-
-	"github.com/larksuite/cli/errs"
-	"github.com/larksuite/cli/extension/fileio"
-	"github.com/larksuite/cli/internal/cmdutil"
-	"github.com/larksuite/cli/shortcuts/common"
-)
-
-const (
-	html5BlockTag             = "html5-block"
-	html5BlockPathAttr        = "path"
-	html5BlockDataRefAttr     = "data-ref"
-	html5BlockDataAttr        = "data"
-	html5BlockReferenceRoot   = "doc-fetch-resources"
-	html5BlockReferenceMaxRaw = 1024
-)
-
-var (
-	html5BlockStartTagPattern = regexp.MustCompile(`(?is)<html5-block\b[^>]*>`)
-	html5BlockElementPattern  = regexp.MustCompile(`(?is)<html5-block\b[^>]*>(.*?)</html5-block>`)
-	html5BlockSafeNamePattern = regexp.MustCompile(`^[A-Za-z0-9._-]+$`)
-)
-
-type html5BlockReferenceEntry struct {
-	Data   string `json:"data,omitempty"`
-	Path   string `json:"path,omitempty"`
-	UserID string `json:"user_id,omitempty"`
-}
-
-type html5BlockReferenceMap map[string]map[string]html5BlockReferenceEntry
-
-type docsV2WriteInput struct {
-	Content      string
-	ReferenceMap map[string]interface{}
-}
-
-type html5BlockAttr struct {
-	Name  string
-	Value string
-}
-
-type html5BlockStartTag struct {
-	Attrs       []html5BlockAttr
-	SelfClosing bool
-}
-
-func buildCreateBodyWithHTML5ReferenceMap(runtime *common.RuntimeContext) (map[string]interface{}, error) {
-	body := buildCreateBody(runtime)
-	if runtime.Str("content") == "" && !runtime.Changed("reference-map") {
-		return body, nil
-	}
-	input, err := resolveDocsV2ContentReferenceMap(runtime)
-	if err != nil {
-		return nil, err
-	}
-	body["content"] = buildCreateContentWithBody(runtime, input.Content)
-	if len(input.ReferenceMap) > 0 {
-		body["reference_map"] = input.ReferenceMap
-	}
-	return body, nil
-}
-
-func buildUpdateBodyWithHTML5ReferenceMap(runtime *common.RuntimeContext) (map[string]interface{}, error) {
-	body := buildUpdateBody(runtime)
-	input, err := resolveDocsV2ContentReferenceMap(runtime)
-	if err != nil {
-		return nil, err
-	}
-	if input.Content != "" {
-		body["content"] = input.Content
-	}
-	if len(input.ReferenceMap) > 0 {
-		body["reference_map"] = input.ReferenceMap
-	}
-	return body, nil
-}
-
-func validateDocsV2ReferenceMapFlags(runtime *common.RuntimeContext) error {
-	if runtime.Changed("reference-map") && runtime.Str("content") == "" {
-		return errs.NewValidationError(errs.SubtypeInvalidArgument, "--reference-map requires --content").WithParam("--reference-map")
-	}
-	return nil
-}
-
-func resolveDocsV2ContentReferenceMap(runtime *common.RuntimeContext) (docsV2WriteInput, error) {
-	input := docsV2WriteInput{Content: runtime.Str("content")}
-	if raw := runtime.Str("reference-map"); strings.TrimSpace(raw) != "" {
-		refMap, err := parseReferenceMapObject(raw, "--reference-map")
-		if err != nil {
-			return docsV2WriteInput{}, err
-		}
-		input.ReferenceMap = refMap
-	}
-	return prepareDocsV2WriteInput(runtime, input)
-}
-
-func prepareDocsV2WriteInput(runtime *common.RuntimeContext, input docsV2WriteInput) (docsV2WriteInput, error) {
-	refMap := cloneReferenceMapObject(input.ReferenceMap)
-	html5RefMap, err := html5ReferenceMapFromObject(refMap)
-	if err != nil {
-		return docsV2WriteInput{}, err
-	}
-
-	content, html5RefMap, err := prepareHTML5BlockWriteContent(runtime, runtime.Str("doc-format"), input.Content, html5RefMap)
-	if err != nil {
-		return docsV2WriteInput{}, err
-	}
-	if err := resolveReferenceMapPaths(runtime, html5RefMap); err != nil {
-		return docsV2WriteInput{}, err
-	}
-	refMap = mergeHTML5ReferenceMap(refMap, html5RefMap)
-	return docsV2WriteInput{
-		Content:      content,
-		ReferenceMap: refMap,
-	}, nil
-}
-
-func parseReferenceMapObject(raw string, label string) (map[string]interface{}, error) {
-	if len(bytes.TrimSpace([]byte(raw))) == 0 || string(bytes.TrimSpace([]byte(raw))) == "null" {
-		return nil, nil
-	}
-	var refMap map[string]interface{}
-	if err := json.Unmarshal([]byte(raw), &refMap); err != nil {
-		return nil, common.ValidationErrorf("%s is not valid reference_map JSON: %v", label, err).WithParam(label).WithCause(err)
-	}
-	return refMap, nil
-}
-
-func parseHTML5BlockReferenceMapBytes(raw []byte, label string) (html5BlockReferenceMap, error) {
-	if len(bytes.TrimSpace(raw)) == 0 || string(bytes.TrimSpace(raw)) == "null" {
-		return nil, nil
-	}
-	var refMap html5BlockReferenceMap
-	if err := json.Unmarshal(raw, &refMap); err != nil {
-		return nil, common.ValidationErrorf("%s is not valid reference_map JSON: %v", label, err).WithParam(label).WithCause(err)
-	}
-	return compactReferenceMap(refMap), nil
-}
-
-func prepareHTML5BlockWriteContent(runtime *common.RuntimeContext, format string, content string, refMap html5BlockReferenceMap) (string, html5BlockReferenceMap, error) {
-	if !strings.Contains(content, "<html5-block") {
-		return content, compactReferenceMap(refMap), nil
-	}
-	if err := validateHTML5BlockWriteElementBodies(format, content); err != nil {
-		return "", nil, err
-	}
-
-	refMap = cloneReferenceMap(refMap)
-	if refMap == nil {
-		refMap = html5BlockReferenceMap{}
-	}
-	ensureReferenceGroup(refMap, html5BlockTag)
-	nextRef := nextHTML5BlockRef(refMap)
-
-	rewrite := func(segment string) (string, error) {
-		return rewriteHTML5BlockStartTags(segment, func(raw string) (string, error) {
-			tag, err := parseHTML5BlockStartTag(raw)
-			if err != nil {
-				return "", common.ValidationErrorf("invalid html5-block tag: %v", err).WithParam("html5-block")
-			}
-			if tag.hasAttr(html5BlockDataAttr) {
-				return "", common.ValidationErrorf("html5-block data is reserved for SDK internals; use data-ref with reference_map or path=\"@relative.html\"").WithParam("html5-block")
-			}
-
-			pathValue, hasPath := tag.attr(html5BlockPathAttr)
-			dataRef, hasDataRef := tag.attr(html5BlockDataRefAttr)
-			if hasPath && hasDataRef {
-				return "", common.ValidationErrorf("html5-block cannot contain both path and data-ref").WithParam("html5-block")
-			}
-			if hasDataRef {
-				ref := strings.TrimSpace(dataRef)
-				if ref == "" {
-					return "", common.ValidationErrorf("html5-block data-ref cannot be empty").WithParam("data-ref")
-				}
-				if _, ok := refMap[html5BlockTag][ref]; !ok {
-					return "", common.ValidationErrorf("reference_map.%s.%s is required for html5-block data-ref", html5BlockTag, ref).WithParam("reference_map")
-				}
-				return tag.render(false), nil
-			}
-			if !hasPath {
-				return "", common.ValidationErrorf("html5-block requires path=\"@relative.html\" or data-ref with reference_map").WithParam("html5-block")
-			}
-
-			data, err := readHTML5BlockPath(runtime, pathValue, "html5-block path")
-			if err != nil {
-				return "", err
-			}
-			ref := nextRef()
-			refMap[html5BlockTag][ref] = html5BlockReferenceEntry{Data: data}
-			tag.removeAttrs(html5BlockPathAttr, html5BlockDataRefAttr, html5BlockDataAttr)
-			tag.Attrs = append(tag.Attrs, html5BlockAttr{Name: html5BlockDataRefAttr, Value: ref})
-			return tag.render(false), nil
-		})
-	}
-
-	var (
-		out string
-		err error
-	)
-	if strings.TrimSpace(format) == "markdown" {
-		out = applyOutsideCodeFences(content, func(segment string) string {
-			if err != nil {
-				return segment
-			}
-			outSegment, rewriteErr := rewrite(segment)
-			if rewriteErr != nil {
-				err = rewriteErr
-				return segment
-			}
-			return outSegment
-		})
-	} else {
-		out, err = rewrite(content)
-	}
-	if err != nil {
-		return "", nil, err
-	}
-	return out, compactReferenceMap(refMap), nil
-}
-
-func validateHTML5BlockWriteElementBodies(format string, content string) error {
-	validateSegment := func(segment string) error {
-		matches := html5BlockElementPattern.FindAllStringSubmatchIndex(segment, -1)
-		for _, match := range matches {
-			if len(match) < 4 || match[2] < 0 || match[3] < 0 {
-				continue
-			}
-			if strings.TrimSpace(segment[match[2]:match[3]]) != "" {
-				return common.ValidationErrorf("html5-block content must be loaded from path=\"@relative.html\" or reference_map; remove content between <html5-block> and </html5-block>").WithParam("html5-block")
-			}
-		}
-		return nil
-	}
-
-	if strings.TrimSpace(format) != "markdown" {
-		return validateSegment(content)
-	}
-
-	var validateErr error
-	_ = applyOutsideCodeFences(content, func(segment string) string {
-		if validateErr != nil {
-			return segment
-		}
-		validateErr = validateSegment(segment)
-		return segment
-	})
-	return validateErr
-}
-
-func processHTML5BlockReferenceMapForFetch(runtime *common.RuntimeContext, format string, docToken string, data map[string]interface{}) error {
-	doc, _ := data["document"].(map[string]interface{})
-	if doc == nil {
-		return nil
-	}
-	content, _ := doc["content"].(string)
-	if !hasProcessableHTML5Block(format, content) {
-		return nil
-	}
-
-	refMap, err := referenceMapFromDocument(doc)
-	if err != nil {
-		return err
-	}
-	group := refMap[html5BlockTag]
-	if group == nil {
-		return common.ValidationErrorf("document.reference_map.%s is required for fetched html5-block content", html5BlockTag).WithParam("reference_map")
-	}
-
-	if err := validateFetchedHTML5BlockRefs(format, content, refMap); err != nil {
-		return err
-	}
-
-	changed := false
-	for ref, entry := range group {
-		if entry.Data == "" || len([]byte(entry.Data)) <= html5BlockReferenceMaxRaw {
-			continue
-		}
-		relPath, err := writeHTML5BlockReferenceFile(runtime, docToken, ref, entry.Data)
-		if err != nil {
-			return err
-		}
-		entry.Data = ""
-		entry.Path = "@" + filepath.ToSlash(relPath)
-		group[ref] = entry
-		changed = true
-	}
-	if changed {
-		doc["reference_map"] = refMap
-	}
-	return nil
-}
-
-func referenceMapFromDocument(doc map[string]interface{}) (html5BlockReferenceMap, error) {
-	raw, ok := doc["reference_map"]
-	if !ok || raw == nil {
-		return nil, common.ValidationErrorf("document.reference_map is required for fetched html5-block content").WithParam("reference_map")
-	}
-	refMap, err := referenceMapFromValue(raw, "document.reference_map")
-	if err != nil {
-		return nil, err
-	}
-	if len(refMap) == 0 {
-		return nil, common.ValidationErrorf("document.reference_map is required for fetched html5-block content").WithParam("reference_map")
-	}
-	return refMap, nil
-}
-
-func referenceMapFromValue(value interface{}, label string) (html5BlockReferenceMap, error) {
-	if typed, ok := value.(html5BlockReferenceMap); ok {
-		return compactReferenceMap(typed), nil
-	}
-	raw, err := json.Marshal(value)
-	if err != nil {
-		return nil, common.ValidationErrorf("%s is not valid reference_map JSON: %v", label, err).WithParam("reference_map").WithCause(err)
-	}
-	return parseHTML5BlockReferenceMapBytes(raw, label)
-}
-
-func validateFetchedHTML5BlockRefs(format string, content string, refMap html5BlockReferenceMap) error {
-	validateSegment := func(segment string) error {
-		_, err := rewriteHTML5BlockStartTags(segment, func(raw string) (string, error) {
-			tag, parseErr := parseHTML5BlockStartTag(raw)
-			if parseErr != nil {
-				return raw, common.ValidationErrorf("invalid html5-block tag in fetched content: %v", parseErr).WithParam("html5-block")
-			}
-			ref, ok := tag.attr(html5BlockDataRefAttr)
-			if !ok || strings.TrimSpace(ref) == "" {
-				return raw, common.ValidationErrorf("fetched html5-block is missing data-ref; cannot resolve HTML reference").WithParam("html5-block")
-			}
-			ref = strings.TrimSpace(ref)
-			if _, ok := refMap[html5BlockTag][ref]; !ok {
-				return raw, common.ValidationErrorf("document.reference_map.%s.%s is missing; cannot resolve html5-block. Re-run fetch or check that the upstream document.reference_map field includes this ref.", html5BlockTag, ref).WithParam("reference_map")
-			}
-			return raw, nil
-		})
-		return err
-	}
-
-	if strings.TrimSpace(format) != "markdown" {
-		return validateSegment(content)
-	}
-	var validateErr error
-	_ = applyOutsideCodeFences(content, func(segment string) string {
-		if validateErr != nil {
-			return segment
-		}
-		validateErr = validateSegment(segment)
-		return segment
-	})
-	return validateErr
-}
-
-func resolveReferenceMapPaths(runtime *common.RuntimeContext, refMap html5BlockReferenceMap) error {
-	for typ, group := range refMap {
-		for ref, entry := range group {
-			if strings.TrimSpace(entry.Path) == "" {
-				continue
-			}
-			if entry.Data != "" {
-				return common.ValidationErrorf("reference_map.%s.%s must use either data or path, not both", typ, ref).WithParam("reference_map")
-			}
-			data, err := readHTML5BlockPath(runtime, entry.Path, fmt.Sprintf("reference_map.%s.%s.path", typ, ref))
-			if err != nil {
-				return err
-			}
-			entry.Data = data
-			entry.Path = ""
-			group[ref] = entry
-		}
-	}
-	return nil
-}
-
-func readHTML5BlockPath(runtime *common.RuntimeContext, pathValue string, label string) (string, error) {
-	pathRaw := strings.TrimSpace(pathValue)
-	if !strings.HasPrefix(pathRaw, "@") {
-		return "", common.ValidationErrorf("%s %q must start with @, for example @widget.html", label, pathValue).WithParam("path")
-	}
-	relPath := strings.TrimSpace(strings.TrimPrefix(pathRaw, "@"))
-	if relPath == "" {
-		return "", common.ValidationErrorf("%s cannot be empty after @", label).WithParam("path")
-	}
-	clean := filepath.Clean(relPath)
-	if filepath.IsAbs(clean) || clean == "." || clean == ".." || strings.HasPrefix(clean, ".."+string(filepath.Separator)) {
-		return "", common.ValidationErrorf("%s %q must be a relative path within the current working directory", label, pathValue).WithParam("path")
-	}
-	if strings.ToLower(filepath.Ext(clean)) != ".html" {
-		return "", common.ValidationErrorf("%s %q must point to a .html file", label, pathValue).WithParam("path")
-	}
-	data, err := cmdutil.ReadInputFile(runtime.FileIO(), clean)
-	if err != nil {
-		return "", common.ValidationErrorf("%s %q cannot be read from the current working directory; check that the file exists relative to where lark-cli is running: %v", label, clean, err).WithParam("path").WithCause(err)
-	}
-	return string(data), nil
-}
-
-func hasProcessableHTML5Block(format string, content string) bool {
-	if !strings.Contains(content, "<html5-block") {
-		return false
-	}
-	if strings.TrimSpace(format) != "markdown" {
-		return true
-	}
-	found := false
-	_ = applyOutsideCodeFences(content, func(segment string) string {
-		if strings.Contains(segment, "<html5-block") {
-			found = true
-		}
-		return segment
-	})
-	return found
-}
-
-func applyOutsideCodeFences(content string, fn func(segment string) string) string {
-	var out strings.Builder
-	var segment strings.Builder
-	inFence := false
-
-	flush := func() {
-		if segment.Len() == 0 {
-			return
-		}
-		out.WriteString(fn(segment.String()))
-		segment.Reset()
-	}
-
-	for _, line := range strings.SplitAfter(content, "\n") {
-		trimmed := strings.TrimSpace(line)
-		if strings.HasPrefix(trimmed, "```") || strings.HasPrefix(trimmed, "~~~") {
-			if !inFence {
-				flush()
-				inFence = true
-			} else {
-				inFence = false
-			}
-			out.WriteString(line)
-			continue
-		}
-		if inFence {
-			out.WriteString(line)
-		} else {
-			segment.WriteString(line)
-		}
-	}
-	flush()
-	return out.String()
-}
-
-func cloneReferenceMap(refMap html5BlockReferenceMap) html5BlockReferenceMap {
-	if len(refMap) == 0 {
-		return nil
-	}
-	out := make(html5BlockReferenceMap, len(refMap))
-	for typ, group := range refMap {
-		if len(group) == 0 {
-			continue
-		}
-		outGroup := make(map[string]html5BlockReferenceEntry, len(group))
-		for ref, entry := range group {
-			outGroup[ref] = entry
-		}
-		out[typ] = outGroup
-	}
-	return out
-}
-
-func cloneReferenceMapObject(refMap map[string]interface{}) map[string]interface{} {
-	if len(refMap) == 0 {
-		return nil
-	}
-	out := make(map[string]interface{}, len(refMap))
-	for key, value := range refMap {
-		out[key] = value
-	}
-	return out
-}
-
-func html5ReferenceMapFromObject(refMap map[string]interface{}) (html5BlockReferenceMap, error) {
-	if len(refMap) == 0 {
-		return nil, nil
-	}
-	group, ok := refMap[html5BlockTag]
-	if !ok || group == nil {
-		return nil, nil
-	}
-	return referenceMapFromValue(map[string]interface{}{html5BlockTag: group}, "reference_map."+html5BlockTag)
-}
-
-func mergeHTML5ReferenceMap(refMap map[string]interface{}, html5RefMap html5BlockReferenceMap) map[string]interface{} {
-	group := html5RefMap[html5BlockTag]
-	if len(group) == 0 {
-		return refMap
-	}
-	if refMap == nil {
-		refMap = map[string]interface{}{}
-	}
-	refMap[html5BlockTag] = group
-	return refMap
-}
-
-func compactReferenceMap(refMap html5BlockReferenceMap) html5BlockReferenceMap {
-	if len(refMap) == 0 {
-		return nil
-	}
-	out := make(html5BlockReferenceMap, len(refMap))
-	for typ, group := range refMap {
-		if len(group) == 0 {
-			continue
-		}
-		out[typ] = group
-	}
-	if len(out) == 0 {
-		return nil
-	}
-	return out
-}
-
-func ensureReferenceGroup(refMap html5BlockReferenceMap, typ string) {
-	if refMap[typ] == nil {
-		refMap[typ] = map[string]html5BlockReferenceEntry{}
-	}
-}
-
-func nextHTML5BlockRef(refMap html5BlockReferenceMap) func() string {
-	next := 1
-	return func() string {
-		for {
-			ref := fmt.Sprintf("html5_%d", next)
-			next++
-			if _, exists := refMap[html5BlockTag][ref]; !exists {
-				return ref
-			}
-		}
-	}
-}
-
-func writeHTML5BlockReferenceFile(runtime *common.RuntimeContext, docToken string, ref string, html string) (string, error) {
-	if !isSafeHTML5BlockResourceName(docToken) {
-		return "", common.ValidationErrorf("document_id %q cannot be used as a resource directory name", docToken).WithParam("document_id")
-	}
-	if !isSafeHTML5BlockResourceName(ref) {
-		return "", common.ValidationErrorf("html5-block data-ref %q cannot be used as a file name", ref).WithParam("data-ref")
-	}
-	relPath := filepath.Join(html5BlockReferenceRoot, docToken, ref+".html")
-	data := []byte(html)
-	_, err := runtime.FileIO().Save(relPath, fileio.SaveOptions{
-		ContentType:   "text/html; charset=utf-8",
-		ContentLength: int64(len(data)),
-	}, bytes.NewReader(data))
-	if err != nil {
-		if errors.Is(err, fileio.ErrPathValidation) {
-			return "", common.ValidationErrorf("cannot write html5-block reference file %q: %v", relPath, err).WithParam("reference_map").WithCause(err)
-		}
-		return "", errs.NewInternalError(errs.SubtypeFileIO, "cannot write html5-block reference file %q: %v", relPath, err).WithCause(err)
-	}
-	return relPath, nil
-}
-
-func isSafeHTML5BlockResourceName(name string) bool {
-	return name != "." && name != ".." && html5BlockSafeNamePattern.MatchString(name)
-}
-
-func rewriteHTML5BlockStartTags(content string, fn func(raw string) (string, error)) (string, error) {
-	var rewriteErr error
-	out := html5BlockStartTagPattern.ReplaceAllStringFunc(content, func(raw string) string {
-		if rewriteErr != nil {
-			return raw
-		}
-		rewritten, err := fn(raw)
-		if err != nil {
-			rewriteErr = err
-			return raw
-		}
-		return rewritten
-	})
-	if rewriteErr != nil {
-		return "", rewriteErr
-	}
-	return out, nil
-}
-
-func parseHTML5BlockStartTag(raw string) (html5BlockStartTag, error) {
-	trimmed := strings.TrimSpace(raw)
-	selfClosing := strings.HasSuffix(trimmed, "/>")
-	decoder := xml.NewDecoder(strings.NewReader(raw))
-	for {
-		tok, err := decoder.Token()
-		if err != nil {
-			if errors.Is(err, io.EOF) {
-				break
-			}
-			return html5BlockStartTag{}, err
-		}
-		start, ok := tok.(xml.StartElement)
-		if !ok {
-			continue
-		}
-		if start.Name.Local != html5BlockTag {
-			return html5BlockStartTag{}, fmt.Errorf("expected <%s>, got <%s>", html5BlockTag, start.Name.Local) //nolint:forbidigo // intermediate parse helper; callers wrap with typed validation errors.
-		}
-		attrs := make([]html5BlockAttr, 0, len(start.Attr))
-		for _, attr := range start.Attr {
-			attrs = append(attrs, html5BlockAttr{Name: attr.Name.Local, Value: attr.Value})
-		}
-		return html5BlockStartTag{Attrs: attrs, SelfClosing: selfClosing}, nil
-	}
-	return html5BlockStartTag{}, fmt.Errorf("missing start element") //nolint:forbidigo // intermediate parse helper; callers wrap with typed validation errors.
-}
-
-func (t html5BlockStartTag) attr(name string) (string, bool) {
-	for _, attr := range t.Attrs {
-		if attr.Name == name {
-			return attr.Value, true
-		}
-	}
-	return "", false
-}
-
-func (t html5BlockStartTag) hasAttr(name string) bool {
-	_, ok := t.attr(name)
-	return ok
-}
-
-func (t *html5BlockStartTag) removeAttrs(names ...string) {
-	remove := make(map[string]struct{}, len(names))
-	for _, name := range names {
-		remove[name] = struct{}{}
-	}
-	attrs := t.Attrs[:0]
-	for _, attr := range t.Attrs {
-		if _, ok := remove[attr.Name]; ok {
-			continue
-		}
-		attrs = append(attrs, attr)
-	}
-	t.Attrs = attrs
-}
-
-func (t html5BlockStartTag) render(selfClosing bool) string {
-	var b strings.Builder
-	b.WriteByte('<')
-	b.WriteString(html5BlockTag)
-	for _, attr := range t.Attrs {
-		b.WriteByte(' ')
-		b.WriteString(attr.Name)
-		b.WriteString(`="`)
-		b.WriteString(escapeXMLAttr(attr.Value))
-		b.WriteByte('"')
-	}
-	if selfClosing {
-		b.WriteString("/>")
-	} else {
-		b.WriteByte('>')
-	}
-	if t.SelfClosing && !selfClosing {
-		b.WriteString("</")
-		b.WriteString(html5BlockTag)
-		b.WriteByte('>')
-	}
-	return b.String()
-}
-
-func escapeXMLAttr(value string) string {
-	var b strings.Builder
-	for _, r := range value {
-		switch r {
-		case '&':
-			b.WriteString("&amp;")
-		case '<':
-			b.WriteString("&lt;")
-		case '>':
-			b.WriteString("&gt;")
-		case '"':
-			b.WriteString("&quot;")
-		case '\'':
-			b.WriteString("&apos;")
-		default:
-			b.WriteRune(r)
-		}
-	}
-	return b.String()
-}

shortcuts/doc/html5_block_resources_test.go

@@ -1,563 +0,0 @@
-// Copyright (c) 2026 Lark Technologies Pte. Ltd.
-// SPDX-License-Identifier: MIT
-
-package doc
-
-import (
-	"bytes"
-	"encoding/json"
-	"os"
-	"path/filepath"
-	"strings"
-	"testing"
-
-	"github.com/larksuite/cli/internal/cmdutil"
-	"github.com/larksuite/cli/internal/httpmock"
-	"github.com/larksuite/cli/shortcuts/common"
-)
-
-func TestDocsV2ReferenceMapFlagIsPublicFileInput(t *testing.T) {
-	for name, flags := range map[string][]common.Flag{
-		"create": v2CreateFlags(),
-		"update": v2UpdateFlags(),
-	} {
-		t.Run(name, func(t *testing.T) {
-			flag := findDocsTestFlag(flags, "reference-map")
-			if flag.Name == "" {
-				t.Fatal("reference-map flag not found")
-			}
-			if flag.Hidden {
-				t.Fatal("reference-map flag should be public")
-			}
-			if !hasDocsTestInput(flag, common.File) || !hasDocsTestInput(flag, common.Stdin) {
-				t.Fatalf("reference-map Input = %#v, want file and stdin", flag.Input)
-			}
-			if !strings.Contains(flag.Desc, "@reference-map.json") {
-				t.Fatalf("reference-map help should mention @file support, got %q", flag.Desc)
-			}
-		})
-	}
-}
-
-func TestDocsV2InputFlagIsNotAvailable(t *testing.T) {
-	for name, flags := range map[string][]common.Flag{
-		"create": v2CreateFlags(),
-		"update": v2UpdateFlags(),
-	} {
-		t.Run(name, func(t *testing.T) {
-			for _, flag := range flags {
-				if flag.Name == "input" {
-					t.Fatalf("%s should not expose input flag", name)
-				}
-			}
-		})
-	}
-}
-
-func TestDocsUpdateV2ReferenceMapPreservesGenericGroups(t *testing.T) {
-	t.Parallel()
-
-	runtime := newUpdateShortcutTestRuntime(t, "", map[string]string{
-		"command":       "append",
-		"content":       `<p><widget data-ref="r1"></widget></p>`,
-		"reference-map": `{"widget":{"r1":{"label":"widget-ref-value"}}}`,
-	})
-	body, err := buildUpdateBodyWithHTML5ReferenceMap(runtime)
-	if err != nil {
-		t.Fatalf("buildUpdateBodyWithHTML5ReferenceMap: %v", err)
-	}
-
-	refMap, ok := body["reference_map"].(map[string]interface{})
-	if !ok {
-		t.Fatalf("reference_map = %#v, want object", body["reference_map"])
-	}
-	widget, _ := refMap["widget"].(map[string]interface{})
-	r1, _ := widget["r1"].(map[string]interface{})
-	if got := r1["label"]; got != "widget-ref-value" {
-		t.Fatalf("reference_map.widget.r1.label = %#v, want widget-ref-value; body=%#v", got, body)
-	}
-}
-
-func TestDocsCreateV2HTML5BlockReferenceMapFromPath(t *testing.T) {
-	dir := t.TempDir()
-	cmdutil.TestChdir(t, dir)
-	if err := os.WriteFile("widget.html", []byte("<html><body>hello</body></html>"), 0o600); err != nil {
-		t.Fatalf("WriteFile() error: %v", err)
-	}
-
-	f, stdout, _, reg := cmdutil.TestFactory(t, docsCreateTestConfig(t, ""))
-	stub := registerDocsAIStub(reg, "POST", "/open-apis/docs_ai/v1/documents", map[string]interface{}{
-		"document": map[string]interface{}{
-			"document_id": "doxcn_new_doc",
-			"revision_id": float64(1),
-		},
-	})
-
-	err := runDocsCreateShortcut(t, f, stdout, []string{
-		"+create",
-		"--api-version", "v2",
-		"--content", `<title>demo</title><html5-block path="@widget.html"></html5-block>`,
-		"--as", "user",
-	})
-	if err != nil {
-		t.Fatalf("unexpected error: %v", err)
-	}
-
-	body := decodeRequestBody(t, stub.CapturedBody)
-	if got := body["content"].(string); !strings.Contains(got, `<html5-block data-ref="html5_1"></html5-block>`) {
-		t.Fatalf("content was not rewritten with data-ref: %s", got)
-	}
-	refMap := decodeHTML5ReferenceMap(t, body["reference_map"])
-	if got := refMap[html5BlockTag]["html5_1"].Data; got != "<html><body>hello</body></html>" {
-		t.Fatalf("reference_map html data = %q", got)
-	}
-	if _, ok := body["resources"]; ok {
-		t.Fatalf("request body must not use resources: %#v", body)
-	}
-}
-
-func findDocsTestFlag(flags []common.Flag, name string) common.Flag {
-	for _, flag := range flags {
-		if flag.Name == name {
-			return flag
-		}
-	}
-	return common.Flag{}
-}
-
-func hasDocsTestInput(flag common.Flag, input string) bool {
-	for _, item := range flag.Input {
-		if item == input {
-			return true
-		}
-	}
-	return false
-}
-
-func TestDocsUpdateV2HTML5BlockReferenceMapFromPath(t *testing.T) {
-	dir := t.TempDir()
-	cmdutil.TestChdir(t, dir)
-	if err := os.WriteFile("widget.html", []byte("<section>updated</section>"), 0o600); err != nil {
-		t.Fatalf("WriteFile() error: %v", err)
-	}
-
-	f, stdout, _, reg := cmdutil.TestFactory(t, docsTestConfigWithAppID("docs-html5-update"))
-	stub := registerDocsAIStub(reg, "PUT", "/open-apis/docs_ai/v1/documents/doxcn_doc", map[string]interface{}{
-		"document": map[string]interface{}{
-			"revision_id": float64(2),
-			"new_blocks": []interface{}{
-				map[string]interface{}{
-					"block_type":  "html5-block",
-					"block_id":    "blk_html5",
-					"block_token": "boardXXXX",
-				},
-			},
-		},
-		"result": "success",
-	})
-
-	err := mountAndRunDocs(t, DocsUpdate, []string{
-		"+update",
-		"--api-version", "v2",
-		"--doc", "doxcn_doc",
-		"--command", "append",
-		"--content", `<html5-block path="@widget.html"></html5-block>`,
-		"--as", "user",
-	}, f, stdout)
-	if err != nil {
-		t.Fatalf("unexpected error: %v", err)
-	}
-
-	body := decodeRequestBody(t, stub.CapturedBody)
-	if got := body["content"].(string); got != `<html5-block data-ref="html5_1"></html5-block>` {
-		t.Fatalf("content = %q", got)
-	}
-	refMap := decodeHTML5ReferenceMap(t, body["reference_map"])
-	if got := refMap[html5BlockTag]["html5_1"].Data; got != "<section>updated</section>" {
-		t.Fatalf("reference_map html data = %q", got)
-	}
-
-	var envelope map[string]interface{}
-	if err := json.Unmarshal(stdout.Bytes(), &envelope); err != nil {
-		t.Fatalf("decode stdout: %v\n%s", err, stdout.String())
-	}
-	data, _ := envelope["data"].(map[string]interface{})
-	doc, _ := data["document"].(map[string]interface{})
-	if blocks, _ := doc["new_blocks"].([]interface{}); len(blocks) != 1 {
-		t.Fatalf("new_blocks not preserved in stdout: %#v", doc)
-	}
-}
-
-func TestDocsFetchV2HTML5BlockKeepsSmallReferenceMapInline(t *testing.T) {
-	dir := t.TempDir()
-	cmdutil.TestChdir(t, dir)
-
-	f, stdout, _, reg := cmdutil.TestFactory(t, docsTestConfigWithAppID("docs-html5-fetch"))
-	registerDocsAIStub(reg, "POST", "/open-apis/docs_ai/v1/documents/doxcn_fetch/fetch", map[string]interface{}{
-		"document": map[string]interface{}{
-			"document_id": "doxcn_fetch",
-			"revision_id": float64(3),
-			"content":     `<docx><html5-block data-ref="html5_1"></html5-block></docx>`,
-			"reference_map": map[string]interface{}{
-				"html5-block": map[string]interface{}{
-					"html5_1": map[string]interface{}{"data": "<html><main>fetched</main></html>"},
-				},
-			},
-		},
-		"tips": "must_read_html_code",
-	})
-
-	err := mountAndRunDocs(t, DocsFetch, []string{
-		"+fetch",
-		"--api-version", "v2",
-		"--doc", "doxcn_fetch",
-		"--format", "json",
-		"--as", "user",
-	}, f, stdout)
-	if err != nil {
-		t.Fatalf("unexpected error: %v", err)
-	}
-
-	written := filepath.Join(dir, html5BlockReferenceRoot, "doxcn_fetch", "html5_1.html")
-	if _, err := os.Stat(written); err == nil {
-		t.Fatalf("small html should stay inline, got file %s", written)
-	}
-
-	var envelope map[string]interface{}
-	if err := json.Unmarshal(stdout.Bytes(), &envelope); err != nil {
-		t.Fatalf("decode stdout: %v\n%s", err, stdout.String())
-	}
-	data, _ := envelope["data"].(map[string]interface{})
-	doc, _ := data["document"].(map[string]interface{})
-	if got := doc["content"].(string); !strings.Contains(got, `<html5-block data-ref="html5_1"></html5-block>`) {
-		t.Fatalf("content should keep data-ref: %s", got)
-	}
-	refMap := decodeHTML5ReferenceMap(t, doc["reference_map"])
-	if got := refMap[html5BlockTag]["html5_1"].Data; got != "<html><main>fetched</main></html>" {
-		t.Fatalf("reference_map html data = %q", got)
-	}
-	if _, ok := doc["resources"]; ok {
-		t.Fatalf("fetch output must not use resources: %#v", doc)
-	}
-	if _, ok := data["suggestions"]; ok {
-		t.Fatalf("CLI must not add suggestions; service tips is enough: %#v", data["suggestions"])
-	}
-	if got := data["tips"]; got != "must_read_html_code" {
-		t.Fatalf("tips should be preserved from service response, got %#v", got)
-	}
-}
-
-func TestDocsFetchV2HTML5BlockLargeReferenceMapUsesPath(t *testing.T) {
-	dir := t.TempDir()
-	cmdutil.TestChdir(t, dir)
-
-	largeHTML := "<html><main>" + strings.Repeat("x", html5BlockReferenceMaxRaw+1) + "</main></html>"
-	f, stdout, _, reg := cmdutil.TestFactory(t, docsTestConfigWithAppID("docs-html5-fetch-large"))
-	registerDocsAIStub(reg, "POST", "/open-apis/docs_ai/v1/documents/doxcn_fetch/fetch", map[string]interface{}{
-		"document": map[string]interface{}{
-			"document_id": "doxcn_fetch",
-			"revision_id": float64(3),
-			"content":     `<docx><html5-block data-ref="html5_1"></html5-block></docx>`,
-			"reference_map": map[string]interface{}{
-				"html5-block": map[string]interface{}{
-					"html5_1": map[string]interface{}{"data": largeHTML},
-				},
-			},
-		},
-	})
-
-	err := mountAndRunDocs(t, DocsFetch, []string{
-		"+fetch",
-		"--api-version", "v2",
-		"--doc", "doxcn_fetch",
-		"--format", "json",
-		"--as", "user",
-	}, f, stdout)
-	if err != nil {
-		t.Fatalf("unexpected error: %v", err)
-	}
-
-	written := filepath.Join(dir, html5BlockReferenceRoot, "doxcn_fetch", "html5_1.html")
-	raw, err := os.ReadFile(written)
-	if err != nil {
-		t.Fatalf("ReadFile(%s) error: %v", written, err)
-	}
-	if string(raw) != largeHTML {
-		t.Fatalf("materialized html = %q", raw)
-	}
-
-	var envelope map[string]interface{}
-	if err := json.Unmarshal(stdout.Bytes(), &envelope); err != nil {
-		t.Fatalf("decode stdout: %v\n%s", err, stdout.String())
-	}
-	data, _ := envelope["data"].(map[string]interface{})
-	doc, _ := data["document"].(map[string]interface{})
-	if got := doc["content"].(string); strings.Contains(got, `path="@`) || !strings.Contains(got, `data-ref="html5_1"`) {
-		t.Fatalf("content should keep data-ref and not path: %s", got)
-	}
-	refMap := decodeHTML5ReferenceMap(t, doc["reference_map"])
-	entry := refMap[html5BlockTag]["html5_1"]
-	if entry.Data != "" || entry.Path != "@doc-fetch-resources/doxcn_fetch/html5_1.html" {
-		t.Fatalf("large html should be represented as path, got %#v", entry)
-	}
-}
-
-func TestDocsCreateV2HTML5BlockReferenceMapAdvancedInput(t *testing.T) {
-	f, stdout, _, reg := cmdutil.TestFactory(t, docsCreateTestConfig(t, ""))
-	stub := registerDocsAIStub(reg, "POST", "/open-apis/docs_ai/v1/documents", map[string]interface{}{
-		"document": map[string]interface{}{
-			"document_id": "doxcn_new_doc",
-			"revision_id": float64(1),
-		},
-	})
-
-	err := runDocsCreateShortcut(t, f, stdout, []string{
-		"+create",
-		"--api-version", "v2",
-		"--content", `<html5-block data-ref="html5_1"></html5-block>`,
-		"--reference-map", `{"html5-block":{"html5_1":{"data":"<html></html>"}}}`,
-		"--as", "user",
-	})
-	if err != nil {
-		t.Fatalf("unexpected error: %v", err)
-	}
-	body := decodeRequestBody(t, stub.CapturedBody)
-	if got := body["content"].(string); got != `<html5-block data-ref="html5_1"></html5-block>` {
-		t.Fatalf("content = %q", got)
-	}
-	refMap := decodeHTML5ReferenceMap(t, body["reference_map"])
-	if got := refMap[html5BlockTag]["html5_1"].Data; got != "<html></html>" {
-		t.Fatalf("reference_map html data = %q", got)
-	}
-}
-
-func TestDocsCreateV2HTML5BlockReferenceMapFromFile(t *testing.T) {
-	dir := t.TempDir()
-	cmdutil.TestChdir(t, dir)
-	if err := os.WriteFile("reference-map.json", []byte(`{"html5-block":{"html5_1":{"data":"<html>from file</html>"}}}`), 0o600); err != nil {
-		t.Fatalf("WriteFile(reference-map.json) error: %v", err)
-	}
-
-	f, stdout, _, reg := cmdutil.TestFactory(t, docsCreateTestConfig(t, ""))
-	stub := registerDocsAIStub(reg, "POST", "/open-apis/docs_ai/v1/documents", map[string]interface{}{
-		"document": map[string]interface{}{
-			"document_id": "doxcn_new_doc",
-			"revision_id": float64(1),
-		},
-	})
-
-	err := runDocsCreateShortcut(t, f, stdout, []string{
-		"+create",
-		"--api-version", "v2",
-		"--content", `<html5-block data-ref="html5_1"></html5-block>`,
-		"--reference-map", "@reference-map.json",
-		"--as", "user",
-	})
-	if err != nil {
-		t.Fatalf("unexpected error: %v", err)
-	}
-	body := decodeRequestBody(t, stub.CapturedBody)
-	refMap := decodeHTML5ReferenceMap(t, body["reference_map"])
-	if got := refMap[html5BlockTag]["html5_1"].Data; got != "<html>from file</html>" {
-		t.Fatalf("reference_map html data = %q", got)
-	}
-}
-
-func TestDocsCreateV2HTML5BlockRejectsMissingReferenceMap(t *testing.T) {
-	f, stdout, _, _ := cmdutil.TestFactory(t, docsCreateTestConfig(t, ""))
-
-	err := runDocsCreateShortcut(t, f, stdout, []string{
-		"+create",
-		"--api-version", "v2",
-		"--content", `<html5-block data-ref="html5_1"></html5-block>`,
-		"--as", "user",
-	})
-	if err == nil || !strings.Contains(err.Error(), `reference_map.html5-block.html5_1 is required`) {
-		t.Fatalf("expected missing reference_map error, got: %v", err)
-	}
-}
-
-func TestDocsCreateV2HTML5BlockRejectsInternalDataAttr(t *testing.T) {
-	f, stdout, _, _ := cmdutil.TestFactory(t, docsCreateTestConfig(t, ""))
-
-	err := runDocsCreateShortcut(t, f, stdout, []string{
-		"+create",
-		"--api-version", "v2",
-		"--content", `<html5-block data="PGh0bWw+PC9odG1sPg=="></html5-block>`,
-		"--as", "user",
-	})
-	if err == nil || !strings.Contains(err.Error(), `html5-block data is reserved for SDK internals`) {
-		t.Fatalf("expected internal data attr error, got: %v", err)
-	}
-}
-
-func TestDocsCreateV2HTML5BlockPathReadFailure(t *testing.T) {
-	dir := t.TempDir()
-	cmdutil.TestChdir(t, dir)
-	f, stdout, _, _ := cmdutil.TestFactory(t, docsCreateTestConfig(t, ""))
-
-	err := runDocsCreateShortcut(t, f, stdout, []string{
-		"+create",
-		"--api-version", "v2",
-		"--content", `<html5-block path="@missing.html"></html5-block>`,
-		"--as", "user",
-	})
-	if err == nil || !strings.Contains(err.Error(), `html5-block path "missing.html" cannot be read from the current working directory`) {
-		t.Fatalf("expected path read error, got: %v", err)
-	}
-}
-
-func TestDocsCreateV2HTML5BlockRejectsInlineContent(t *testing.T) {
-	dir := t.TempDir()
-	cmdutil.TestChdir(t, dir)
-	if err := os.WriteFile("widget.html", []byte("<section>from file</section>"), 0o600); err != nil {
-		t.Fatalf("WriteFile() error: %v", err)
-	}
-
-	f, stdout, _, _ := cmdutil.TestFactory(t, docsCreateTestConfig(t, ""))
-	err := runDocsCreateShortcut(t, f, stdout, []string{
-		"+create",
-		"--api-version", "v2",
-		"--content", `<html5-block path="@widget.html"><section>inline</section></html5-block>`,
-		"--as", "user",
-	})
-	if err == nil || !strings.Contains(err.Error(), `html5-block content must be loaded from path="@relative.html"`) {
-		t.Fatalf("expected inline content error, got: %v", err)
-	}
-}
-
-func TestDocsFetchV2MissingHTML5BlockReferenceFails(t *testing.T) {
-	dir := t.TempDir()
-	cmdutil.TestChdir(t, dir)
-
-	f, stdout, _, reg := cmdutil.TestFactory(t, docsTestConfigWithAppID("docs-html5-fetch-missing"))
-	registerDocsAIStub(reg, "POST", "/open-apis/docs_ai/v1/documents/doxcn_fetch/fetch", map[string]interface{}{
-		"document": map[string]interface{}{
-			"document_id": "doxcn_fetch",
-			"revision_id": float64(3),
-			"content":     `<docx><html5-block data-ref="html5_missing"></html5-block></docx>`,
-			"reference_map": map[string]interface{}{
-				"html5-block": map[string]interface{}{
-					"html5_1": map[string]interface{}{"data": "<html></html>"},
-				},
-			},
-		},
-	})
-
-	err := mountAndRunDocs(t, DocsFetch, []string{
-		"+fetch",
-		"--api-version", "v2",
-		"--doc", "doxcn_fetch",
-		"--format", "json",
-		"--as", "user",
-	}, f, stdout)
-	if err == nil || !strings.Contains(err.Error(), "Re-run fetch or check that the upstream document.reference_map field includes this ref") {
-		t.Fatalf("expected missing reference_map error, got: %v", err)
-	}
-}
-
-func TestHTML5BlockMarkdownCodeFenceIsIgnored(t *testing.T) {
-	for _, fence := range []string{"```", "~~~"} {
-		t.Run(fence, func(t *testing.T) {
-			content := fence + "xml\n<html5-block data-ref=\"html5_1\"></html5-block>\n" + fence + "\n"
-			if hasProcessableHTML5Block("markdown", content) {
-				t.Fatalf("html5-block inside markdown code fence should be ignored")
-			}
-		})
-	}
-}
-
-func TestWriteHTML5BlockReferenceFileRejectsDotNames(t *testing.T) {
-	runtime := newFetchShortcutTestRuntime(t, "", nil)
-	tests := []struct {
-		name     string
-		docToken string
-		ref      string
-		want     string
-	}{
-		{name: "dot doc token", docToken: ".", ref: "html5_1", want: "document_id"},
-		{name: "dotdot doc token", docToken: "..", ref: "html5_1", want: "document_id"},
-		{name: "dot ref", docToken: "doxcn_fetch", ref: ".", want: "data-ref"},
-		{name: "dotdot ref", docToken: "doxcn_fetch", ref: "..", want: "data-ref"},
-	}
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			_, err := writeHTML5BlockReferenceFile(runtime, tt.docToken, tt.ref, "<html></html>")
-			if err == nil || !strings.Contains(err.Error(), tt.want) {
-				t.Fatalf("writeHTML5BlockReferenceFile() error = %v, want %q", err, tt.want)
-			}
-		})
-	}
-}
-
-func TestPrepareHTML5BlockWriteContentMarkdownRaw(t *testing.T) {
-	dir := t.TempDir()
-	cmdutil.TestChdir(t, dir)
-	if err := os.WriteFile("widget.html", []byte("<html><body>markdown</body></html>"), 0o600); err != nil {
-		t.Fatalf("WriteFile() error: %v", err)
-	}
-
-	f, stdout, _, reg := cmdutil.TestFactory(t, docsCreateTestConfig(t, ""))
-	stub := registerDocsAIStub(reg, "POST", "/open-apis/docs_ai/v1/documents", map[string]interface{}{
-		"document": map[string]interface{}{
-			"document_id": "doxcn_new_doc",
-			"revision_id": float64(1),
-		},
-	})
-
-	err := runDocsCreateShortcut(t, f, stdout, []string{
-		"+create",
-		"--api-version", "v2",
-		"--doc-format", "markdown",
-		"--content", "before\n<html5-block path=\"@widget.html\"></html5-block>\nafter",
-		"--as", "user",
-	})
-	if err != nil {
-		t.Fatalf("unexpected error: %v", err)
-	}
-
-	body := decodeRequestBody(t, stub.CapturedBody)
-	if got := body["content"].(string); !strings.Contains(got, `<html5-block data-ref="html5_1"></html5-block>`) {
-		t.Fatalf("content was not rewritten: %s", got)
-	}
-	refMap := decodeHTML5ReferenceMap(t, body["reference_map"])
-	if got := refMap[html5BlockTag]["html5_1"].Data; got != "<html><body>markdown</body></html>" {
-		t.Fatalf("reference_map html data = %q", got)
-	}
-}
-
-func registerDocsAIStub(reg *httpmock.Registry, method string, url string, data map[string]interface{}) *httpmock.Stub {
-	stub := &httpmock.Stub{
-		Method: method,
-		URL:    url,
-		Body: map[string]interface{}{
-			"code": 0,
-			"msg":  "ok",
-			"data": data,
-		},
-	}
-	reg.Register(stub)
-	return stub
-}
-
-func decodeRequestBody(t *testing.T, raw []byte) map[string]interface{} {
-	t.Helper()
-	var body map[string]interface{}
-	if err := json.Unmarshal(bytes.TrimSpace(raw), &body); err != nil {
-		t.Fatalf("decode request body: %v\n%s", err, raw)
-	}
-	return body
-}
-
-func decodeHTML5ReferenceMap(t *testing.T, raw interface{}) html5BlockReferenceMap {
-	t.Helper()
-	data, err := json.Marshal(raw)
-	if err != nil {
-		t.Fatalf("marshal reference_map: %v\n%#v", err, raw)
-	}
-	var refMap html5BlockReferenceMap
-	if err := json.Unmarshal(data, &refMap); err != nil {
-		t.Fatalf("decode reference_map: %v\n%s", err, data)
-	}
-	return refMap
-}

shortcuts/drive/drive_secure_label.go

@@ -6,7 +6,6 @@ package drive
 import (
 	"context"
 	"fmt"
-	"strings"
 
 	"github.com/larksuite/cli/errs"
 	"github.com/larksuite/cli/internal/validate"
@@ -18,13 +17,6 @@ const (
 	secureLabelUpdateScope = "docs:secure_label:write_only"
 )
 
-type secureLabelOperation string
-
-const (
-	secureLabelOperationList   secureLabelOperation = "list"
-	secureLabelOperationUpdate secureLabelOperation = "update"
-)
-
 var secureLabelTypes = permApplyTypes
 
 // DriveSecureLabelList lists secure labels available to the current user.
@@ -36,9 +28,6 @@ var DriveSecureLabelList = common.Shortcut{
 	Scopes:      []string{secureLabelReadScope},
 	AuthTypes:   []string{"user"},
 	HasFormat:   true,
-	Tips: []string{
-		"Use the `id` field from this command as --label-id for +secure-label-update; do not use the display name.",
-	},
 	Flags: []common.Flag{
 		{Name: "page-size", Type: "int", Default: "10", Desc: "page size, 1-10"},
 		{Name: "page-token", Desc: "pagination token from previous response"},
@@ -64,7 +53,7 @@ var DriveSecureLabelList = common.Shortcut{
 			nil,
 		)
 		if err != nil {
-			return decorateSecureLabelError(err, secureLabelOperationList)
+			return err
 		}
 		runtime.OutFormat(data, nil, nil)
 		return nil
@@ -79,21 +68,13 @@ var DriveSecureLabelUpdate = common.Shortcut{
 	Risk:        "write",
 	Scopes:      []string{secureLabelUpdateScope},
 	AuthTypes:   []string{"user"},
-	Tips: []string{
-		"Pass the numeric label id returned by +secure-label-list; display names like Public(D) are rejected.",
-		"Downgrading a secure label may require approval; retrying the same request will not bypass approval.",
-		"When updating many files, serialize requests and back off on rate_limit errors.",
-	},
 	Flags: []common.Flag{
 		{Name: "token", Desc: "target file token or document URL (docx/sheets/base/file/wiki/doc/mindnote/slides)", Required: true},
 		{Name: "type", Desc: "target type; auto-inferred from URL when omitted", Enum: secureLabelTypes},
 		{Name: "label-id", Desc: "secure label ID to set", Required: true},
 	},
 	Validate: func(ctx context.Context, runtime *common.RuntimeContext) error {
-		if _, _, err := resolveSecureLabelTarget(runtime.Str("token"), runtime.Str("type")); err != nil {
-			return err
-		}
-		_, err := normalizeSecureLabelID(runtime.Str("label-id"))
+		_, _, err := resolveSecureLabelTarget(runtime.Str("token"), runtime.Str("type"))
 		return err
 	},
 	DryRun: func(ctx context.Context, runtime *common.RuntimeContext) *common.DryRunAPI {
@@ -101,15 +82,11 @@ var DriveSecureLabelUpdate = common.Shortcut{
 		if err != nil {
 			return common.NewDryRunAPI().Set("error", err.Error())
 		}
-		labelID, err := normalizeSecureLabelID(runtime.Str("label-id"))
-		if err != nil {
-			return common.NewDryRunAPI().Set("error", err.Error())
-		}
 		return common.NewDryRunAPI().
 			Desc("Update Drive secure label").
 			PATCH("/open-apis/drive/v2/files/:file_token/secure_label").
 			Params(map[string]interface{}{"type": docType}).
-			Body(map[string]interface{}{"id": labelID}).
+			Body(map[string]interface{}{"id": runtime.Str("label-id")}).
 			Set("file_token", token)
 	},
 	Execute: func(ctx context.Context, runtime *common.RuntimeContext) error {
@@ -117,18 +94,14 @@ var DriveSecureLabelUpdate = common.Shortcut{
 		if err != nil {
 			return err
 		}
-		labelID, err := normalizeSecureLabelID(runtime.Str("label-id"))
-		if err != nil {
-			return err
-		}
-		body := map[string]interface{}{"id": labelID}
+		body := map[string]interface{}{"id": runtime.Str("label-id")}
 		data, err := runtime.CallAPITyped("PATCH",
 			fmt.Sprintf("/open-apis/drive/v2/files/%s/secure_label", validate.EncodePathSegment(token)),
 			map[string]interface{}{"type": docType},
 			body,
 		)
 		if err != nil {
-			return decorateSecureLabelError(err, secureLabelOperationUpdate)
+			return err
 		}
 		runtime.Out(data, nil)
 		return nil
@@ -149,70 +122,3 @@ func buildSecureLabelListParams(runtime *common.RuntimeContext) map[string]inter
 func resolveSecureLabelTarget(raw, explicitType string) (token, docType string, err error) {
 	return resolvePermApplyTarget(raw, explicitType)
 }
-
-// normalizeSecureLabelID trims a label id and rejects display names before the
-// request reaches Drive, where they otherwise surface as opaque JSON errors.
-func normalizeSecureLabelID(raw string) (string, error) {
-	labelID := strings.TrimSpace(raw)
-	if labelID == "" {
-		return "", errs.NewValidationError(errs.SubtypeInvalidArgument, "--label-id is required").
-			WithParam("--label-id")
-	}
-	for _, r := range labelID {
-		if r < '0' || r > '9' {
-			return "", errs.NewValidationError(errs.SubtypeInvalidArgument, "--label-id must be a numeric secure label ID, not a display name: %q", raw).
-				WithParam("--label-id").
-				WithHint("run `lark-cli drive +secure-label-list` and pass the numeric `id` value; do not pass label names like `Public(D)`")
-		}
-	}
-	return labelID, nil
-}
-
-// decorateSecureLabelError appends command-aware recovery guidance while
-// preserving upstream/classifier hints already attached to the typed error.
-func decorateSecureLabelError(err error, operation secureLabelOperation) error {
-	if err == nil {
-		return nil
-	}
-	p, ok := errs.ProblemOf(err)
-	if !ok {
-		return err
-	}
-	guidance := secureLabelErrorGuidance(p.Code, operation)
-	if guidance == "" {
-		return err
-	}
-	if p.Hint == "" {
-		p.Hint = guidance
-	} else if !strings.Contains(p.Hint, guidance) {
-		p.Hint = p.Hint + "; " + guidance
-	}
-	return err
-}
-
-// secureLabelErrorGuidance returns recovery guidance for secure-label API
-// failures whose generic code-level classification needs command context.
-func secureLabelErrorGuidance(code int, operation secureLabelOperation) string {
-	switch code {
-	case 99991400:
-		if operation == secureLabelOperationUpdate {
-			return "secure label updates are rate limited; retry later with exponential backoff and serialize bulk updates"
-		}
-		return "secure label listing is rate limited; retry later with exponential backoff"
-	case 1063013:
-		if operation == secureLabelOperationUpdate {
-			return "secure label downgrade requires approval; request approval or choose a non-downgrade label before retrying"
-		}
-	case 1063002:
-		if operation == secureLabelOperationUpdate {
-			return "the current user lacks permission to update this file's secure label; use a user with file and security-label permission"
-		}
-		return "the current user lacks permission to list secure labels; use a user with security-label read permission"
-	case 1063001, 99992402, 9499:
-		if operation == secureLabelOperationUpdate {
-			return "check --token/--type and pass a secure label ID from `lark-cli drive +secure-label-list`, not the display name"
-		}
-		return "check secure label list parameters such as --page-size, --page-token, and --lang"
-	}
-	return ""
-}

shortcuts/drive/drive_secure_label_test.go

@@ -5,11 +5,9 @@ package drive
 
 import (
 	"encoding/json"
-	"errors"
 	"strings"
 	"testing"
 
-	"github.com/larksuite/cli/errs"
 	"github.com/larksuite/cli/internal/cmdutil"
 	"github.com/larksuite/cli/internal/httpmock"
 )
@@ -92,54 +90,13 @@ func TestDriveSecureLabelList_ExecuteSuccess(t *testing.T) {
 	}
 }
 
-func TestDriveSecureLabelList_RateLimitPreservesUpstreamHint(t *testing.T) {
-	f, _, _, reg := cmdutil.TestFactory(t, driveTestConfig())
-	reg.Register(&httpmock.Stub{
-		Method: "GET",
-		URL:    "/open-apis/drive/v2/my_secure_labels?page_size=10",
-		Status: 429,
-		Body: map[string]interface{}{
-			"code": 99991400,
-			"msg":  "rate limit exceeded",
-			"error": map[string]interface{}{
-				"details": []interface{}{
-					map[string]interface{}{"value": "server says slow down"},
-				},
-			},
-		},
-	})
-
-	err := mountAndRunDrive(t, DriveSecureLabelList, []string{
-		"+secure-label-list",
-		"--as", "user",
-	}, f, nil)
-	if err == nil {
-		t.Fatal("expected rate limit error")
-	}
-	var apiErr *errs.APIError
-	if !errors.As(err, &apiErr) {
-		t.Fatalf("expected APIError, got %T: %v", err, err)
-	}
-	if apiErr.Subtype != errs.SubtypeRateLimit || apiErr.Code != 99991400 || !apiErr.Retryable {
-		t.Fatalf("problem = %+v, want code=99991400 subtype=rate_limit retryable=true", apiErr.Problem)
-	}
-	for _, want := range []string{"server says slow down", "secure label listing is rate limited"} {
-		if !strings.Contains(apiErr.Hint, want) {
-			t.Fatalf("hint missing %q: %q", want, apiErr.Hint)
-		}
-	}
-	if strings.Contains(apiErr.Hint, "updates are rate limited") {
-		t.Fatalf("list hint should not use update-specific wording: %q", apiErr.Hint)
-	}
-}
-
 func TestDriveSecureLabelUpdate_DryRunInfersTypeFromURL(t *testing.T) {
 	t.Parallel()
 	f, stdout, _, _ := cmdutil.TestFactory(t, driveTestConfig())
 	err := mountAndRunDrive(t, DriveSecureLabelUpdate, []string{
 		"+secure-label-update",
 		"--token", "https://example.feishu.cn/docx/doxTok123?from=share",
-		"--label-id", " 7217780879644737539 ",
+		"--label-id", "7217780879644737539",
 		"--dry-run", "--as", "user",
 	}, f, stdout)
 	if err != nil {
@@ -175,7 +132,7 @@ func TestDriveSecureLabelUpdate_ExecuteSuccess(t *testing.T) {
 		"+secure-label-update",
 		"--token", "doxTok123",
 		"--type", "docx",
-		"--label-id", " 7217780879644737539 ",
+		"--label-id", "7217780879644737539",
 		"--as", "user",
 	}, f, stdout)
 	if err != nil {
@@ -191,32 +148,7 @@ func TestDriveSecureLabelUpdate_ExecuteSuccess(t *testing.T) {
 	}
 }
 
-func TestDriveSecureLabelUpdate_RejectsDisplayNameAsLabelID(t *testing.T) {
-	t.Parallel()
-	f, stdout, _, _ := cmdutil.TestFactory(t, driveTestConfig())
-	err := mountAndRunDrive(t, DriveSecureLabelUpdate, []string{
-		"+secure-label-update",
-		"--token", "doxTok123",
-		"--type", "docx",
-		"--label-id", "Public(D)",
-		"--as", "user",
-	}, f, stdout)
-	if err == nil {
-		t.Fatal("expected label id validation error")
-	}
-	var validationErr *errs.ValidationError
-	if !errors.As(err, &validationErr) {
-		t.Fatalf("expected ValidationError, got %T: %v", err, err)
-	}
-	if validationErr.Param != "--label-id" {
-		t.Fatalf("Param = %q, want --label-id", validationErr.Param)
-	}
-	if !strings.Contains(validationErr.Hint, "+secure-label-list") {
-		t.Fatalf("hint missing list guidance: %q", validationErr.Hint)
-	}
-}
-
-func TestDriveSecureLabelUpdate_DowngradeApprovalReturnsFailedPrecondition(t *testing.T) {
+func TestDriveSecureLabelUpdate_DowngradeApprovalReturnsAPIError(t *testing.T) {
 	f, _, _, reg := cmdutil.TestFactory(t, driveTestConfig())
 	reg.Register(&httpmock.Stub{
 		Method: "PATCH",
@@ -237,78 +169,7 @@ func TestDriveSecureLabelUpdate_DowngradeApprovalReturnsFailedPrecondition(t *te
 	if err == nil {
 		t.Fatal("expected 1063013 error")
 	}
-	var validationErr *errs.ValidationError
-	if !errors.As(err, &validationErr) {
-		t.Fatalf("expected ValidationError, got %T: %v", err, err)
-	}
-	if validationErr.Subtype != errs.SubtypeFailedPrecondition || validationErr.Code != 1063013 {
-		t.Fatalf("problem = %+v, want code=1063013 subtype=failed_precondition", validationErr.Problem)
-	}
-	if !strings.Contains(validationErr.Hint, "approval") {
-		t.Fatalf("hint missing approval guidance: %q", validationErr.Hint)
-	}
-}
-
-func TestDriveSecureLabelUpdate_InvalidJSONTypeGetsLabelHint(t *testing.T) {
-	f, _, _, reg := cmdutil.TestFactory(t, driveTestConfig())
-	reg.Register(&httpmock.Stub{
-		Method: "PATCH",
-		URL:    "/open-apis/drive/v2/files/doxTok123/secure_label",
-		Status: 400,
-		Body: map[string]interface{}{
-			"code": 9499, "msg": "Invalid parameter type in json: id",
-		},
-	})
-
-	err := mountAndRunDrive(t, DriveSecureLabelUpdate, []string{
-		"+secure-label-update",
-		"--token", "https://example.feishu.cn/docx/doxTok123",
-		"--label-id", "7217780879644737539",
-		"--as", "user",
-	}, f, nil)
-	if err == nil {
-		t.Fatal("expected 9499 error")
-	}
-	var apiErr *errs.APIError
-	if !errors.As(err, &apiErr) {
-		t.Fatalf("expected APIError, got %T: %v", err, err)
-	}
-	if apiErr.Subtype != errs.SubtypeInvalidParameters || apiErr.Code != 9499 {
-		t.Fatalf("problem = %+v, want code=9499 subtype=invalid_parameters", apiErr.Problem)
-	}
-	if !strings.Contains(apiErr.Hint, "+secure-label-list") {
-		t.Fatalf("hint missing secure label list guidance: %q", apiErr.Hint)
-	}
-}
-
-func TestDriveSecureLabelUpdate_RateLimitIsRetryableWithBackoffHint(t *testing.T) {
-	f, _, _, reg := cmdutil.TestFactory(t, driveTestConfig())
-	reg.Register(&httpmock.Stub{
-		Method: "PATCH",
-		URL:    "/open-apis/drive/v2/files/doxTok123/secure_label",
-		Status: 429,
-		Body: map[string]interface{}{
-			"code": 99991400, "msg": "rate limit exceeded",
-		},
-	})
-
-	err := mountAndRunDrive(t, DriveSecureLabelUpdate, []string{
-		"+secure-label-update",
-		"--token", "https://example.feishu.cn/docx/doxTok123",
-		"--label-id", "7217780879644737539",
-		"--as", "user",
-	}, f, nil)
-	if err == nil {
-		t.Fatal("expected rate limit error")
-	}
-	var apiErr *errs.APIError
-	if !errors.As(err, &apiErr) {
-		t.Fatalf("expected APIError, got %T: %v", err, err)
-	}
-	if apiErr.Subtype != errs.SubtypeRateLimit || apiErr.Code != 99991400 || !apiErr.Retryable {
-		t.Fatalf("problem = %+v, want code=99991400 subtype=rate_limit retryable=true", apiErr.Problem)
-	}
-	if !strings.Contains(apiErr.Hint, "backoff") {
-		t.Fatalf("hint missing backoff guidance: %q", apiErr.Hint)
+	if !strings.Contains(err.Error(), "Security label downgrade requires approval") {
+		t.Fatalf("expected raw API error message, got: %v", err)
 	}
 }

shortcuts/slides/shortcuts.go

@@ -14,5 +14,8 @@ func Shortcuts() []common.Shortcut {
 		SlidesReplacePages,
 		SlidesScreenshot,
 		SlidesXMLGet,
+		SlidesHistoryList,
+		SlidesHistoryRevert,
+		SlidesHistoryRevertStatus,
 	}
 }

shortcuts/slides/slides_history.go

@@ -0,0 +1,299 @@
+// Copyright (c) 2026 Lark Technologies Pte. Ltd.
+// SPDX-License-Identifier: MIT
+
+package slides
+
+import (
+	"context"
+	"fmt"
+	"net/http"
+	"strconv"
+	"strings"
+
+	"github.com/larksuite/cli/errs"
+	"github.com/larksuite/cli/internal/validate"
+	"github.com/larksuite/cli/shortcuts/common"
+)
+
+type slidesHistoryListSpec struct {
+	PageSize  int
+	PageToken string
+}
+
+type slidesHistoryRevertSpec struct {
+	HistoryVersionID string
+	WaitTimeoutMs    int
+}
+
+type slidesHistoryRevertStatusSpec struct {
+	TaskID string
+}
+
+func parseSlidesHistoryPresentation(runtime *common.RuntimeContext) (presentationRef, error) {
+	ref, err := parsePresentationRef(runtime.Str("presentation"))
+	if err != nil {
+		return presentationRef{}, err
+	}
+	if ref.Kind == "wiki" {
+		if err := runtime.EnsureScopes([]string{"wiki:node:read"}); err != nil {
+			return presentationRef{}, err
+		}
+	}
+	return ref, nil
+}
+
+func validateSlidesHistoryPageSize(pageSize int) error {
+	if pageSize < 1 || pageSize > 20 {
+		return errs.NewValidationError(errs.SubtypeInvalidArgument, "invalid --page-size %d: must be between 1 and 20", pageSize).WithParam("--page-size")
+	}
+	return nil
+}
+
+func validateSlidesHistoryVersionID(historyVersionID string) error {
+	version, err := strconv.ParseInt(strings.TrimSpace(historyVersionID), 10, 64)
+	if err != nil || version <= 0 {
+		return errs.NewValidationError(errs.SubtypeInvalidArgument, "--history-version-id must be a positive integer string returned by slides +history-list").WithParam("--history-version-id")
+	}
+	return nil
+}
+
+func validateSlidesHistoryWaitTimeout(timeoutMs int) error {
+	if timeoutMs < 0 || timeoutMs > 30000 {
+		return errs.NewValidationError(errs.SubtypeInvalidArgument, "invalid --wait-timeout-ms %d: must be between 0 and 30000", timeoutMs).WithParam("--wait-timeout-ms")
+	}
+	return nil
+}
+
+func slidesHistoryListParams(spec slidesHistoryListSpec) map[string]interface{} {
+	params := map[string]interface{}{
+		"page_size": spec.PageSize,
+	}
+	if spec.PageToken != "" {
+		params["page_token"] = spec.PageToken
+	}
+	return params
+}
+
+func slidesHistoryRevertBody(spec slidesHistoryRevertSpec) map[string]interface{} {
+	return map[string]interface{}{
+		"history_version_id": spec.HistoryVersionID,
+		"wait_timeout_ms":    spec.WaitTimeoutMs,
+	}
+}
+
+func slidesHistoryStatusParams(spec slidesHistoryRevertStatusSpec) map[string]interface{} {
+	return map[string]interface{}{
+		"task_id": spec.TaskID,
+	}
+}
+
+func slidesHistoryAPIPath(presentationID, suffix string) string {
+	return fmt.Sprintf("/open-apis/slides_ai/v1/xml_presentations/%s/%s", validate.EncodePathSegment(presentationID), suffix)
+}
+
+func newSlidesHistoryDryRun(ref presentationRef, desc string) (*common.DryRunAPI, string) {
+	dry := common.NewDryRunAPI()
+	presentationID := ref.Token
+	if ref.Kind == "wiki" {
+		presentationID = "<resolved_slides_token>"
+		dry.Desc("2-step orchestration: resolve wiki then " + desc).
+			GET("/open-apis/wiki/v2/spaces/get_node").
+			Desc("[1] Resolve wiki node to slides presentation").
+			Params(map[string]interface{}{"token": ref.Token})
+	} else {
+		dry.Desc("OpenAPI: " + desc)
+	}
+	return dry, presentationID
+}
+
+// SlidesHistoryList lists history versions of a Slides XML presentation.
+var SlidesHistoryList = common.Shortcut{
+	Service:           "slides",
+	Command:           "+history-list",
+	Description:       "List Slides presentation history versions",
+	Risk:              "read",
+	Scopes:            []string{"slides:presentation:read"},
+	ConditionalScopes: []string{"wiki:node:read"},
+	AuthTypes:         []string{"user", "bot"},
+	Flags: []common.Flag{
+		{Name: "presentation", Desc: "xml_presentation_id, slides URL, or wiki URL that resolves to slides", Required: true},
+		{Name: "page-size", Type: "int", Default: "20", Desc: "history entries to return, range 1-20"},
+		{Name: "page-token", Desc: "pagination token from the previous page's page_token"},
+	},
+	Validate: func(ctx context.Context, runtime *common.RuntimeContext) error {
+		if _, err := parseSlidesHistoryPresentation(runtime); err != nil {
+			return err
+		}
+		return validateSlidesHistoryPageSize(runtime.Int("page-size"))
+	},
+	DryRun: func(ctx context.Context, runtime *common.RuntimeContext) *common.DryRunAPI {
+		ref, err := parsePresentationRef(runtime.Str("presentation"))
+		if err != nil {
+			return common.NewDryRunAPI().Set("error", err.Error())
+		}
+		spec := slidesHistoryListSpec{
+			PageSize:  runtime.Int("page-size"),
+			PageToken: strings.TrimSpace(runtime.Str("page-token")),
+		}
+		dry, presentationID := newSlidesHistoryDryRun(ref, "list Slides history versions")
+		return dry.
+			GET(slidesHistoryAPIPath(presentationID, "histories")).
+			Params(slidesHistoryListParams(spec)).
+			Set("xml_presentation_id", presentationID)
+	},
+	Execute: func(ctx context.Context, runtime *common.RuntimeContext) error {
+		ref, err := parsePresentationRef(runtime.Str("presentation"))
+		if err != nil {
+			return err
+		}
+		presentationID, err := resolvePresentationID(runtime, ref)
+		if err != nil {
+			return err
+		}
+		spec := slidesHistoryListSpec{
+			PageSize:  runtime.Int("page-size"),
+			PageToken: strings.TrimSpace(runtime.Str("page-token")),
+		}
+
+		data, err := runtime.CallAPITyped(
+			http.MethodGet,
+			slidesHistoryAPIPath(presentationID, "histories"),
+			slidesHistoryListParams(spec),
+			nil,
+		)
+		if err != nil {
+			return err
+		}
+		runtime.OutRaw(data, nil)
+		return nil
+	},
+}
+
+// SlidesHistoryRevert reverts a Slides XML presentation to a history version.
+var SlidesHistoryRevert = common.Shortcut{
+	Service:           "slides",
+	Command:           "+history-revert",
+	Description:       "Revert a Slides presentation to a historical version",
+	Risk:              "write",
+	Scopes:            []string{"slides:presentation:update", "slides:presentation:write_only"},
+	ConditionalScopes: []string{"wiki:node:read"},
+	AuthTypes:         []string{"user", "bot"},
+	Flags: []common.Flag{
+		{Name: "presentation", Desc: "xml_presentation_id, slides URL, or wiki URL that resolves to slides", Required: true},
+		{Name: "history-version-id", Desc: "history_version_id from slides +history-list to revert to", Required: true},
+		{Name: "wait-timeout-ms", Type: "int", Default: "30000", Desc: "milliseconds to wait for revert completion before returning, range 0-30000"},
+	},
+	Validate: func(ctx context.Context, runtime *common.RuntimeContext) error {
+		if _, err := parseSlidesHistoryPresentation(runtime); err != nil {
+			return err
+		}
+		if err := validateSlidesHistoryVersionID(runtime.Str("history-version-id")); err != nil {
+			return err
+		}
+		return validateSlidesHistoryWaitTimeout(runtime.Int("wait-timeout-ms"))
+	},
+	DryRun: func(ctx context.Context, runtime *common.RuntimeContext) *common.DryRunAPI {
+		ref, err := parsePresentationRef(runtime.Str("presentation"))
+		if err != nil {
+			return common.NewDryRunAPI().Set("error", err.Error())
+		}
+		spec := slidesHistoryRevertSpec{
+			HistoryVersionID: strings.TrimSpace(runtime.Str("history-version-id")),
+			WaitTimeoutMs:    runtime.Int("wait-timeout-ms"),
+		}
+		dry, presentationID := newSlidesHistoryDryRun(ref, "revert Slides history")
+		return dry.
+			POST(slidesHistoryAPIPath(presentationID, "history/revert")).
+			Body(slidesHistoryRevertBody(spec)).
+			Set("xml_presentation_id", presentationID)
+	},
+	Execute: func(ctx context.Context, runtime *common.RuntimeContext) error {
+		ref, err := parsePresentationRef(runtime.Str("presentation"))
+		if err != nil {
+			return err
+		}
+		presentationID, err := resolvePresentationID(runtime, ref)
+		if err != nil {
+			return err
+		}
+		spec := slidesHistoryRevertSpec{
+			HistoryVersionID: strings.TrimSpace(runtime.Str("history-version-id")),
+			WaitTimeoutMs:    runtime.Int("wait-timeout-ms"),
+		}
+
+		data, err := runtime.CallAPITyped(
+			http.MethodPost,
+			slidesHistoryAPIPath(presentationID, "history/revert"),
+			nil,
+			slidesHistoryRevertBody(spec),
+		)
+		if err != nil {
+			return err
+		}
+		runtime.OutRaw(data, nil)
+		return nil
+	},
+}
+
+// SlidesHistoryRevertStatus gets the status of a Slides history revert task.
+var SlidesHistoryRevertStatus = common.Shortcut{
+	Service:           "slides",
+	Command:           "+history-revert-status",
+	Description:       "Get Slides history revert task status",
+	Risk:              "read",
+	Scopes:            []string{"slides:presentation:read"},
+	ConditionalScopes: []string{"wiki:node:read"},
+	AuthTypes:         []string{"user", "bot"},
+	Flags: []common.Flag{
+		{Name: "presentation", Desc: "xml_presentation_id, slides URL, or wiki URL that resolves to slides", Required: true},
+		{Name: "task-id", Desc: "task_id returned by slides +history-revert", Required: true},
+	},
+	Validate: func(ctx context.Context, runtime *common.RuntimeContext) error {
+		if _, err := parseSlidesHistoryPresentation(runtime); err != nil {
+			return err
+		}
+		if strings.TrimSpace(runtime.Str("task-id")) == "" {
+			return errs.NewValidationError(errs.SubtypeInvalidArgument, "--task-id is required").WithParam("--task-id")
+		}
+		return nil
+	},
+	DryRun: func(ctx context.Context, runtime *common.RuntimeContext) *common.DryRunAPI {
+		ref, err := parsePresentationRef(runtime.Str("presentation"))
+		if err != nil {
+			return common.NewDryRunAPI().Set("error", err.Error())
+		}
+		spec := slidesHistoryRevertStatusSpec{
+			TaskID: strings.TrimSpace(runtime.Str("task-id")),
+		}
+		dry, presentationID := newSlidesHistoryDryRun(ref, "get Slides history revert status")
+		return dry.
+			GET(slidesHistoryAPIPath(presentationID, "history/revert_status")).
+			Params(slidesHistoryStatusParams(spec)).
+			Set("xml_presentation_id", presentationID)
+	},
+	Execute: func(ctx context.Context, runtime *common.RuntimeContext) error {
+		ref, err := parsePresentationRef(runtime.Str("presentation"))
+		if err != nil {
+			return err
+		}
+		presentationID, err := resolvePresentationID(runtime, ref)
+		if err != nil {
+			return err
+		}
+		spec := slidesHistoryRevertStatusSpec{
+			TaskID: strings.TrimSpace(runtime.Str("task-id")),
+		}
+
+		data, err := runtime.CallAPITyped(
+			http.MethodGet,
+			slidesHistoryAPIPath(presentationID, "history/revert_status"),
+			slidesHistoryStatusParams(spec),
+			nil,
+		)
+		if err != nil {
+			return err
+		}
+		runtime.OutRaw(data, nil)
+		return nil
+	},
+}

shortcuts/slides/slides_history_test.go

@@ -0,0 +1,440 @@
+// Copyright (c) 2026 Lark Technologies Pte. Ltd.
+// SPDX-License-Identifier: MIT
+
+package slides
+
+import (
+	"bytes"
+	"context"
+	"encoding/json"
+	"errors"
+	"net/http"
+	"net/url"
+	"reflect"
+	"testing"
+
+	"github.com/larksuite/cli/errs"
+	"github.com/larksuite/cli/internal/cmdutil"
+	"github.com/larksuite/cli/internal/httpmock"
+	"github.com/larksuite/cli/shortcuts/common"
+	"github.com/spf13/cobra"
+)
+
+func TestSlidesHistoryDeclaredScopes(t *testing.T) {
+	tests := []struct {
+		name     string
+		shortcut common.Shortcut
+		wantBase []string
+		wantFull []string
+	}{
+		{
+			name:     "list",
+			shortcut: SlidesHistoryList,
+			wantBase: []string{"slides:presentation:read"},
+			wantFull: []string{"slides:presentation:read", "wiki:node:read"},
+		},
+		{
+			name:     "revert",
+			shortcut: SlidesHistoryRevert,
+			wantBase: []string{"slides:presentation:update", "slides:presentation:write_only"},
+			wantFull: []string{"slides:presentation:update", "slides:presentation:write_only", "wiki:node:read"},
+		},
+		{
+			name:     "status",
+			shortcut: SlidesHistoryRevertStatus,
+			wantBase: []string{"slides:presentation:read"},
+			wantFull: []string{"slides:presentation:read", "wiki:node:read"},
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			if got := tt.shortcut.ScopesForIdentity("user"); !reflect.DeepEqual(got, tt.wantBase) {
+				t.Fatalf("user preflight scopes = %#v, want %#v", got, tt.wantBase)
+			}
+			if got := tt.shortcut.ScopesForIdentity("bot"); !reflect.DeepEqual(got, tt.wantBase) {
+				t.Fatalf("bot preflight scopes = %#v, want %#v", got, tt.wantBase)
+			}
+			if got := tt.shortcut.DeclaredScopesForIdentity("user"); !reflect.DeepEqual(got, tt.wantFull) {
+				t.Fatalf("declared scopes = %#v, want %#v", got, tt.wantFull)
+			}
+		})
+	}
+}
+
+func TestSlidesHistoryValidation(t *testing.T) {
+	t.Parallel()
+
+	tests := []struct {
+		name     string
+		shortcut common.Shortcut
+		args     []string
+		param    string
+	}{
+		{
+			name:     "list rejects unsupported presentation input",
+			shortcut: SlidesHistoryList,
+			args:     []string{"+history-list", "--presentation", "tmp/wiki/wikcn123", "--as", "bot"},
+			param:    "--presentation",
+		},
+		{
+			name:     "list rejects invalid page size",
+			shortcut: SlidesHistoryList,
+			args:     []string{"+history-list", "--presentation", "presHistory", "--page-size", "0", "--as", "bot"},
+			param:    "--page-size",
+		},
+		{
+			name:     "revert rejects invalid history version id",
+			shortcut: SlidesHistoryRevert,
+			args:     []string{"+history-revert", "--presentation", "presHistory", "--history-version-id", "0", "--as", "bot"},
+			param:    "--history-version-id",
+		},
+		{
+			name:     "revert rejects invalid wait timeout",
+			shortcut: SlidesHistoryRevert,
+			args:     []string{"+history-revert", "--presentation", "presHistory", "--history-version-id", "10", "--wait-timeout-ms", "30001", "--as", "bot"},
+			param:    "--wait-timeout-ms",
+		},
+		{
+			name:     "status rejects empty task id",
+			shortcut: SlidesHistoryRevertStatus,
+			args:     []string{"+history-revert-status", "--presentation", "presHistory", "--task-id", "", "--as", "bot"},
+			param:    "--task-id",
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			t.Parallel()
+
+			f, stdout, _, _ := cmdutil.TestFactory(t, slidesTestConfig(t, ""))
+			err := runSlidesShortcut(t, f, stdout, tt.shortcut, tt.args)
+			if err == nil {
+				t.Fatal("expected validation error, got nil")
+			}
+			_, ok := errs.ProblemOf(err)
+			if !ok {
+				t.Fatalf("error is not typed: %T %v", err, err)
+			}
+			var validationErr *errs.ValidationError
+			if !errors.As(err, &validationErr) {
+				t.Fatalf("expected validation error, got %T: %v", err, err)
+			}
+			if validationErr.Param != tt.param {
+				t.Fatalf("param = %q, want %q (err: %v)", validationErr.Param, tt.param, err)
+			}
+		})
+	}
+}
+
+func TestSlidesHistoryDryRun(t *testing.T) {
+	t.Parallel()
+
+	listCmd := newSlidesHistoryRuntimeCmd(t, SlidesHistoryList, map[string]string{
+		"presentation": "presHistoryDryRun",
+		"page-size":    "5",
+		"page-token":   "page_token_1",
+	})
+	listDry := decodeSlidesHistoryDryRun(t, SlidesHistoryList.DryRun(context.Background(), common.TestNewRuntimeContext(listCmd, nil)))
+	if got, want := listDry.API[0].URL, "/open-apis/slides_ai/v1/xml_presentations/presHistoryDryRun/histories"; got != want {
+		t.Fatalf("list dry-run URL = %q, want %q", got, want)
+	}
+	if got := int(listDry.API[0].Params["page_size"].(float64)); got != 5 {
+		t.Fatalf("list page_size = %d, want 5", got)
+	}
+	if got := listDry.API[0].Params["page_token"]; got != "page_token_1" {
+		t.Fatalf("list page_token = %#v, want page_token_1", got)
+	}
+
+	revertCmd := newSlidesHistoryRuntimeCmd(t, SlidesHistoryRevert, map[string]string{
+		"presentation":       "presHistoryDryRun",
+		"history-version-id": "42",
+		"wait-timeout-ms":    "30000",
+	})
+	revertDry := decodeSlidesHistoryDryRun(t, SlidesHistoryRevert.DryRun(context.Background(), common.TestNewRuntimeContext(revertCmd, nil)))
+	if got, want := revertDry.API[0].URL, "/open-apis/slides_ai/v1/xml_presentations/presHistoryDryRun/history/revert"; got != want {
+		t.Fatalf("revert dry-run URL = %q, want %q", got, want)
+	}
+	if got := revertDry.API[0].Body["history_version_id"]; got != "42" {
+		t.Fatalf("revert history_version_id = %#v, want 42", got)
+	}
+	if got := int(revertDry.API[0].Body["wait_timeout_ms"].(float64)); got != 30000 {
+		t.Fatalf("revert wait_timeout_ms = %d, want 30000", got)
+	}
+
+	statusCmd := newSlidesHistoryRuntimeCmd(t, SlidesHistoryRevertStatus, map[string]string{
+		"presentation": "presHistoryDryRun",
+		"task-id":      "task_1",
+	})
+	statusDry := decodeSlidesHistoryDryRun(t, SlidesHistoryRevertStatus.DryRun(context.Background(), common.TestNewRuntimeContext(statusCmd, nil)))
+	if got, want := statusDry.API[0].URL, "/open-apis/slides_ai/v1/xml_presentations/presHistoryDryRun/history/revert_status"; got != want {
+		t.Fatalf("status dry-run URL = %q, want %q", got, want)
+	}
+	if got := statusDry.API[0].Params["task_id"]; got != "task_1" {
+		t.Fatalf("status task_id = %#v, want task_1", got)
+	}
+}
+
+func TestSlidesHistoryDryRunWithWikiPresentation(t *testing.T) {
+	t.Parallel()
+
+	cmd := newSlidesHistoryRuntimeCmd(t, SlidesHistoryList, map[string]string{
+		"presentation": "https://example.feishu.cn/wiki/wikcn123",
+		"page-size":    "20",
+	})
+	dry := decodeSlidesHistoryDryRun(t, SlidesHistoryList.DryRun(context.Background(), common.TestNewRuntimeContext(cmd, nil)))
+	if len(dry.API) != 2 {
+		t.Fatalf("api calls = %d, want 2: %#v", len(dry.API), dry.API)
+	}
+	if got, want := dry.API[0].URL, "/open-apis/wiki/v2/spaces/get_node"; got != want {
+		t.Fatalf("wiki dry-run URL = %q, want %q", got, want)
+	}
+	if got := dry.API[0].Params["token"]; got != "wikcn123" {
+		t.Fatalf("wiki node parameter mismatch: got %#v, want placeholder node id", got)
+	}
+	if got, want := dry.API[1].URL, "/open-apis/slides_ai/v1/xml_presentations/%3Cresolved_slides_token%3E/histories"; got != want {
+		t.Fatalf("history dry-run URL = %q, want %q", got, want)
+	}
+}
+
+func TestSlidesHistoryExecuteList(t *testing.T) {
+	f, stdout, _, reg := cmdutil.TestFactory(t, slidesTestConfig(t, ""))
+	var capturedQuery url.Values
+	reg.Register(&httpmock.Stub{
+		Method: "GET",
+		URL:    "/open-apis/slides_ai/v1/xml_presentations/presHistory/histories",
+		Body: map[string]interface{}{
+			"code": 0,
+			"msg":  "ok",
+			"data": map[string]interface{}{
+				"entries": []interface{}{
+					map[string]interface{}{
+						"revision_id":        float64(42),
+						"history_version_id": "11",
+						"edit_time":          "1780000000",
+						"type":               float64(1),
+						"editor_ids":         []interface{}{"ou_1"},
+					},
+				},
+				"has_more":   true,
+				"page_token": "page_token_2",
+			},
+		},
+		OnMatch: func(req *http.Request) {
+			capturedQuery = req.URL.Query()
+		},
+	})
+
+	err := runSlidesShortcut(t, f, stdout, SlidesHistoryList, []string{
+		"+history-list",
+		"--presentation", "presHistory",
+		"--page-size", "5",
+		"--page-token", "page_token_1",
+		"--as", "bot",
+	})
+	if err != nil {
+		t.Fatalf("unexpected error: %v", err)
+	}
+
+	if got := capturedQuery.Get("page_size"); got != "5" {
+		t.Fatalf("page_size query = %q, want 5", got)
+	}
+	if got := capturedQuery.Get("page_token"); got != "page_token_1" {
+		t.Fatalf("page_token query = %q, want page_token_1", got)
+	}
+
+	data := decodeSlidesHistoryEnvelope(t, stdout)
+	if got := data["page_token"]; got != "page_token_2" {
+		t.Fatalf("page_token = %#v, want page_token_2", got)
+	}
+	entries, _ := data["entries"].([]interface{})
+	if len(entries) != 1 {
+		t.Fatalf("entries = %#v, want one entry", data["entries"])
+	}
+}
+
+func TestSlidesHistoryExecuteRevert(t *testing.T) {
+	f, stdout, _, reg := cmdutil.TestFactory(t, slidesTestConfig(t, ""))
+	stub := &httpmock.Stub{
+		Method: "POST",
+		URL:    "/open-apis/slides_ai/v1/xml_presentations/presHistory/history/revert",
+		Body: map[string]interface{}{
+			"code": 0,
+			"msg":  "ok",
+			"data": map[string]interface{}{
+				"task_id":            "task_1",
+				"status":             "running",
+				"history_version_id": "42",
+				"poll_after_ms":      float64(10000),
+			},
+		},
+	}
+	reg.Register(stub)
+
+	err := runSlidesShortcut(t, f, stdout, SlidesHistoryRevert, []string{
+		"+history-revert",
+		"--presentation", "presHistory",
+		"--history-version-id", "42",
+		"--wait-timeout-ms", "0",
+		"--as", "bot",
+	})
+	if err != nil {
+		t.Fatalf("unexpected error: %v", err)
+	}
+
+	var body map[string]interface{}
+	if err := json.Unmarshal(stub.CapturedBody, &body); err != nil {
+		t.Fatalf("decode revert body: %v\nraw=%s", err, stub.CapturedBody)
+	}
+	if got := body["history_version_id"]; got != "42" {
+		t.Fatalf("history_version_id = %#v, want 42", got)
+	}
+	if got := int(body["wait_timeout_ms"].(float64)); got != 0 {
+		t.Fatalf("wait_timeout_ms = %d, want 0", got)
+	}
+
+	data := decodeSlidesHistoryEnvelope(t, stdout)
+	if got := data["task_id"]; got != "task_1" {
+		t.Fatalf("task_id = %#v, want task_1", got)
+	}
+}
+
+func TestSlidesHistoryExecuteRevertStatus(t *testing.T) {
+	f, stdout, _, reg := cmdutil.TestFactory(t, slidesTestConfig(t, ""))
+	var capturedQuery url.Values
+	reg.Register(&httpmock.Stub{
+		Method: "GET",
+		URL:    "/open-apis/slides_ai/v1/xml_presentations/presHistory/history/revert_status",
+		Body: map[string]interface{}{
+			"code": 0,
+			"msg":  "ok",
+			"data": map[string]interface{}{
+				"status":             "done",
+				"history_version_id": "11",
+			},
+		},
+		OnMatch: func(req *http.Request) {
+			capturedQuery = req.URL.Query()
+		},
+	})
+
+	err := runSlidesShortcut(t, f, stdout, SlidesHistoryRevertStatus, []string{
+		"+history-revert-status",
+		"--presentation", "presHistory",
+		"--task-id", "task_1",
+		"--as", "bot",
+	})
+	if err != nil {
+		t.Fatalf("unexpected error: %v", err)
+	}
+
+	if got := capturedQuery.Get("task_id"); got != "task_1" {
+		t.Fatalf("task_id query = %q, want task_1", got)
+	}
+	data := decodeSlidesHistoryEnvelope(t, stdout)
+	if got := data["status"]; got != "done" {
+		t.Fatalf("status = %#v, want done", got)
+	}
+	if got := data["history_version_id"]; got != "11" {
+		t.Fatalf("history_version_id = %#v, want 11", got)
+	}
+}
+
+func TestSlidesHistoryExecuteResolvesWikiPresentation(t *testing.T) {
+	f, stdout, _, reg := cmdutil.TestFactory(t, slidesTestConfig(t, ""))
+	reg.Register(&httpmock.Stub{
+		Method: "GET",
+		URL:    "/open-apis/wiki/v2/spaces/get_node",
+		Body: map[string]interface{}{
+			"code": 0,
+			"data": map[string]interface{}{
+				"node": map[string]interface{}{
+					"obj_type":  "slides",
+					"obj_token": "presReal",
+				},
+			},
+		},
+	})
+	reg.Register(&httpmock.Stub{
+		Method: "GET",
+		URL:    "/open-apis/slides_ai/v1/xml_presentations/presReal/histories",
+		Body: map[string]interface{}{
+			"code": 0,
+			"data": map[string]interface{}{
+				"entries":    []interface{}{},
+				"has_more":   false,
+				"page_token": "",
+			},
+		},
+	})
+
+	err := runSlidesShortcut(t, f, stdout, SlidesHistoryList, []string{
+		"+history-list",
+		"--presentation", "https://example.feishu.cn/wiki/wikcn123",
+		"--as", "bot",
+	})
+	if err != nil {
+		t.Fatalf("unexpected error: %v", err)
+	}
+	data := decodeSlidesHistoryEnvelope(t, stdout)
+	if got := data["has_more"]; got != false {
+		t.Fatalf("has_more = %#v, want false", got)
+	}
+}
+
+type slidesHistoryDryRunOutput struct {
+	API []struct {
+		Method string                 `json:"method"`
+		URL    string                 `json:"url"`
+		Params map[string]interface{} `json:"params"`
+		Body   map[string]interface{} `json:"body"`
+	} `json:"api"`
+}
+
+func newSlidesHistoryRuntimeCmd(t *testing.T, shortcut common.Shortcut, values map[string]string) *cobra.Command {
+	t.Helper()
+
+	cmd := &cobra.Command{Use: shortcut.Command}
+	for _, flag := range shortcut.Flags {
+		switch flag.Type {
+		case "int":
+			cmd.Flags().Int(flag.Name, 0, flag.Desc)
+		default:
+			cmd.Flags().String(flag.Name, flag.Default, flag.Desc)
+		}
+	}
+	for name, value := range values {
+		if err := cmd.Flags().Set(name, value); err != nil {
+			t.Fatalf("set --%s: %v", name, err)
+		}
+	}
+	return cmd
+}
+
+func decodeSlidesHistoryDryRun(t *testing.T, dry *common.DryRunAPI) slidesHistoryDryRunOutput {
+	t.Helper()
+
+	raw, err := json.Marshal(dry)
+	if err != nil {
+		t.Fatalf("marshal dry-run: %v", err)
+	}
+	var out slidesHistoryDryRunOutput
+	if err := json.Unmarshal(raw, &out); err != nil {
+		t.Fatalf("decode dry-run: %v\nraw=%s", err, raw)
+	}
+	return out
+}
+
+func decodeSlidesHistoryEnvelope(t *testing.T, stdout *bytes.Buffer) map[string]interface{} {
+	t.Helper()
+
+	var envelope map[string]interface{}
+	if err := json.Unmarshal(stdout.Bytes(), &envelope); err != nil {
+		t.Fatalf("decode envelope: %v\nraw=%s", err, stdout.String())
+	}
+	data, _ := envelope["data"].(map[string]interface{})
+	if data == nil {
+		t.Fatalf("missing data in envelope: %#v", envelope)
+	}
+	return data
+}

skills/lark-doc/references/lark-doc-create.md

@@ -60,7 +60,6 @@ lark-cli docs +create --doc-format markdown --title "项目计划" --content $'#
 | ------------------- | -- |---------------------------------------------|
 | `--title`           | 否  | 文档标题，Markdown 导入时使用；XML 创建推荐在 `--content` 开头写 `<title>...</title>`；多个标题仅保留第一个并在 `warnings` / `degrade_details` 提示 |
 | `--content`         | 视情况 | 文档内容（XML 或 Markdown 格式）；不传 `--content` 时必须传 `--title` |
-| `--reference-map` | 否 | 结构化 `reference_map` JSON object；必须与 `--content` 一起使用。普通写入优先把结构写在正文里；该参数主要用于保留或回放已有 `document.reference_map`。支持直接 JSON、`@reference-map.json`（相对路径）或 `-` 从 stdin 读取。 |
 | `--doc-format`      | 否  | 内容格式：`xml`（默认，始终优先使用）\| `markdown`（仅用户明确要求时） |
 | `--parent-token`    | 否  | 父文件夹或知识库节点 token（与 `--parent-position` 互斥）  |
 | `--parent-position` | 否  | 父节点位置，如 `my_library`（与 `--parent-token` 互斥） |

skills/lark-doc/references/lark-doc-update.md

@@ -24,7 +24,7 @@
 | `--command` | 是 | 操作指令（见下方指令速查表） |
 | `--doc-format` | 否 | 内容格式：`xml`（默认，始终优先使用）\| `markdown`（仅用户明确要求时） |
 | `--content` | 视指令 | 写入内容（`str_replace` 传空字符串可实现删除） |
-| `--reference-map` | 否 | 结构化 `reference_map` JSON object；必须与 `--content` 一起使用。普通写入优先把结构写在正文里；该参数主要用于保留或回放已有 `document.reference_map`。支持直接 JSON、`@reference-map.json`（相对路径）或 `-` 从 stdin 读取。 |
+| `--reference-map` | 否 | 结构化 `reference_map` JSON object；当 `--content` 使用正文外部载荷 / 引用映射时与内容一起传给服务，支持直接 JSON、`@reference-map.json`（相对路径）或 `-` 从 stdin 读取。通常用于回写已有 `document.reference_map`。 |
 | `--pattern` | 视指令 | 匹配文本（str_replace） |
 | `--block-id` | 视指令 | 目标 block ID（block_* 操作），逗号分隔可批量删除，-1 表示末尾 |
 | `--src-block-ids` | 视指令 | 源 block ID（逗号分隔），用于 block_copy_insert_after / block_move_after |

skills/lark-doc/references/lark-doc-word-stat.md

@@ -24,8 +24,8 @@ lark-cli docs +fetch --doc "$URL" --doc-format xml --detail full --format json \
 
 脚本输出 JSON。对用户汇报时默认只读两个核心字段：
 
-- `word_count`：总字数。按语义单位统计汉字、英文单词/URL/code path、数字、中文标点；普通贴着英文的英文标点不计入，但独立 ASCII 符号、中文之间的 `/` 等以脚本结果为准。
-- `char_count`：总字符数。统计汉字、英文字母、数字、中英文标点和脚本识别的可见符号；空格不计入。
+- `word_count`：总字数。按语义单位统计汉字、英文单词、数字、中文标点；英文标点不计入。
+- `char_count`：总字符数。统计汉字、英文字母、数字、中英文标点；空格不计入。
 
 其余字段用于排查或解释：
 

skills/lark-doc/references/lark-doc-xml.md

@@ -46,30 +46,8 @@ p, h1-h9, ul, ol, li, table, thead, tbody, tr, th, td, blockquote, pre, code, hr
 - `<task>` — `<task task-id="GUID"></task>`，必传 task-id（任务 guid）
 - `<chat_card>` — `<chat_card chat-id="CHAT_ID"></chat_card>`，必传 chat-id
 - `<sub-page-list>` — `<sub-page-list></sub-page-list>` 子页面列表块；仅 wiki 文档可插入
-- `<html5-block>` — 在飞书文档「HTML 块」iframe 里加载的单文件 HTML。
 - bitable、base_ref、synced_reference、synced_source、okr — 不可创建，仅支持移动
 
-## html
-
-1. 写入 HTML 内容块时，把 HTML 存为本地 `.html` 文件，XML 写 `<html5-block path="@widget.html"></html5-block>`；已有 `data-ref` 时配合 `--reference-map @reference-map.json`。读取时 `<html5-block data-ref="html5_1"></html5-block>` 只是占位，必须从 `document.reference_map["html5-block"]["html5_1"].data` 读取 HTML；若 entry 是 `path`，读取对应 `@doc-fetch-resources/...html` 文件。
-2. 格式如下：
-```html
-<!doctype html>
-<html lang="zh-CN">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1">
-  <meta name="use-iframe" content="true">
-  <meta name="html-box-height-mode" content="auto">
-  <meta name="description" content="内容摘要，会导出为 html5-block 的 alt 属性，帮助模型理解该 HTML 块的用途">
-  <title></title>
-</head>
-<body>
-  ...
-</body>
-</html>
-```
-
 # 四、块级复制与移动
 
 ## 移动（block_move_after）

skills/lark-doc/scripts/doc_word_stat.py

@@ -78,10 +78,6 @@ ENGLISH_PUNCTUATION = set(
 
 
 LexemeKind = Literal["english", "number"]
-URL_TOKEN_RE = re.compile(r"https?://[!-~]+")
-ASCII_COMPOUND_TOKEN_RE = re.compile(
-    r"[A-Za-z0-9]+(?:[._/@:-][A-Za-z0-9]+)+"
-)
 
 
 @dataclass
@@ -185,17 +181,8 @@ class Counter:
         return self.stats
 
     def write(self, text: str) -> None:
-        i = 0
-        while i < len(text):
-            consumed = self._write_ascii_compound_token(text, i)
-            if consumed:
-                i += consumed
-                continue
-            if self._write_visible_ascii_separator(text, i):
-                i += 1
-                continue
-            self._write_char(text[i])
-            i += 1
+        for ch in text:
+            self._write_char(ch)
 
     def write_marker(self, text: str) -> None:
         for ch in text:
@@ -349,65 +336,6 @@ class Counter:
         self._end_symbol_run(count_word=False)
         self._at_boundary = False
 
-    def _write_visible_ascii_separator(self, text: str, index: int) -> bool:
-        ch = text[index]
-        if ch != "/" or index == 0 or index + 1 >= len(text):
-            return False
-        if not is_han(text[index - 1]) or not is_han(text[index + 1]):
-            return False
-
-        self._end_unit()
-        self.stats.english_punctuations += 1
-        self.stats.symbol_words += 1
-        self.stats.word_count += 1
-        self.stats.char_count += 1
-        self._at_boundary = False
-        return True
-
-    def _write_ascii_compound_token(self, text: str, start: int) -> int:
-        token = self._match_ascii_compound_token(text, start)
-        if not token:
-            return 0
-
-        self._end_unit()
-        self.stats.english_words += 1
-        self.stats.word_count += 1
-        for ch in token:
-            if is_ascii_letter(ch):
-                self.stats.english_letters += 1
-                self.stats.char_count += 1
-            elif is_digit(ch):
-                self.stats.digits += 1
-                self.stats.char_count += 1
-            elif is_english_punctuation(ch):
-                self.stats.english_punctuations += 1
-                self.stats.char_count += 1
-            elif is_unicode_symbol(ch):
-                units = utf16_units(ch)
-                self.stats.symbol_chars += units
-                self.stats.char_count += units
-            elif is_chinese_punctuation(ch):
-                self.stats.chinese_punctuations += 1
-                self.stats.char_count += 1
-            elif is_han(ch):
-                self.stats.han_chars += 1
-                self.stats.char_count += 1
-        self._at_boundary = False
-        return len(token)
-
-    def _match_ascii_compound_token(self, text: str, start: int) -> str | None:
-        match = URL_TOKEN_RE.match(text, start)
-        if match:
-            return match.group(0)
-
-        match = ASCII_COMPOUND_TOKEN_RE.match(text, start)
-        if not match:
-            return None
-        token = match.group(0)
-        if any(is_ascii_letter(ch) for ch in token):
-            return token
-        return None
-
     def _write_symbol_char(self, ch: str) -> None:
         self._end_lexeme()
         self._end_symbol_run(count_word=False)
@@ -433,7 +361,7 @@ class Counter:
         self._lexeme_has_digit = False
 
     def _end_symbol_run(self, *, count_word: bool) -> None:
-        if self._symbol_run_length >= 1 and count_word:
+        if self._symbol_run_length >= 2 and count_word:
             self.stats.symbol_words += 1
             self.stats.word_count += 1
         if self._symbol_run_length:

skills/lark-slides/SKILL.md

@@ -5,7 +5,7 @@ description: "飞书幻灯片：创建和编辑幻灯片。创建演示文稿、
 metadata:
   requires:
     bins: ["lark-cli"]
-  cliHelp: "lark-cli slides --help"
+  cliHelp: "lark-cli slides --help; lark-cli slides +create --help; lark-cli slides +xml-get --help; lark-cli slides +replace-slide --help; lark-cli slides +replace-pages --help; lark-cli slides +history-list --help; lark-cli slides +history-revert --help; lark-cli slides +history-revert-status --help"
 ---
 
 # slides (v1)
@@ -18,6 +18,7 @@ metadata:
 | 已有 PPT 大幅改写 | 多页整页重建用 `+replace-pages`，单页局部编辑用 `+replace-slide` | `xml_presentations.get`、`lark-slides-replace-pages.md`、`lark-slides-edit-workflows.md` |
 | 编辑单个标题、文本块、图片或局部元素 | 优先块级替换/插入，不改页序 | `slides +replace-slide`、`lark-slides-replace-slide.md` |
 | 读取或分析已有 PPT | 解析 slides/wiki token，回读全文或单页 XML，保存 `xml_presentation_id`、`slide_id`、`revision_id` | `xml_presentations.get`、`xml_presentation.slide.get` |
+| 查看或回滚历史版本 | 先用 `+history-list` 找 `history_version_id`，再 `+history-revert`，必要时 `+history-revert-status` 轮询 | [`lark-slides-history.md`](references/lark-slides-history.md) |
 | 获取幻灯片页面截图 | 用 `slide_id` 或页号指定页面 | `slides +screenshot`、`lark-slides-screenshot.md` |
 | 上传或使用图片 | 先上传为 `file_token`，禁止直接写 http(s) 外链 | `slides +media-upload`，或 `+create --slides` 的 `@./path` 占位符 |
 | 在 slide 中绘制柱/条/折线/面积/雷达/饼等有数据序列的图表 | 使用原生 `<chart>` 元素 | `xml-schema-quick-ref.md` |
@@ -28,6 +29,8 @@ metadata:
 
 **CRITICAL — 开始前 MUST 先用 Read 工具读取 [`../lark-shared/SKILL.md`](../lark-shared/SKILL.md)，认证、权限和全局参数均以 lark-shared 为准。**
 
+**CRITICAL — 查看或回滚历史版本前，MUST 先读取 [`lark-slides-history.md`](references/lark-slides-history.md)。回滚接口只接受 `history_version_id`，不要把 `revision_id` 直接传给 `+history-revert`。**
+
 **CRITICAL — 生成任何 XML 之前，MUST 先用 Read 工具读取 [xml-schema-quick-ref.md](references/xml-schema-quick-ref.md)，禁止凭记忆猜测 XML 结构。**
 
 **CRITICAL — 新建演示文稿或大幅改写页面时，MUST 先生成 `.lark-slides/plan/<deck-or-task-id>/slide_plan.json`，再生成 XML。先创建对应目录，规划层规则和中间产物生命周期见 [planning-layer.md](references/planning-layer.md)。仅替换一个标题、插入一个块等小型已有页编辑可豁免。**
@@ -83,6 +86,7 @@ lark-cli auth login --domain slides
 
 - 创建：[`lark-slides-create.md`](references/lark-slides-create.md)
 - 编辑：[`lark-slides-edit-workflows.md`](references/lark-slides-edit-workflows.md)、[`lark-slides-replace-slide.md`](references/lark-slides-replace-slide.md)、[`lark-slides-replace-pages.md`](references/lark-slides-replace-pages.md)
+- 历史版本：[`lark-slides-history.md`](references/lark-slides-history.md)
 - 截图：[`lark-slides-screenshot.md`](references/lark-slides-screenshot.md)
 - 图片：[`lark-slides-media-upload.md`](references/lark-slides-media-upload.md)
 - 流程图 / 时序图 / 架构图 / 装饰图案：[`lark-slides-whiteboard.md`](references/lark-slides-whiteboard.md)

skills/lark-slides/references/lark-slides-history.md

@@ -0,0 +1,122 @@
+# slides history（历史版本与回滚）
+
+用于查看 Slides XML presentation 历史版本、按 `history_version_id` 回滚，以及查询回滚任务状态。
+
+## 安全流程
+
+1. 先用分页接口 `+history-list` 找到目标版本的 `history_version_id`。
+2. 如果用户指定的是 `revision_id`，不要假设它唯一，也不要把 `revision_id` 直接传给 `+history-revert`。先拉一页并在 `entries[]` 中筛选 `revision_id` 相同的候选；如果未匹配到且 `has_more=true`，继续用 `page_token` 翻页；如果已匹配到候选，最多额外再拉一页补齐可能跨页的相邻候选。最终优先根据用户目标时间与 `edit_time` 的接近程度选择最合适的一条，取同一条的 `history_version_id`；如果没有目标时间，或多个候选无法可靠区分，再向用户展示候选版本（`history_version_id`、`revision_id`、`edit_time`、`name/description`）并确认后回滚。
+3. 如果用户指定的是某一时刻但没有指定 `revision_id`，按 `entries[].edit_time` 匹配；优先选择不晚于目标时刻的最近一条历史记录，无法明确匹配时先向用户确认候选版本。
+4. 再用 `+history-revert --history-version-id <history_version_id>` 发起回滚。默认最多等待 30 秒；如果返回 `status: running`，记录 `task_id`。
+5. 用 `+history-revert-status` 轮询 `task_id`，直到状态不再是 `running`。
+6. 回滚完成后，用 `slides +xml-get` 或 `slides xml_presentations get` 读取演示文稿确认内容。
+
+## 按 revision_id 或时间点回滚
+
+当用户说“回滚到 revision_id=42”“恢复到昨天下午 3 点的版本”这类需求时，流程是：
+
+1. 执行 `slides +history-list --presentation <presentation>` 获取第一页历史记录；`+history-list` 是分页接口，只有 `has_more=true` 且还需要更多候选时才继续传 `--page-token` 翻页。
+2. 如果用户给出 `revision_id`：先筛选当前页中 `entries[].revision_id == 用户给出的 revision_id`。如果未命中且 `has_more=true`，继续拉下一页；如果已经命中候选，最多额外再拉一页，补齐同一个 `revision_id` 可能跨页出现的相邻 `history_version_id`。若用户同时给出目标时间，在候选里选择 `edit_time` 与目标时间最接近的一条；若未给目标时间但候选只有一条，可直接使用；若多个候选无法可靠区分，不要自行取第一条，向用户展示候选并确认。
+3. 如果用户只给出时间：用 `entries[].edit_time` 匹配，选择目标时刻之前最近的一条；如果用户表达的是“最接近某时刻”，则选择绝对时间差最小的一条。
+4. 从最终匹配条目读取 `history_version_id`。`history_version_id` 对应服务端 `minor_history.version`，这是回滚接口需要的 ID。
+5. 执行 `slides +history-revert --presentation <presentation> --history-version-id <history_version_id>`。
+
+候选确认时使用类似格式：
+
+```text
+同一个 revision_id 命中多个历史版本，请确认要回滚哪一条：
+- history_version_id=11 revision_id=42 edit_time=2026-06-22T12:24:45Z name=...
+- history_version_id=12 revision_id=42 edit_time=2026-06-22T12:25:14Z name=...
+```
+
+## 命令
+
+```bash
+# 列出历史版本
+lark-cli slides +history-list --presentation "<slides_url_or_token>" --page-size 20
+
+# 翻页
+lark-cli slides +history-list --presentation "<slides_url_or_token>" --page-size 20 --page-token "<page_token>"
+
+# 回滚到指定 history_version_id（默认等待 30000ms）
+lark-cli slides +history-revert --presentation "<slides_url_or_token>" --history-version-id 42
+
+# 只发起任务，不等待
+lark-cli slides +history-revert --presentation "<slides_url_or_token>" --history-version-id 42 --wait-timeout-ms 0
+
+# 查询回滚任务状态
+lark-cli slides +history-revert-status --presentation "<slides_url_or_token>" --task-id "<task_id>"
+```
+
+## 参数
+
+| 命令 | 参数 | 必填 | 说明 |
+|-|-|-|-|
+| `+history-list` | `--presentation` | 是 | `xml_presentation_id`、Slides URL，或可解析为 Slides 的 wiki URL |
+| `+history-list` | `--page-size` | 否 | 返回条数，范围 `1-20`，默认 `20` |
+| `+history-list` | `--page-token` | 否 | 上一页返回的 `page_token` |
+| `+history-revert` | `--presentation` | 是 | 同一个演示文稿 |
+| `+history-revert` | `--history-version-id` | 是 | `+history-list` 返回的 `history_version_id`，必须大于 0 |
+| `+history-revert` | `--wait-timeout-ms` | 否 | 等待回滚完成的毫秒数，范围 `0-30000`，默认 `30000` |
+| `+history-revert-status` | `--presentation` | 是 | 同一个演示文稿 |
+| `+history-revert-status` | `--task-id` | 是 | `+history-revert` 返回的 `task_id` |
+
+## 返回值要点
+
+`+history-list` 返回：
+
+```json
+{
+  "entries": [
+    {
+      "revision_id": 42,
+      "history_version_id": "11",
+      "edit_time": "1780000000",
+      "type": 1,
+      "name": "版本名",
+      "description": "版本说明",
+      "editor_ids": ["ou_xxx"]
+    }
+  ],
+  "has_more": true,
+  "page_token": "page_token"
+}
+```
+
+`+history-revert` 返回：
+
+```json
+{
+  "task_id": "task_xxx",
+  "status": "running",
+  "history_version_id": "11",
+  "poll_after_ms": 10000
+}
+```
+
+`+history-revert-status` 返回：
+
+```json
+{
+  "status": "partial_failed",
+  "history_version_id": "11",
+  "failed_block_tokens": ["blk_xxx"]
+}
+```
+
+`status` 可能是 `running`、`done`、`partial_failed`、`failed`。当状态是 `partial_failed` 或 `failed` 时，优先检查 `failed_block_tokens`。
+
+## 回滚后验证
+
+回滚成功后必须读取一次当前内容确认：
+
+```bash
+lark-cli slides +xml-get --presentation "<slides_url_or_token>" --output ./presentation.xml
+```
+
+如果只需要快速检查返回结构，也可以走 raw OpenAPI：
+
+```bash
+lark-cli api get "/open-apis/slides_ai/v1/xml_presentations/<xml_presentation_id>" \
+  --params '{"revision_id":-1}'
+```

tests/cli_e2e/docs/docs_update_dryrun_test.go

@@ -57,7 +57,7 @@ func TestDocs_DryRunDefaultsToV2OpenAPI(t *testing.T) {
 				"--dry-run",
 			},
 			wantURL:        "/open-apis/docs_ai/v1/documents/doxcnDryRunE2E/fetch",
-			wantExtraParam: `{"enable_user_cite_reference_map":true,"return_html5_block_data":true}`,
+			wantExtraParam: `{"enable_user_cite_reference_map":true}`,
 		},
 		{
 			name: "update",

tests/cli_e2e/slides/slides_history_dryrun_test.go

@@ -0,0 +1,99 @@
+// Copyright (c) 2026 Lark Technologies Pte. Ltd.
+// SPDX-License-Identifier: MIT
+
+package slides
+
+import (
+	"context"
+	"testing"
+	"time"
+
+	clie2e "github.com/larksuite/cli/tests/cli_e2e"
+	"github.com/stretchr/testify/require"
+	"github.com/tidwall/gjson"
+)
+
+func TestSlidesHistoryDryRunE2E(t *testing.T) {
+	setSlidesDryRunEnv(t)
+
+	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
+	t.Cleanup(cancel)
+
+	tests := []struct {
+		name      string
+		args      []string
+		wantURL   string
+		wantVerb  string
+		assertion func(t *testing.T, stdout string)
+	}{
+		{
+			name: "list",
+			args: []string{
+				"slides", "+history-list",
+				"--presentation", "presHistoryDryRun",
+				"--page-size", "5",
+				"--page-token", "page_token_1",
+				"--dry-run",
+			},
+			wantURL:  "/open-apis/slides_ai/v1/xml_presentations/presHistoryDryRun/histories",
+			wantVerb: "GET",
+			assertion: func(t *testing.T, stdout string) {
+				require.Equal(t, int64(5), gjson.Get(stdout, "api.0.params.page_size").Int(), stdout)
+				require.Equal(t, "page_token_1", gjson.Get(stdout, "api.0.params.page_token").String(), stdout)
+			},
+		},
+		{
+			name: "revert",
+			args: []string{
+				"slides", "+history-revert",
+				"--presentation", "presHistoryDryRun",
+				"--history-version-id", "42",
+				"--wait-timeout-ms", "0",
+				"--dry-run",
+			},
+			wantURL:  "/open-apis/slides_ai/v1/xml_presentations/presHistoryDryRun/history/revert",
+			wantVerb: "POST",
+			assertion: func(t *testing.T, stdout string) {
+				require.Equal(t, "42", gjson.Get(stdout, "api.0.body.history_version_id").String(), stdout)
+				require.Equal(t, int64(0), gjson.Get(stdout, "api.0.body.wait_timeout_ms").Int(), stdout)
+			},
+		},
+		{
+			name: "status",
+			args: []string{
+				"slides", "+history-revert-status",
+				"--presentation", "presHistoryDryRun",
+				"--task-id", "task_1",
+				"--dry-run",
+			},
+			wantURL:  "/open-apis/slides_ai/v1/xml_presentations/presHistoryDryRun/history/revert_status",
+			wantVerb: "GET",
+			assertion: func(t *testing.T, stdout string) {
+				require.Equal(t, "task_1", gjson.Get(stdout, "api.0.params.task_id").String(), stdout)
+			},
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			result, err := clie2e.RunCmd(ctx, clie2e.Request{
+				Args:      tt.args,
+				DefaultAs: "bot",
+			})
+			require.NoError(t, err)
+			result.AssertExitCode(t, 0)
+
+			require.Equal(t, tt.wantVerb, gjson.Get(result.Stdout, "api.0.method").String(), "stdout:\n%s", result.Stdout)
+			require.Equal(t, tt.wantURL, gjson.Get(result.Stdout, "api.0.url").String(), "stdout:\n%s", result.Stdout)
+			tt.assertion(t, result.Stdout)
+		})
+	}
+}
+
+func setSlidesDryRunEnv(t *testing.T) {
+	t.Helper()
+	t.Setenv("LARKSUITE_CLI_CONFIG_DIR", t.TempDir())
+	t.Setenv("LARKSUITE_CLI_APP_ID", "slides_dryrun_test")
+	t.Setenv("LARKSUITE_CLI_APP_SECRET", "slides_dryrun_secret")
+	t.Setenv("LARKSUITE_CLI_BRAND", "feishu")
+}

tests/cli_e2e/slides/slides_history_workflow_test.go

@@ -0,0 +1,228 @@
+// Copyright (c) 2026 Lark Technologies Pte. Ltd.
+// SPDX-License-Identifier: MIT
+
+package slides
+
+import (
+	"context"
+	"encoding/json"
+	"os"
+	"strings"
+	"testing"
+	"time"
+
+	clie2e "github.com/larksuite/cli/tests/cli_e2e"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+	"github.com/tidwall/gjson"
+)
+
+func TestSlides_HistoryWorkflow(t *testing.T) {
+	if os.Getenv("LARK_SLIDES_HISTORY_E2E") != "1" {
+		t.Skip("set LARK_SLIDES_HISTORY_E2E=1 to run slides history live workflow")
+	}
+	clie2e.SkipWithoutUserToken(t)
+
+	parentT := t
+	ctx, cancel := context.WithTimeout(context.Background(), 3*time.Minute)
+	t.Cleanup(cancel)
+
+	suffix := clie2e.GenerateSuffix()
+	title := "lark-cli-e2e-slides-history-" + suffix
+	originalMarker := "original history marker " + suffix
+	updatedMarker := "updated history marker " + suffix
+	const defaultAs = "user"
+
+	originalSlideXML := slidesHistoryWorkflowSlideXML(title, originalMarker)
+	updatedSlideXML := slidesHistoryWorkflowSlideXML(title, updatedMarker)
+	slidesJSON := mustMarshalSlidesJSON(t, []string{originalSlideXML})
+
+	var presentationID string
+	var slideID string
+	createResult, err := clie2e.RunCmd(ctx, clie2e.Request{
+		Args: []string{
+			"slides", "+create",
+			"--title", title,
+			"--slides", slidesJSON,
+		},
+		DefaultAs: defaultAs,
+	})
+	require.NoError(t, err)
+	createResult.AssertExitCode(t, 0)
+	createResult.AssertStdoutStatus(t, true)
+
+	presentationID = gjson.Get(createResult.Stdout, "data.xml_presentation_id").String()
+	require.NotEmpty(t, presentationID, "stdout:\n%s", createResult.Stdout)
+	slideID = gjson.Get(createResult.Stdout, "data.slide_ids.0").String()
+	require.NotEmpty(t, slideID, "stdout:\n%s", createResult.Stdout)
+	parentT.Cleanup(func() {
+		cleanupCtx, cleanupCancel := clie2e.CleanupContext()
+		defer cleanupCancel()
+
+		deleteResult, deleteErr := clie2e.RunCmd(cleanupCtx, clie2e.Request{
+			Args: []string{
+				"drive", "+delete",
+				"--file-token", presentationID,
+				"--type", "slides",
+				"--yes",
+			},
+			DefaultAs: defaultAs,
+		})
+		clie2e.ReportCleanupFailure(parentT, "delete presentation "+presentationID, deleteResult, deleteErr)
+	})
+
+	fetchOriginal, err := clie2e.RunCmd(ctx, clie2e.Request{
+		Args:      []string{"api", "get", "/open-apis/slides_ai/v1/xml_presentations/" + presentationID},
+		DefaultAs: defaultAs,
+		Params:    map[string]any{"revision_id": -1},
+	})
+	require.NoError(t, err)
+	fetchOriginal.AssertExitCode(t, 0)
+	fetchOriginal.AssertStdoutStatus(t, true)
+	originalContent := gjson.Get(fetchOriginal.Stdout, "data.xml_presentation.content").String()
+	assert.Contains(t, originalContent, originalMarker, "stdout:\n%s", fetchOriginal.Stdout)
+	originalRevision := gjson.Get(fetchOriginal.Stdout, "data.xml_presentation.revision_id").Int()
+	require.Greater(t, originalRevision, int64(0), "stdout:\n%s", fetchOriginal.Stdout)
+
+	pagesJSON := mustMarshalPagesJSON(t, []slidesHistoryWorkflowPage{
+		{SlideID: slideID, Content: updatedSlideXML},
+	})
+	updateResult, err := clie2e.RunCmd(ctx, clie2e.Request{
+		Args: []string{
+			"slides", "+replace-pages",
+			"--presentation", presentationID,
+			"--pages", pagesJSON,
+		},
+		DefaultAs: defaultAs,
+	})
+	require.NoError(t, err)
+	updateResult.AssertExitCode(t, 0)
+	updateResult.AssertStdoutStatus(t, true)
+
+	fetchUpdated, err := clie2e.RunCmd(ctx, clie2e.Request{
+		Args:      []string{"api", "get", "/open-apis/slides_ai/v1/xml_presentations/" + presentationID},
+		DefaultAs: defaultAs,
+		Params:    map[string]any{"revision_id": -1},
+	})
+	require.NoError(t, err)
+	fetchUpdated.AssertExitCode(t, 0)
+	fetchUpdated.AssertStdoutStatus(t, true)
+	updatedContent := gjson.Get(fetchUpdated.Stdout, "data.xml_presentation.content").String()
+	assert.Contains(t, updatedContent, updatedMarker, "stdout:\n%s", fetchUpdated.Stdout)
+	assert.NotContains(t, updatedContent, originalMarker, "stdout:\n%s", fetchUpdated.Stdout)
+	currentRevision := gjson.Get(fetchUpdated.Stdout, "data.xml_presentation.revision_id").Int()
+	require.Greater(t, currentRevision, originalRevision, "stdout:\n%s", fetchUpdated.Stdout)
+
+	var revertHistoryVersionID string
+	require.Eventually(t, func() bool {
+		listResult, listErr := clie2e.RunCmd(ctx, clie2e.Request{
+			Args: []string{
+				"slides", "+history-list",
+				"--presentation", presentationID,
+				"--page-size", "20",
+			},
+			DefaultAs: defaultAs,
+		})
+		if listErr != nil || listResult.ExitCode != 0 {
+			return false
+		}
+		for _, entry := range gjson.Get(listResult.Stdout, "data.entries").Array() {
+			revisionID := entry.Get("revision_id").Int()
+			historyVersionID := entry.Get("history_version_id").String()
+			if revisionID == originalRevision && historyVersionID != "" {
+				revertHistoryVersionID = historyVersionID
+				return true
+			}
+		}
+		return false
+	}, 45*time.Second, 3*time.Second, "history list did not expose original revision %d", originalRevision)
+	require.NotEmpty(t, revertHistoryVersionID)
+
+	revertResult, err := clie2e.RunCmd(ctx, clie2e.Request{
+		Args: []string{
+			"slides", "+history-revert",
+			"--presentation", presentationID,
+			"--history-version-id", revertHistoryVersionID,
+			"--wait-timeout-ms", "30000",
+		},
+		DefaultAs: defaultAs,
+	})
+	require.NoError(t, err)
+	revertResult.AssertExitCode(t, 0)
+	revertResult.AssertStdoutStatus(t, true)
+
+	status := gjson.Get(revertResult.Stdout, "data.status").String()
+	taskID := gjson.Get(revertResult.Stdout, "data.task_id").String()
+	if status == "running" {
+		require.NotEmpty(t, taskID, "stdout:\n%s", revertResult.Stdout)
+		require.Eventually(t, func() bool {
+			statusResult, statusErr := clie2e.RunCmd(ctx, clie2e.Request{
+				Args: []string{
+					"slides", "+history-revert-status",
+					"--presentation", presentationID,
+					"--task-id", taskID,
+				},
+				DefaultAs: defaultAs,
+			})
+			if statusErr != nil || statusResult.ExitCode != 0 {
+				return false
+			}
+			status = gjson.Get(statusResult.Stdout, "data.status").String()
+			return status != "" && status != "running"
+		}, 60*time.Second, 5*time.Second, "history revert task did not finish")
+	}
+	require.Equal(t, "done", status, "revert stdout:\n%s", revertResult.Stdout)
+
+	fetchReverted, err := clie2e.RunCmd(ctx, clie2e.Request{
+		Args:      []string{"api", "get", "/open-apis/slides_ai/v1/xml_presentations/" + presentationID},
+		DefaultAs: defaultAs,
+		Params:    map[string]any{"revision_id": -1},
+	})
+	require.NoError(t, err)
+	fetchReverted.AssertExitCode(t, 0)
+	fetchReverted.AssertStdoutStatus(t, true)
+	revertedContent := gjson.Get(fetchReverted.Stdout, "data.xml_presentation.content").String()
+	assert.Contains(t, revertedContent, originalMarker, "stdout:\n%s", fetchReverted.Stdout)
+	assert.NotContains(t, revertedContent, updatedMarker, "stdout:\n%s", fetchReverted.Stdout)
+}
+
+type slidesHistoryWorkflowPage struct {
+	SlideID string `json:"slide_id"`
+	Content string `json:"content"`
+}
+
+func slidesHistoryWorkflowSlideXML(title, marker string) string {
+	return `<slide xmlns="http://www.larkoffice.com/sml/2.0"><data>` +
+		`<shape type="text" topLeftX="80" topLeftY="80" width="800" height="120"><content textType="title"><p>` + slidesHistoryWorkflowXMLEscape(title) + `</p></content></shape>` +
+		`<shape type="text" topLeftX="80" topLeftY="220" width="800" height="180"><content textType="body"><p>` + slidesHistoryWorkflowXMLEscape(marker) + `</p></content></shape>` +
+		`</data></slide>`
+}
+
+func slidesHistoryWorkflowXMLEscape(s string) string {
+	replacer := strings.NewReplacer(
+		"&", "&amp;",
+		"<", "&lt;",
+		">", "&gt;",
+		`"`, "&quot;",
+		"'", "&apos;",
+	)
+	return replacer.Replace(s)
+}
+
+func mustMarshalSlidesJSON(t *testing.T, slides []string) string {
+	t.Helper()
+	raw, err := json.Marshal(slides)
+	if err != nil {
+		t.Fatalf("marshal slides JSON: %v", err)
+	}
+	return string(raw)
+}
+
+func mustMarshalPagesJSON(t *testing.T, pages []slidesHistoryWorkflowPage) string {
+	t.Helper()
+	raw, err := json.Marshal(pages)
+	if err != nil {
+		t.Fatalf("marshal pages JSON: %v", err)
+	}
+	return strings.TrimSpace(string(raw))
+}