mirror of
https://github.com/larksuite/cli.git
synced 2026-08-03 08:32:46 +08:00
e28f91794a
- The engagement probe no longer counts an invalid_policy block as an external credential takeover (review F4): auth/config commands were answering "credentials are provided externally" for a mistyped LARKSUITE_CLI_DEFAULT_AS/STRICT_MODE, while whoami correctly said invalid_argument. The probe skips such blocks; the command's own resolution then surfaces the precise typed error. - config show overrides the parent gate entirely: it inspects the SAVED config only (its help promises "saved config, not current usage"), so the currently effective credential source must not decide whether it runs (review delivery finding). The blocked-commands pin drops show and a command-level test locks the bypass. - AccountDirect is now an enforced contract, not a comment (review F5): only the builtin env provider may declare it, and gather fails fast otherwise instead of producing self-contradictory diagnostics. The SPI documents the reservation.