From 7d90784eb017bc7973d9a439ef9d242aa1a47ac0 Mon Sep 17 00:00:00 2001
From: kang <wankang2050@gmail.com>
Date: Sat, 9 May 2026 18:31:12 +0800
Subject: [PATCH] auto-save 2026-05-09 18:31 (~2)

---
 .memory/worklog.json | 40 +++++++++++++++++++---------------------
 RULES.md             |  2 ++
 2 files changed, 21 insertions(+), 21 deletions(-)

diff --git a/.memory/worklog.json b/.memory/worklog.json
index 43cca77..bf0aac4 100644
--- a/.memory/worklog.json
+++ b/.memory/worklog.json
@@ -1,26 +1,5 @@
 {
   "entries": [
-    {
-      "files_changed": 1,
-      "hash": "518faba",
-      "message": "auto-save 2026-05-07 16:46 (~1)",
-      "ts": "2026-05-07T16:46:35+08:00",
-      "type": "commit"
-    },
-    {
-      "files_changed": 1,
-      "hash": "c6874a1",
-      "message": "auto-save 2026-05-07 16:52 (~1)",
-      "ts": "2026-05-07T16:52:06+08:00",
-      "type": "commit"
-    },
-    {
-      "files_changed": 1,
-      "hash": "66ce810",
-      "message": "auto-save 2026-05-07 16:57 (~1)",
-      "ts": "2026-05-07T16:57:39+08:00",
-      "type": "commit"
-    },
     {
       "files_changed": 1,
       "hash": "e54f2e4",
@@ -3467,6 +3446,25 @@
       "message": "auto-save 2026-05-09 18:20 (~6)",
       "hash": "ee51790",
       "files_changed": 6
+    },
+    {
+      "ts": "2026-05-09T18:25:40+08:00",
+      "type": "commit",
+      "message": "auto-save 2026-05-09 18:25 (~1)",
+      "hash": "2471949",
+      "files_changed": 1
+    },
+    {
+      "ts": "2026-05-09T10:25:53Z",
+      "type": "session-heartbeat",
+      "message": "Codex 会话活跃 · 最近命令：codex · 分支 master · 1 项未提交变更 · 最近提交：auto-save 2026-05-09 18:25 (~1)",
+      "files_changed": 1
+    },
+    {
+      "ts": "2026-05-09T10:28:28Z",
+      "type": "session-heartbeat",
+      "message": "Codex 会话活跃 · 最近命令：codex · 分支 master · 2 项未提交变更 · 最近提交：auto-save 2026-05-09 18:25 (~1)",
+      "files_changed": 2
     }
   ]
 }
diff --git a/RULES.md b/RULES.md
index 0526302..8e1ad37 100644
--- a/RULES.md
+++ b/RULES.md
@@ -14,6 +14,7 @@
 - 飞书事件回调（`cli_a97764e101b95be9`）：https://hermes.kang-kang.com/feishu/events/cli_a97764e101b95be9
 - 飞书主动通知：https://hermes.kang-kang.com/feishu/notify
 - 飞书机器人列表：https://hermes.kang-kang.com/feishu/apps（只读展示 App ID / 回调地址，不含 Secret / Token）
+- 爱马仕前端「设置 → 飞书集成」可自助添加 / 更新飞书机器人；Secret / Token 只写入服务器 `/etc/hermes-feishu-bridge.env`
 - 文档 / 解析：https://styles.kang-kang.com
 - 管理后台：待定
 - 代码仓：https://git.kang-kang.com/kangwan/hermes-glass-ui-personal
@@ -56,5 +57,6 @@
 - 飞书 App Secret、Hermes API key、主动通知 token 只能放部署环境或忽略的 secrets 文件，不允许写入跟踪文件
 - 线上飞书桥接环境：`/etc/hermes-feishu-bridge.env`，mode 600
 - 飞书后台配置所需回调 URL、verification token、notify token 备份：`/root/hermes-feishu-bridge.tokens`，mode 600
+- 飞书自助添加接口 `POST /feishu/apps` 要求已登录爱马仕 cookie 且同源请求；未登录公网请求返回 401
 - 当前飞书桥接版本按明文事件回调处理；如果飞书后台开启事件加密，需要先补充解密支持
 - 主站有 cookie 门禁；nginx 已对 `/feishu/` 单独放行并反代到飞书桥接服务