What problem does it solve? It guides agents through the shared groundwork of operating Feishu/Lark resources via lark-cli: initial app configuration, user versus bot authentication, permission scope handling, and safe resolution of permission-denied errors. ## Core Features & Use Cases - Authentication & Identity Management: Distinguishes user identity (--as user) from bot identity (--as bot), with rules for when each applies and how to switch. - Scope & Permission Handling: Uses lark-cli auth login --recommend for first-time broad authorization and incremental --scope grants for high-sensitivity scopes, with an agent-driven device-flow flow (--no-wait --json plus background --device-code). - Update & Safety Rules: Detects _notice.update in CLI output to prompt upgrades, and enforces security rules such as never printing secrets and confirming destructive operations. - Use Case: When a user asks the agent to read their Feishu calendar and the CLI returns a permission error, the agent starts the device authorization flow, shows the user the verification URL, and completes login in the background. ## Quick Start Ask the agent to log in to Feishu with lark-cli using the recommended scopes and show you the authorization link to approve.