feat(sheets): refine chart data label controls

CHANGELOG.md

@@ -2,6 +2,42 @@
 
 All notable changes to this project will be documented in this file.
 
+## [v1.0.90] - 2026-08-25
+
+### Features
+
+- event organizer transfer bot to user (#2448)
+- **base**: document app default page reuse (#2436)
+- **slides**: un-deprecate +replace-pages shortcut (#2470)
+- **slides**: add media download shortcut (#2446)
+- **vc**: add agent meeting control shortcuts (#2466)
+- **slides**: add marginRight attribute to <p> element schema (#2493)
+- words replace and minutes fix (#2490)
+- **sheets**: combine chart workflows and special chart types (#2374)
+- **extension**: add business command extension v1 (#2308)
+- **drive**: support appid in member-remove (#2499)
+- **config**: support keychain-backed tenant access tokens (#2488)
+
+### Bug Fixes
+
+- **apps**: classify the online DDL ban and the file storage quota failure (#2460)
+- **base**: hide dashboard auto analysis setting (#2465)
+- **slides**: strip stale <note> id in +update-slide to avoid backend crash (#2475)
+- **drive**: continue downloads on permission scope errors (#2494)
+- **wiki**: keep node-get stderr machine-readable (#2449)
+- **slides**: avoid PID variable in examples (#2496)
+- **docs**: continue media downloads on permission scope errors (#2498)
+- **skills**: scope markdown routing to Lark resources (#2497)
+- **auth**: exclude im:message.send_as_user from batch scope sets (#2471)
+
+### Refactoring
+
+- **slides**: assert dry-run parent_type instead of deriving it from a placeholder (#2461)
+
+### Misc
+
+- Support repeated mail compose flags (#2271)
+
 ## [v1.0.89] - 2026-08-21
 
 ### Features
@@ -1983,6 +2019,7 @@ Bundled AI agent skills for intelligent assistance:
 - Bilingual documentation (English & Chinese).
 - CI/CD pipelines: linting, testing, coverage reporting, and automated releases.
 
+[v1.0.90]: https://github.com/larksuite/cli/releases/tag/v1.0.90
 [v1.0.89]: https://github.com/larksuite/cli/releases/tag/v1.0.89
 [v1.0.88]: https://github.com/larksuite/cli/releases/tag/v1.0.88
 [v1.0.87]: https://github.com/larksuite/cli/releases/tag/v1.0.87

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@larksuite/cli",
-  "version": "1.0.89",
+  "version": "1.0.90",
   "description": "The official CLI for Lark/Feishu open platform",
   "bin": {
     "lark-cli": "scripts/run.js"

shortcuts/base/record_ops.go

@@ -385,16 +385,16 @@ const maxShareBatchSize = 100
 func validateRecordShareBatch(runtime *common.RuntimeContext) error {
 	recordIDs := deduplicateRecordIDs(runtime)
 	if len(recordIDs) == 0 {
-		return baseFlagErrorf("--record-ids is required and must not be empty")
+		return baseFlagErrorf("--record-id is required and must not be empty")
 	}
 	if len(recordIDs) > maxShareBatchSize {
-		return baseFlagErrorf("--record-ids exceeds maximum limit of %d (got %d)", maxShareBatchSize, len(recordIDs))
+		return baseFlagErrorf("--record-id exceeds maximum limit of %d (got %d)", maxShareBatchSize, len(recordIDs))
 	}
 	return nil
 }
 
 func deduplicateRecordIDs(runtime *common.RuntimeContext) []string {
-	raw := runtime.StrSlice("record-ids")
+	raw := runtime.StrSlice("record-id")
 	seen := make(map[string]bool, len(raw))
 	result := make([]string, 0, len(raw))
 	for _, id := range raw {

shortcuts/base/record_share_link_create.go

@@ -19,10 +19,10 @@ var BaseRecordShareLinkCreate = common.Shortcut{
 	Flags: []common.Flag{
 		baseTokenFlag(true),
 		tableRefFlag(true),
-		{Name: "record-ids", Type: "string_slice", Desc: "record IDs to generate share links for (comma-separated or repeatable, max 100)", Required: true},
+		{Name: "record-id", Aliases: []string{"record-ids"}, Type: "string_slice", Desc: "record ID to generate a share link for (comma-separated or repeatable, max 100)", Required: true},
 	},
 	Tips: []string{
-		`Example: lark-cli base +record-share-link-create --base-token <base_token> --table-id <table_id> --record-ids <record_id>`,
+		`Example: lark-cli base +record-share-link-create --base-token <base_token> --table-id <table_id> --record-id <record_id>`,
 		"Max 100 record IDs per call; duplicate IDs are ignored.",
 		"Output record_share_links maps record_id to URL; records without permission or missing records may be absent.",
 	},

shortcuts/base/record_share_link_create_test.go

@@ -0,0 +1,62 @@
+// Copyright (c) 2026 Lark Technologies Pte. Ltd.
+// SPDX-License-Identifier: MIT
+
+package base
+
+import (
+	"reflect"
+	"strings"
+	"testing"
+
+	"github.com/larksuite/cli/internal/httpmock"
+)
+
+func TestBaseRecordShareLinkCreateAcceptsSingularAndPluralRecordIDFlags(t *testing.T) {
+	factory, stdout, registry := newExecuteFactory(t)
+	stub := &httpmock.Stub{
+		Method: "POST",
+		URL:    "/open-apis/base/v3/bases/app_x/tables/tbl_x/records/share_links/batch",
+		Body: map[string]interface{}{
+			"code": 0,
+			"data": map[string]interface{}{
+				"record_share_links": map[string]interface{}{
+					"rec_1": "https://example.com/rec_1",
+					"rec_2": "https://example.com/rec_2",
+					"rec_3": "https://example.com/rec_3",
+				},
+			},
+		},
+	}
+	registry.Register(stub)
+
+	err := runShortcut(t, BaseRecordShareLinkCreate, []string{
+		"+record-share-link-create",
+		"--base-token", "app_x",
+		"--table-id", "tbl_x",
+		"--record-id", "rec_1",
+		"--record-ids", "rec_2,rec_3",
+	}, factory, stdout)
+	if err != nil {
+		t.Fatalf("run shortcut: %v", err)
+	}
+
+	body := decodeCapturedJSONBody(t, stub)
+	want := []interface{}{"rec_1", "rec_2", "rec_3"}
+	if got := body["record_ids"]; !reflect.DeepEqual(got, want) {
+		t.Fatalf("record_ids = %#v, want %#v", got, want)
+	}
+}
+
+func TestBaseRecordShareLinkCreateHelpShowsRecordIDAndHidesRecordIDsAlias(t *testing.T) {
+	cmd := mountBaseShortcutFlags(t, BaseRecordShareLinkCreate, "+record-share-link-create")
+	usage := cmd.Flags().FlagUsages()
+	if !strings.Contains(usage, "--record-id strings") {
+		t.Fatalf("help does not show canonical --record-id flag:\n%s", usage)
+	}
+	if strings.Contains(usage, "--record-ids") {
+		t.Fatalf("help exposes hidden --record-ids alias:\n%s", usage)
+	}
+	if alias := cmd.Flags().Lookup("record-ids"); alias == nil || alias.Name != "record-id" {
+		t.Fatalf("Lookup(record-ids) = %#v, want canonical --record-id", alias)
+	}
+}

shortcuts/calendar/calendar_join_event.go

@@ -0,0 +1,70 @@
+// Copyright (c) 2026 Lark Technologies Pte. Ltd.
+// SPDX-License-Identifier: MIT
+
+package calendar
+
+import (
+	"context"
+	"strings"
+
+	"github.com/larksuite/cli/errs"
+	"github.com/larksuite/cli/shortcuts/common"
+)
+
+// joinEventPath is the unified "join by share token" endpoint. Every share
+// form (link, QR code, share card, RSVP card) collapses to a single opaque
+// share_token here; there is deliberately no "join by event_id" path, so the
+// caller can never forge a plaintext event id to join an arbitrary event.
+const joinEventPath = "/open-apis/calendar/v4/calendars/join_event"
+
+var CalendarJoinEvent = common.Shortcut{
+	Service:     "calendar",
+	Command:     "+join-event",
+	Description: "Join a calendar event via a share token (from a share link/QR code or a im share/RSVP card)",
+	Risk:        "write",
+	Scopes:      []string{"calendar:calendar.event:join"},
+	AuthTypes:   []string{"user", "bot"},
+	Flags: []common.Flag{
+		{
+			Name:     "token",
+			Aliases:  []string{"share-token"},
+			Desc:     "share token from a share link/QR code or an IM share/RSVP card",
+			Required: true,
+		},
+	},
+	DryRun: func(ctx context.Context, runtime *common.RuntimeContext) *common.DryRunAPI {
+		token := strings.TrimSpace(runtime.Str("token"))
+		return common.NewDryRunAPI().
+			POST(joinEventPath).
+			Body(map[string]any{"share_token": token})
+	},
+	Validate: func(ctx context.Context, runtime *common.RuntimeContext) error {
+		if err := rejectCalendarAutoBotFallback(runtime); err != nil {
+			return err
+		}
+		token := strings.TrimSpace(runtime.Str("token"))
+		if token == "" {
+			return errs.NewValidationError(errs.SubtypeInvalidArgument, "share token cannot be empty").WithParam("--token")
+		}
+		if err := common.RejectDangerousCharsTyped("--token", token); err != nil {
+			return err
+		}
+		return nil
+	},
+	Execute: func(ctx context.Context, runtime *common.RuntimeContext) error {
+		token := strings.TrimSpace(runtime.Str("token"))
+
+		_, err := runtime.CallAPITyped("POST", joinEventPath, nil,
+			map[string]any{"share_token": token})
+		if err != nil {
+			return err
+		}
+
+		// The API returns an empty body on success; echo the join outcome so
+		// the JSON contract stays a self-describing object rather than a bare ack.
+		runtime.Out(map[string]any{
+			"joined": true,
+		}, nil)
+		return nil
+	},
+}