docs: update Feishu AI SRE permissions (#85)

Author: debidong

en/on-call/integration/instant-messaging/lark.mdx

@@ -16,6 +16,8 @@ The following list includes all permissions required when the Feishu/Lark IM int
 | :--- | :--- |
 | `im:chat` | Create and manage War Room chats, get chat information, and add chat members |
 | `im:message` | Read and send direct and group messages |
+| `im:message.p2p_msg:readonly` | Receive direct messages sent by users to the bot; without this permission, AI SRE cannot receive direct-chat questions |
+| `im:message.group_at_msg:readonly` | Receive group messages that mention the bot; required for group-chat AI SRE conversations |
 | `im:message:send_as_bot` | Send AI SRE replies and War Room messages as the bot |
 | `im:message:update` | Update messages sent by the app for AI SRE streaming replies |
 | `im:message.group_msg` | Read group chat history; required for AI SRE context and AI-generated post-mortem reports |
@@ -106,7 +108,7 @@ See Feishu/Lark development documentation [Configure Redirect URL](https://open.
 
 ### 3. Request App Permissions
 
-Go to the **Permission Management** page and request all permissions listed in [AI SRE Required Permissions](#aisre-permissions) for the app created in previous steps.
+Go to the **Permission Management** page and request all permissions listed in [AI SRE Required Permissions](#aisre-permissions) for the app created in previous steps. Pay special attention to `im:message.p2p_msg:readonly` and `im:message.group_at_msg:readonly`; without them, Feishu/Lark will not push direct-chat messages or group @bot messages to Flashduty. After changing permissions or event subscriptions, publish a new app version for the changes to take effect in production.
 
 ![2025-09-18-10-55-14](https://docs-cdn.flashcat.cloud/images/png/d919be62107f6b9d0c662f440d620e61.png)
 

zh/on-call/integration/instant-messaging/lark.mdx

@@ -17,6 +17,8 @@ keywords: ["飞书", "Lark", "即时消息", "告警通知", "IM集成"]
 | :--- | :--- |
 | `im:chat` | 创建和管理作战室群、获取群信息、添加群成员 |
 | `im:message` | 读取和发送单聊、群组消息 |
+| `im:message.p2p_msg:readonly` | 接收用户发给机器人的单聊消息；缺少该权限时，AI SRE 无法收到单聊提问 |
+| `im:message.group_at_msg:readonly` | 接收群聊中 @ 机器人的消息；群聊 AI SRE 对话需要该权限 |
 | `im:message:send_as_bot` | 以机器人身份发送 AI SRE 回复和作战室消息 |
 | `im:message:update` | 更新应用已发送的消息，用于 AI SRE 流式回复更新 |
 | `im:message.group_msg` | 读取群聊历史消息；AI SRE 上下文和 AI 生成复盘报告需要该权限 |
@@ -107,7 +109,7 @@ keywords: ["飞书", "Lark", "即时消息", "告警通知", "IM集成"]
 
 ### 3. 申请应用权限
 
-进入 **权限管理** 页面，为先前步骤创建的群应用申请页面开头 [AISRE 所需权限](#aisre-permissions) 中列出的全部权限。
+进入 **权限管理** 页面，为先前步骤创建的应用申请页面开头 [AISRE 所需权限](#aisre-permissions) 中列出的全部权限。请特别确认已开通 `im:message.p2p_msg:readonly` 和 `im:message.group_at_msg:readonly`，否则飞书不会向 Flashduty 推送单聊消息或群聊 @ 机器人消息。权限或事件配置变更后，需要重新发布应用后才会在线上生效。
 
 ![2025-09-18-10-55-14](https://docs-cdn.flashcat.cloud/images/png/d919be62107f6b9d0c662f440d620e61.png)