@hwj123weijian/pi-feishu 0.5.0 → 0.6.0

package/README.md

@@ -22,7 +22,7 @@
 - 长连接由跨会话的全局控制器保管：本地 `/new`、远程 `/new` 等会话切换不会断开；`/feishu stop`、`/feishu logout` 或 Pi 进程退出时释放
 - 凭据优先从环境变量读取，也可保存到本地凭据文件
 
-当前不支持群聊、图片、文件、卡片、语音、多用户、多会话、进程级沙箱或远程命令权限管理。这里的安全边界是“私聊 + 单 Owner”，Pi 本身仍拥有当前本地进程的权限。
+支持 Owner 在飞书私聊中请求创建群聊；扩展会把 Owner 拉入新群、发送欢迎消息，并允许 Owner 在该扩展创建的群里 @机器人继续协作。其他群聊不会被处理。图片、文件、卡片、语音、多用户、多会话、进程级沙箱或远程命令权限管理仍不支持。Pi 本身仍拥有当前本地进程的权限。
 
 ## 环境要求
 
@@ -38,6 +38,7 @@
 2. 在“权限管理”中申请：
    - `im:message.p2p_msg:readonly`：接收私聊消息
    - `im:message:send_as_bot`：以机器人身份回复
+   - `im:chat`：创建群聊并邀请 Owner
    - `im:message:update`：持续更新机器人发出的交互卡片
    - 表情回复相关权限：在原消息上添加/移除“思考中”已读回执
 3. 在“事件与回调”中选择“使用长连接接收事件”。
@@ -141,6 +142,8 @@ pi -e D:\ai_study\pi-feishu
 | `/thinking` | 查看思考档位，或切换：`/thinking off|minimal|low|medium|high|xhigh|max` |
 | `/model` | 查看当前模型，或模糊匹配切换：`/model <模型ID或名称>` |
 
+在飞书私聊中也可直接说“帮我拉个 XX 群”或“创建飞书群 XX”。机器人会创建群聊、邀请已绑定的 Owner 并发送欢迎消息；之后 Owner 在新群里 @机器人即可继续使用当前 Pi 会话。已创建群聊的授权列表会保存在本地凭据文件中，Pi 重启后仍可继续使用。
+
 未知命令会返回提示，不会发给 Pi。`/model` 的候选来自本地 Pi 的 scoped models（未配置时为全部已授权模型）；`/model` 无参数时展示当前模型。注意：任何以 `/` 开头的消息都会先被当作命令解析，想发给 Pi 的提问请勿以 `/` 开头。
 
 ### 取消排队中的消息

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@hwj123weijian/pi-feishu",
-	"version": "0.5.0",
+	"version": "0.6.0",
 	"description": "Minimal Feishu private-chat bridge for Pi",
 	"type": "module",
 	"license": "MIT",
@@ -31,7 +31,8 @@
 		"typecheck": "tsc --noEmit"
 	},
 	"dependencies": {
-		"@larksuiteoapi/node-sdk": "1.72.0"
+		"@larksuiteoapi/node-sdk": "1.72.0",
+		"typebox": "1.3.7"
 	},
 	"peerDependencies": {
 		"@earendil-works/pi-coding-agent": "0.83.0"

package/src/contracts.ts

@@ -2,6 +2,7 @@ export interface FeishuCredentials {
 	appId: string;
 	appSecret: string;
 	ownerOpenId?: string;
+	managedGroupIds?: string[];
 }
 
 export interface CredentialStore {
@@ -45,6 +46,7 @@ export interface FeishuReply {
 export interface FeishuGateway {
 	connect(handler: FeishuMessageHandler): Promise<void>;
 	disconnect(): Promise<void>;
+	createGroupChat(name: string, ownerOpenId: string): Promise<string>;
 	/** Sends text and resolves with the sent Feishu message id (for later recall). */
 	sendText(chatId: string, text: string, replyTo?: string): Promise<string | undefined>;
 	beginReply(chatId: string, replyTo: string): Promise<FeishuReply>;

package/src/controller.ts

@@ -64,6 +64,7 @@ export class FeishuController {
 	private environment: Environment = {};
 	private readonly pendingTasks = new Map<string, PendingTask>();
 	private readonly activeReplies = new Set<FeishuReply>();
+	private readonly managedGroupIds = new Set<string>();
 
 	constructor(options: FeishuControllerOptions) {
 		this.store = options.store;
@@ -84,9 +85,13 @@ export class FeishuController {
 		}
 
 		const existing = await this.store.load();
-		const next =
-			existing?.appId === credentials.appId && existing.ownerOpenId
-				? { ...credentials, ownerOpenId: existing.ownerOpenId }
+		const next: FeishuCredentials =
+			existing?.appId === credentials.appId
+				? {
+						...credentials,
+						...(existing.ownerOpenId ? { ownerOpenId: existing.ownerOpenId } : {}),
+						...(existing.managedGroupIds ? { managedGroupIds: existing.managedGroupIds } : {}),
+					}
 				: credentials;
 		await this.store.save(next);
 		this.credentials = next;
@@ -106,6 +111,8 @@ export class FeishuController {
 		const binding = new OwnerBinding(credentials.ownerOpenId, this.generateBindingCode);
 		const gateway = this.gatewayFactory(credentials);
 		this.credentials = credentials;
+		this.managedGroupIds.clear();
+		for (const chatId of credentials.managedGroupIds ?? []) this.managedGroupIds.add(chatId);
 		this.binding = binding;
 		this.gateway = gateway;
 		this.environment = environment;
@@ -125,6 +132,26 @@ export class FeishuController {
 		return bindingCode ? { alreadyRunning: false, bindingCode } : { alreadyRunning: false };
 	}
 
+	async createGroupChat(name: string): Promise<string> {
+		const gateway = this.gateway;
+		const ownerOpenId = this.credentials?.ownerOpenId;
+		if (!gateway) throw new CredentialError("飞书尚未连接，请先执行 /feishu start。");
+		if (!ownerOpenId) throw new CredentialError("飞书尚未绑定 Owner，无法创建群聊。");
+		const chatId = await gateway.createGroupChat(name, ownerOpenId);
+		this.managedGroupIds.add(chatId);
+		const credentials = this.credentials;
+		if (credentials) {
+			const updated = { ...credentials, managedGroupIds: [...this.managedGroupIds] };
+			await this.store.save(updated);
+			this.credentials = updated;
+		}
+		await gateway.sendText(
+			chatId,
+			`👋 群聊「${name}」已创建，当前绑定的 Pi 飞书机器人已就绪。直接在群内 @机器人即可开始协作。`,
+		);
+		return chatId;
+	}
+
 	async stop(): Promise<boolean> {
 		const gateway = this.gateway;
 		if (!gateway) return false;
@@ -167,7 +194,8 @@ export class FeishuController {
 	async handleIncoming(message: FeishuIncomingMessage): Promise<void> {
 		const gateway = this.gateway;
 		const binding = this.binding;
-		if (!gateway || !binding || message.chatType !== "p2p" || message.contentType !== "text") return;
+		if (!gateway || !binding || message.contentType !== "text") return;
+		if (message.chatType === "group" && !this.managedGroupIds.has(message.chatId)) return;
 		if (!message.messageId || !this.deduplicator.accept(message.messageId)) return;
 
 		const reactionId = await this.ackRead(gateway, message.messageId);

package/src/credentials.ts

@@ -61,8 +61,13 @@ export function resolveRuntimeCredentials(
 			throw new CredentialError("FEISHU_APP_ID 和 FEISHU_APP_SECRET 必须同时设置。");
 		}
 		validateCredentialShape({ appId, appSecret });
-		const ownerOpenId = stored?.appId === appId ? stored.ownerOpenId : undefined;
-		return ownerOpenId ? { appId, appSecret, ownerOpenId } : { appId, appSecret };
+		const matching = stored?.appId === appId ? stored : undefined;
+		return {
+			appId,
+			appSecret,
+			...(matching?.ownerOpenId ? { ownerOpenId: matching.ownerOpenId } : {}),
+			...(matching?.managedGroupIds ? { managedGroupIds: matching.managedGroupIds } : {}),
+		};
 	}
 	return stored;
 }
@@ -122,9 +127,14 @@ export class FileCredentialStore implements CredentialStore {
 			throw new CredentialError("飞书凭据文件格式无效，请执行 /feishu logout 后重新配置。");
 		}
 		validateCredentialShape(value);
-		return value.ownerOpenId
-			? { appId: value.appId, appSecret: value.appSecret, ownerOpenId: value.ownerOpenId }
-			: { appId: value.appId, appSecret: value.appSecret };
+		return {
+			appId: value.appId,
+			appSecret: value.appSecret,
+			...(value.ownerOpenId ? { ownerOpenId: value.ownerOpenId } : {}),
+			...(Array.isArray(value.managedGroupIds)
+				? { managedGroupIds: value.managedGroupIds.filter((id): id is string => typeof id === "string") }
+				: {}),
+		};
 	}
 
 	async save(credentials: FeishuCredentials): Promise<void> {
@@ -159,7 +169,8 @@ function isCredentialRecord(value: unknown): value is FeishuCredentials {
 	return (
 		typeof record.appId === "string" &&
 		typeof record.appSecret === "string" &&
-		(record.ownerOpenId === undefined || typeof record.ownerOpenId === "string")
+		(record.ownerOpenId === undefined || typeof record.ownerOpenId === "string") &&
+		(record.managedGroupIds === undefined || Array.isArray(record.managedGroupIds))
 	);
 }
 

package/src/extension.ts

@@ -1,4 +1,5 @@
 import type { ExtensionAPI, ExtensionCommandContext, ExtensionContext } from "@earendil-works/pi-coding-agent";
+import { Type } from "typebox";
 import type { AgentBridge, FeishuStatus, PiModelInfo, PiRuntime, PiRuntimeSnapshot } from "./contracts.js";
 import { FeishuController } from "./controller.js";
 import { CredentialError, FileCredentialStore } from "./credentials.js";
@@ -213,6 +214,35 @@ export default function feishuExtension(pi: ExtensionAPI): void {
 		bridge.cancel("Pi 会话已关闭。");
 	});
 
+	pi.registerTool({
+		name: "feishu_create_group",
+		label: "Create Feishu Group",
+		description:
+			"Create a Feishu group chat and invite the currently bound owner. Use when asked to 拉群、建群、创建飞书群 or create a group. This creates only the group (not a local project directory).",
+		parameters: Type.Object({
+			name: Type.String({ description: "Name for the new Feishu group chat" }),
+		}),
+		async execute(_toolCallId, params) {
+			try {
+				const chatId = await state.controller.createGroupChat(params.name.trim());
+				return {
+					content: [
+						{
+							type: "text",
+							text: `群聊「${params.name.trim()}」已创建，群聊 ID：${chatId}。已邀请当前绑定的飞书用户，并发送群欢迎消息。`,
+						},
+					],
+					details: { chatId, name: params.name.trim() },
+				};
+			} catch (error) {
+				return {
+					content: [{ type: "text", text: `创建飞书群失败：${state.controller.sanitizeError(error)}` }],
+					details: undefined,
+				};
+			}
+		},
+	});
+
 	pi.registerCommand("feishu", {
 		description: "配置和管理飞书私聊连接",
 		handler: async (args, context) => {

package/src/gateway.ts

@@ -98,6 +98,31 @@ export class SdkFeishuGateway implements FeishuGateway {
 		return () => this.reactionHandlers.delete(handler);
 	}
 
+	async createGroupChat(name: string, ownerOpenId: string): Promise<string> {
+		const response = await fetch("https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal", {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify({ app_id: this.credentials.appId, app_secret: this.credentials.appSecret }),
+		});
+		const tokenResult = (await response.json()) as { code?: number; msg?: string; tenant_access_token?: string };
+		if (!response.ok || tokenResult.code !== 0 || !tokenResult.tenant_access_token) {
+			throw new Error(`获取飞书 tenant token 失败：${tokenResult.msg ?? response.statusText}`);
+		}
+		const createResponse = await fetch(`https://open.feishu.cn/open-apis/im/v1/chats?uuid=${crypto.randomUUID()}`, {
+			method: "POST",
+			headers: {
+				Authorization: `Bearer ${tokenResult.tenant_access_token}`,
+				"Content-Type": "application/json",
+			},
+			body: JSON.stringify({ name, description: "Pi Feishu 创建的协作群", user_id_list: [ownerOpenId] }),
+		});
+		const result = (await createResponse.json()) as { code?: number; msg?: string; data?: { chat_id?: string } };
+		if (!createResponse.ok || result.code !== 0 || !result.data?.chat_id) {
+			throw new Error(`飞书创建群聊失败：${result.msg ?? createResponse.statusText}`);
+		}
+		return result.data.chat_id;
+	}
+
 	async sendText(chatId: string, text: string, replyTo?: string): Promise<string | undefined> {
 		const channel = this.channel;
 		if (!channel) throw new Error("飞书长连接尚未启动。");
@@ -164,6 +189,7 @@ function createOfficialChannel(credentials: FeishuCredentials): ChannelLike {
 			},
 			policy: {
 				dmMode: "open",
+				// Controller enforces owner identity and only accepts groups it created.
 				groupAllowlist: [],
 				requireMention: true,
 			},