@krischoichoi/channel-lark 0.6.0

package/README.md

@@ -0,0 +1,114 @@
+# @krischoichoi/channel-lark
+
+Lark / Feishu / 飞书 channel adapter for DeepSeek Harness.
+
+Maps Lark to the stable Channel Contract through the official
+`@larksuiteoapi/node-sdk` **only**:
+
+- **Inbound** — `WSClient` + `EventDispatcher` (WebSocket long-connection):
+  `im.message.receive_v1` and `card.action.trigger`.
+- **Outbound** — the official OpenAPI client: `im.v1.message.create` / `patch`,
+  image/file uploads, and CardKit 2.0 card entities with **native streaming**
+  (`cardkit.v1.card.create` → `cardElement.content` → `card.settings`).
+
+There is no self-hosted gateway and no legacy transport. Interactive cards
+use **Card JSON 2.0** only (buttons are direct `body.elements` with
+`behaviors[].value`; no `tag: "action"` container and no `lark_md`).
+
+## Install
+
+```bash
+pnpm add @krischoichoi/channel-lark
+```
+
+Or install the whole bundle:
+
+```bash
+npx @deepseek-ai/dsh plugin --profile web add -w @krischoichoi/dsh-channels@latest
+```
+
+## Configuration
+
+```yaml
+- id: channels-lark
+  name: '@krischoichoi/channel-lark'
+  inject: [channels, credentials, channelControl]
+  config:
+    enabled: true
+    accountId: main
+    upstream:
+      mode: sdk          # fixed — the official SDK is the only upstream driver
+      appId: "cli_xxx"   # AppId（非机密）
+      domain: feishu     # feishu（国内）| lark（海外）
+      # appSecretRef 默认 DSH_CHANNEL_LARK_MAIN_APP_SECRET
+      # 真实 AppSecret 只存 ctx.credentials
+    card:
+      createOnFirstDelta: true
+      typingIndicator: true
+```
+
+The AppSecret is resolved through `ctx.credentials` at startup and injected as
+`deps.appSecret`; it is never written to profile config.
+
+> **Config governance**: only `upstream.mode: sdk` and the credential reference
+> `upstream.appSecretRef` are supported. Plaintext `upstream.appSecret` and the
+> former gateway settings are not part of the configuration contract.
+
+## Streaming
+
+Lark uses `edit` streaming over **CardKit 2.0 native streaming** (the official
+"打字机" typewriter flow — never `im.v1.message.patch` pseudo-streaming):
+
+1. `cardkit.v1.card.create` creates a Card JSON 2.0 entity with
+   `streaming_mode: true` and a stable `element_id`;
+2. `im.v1.message.create` sends the card reference
+   (`{ type: "card", data: { card_id } }`);
+3. every streamed delta replaces the markdown element's full content via
+   `cardkit.v1.cardElement.content` with a monotonically increasing `sequence`
+   and a stable `uuid`;
+4. `finish()` / `fail()` close the stream by setting `streaming_mode: false`
+   (and the final summary) through `cardkit.v1.card.settings`.
+
+When a single markdown element approaches the platform's ~30,000-char cap the
+handle rolls over into a fresh card (`chunkIds` records every sent card).
+
+## Capabilities
+
+| Capability | Value |
+| --- | --- |
+| text / image / file / audio | ✅ |
+| markdown / cards / reactions / threads | ✅ |
+| interactive buttons | ✅ (`card.action.trigger`, Card JSON 2.0) |
+| video | ❌ |
+| streaming | `edit` (CardKit 2.0 native streaming) |
+
+## Upstream
+
+| Field | Value |
+| --- | --- |
+| SDK | `@larksuiteoapi/node-sdk` |
+| Tested version | `1.73.1` |
+| Status | `tested` (**offline-tested**: contract + fixture + SDK-mode suites) |
+
+> Live gate status: **LIVE-REQUIRED**. `status: tested` reflects the offline
+> Channel Contract + fixture + official-SDK offline suites only. Real-app
+> permission / event subscription / message & card send behavior must still be
+> verified live (see §8 of the alignment plan) before the adapter may be
+> claimed live-tested.
+
+## Development
+
+```bash
+pnpm --filter @krischoichoi/channel-lark build
+pnpm --filter @krischoichoi/channel-lark typecheck
+pnpm --filter @krischoichoi/channel-lark test
+```
+
+## Related
+
+- [Repository root](../../README.md)
+- [Adapter authoring guide](../../docs/adapter-authoring.md)
+
+## License
+
+[MIT](../../LICENSE)

package/lib/adapter.d.ts

@@ -0,0 +1,128 @@
+/**
+ * Lark channel adapter.
+ *
+ * Maps the Lark/Feishu platform (through the OFFICIAL `@larksuiteoapi/node-sdk`
+ * driver stack) to the Channel Contract. All network/lifecycle resources live
+ * behind the upstream driver and are aborted via the adapter context signal.
+ * The adapter never touches Harness Agent APIs.
+ *
+ * The upstream is ALWAYS the official SDK:
+ * - inbound → `LarkSdkUpstream`: WSClient + EventDispatcher
+ *   (`im.message.receive_v1` + `card.action.trigger`), outbound delegated to
+ *   the official OpenAPI client (`LarkOpenApiOutbound`). The WS client comes
+ *   from `deps.sdkClient` / `deps.sdkClientFactory`, the OpenAPI client from
+ *   `deps.openApiClient` / `deps.openApiClientFactory`, each defaulting to a
+ *   real client built from the RESOLVED `deps.appId` / `deps.appSecret`,
+ *   resolved via ctx.credentials (the adapter never reads secrets from config).
+ *   Missing credentials fail start loudly, not construction.
+ *
+ * There is no transport injection and no gateway: offline tests inject fake
+ * WS + OpenAPI clients instead.
+ *
+ * Auth is connection-state driven: the upstream driver owns the platform
+ * credentials, so the adapter derives its auth state from the connection
+ * (connected → authenticated).
+ */
+import type { ChannelAdapter, ChannelAdapterContext, ChannelCapabilities, ChannelHealth, ChannelTarget, CreateReplyOptions, OutboundMessage, ReplyHandle, SendResult } from '@krischoichoi/channel-core';
+import { Domain } from '@larksuiteoapi/node-sdk';
+import type { LarkConfig } from './config.js';
+import { type LarkSdkClient } from './lark-sdk-upstream.js';
+import { type LarkOpenApiClient } from './openapi-outbound.js';
+import { type LarkMediaPort } from './upstream/media-port.js';
+import { type LarkManifest } from './manifest.js';
+export interface LarkAdapterDeps {
+    /**
+     * Resolved Lark AppId (a plain config string resolved by the plugin and
+     * handed in for the default client builders; never a secret).
+     */
+    appId?: string;
+    /**
+     * Resolved Lark AppSecret (resolved via `ctx.credentials` by the plugin;
+     * never present in profile config / logs).
+     */
+    appSecret?: string;
+    /**
+     * Pre-built WS long-connection client (offline tests). Overrides
+     * `sdkClientFactory`; when neither is given a real `WSClient` is built from
+     * `appId`/`appSecret` at start time.
+     */
+    sdkClient?: LarkSdkClient;
+    /** Lazy WS client factory; overrides the default WSClient. */
+    sdkClientFactory?: (config: LarkConfig) => LarkSdkClient;
+    /**
+     * Pre-built official OpenAPI client (offline tests). Overrides
+     * `openApiClientFactory`; when neither is given a real `Client` is built
+     * from `appId`/`appSecret` at start time.
+     */
+    openApiClient?: LarkOpenApiClient;
+    /** Lazy OpenAPI client factory. */
+    openApiClientFactory?: (config: LarkConfig) => LarkOpenApiClient;
+    /**
+     * Injectable media port for inbound media hydration. When absent, the
+     * adapter builds a default LarkOpenApiMediaPort from the same resolved
+     * OpenAPI client used for outbound.
+     */
+    mediaPort?: LarkMediaPort;
+    /** Injectable clock (tests). */
+    now?: () => number;
+}
+export declare class LarkAdapter implements ChannelAdapter {
+    private readonly config;
+    readonly id = "lark";
+    /** Upstream compatibility manifest (read structurally by `channels doctor`). */
+    readonly manifest: LarkManifest;
+    readonly capabilities: ChannelCapabilities;
+    private ctx?;
+    /** Built in `start()` (driver selection needs the resolved deps/credentials). */
+    private upstream;
+    private readonly deps;
+    private inbound;
+    private outbound;
+    /** Media port used for inbound media hydration (built in start). */
+    private mediaPort?;
+    private started;
+    private stopped;
+    private receiveLoop?;
+    private connected;
+    /** Connection-state-driven auth; the upstream driver owns credentials. */
+    private authState;
+    private readonly now;
+    /** Internal stop signal merged with the context signal for prompt teardown. */
+    private stopController?;
+    private receiveSignal?;
+    constructor(config: LarkConfig, deps?: LarkAdapterDeps);
+    start(ctx: ChannelAdapterContext): Promise<void>;
+    stop(): Promise<void>;
+    send(target: ChannelTarget, message: OutboundMessage): Promise<SendResult>;
+    edit(target: ChannelTarget, messageId: string, message: OutboundMessage): Promise<SendResult>;
+    startTypingForTarget(target: ChannelTarget): Promise<void>;
+    stopTypingForTarget(target: ChannelTarget): Promise<void>;
+    createReply(target: ChannelTarget, _options?: CreateReplyOptions): Promise<ReplyHandle>;
+    getHealth(): Promise<ChannelHealth>;
+    /** WS long-connection receive loop with exponential backoff on failure. */
+    startReceiveLoop(): void;
+    /** Build the official-SDK upstream driver. */
+    private buildUpstream;
+    /** Select the official OpenAPI outbound driver. */
+    private resolveOpenApiOutbound;
+    /**
+     * Select the media port for inbound media hydration. An explicit dep wins;
+     * otherwise the adapter builds a default `LarkOpenApiMediaPort` from the
+     * same resolved OpenAPI client used for outbound.
+     */
+    private resolveMediaPort;
+    private resolveSdkClient;
+    private runReceiveLoop;
+    /** Flip connection/auth state once the upstream proves reachable. */
+    private markConnected;
+    private aborted;
+    private setAuth;
+    private emitAuth;
+    private emitConnection;
+}
+/**
+ * Resolve a config domain string to the SDK's `Domain` enum, preserving a
+ * custom base domain verbatim (the SDK accepts `Domain | string`).
+ */
+export declare function resolveDomain(value: string): Domain | string;
+//# sourceMappingURL=adapter.d.ts.map

package/lib/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,UAAU,EACX,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAU,MAAM,EAAY,MAAM,yBAAyB,CAAC;AACnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAEL,KAAK,aAAa,EAEnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAuB,KAAK,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACpF,OAAO,EAA8C,KAAK,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAI1G,OAAO,EAA4B,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAE5E,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,aAAa,CAAC;IACzD;;;;OAIG;IACH,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,mCAAmC;IACnC,oBAAoB,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,iBAAiB,CAAC;IACjE;;;;OAIG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,gCAAgC;IAChC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,qBAAa,WAAY,YAAW,cAAc;IA6DpC,OAAO,CAAC,QAAQ,CAAC,MAAM;IA5DnC,QAAQ,CAAC,EAAE,UAAU;IAErB,gFAAgF;IAChF,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAgB;IAE/C,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAkCxC;IAEF,OAAO,CAAC,GAAG,CAAC,CAAwB;IACpC,iFAAiF;IACjF,OAAO,CAAC,QAAQ,CAAgB;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAkB;IACvC,OAAO,CAAC,OAAO,CAAoB;IACnC,OAAO,CAAC,QAAQ,CAAkB;IAClC,oEAAoE;IACpE,OAAO,CAAC,SAAS,CAAC,CAAgB;IAClC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,WAAW,CAAC,CAAgB;IACpC,OAAO,CAAC,SAAS,CAAS;IAC1B,0EAA0E;IAC1E,OAAO,CAAC,SAAS,CAAqD;IACtE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,+EAA+E;IAC/E,OAAO,CAAC,cAAc,CAAC,CAAkB;IACzC,OAAO,CAAC,aAAa,CAAC,CAAc;gBAEP,MAAM,EAAE,UAAU,EAAE,IAAI,GAAE,eAAoB;IAKrE,KAAK,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BhD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAerB,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAO1E,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAO7F,oBAAoB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAK1D,mBAAmB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAKzD,WAAW,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC;IAavF,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC;IAezC,2EAA2E;IAC3E,gBAAgB,IAAI,IAAI;IAKxB,8CAA8C;IAC9C,OAAO,CAAC,aAAa;IAWrB,mDAAmD;IACnD,OAAO,CAAC,sBAAsB;IAY9B;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,gBAAgB;YAMV,cAAc;IAuC5B,qEAAqE;IACrE,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,OAAO;IAMf,OAAO,CAAC,QAAQ;IAYhB,OAAO,CAAC,cAAc;CAWvB;AAwCD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAI5D"}

package/lib/adapter.js

@@ -0,0 +1,347 @@
+import { ChannelError } from '@krischoichoi/channel-core';
+import { Client, Domain, WSClient } from '@larksuiteoapi/node-sdk';
+import { LarkSdkUpstream, } from './lark-sdk-upstream.js';
+import { LarkOpenApiOutbound } from './openapi-outbound.js';
+import { LarkOpenApiMediaPort } from './upstream/media-port.js';
+import { InboundProcessor } from './inbound.js';
+import { OutboundSender } from './outbound.js';
+import { LarkCardReply } from './card.js';
+import { manifest as larkManifest } from './manifest.js';
+export class LarkAdapter {
+    config;
+    id = 'lark';
+    /** Upstream compatibility manifest (read structurally by `channels doctor`). */
+    manifest = larkManifest;
+    capabilities = {
+        text: true,
+        image: true,
+        file: true,
+        audio: true,
+        video: false,
+        markdown: true,
+        cards: true,
+        interactiveActions: true,
+        reactions: true,
+        threads: true,
+        streaming: 'edit',
+        // Directional media precision. Inbound: image/file/audio/video are all
+        // hydrated to real bytes before emit — the official `message.resource`
+        // API documents audio/video downloads, so every binary kind the mapper
+        // produces routes its file_key through `messageResource.get` into
+        // localData. Outbound: image (`sendMedia` → im.image.create) and file
+        // (`sendFile` → im.file.create) upload real bytes; there is no audio/video
+        // send path — audio/video outbound parts fall back to `[audio]`/`[video]`
+        // text placeholders, so outbound audio/video are 'unsupported'.
+        media: {
+            inbound: {
+                image: 'bytes',
+                file: 'bytes',
+                audio: 'bytes',
+                video: 'bytes',
+            },
+            outbound: {
+                image: 'bytes',
+                file: 'bytes',
+                audio: 'unsupported',
+                video: 'unsupported',
+            },
+        },
+    };
+    ctx;
+    /** Built in `start()` (driver selection needs the resolved deps/credentials). */
+    upstream;
+    deps;
+    inbound;
+    outbound;
+    /** Media port used for inbound media hydration (built in start). */
+    mediaPort;
+    started = false;
+    stopped = false;
+    receiveLoop;
+    connected = false;
+    /** Connection-state-driven auth; the upstream driver owns credentials. */
+    authState = 'unknown';
+    now;
+    /** Internal stop signal merged with the context signal for prompt teardown. */
+    stopController;
+    receiveSignal;
+    constructor(config, deps = {}) {
+        this.config = config;
+        this.now = deps.now ?? Date.now;
+        this.deps = deps;
+    }
+    async start(ctx) {
+        if (this.started)
+            return;
+        this.ctx = ctx;
+        this.stopped = false;
+        this.buildUpstream();
+        this.stopController = new AbortController();
+        this.receiveSignal = AbortSignal.any([ctx.signal, this.stopController.signal]);
+        this.mediaPort = this.resolveMediaPort();
+        this.inbound = new InboundProcessor({
+            ctx,
+            meta: { channel: this.id, accountId: this.config.accountId },
+            dedupEnabled: this.config.dedup.enabled,
+            dedupWindowMs: this.config.dedup.windowMs,
+            now: this.now,
+            mediaPort: this.mediaPort,
+        });
+        this.outbound = new OutboundSender(this.upstream, ctx.logger);
+        this.connected = false;
+        this.authState = 'unknown';
+        this.emitAuth(this.authState);
+        this.emitConnection('connecting');
+        this.startReceiveLoop();
+        this.started = true;
+    }
+    async stop() {
+        if (!this.started || this.stopped)
+            return;
+        this.stopped = true;
+        this.started = false;
+        this.connected = false;
+        // The owning fiber aborts the context signal first; the loop also exits
+        // on our internal stop signal so stop() never depends on an external
+        // abort (contract tests stop without disposing the context).
+        this.stopController?.abort();
+        const loop = this.receiveLoop;
+        this.receiveLoop = undefined;
+        if (loop)
+            await loop.catch(() => undefined);
+        this.emitConnection('closed');
+    }
+    async send(target, message) {
+        if (!this.started || !this.outbound) {
+            throw new ChannelError('CHANNEL_NOT_STARTED', 'lark adapter is not started');
+        }
+        return this.outbound.send(target, message);
+    }
+    async edit(target, messageId, message) {
+        if (!this.started || !this.outbound) {
+            throw new ChannelError('CHANNEL_NOT_STARTED', 'lark adapter is not started');
+        }
+        return this.outbound.edit(target, messageId, message);
+    }
+    async startTypingForTarget(target) {
+        if (this.config.card.typingIndicator === false || !target.replyToMessageId)
+            return;
+        await this.upstream.startTyping?.(String(target.replyToMessageId));
+    }
+    async stopTypingForTarget(target) {
+        if (this.config.card.typingIndicator === false || !target.replyToMessageId)
+            return;
+        await this.upstream.stopTyping?.(String(target.replyToMessageId));
+    }
+    async createReply(target, _options) {
+        if (!this.started || !this.ctx) {
+            throw new ChannelError('CHANNEL_NOT_STARTED', 'lark adapter is not started');
+        }
+        return new LarkCardReply({
+            upstream: this.upstream,
+            target,
+            logger: this.ctx.logger,
+            createOnFirstDelta: this.config.card.createOnFirstDelta,
+            now: this.now,
+        });
+    }
+    async getHealth() {
+        if (!this.started) {
+            return { status: 'down', detail: 'lark adapter is not started', authenticated: false };
+        }
+        if (this.connected) {
+            return { status: 'ok', detail: 'connected', connection: 'connected', authenticated: true };
+        }
+        return {
+            status: 'degraded',
+            detail: 'receive loop down',
+            connection: 'disconnected',
+            authenticated: false,
+        };
+    }
+    /** WS long-connection receive loop with exponential backoff on failure. */
+    startReceiveLoop() {
+        if (this.receiveLoop)
+            return;
+        this.receiveLoop = this.runReceiveLoop();
+    }
+    /** Build the official-SDK upstream driver. */
+    buildUpstream() {
+        const outbound = this.resolveOpenApiOutbound();
+        const options = {
+            client: this.resolveSdkClient(),
+            outbound,
+            resolveChatType: (conversationId) => outbound.getChatType?.(conversationId) ?? Promise.resolve(undefined),
+            onConnected: () => this.markConnected(),
+        };
+        this.upstream = new LarkSdkUpstream(options);
+    }
+    /** Select the official OpenAPI outbound driver. */
+    resolveOpenApiOutbound() {
+        if (this.deps.openApiClient) {
+            return new LarkOpenApiOutbound({ client: this.deps.openApiClient });
+        }
+        if (this.deps.openApiClientFactory) {
+            return new LarkOpenApiOutbound({ client: this.deps.openApiClientFactory(this.config) });
+        }
+        return new LarkOpenApiOutbound({
+            client: createDefaultOpenApiClient(this.deps.appId, this.deps.appSecret, this.config),
+        });
+    }
+    /**
+     * Select the media port for inbound media hydration. An explicit dep wins;
+     * otherwise the adapter builds a default `LarkOpenApiMediaPort` from the
+     * same resolved OpenAPI client used for outbound.
+     */
+    resolveMediaPort() {
+        if (this.deps.mediaPort)
+            return this.deps.mediaPort;
+        // The resolved client is the real SDK `Client`, which structurally
+        // satisfies the wider `LarkMediaClient` surface (message resource + image
+        // + file). When a caller injects a fake typed only as `LarkOpenApiClient`,
+        // hydration still safely degrades: a missing messageResource surfaces as
+        // a runtime failure that the hydrator marks.
+        const client = this.deps.openApiClient
+            ?? (this.deps.openApiClientFactory && this.deps.openApiClientFactory(this.config))
+            ?? createDefaultOpenApiClient(this.deps.appId, this.deps.appSecret, this.config);
+        return new LarkOpenApiMediaPort({ client: client });
+    }
+    resolveSdkClient() {
+        if (this.deps.sdkClient)
+            return this.deps.sdkClient;
+        if (this.deps.sdkClientFactory)
+            return this.deps.sdkClientFactory(this.config);
+        return createDefaultWSClient(this.deps.appId, this.deps.appSecret, this.config);
+    }
+    async runReceiveLoop() {
+        let attempt = 0;
+        while (!this.stopped && !this.aborted()) {
+            try {
+                await this.upstream.receive(this.receiveSignal, (raw) => {
+                    void this.inbound.handle(raw).catch((error) => {
+                        this.ctx.logger.error('[channel-lark] inbound handling failed', error);
+                    });
+                });
+                attempt = 0;
+                // A completed receive cycle proves the upstream is reachable; auth
+                // follows the connection state (the driver owns credentials). The WS
+                // driver reports connectivity via onConnected.
+                this.markConnected();
+            }
+            catch (error) {
+                if (this.stopped || this.aborted())
+                    break;
+                attempt += 1;
+                this.connected = false;
+                this.emitConnection('reconnecting');
+                if (this.config.reconnect.enabled && attempt > this.config.reconnect.maxRetries) {
+                    this.ctx.logger.warn('[channel-lark] reconnect budget exhausted');
+                    this.setAuth('failed');
+                    this.emitConnection('disconnected');
+                    break;
+                }
+                const delay = Math.min(this.config.reconnect.baseDelayMs * 2 ** Math.min(attempt - 1, 8), this.config.reconnect.maxDelayMs);
+                this.ctx.logger.warn(`[channel-lark] receive loop error; retry in ${delay}ms`, error);
+                await sleep(delay, this.receiveSignal);
+            }
+        }
+        this.connected = false;
+        if (!this.stopped && !this.aborted()) {
+            this.emitConnection('disconnected');
+        }
+    }
+    /** Flip connection/auth state once the upstream proves reachable. */
+    markConnected() {
+        if (this.stopped)
+            return;
+        if (this.connected)
+            return;
+        this.connected = true;
+        this.setAuth('authenticated');
+        this.emitConnection('connected');
+    }
+    aborted() {
+        return this.receiveSignal?.aborted ?? true;
+    }
+    setAuth(state) {
+        if (this.authState === state)
+            return;
+        this.authState = state;
+        this.emitAuth(state);
+    }
+    emitAuth(state) {
+        if (!this.ctx)
+            return;
+        void this.ctx
+            .emit({
+            type: 'auth.changed',
+            channel: this.id,
+            accountId: this.config.accountId,
+            state,
+        })
+            .catch(() => undefined);
+    }
+    emitConnection(state) {
+        if (!this.ctx)
+            return;
+        void this.ctx
+            .emit({
+            type: 'connection.changed',
+            channel: this.id,
+            accountId: this.config.accountId,
+            state,
+        })
+            .catch(() => undefined);
+    }
+}
+/** Build the real SDK WS client from resolved credentials; never logs them. */
+function createDefaultWSClient(appId, appSecret, config) {
+    if (!appId || !appSecret) {
+        throw new ChannelError('CHANNEL_ERROR', 'lark upstream requires resolved appId and appSecret credentials');
+    }
+    return new WSClient({
+        appId,
+        appSecret,
+        domain: resolveDomain(config.upstream.domain ?? 'feishu'),
+    });
+}
+/** Build the real SDK OpenAPI client from resolved credentials; never logs them. */
+function createDefaultOpenApiClient(appId, appSecret, config) {
+    if (!appId || !appSecret) {
+        throw new ChannelError('CHANNEL_ERROR', 'lark upstream requires resolved appId and appSecret credentials');
+    }
+    return new Client({
+        appId,
+        appSecret,
+        domain: resolveDomain(config.upstream.domain ?? 'feishu'),
+    });
+}
+/**
+ * Resolve a config domain string to the SDK's `Domain` enum, preserving a
+ * custom base domain verbatim (the SDK accepts `Domain | string`).
+ */
+export function resolveDomain(value) {
+    if (value === 'feishu')
+        return Domain.Feishu;
+    if (value === 'lark')
+        return Domain.Lark;
+    return value;
+}
+function sleep(ms, signal) {
+    return new Promise((resolve) => {
+        if (signal?.aborted) {
+            resolve();
+            return;
+        }
+        const timer = setTimeout(() => {
+            signal?.removeEventListener('abort', onAbort);
+            resolve();
+        }, ms);
+        const onAbort = () => {
+            clearTimeout(timer);
+            resolve();
+        };
+        signal?.addEventListener('abort', onAbort, { once: true });
+    });
+}
+//# sourceMappingURL=adapter.js.map

package/lib/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAoCA,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAGnE,OAAO,EACL,eAAe,GAGhB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAA0B,MAAM,uBAAuB,CAAC;AACpF,OAAO,EAAE,oBAAoB,EAA4C,MAAM,0BAA0B,CAAC;AAC1G,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAqB,MAAM,eAAe,CAAC;AAuC5E,MAAM,OAAO,WAAW;IA6DO;IA5DpB,EAAE,GAAG,MAAM,CAAC;IAErB,gFAAgF;IACvE,QAAQ,GAAiB,YAAY,CAAC;IAEtC,YAAY,GAAwB;QAC3C,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,IAAI;QACX,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,IAAI;QACX,kBAAkB,EAAE,IAAI;QACxB,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,MAAM;QACjB,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,kEAAkE;QAClE,sEAAsE;QACtE,2EAA2E;QAC3E,0EAA0E;QAC1E,gEAAgE;QAChE,KAAK,EAAE;YACL,OAAO,EAAE;gBACP,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE,OAAO;aACf;YACD,QAAQ,EAAE;gBACR,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,aAAa;gBACpB,KAAK,EAAE,aAAa;aACrB;SACF;KACF,CAAC;IAEM,GAAG,CAAyB;IACpC,iFAAiF;IACzE,QAAQ,CAAgB;IACf,IAAI,CAAkB;IAC/B,OAAO,CAAoB;IAC3B,QAAQ,CAAkB;IAClC,oEAAoE;IAC5D,SAAS,CAAiB;IAC1B,OAAO,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,KAAK,CAAC;IAChB,WAAW,CAAiB;IAC5B,SAAS,GAAG,KAAK,CAAC;IAC1B,0EAA0E;IAClE,SAAS,GAA2C,SAAS,CAAC;IACrD,GAAG,CAAe;IACnC,+EAA+E;IACvE,cAAc,CAAmB;IACjC,aAAa,CAAe;IAEpC,YAA6B,MAAkB,EAAE,OAAwB,EAAE;QAA9C,WAAM,GAAN,MAAM,CAAY;QAC7C,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAA0B;QACpC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,cAAc,GAAG,IAAI,eAAe,EAAE,CAAC;QAC5C,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,gBAAgB,CAAC;YAClC,GAAG;YACH,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,EAAW,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAkB,EAAE;YAC9E,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO;YACvC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ;YACzC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAE9D,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9B,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QAClC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,wEAAwE;QACxE,qEAAqE;QACrE,6DAA6D;QAC7D,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,IAAI,IAAI;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAqB,EAAE,OAAwB;QACxD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,YAAY,CAAC,qBAAqB,EAAE,6BAA6B,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAqB,EAAE,SAAiB,EAAE,OAAwB;QAC3E,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,YAAY,CAAC,qBAAqB,EAAE,6BAA6B,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,MAAqB;QAC9C,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,gBAAgB;YAAE,OAAO;QACnF,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAAqB;QAC7C,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,gBAAgB;YAAE,OAAO;QACnF,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAqB,EAAE,QAA6B;QACpE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,MAAM,IAAI,YAAY,CAAC,qBAAqB,EAAE,6BAA6B,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,IAAI,aAAa,CAAC;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM;YACN,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;YACvB,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB;YACvD,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS;QACb,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,6BAA6B,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QACzF,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QAC7F,CAAC;QACD,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,mBAAmB;YAC3B,UAAU,EAAE,cAAc;YAC1B,aAAa,EAAE,KAAK;SACrB,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,gBAAgB;QACd,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;IAC3C,CAAC;IAED,8CAA8C;IACtC,aAAa;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC/C,MAAM,OAAO,GAA2B;YACtC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE;YAC/B,QAAQ;YACR,eAAe,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;YACzG,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE;SACxC,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,mDAAmD;IAC3C,sBAAsB;QAC5B,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAC5B,OAAO,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YACnC,OAAO,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,IAAI,mBAAmB,CAAC;YAC7B,MAAM,EAAE,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC;SACtF,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACK,gBAAgB;QACtB,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QACpD,mEAAmE;QACnE,0EAA0E;QAC1E,2EAA2E;QAC3E,yEAAyE;QACzE,6CAA6C;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa;eACjC,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;eAC/E,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACnF,OAAO,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,MAAoC,EAAE,CAAC,CAAC;IACpF,CAAC;IAEO,gBAAgB;QACtB,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QACpD,IAAI,IAAI,CAAC,IAAI,CAAC,gBAAgB;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/E,OAAO,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAClF,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,aAAc,EAAE,CAAC,GAAG,EAAE,EAAE;oBACvD,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;wBAC5C,IAAI,CAAC,GAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE,KAAK,CAAC,CAAC;oBAC1E,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,OAAO,GAAG,CAAC,CAAC;gBACZ,mEAAmE;gBACnE,qEAAqE;gBACrE,+CAA+C;gBAC/C,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE;oBAAE,MAAM;gBAC1C,OAAO,IAAI,CAAC,CAAC;gBACb,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACvB,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;gBACpC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;oBAChF,IAAI,CAAC,GAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;oBACnE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;oBACvB,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;oBACpC,MAAM;gBACR,CAAC;gBACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,EACjE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CACjC,CAAC;gBACF,IAAI,CAAC,GAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,KAAK,IAAI,EAAE,KAAK,CAAC,CAAC;gBACvF,MAAM,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,aAAc,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,qEAAqE;IAC7D,aAAa;QACnB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC9B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;IAEO,OAAO;QACb,OAAO,IAAI,CAAC,aAAa,EAAE,OAAO,IAAI,IAAI,CAAC;IAC7C,CAAC;IAEO,OAAO,CAAC,KAA6C;QAC3D,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK;YAAE,OAAO;QACrC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAEO,QAAQ,CAAC,KAA6C;QAC5D,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,OAAO;QACtB,KAAK,IAAI,CAAC,GAAG;aACV,IAAI,CAAC;YACJ,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,IAAI,CAAC,EAAW;YACzB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAkB;YACzC,KAAK;SACN,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IAEO,cAAc,CAAC,KAA8E;QACnG,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,OAAO;QACtB,KAAK,IAAI,CAAC,GAAG;aACV,IAAI,CAAC;YACJ,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,IAAI,CAAC,EAAW;YACzB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAkB;YACzC,KAAK;SACN,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;CACF;AAED,+EAA+E;AAC/E,SAAS,qBAAqB,CAC5B,KAAyB,EACzB,SAA6B,EAC7B,MAAkB;IAElB,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC;QAClB,KAAK;QACL,SAAS;QACT,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC;KAC1D,CAAC,CAAC;AACL,CAAC;AAED,oFAAoF;AACpF,SAAS,0BAA0B,CACjC,KAAyB,EACzB,SAA6B,EAC7B,MAAkB;IAElB,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,MAAM,CAAC;QAChB,KAAK;QACL,SAAS;QACT,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC;KAC1D,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC;IAC7C,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACzC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAC,EAAU,EAAE,MAAoB;IAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/lib/auth/device-authorization.d.ts

@@ -0,0 +1,12 @@
+import { type AuthProviderSession, type PublicAuthStatus } from '@krischoichoi/channel-control';
+export interface LarkDeviceAuthorizationOptions {
+    appId: string;
+    appSecret: string;
+    domain?: string;
+    fetcher?: typeof fetch;
+}
+/** Begin Feishu/Lark device authorization. Secrets remain in opaque host state. */
+export declare function beginLarkDeviceAuthorization(options: LarkDeviceAuthorizationOptions): Promise<AuthProviderSession>;
+/** Poll a device authorization session without exposing provider tokens. */
+export declare function pollLarkDeviceAuthorization(session: AuthProviderSession, options?: Pick<LarkDeviceAuthorizationOptions, 'fetcher'>): Promise<PublicAuthStatus>;
+//# sourceMappingURL=device-authorization.d.ts.map

package/lib/auth/device-authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-authorization.d.ts","sourceRoot":"","sources":["../../src/auth/device-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACtB,MAAM,+BAA+B,CAAC;AAsCvC,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB;AAsDD,mFAAmF;AACnF,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,8BAA8B,GACtC,OAAO,CAAC,mBAAmB,CAAC,CAoC9B;AAED,4EAA4E;AAC5E,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,mBAAmB,EAC5B,OAAO,GAAE,IAAI,CAAC,8BAA8B,EAAE,SAAS,CAAM,GAC5D,OAAO,CAAC,gBAAgB,CAAC,CA+C3B"}