@lark-project/openclaw-lark-project 2026.3.131

package/dist/src/channel/types.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/src/commands/auth.js

@@ -0,0 +1,73 @@
+import { triggerOnboarding } from "../tools/onboarding-auth";
+import { getTicket } from "../core/lark-ticket";
+import { getLarkAccount } from "../core/accounts";
+import { LarkClient } from "../core/lark-client";
+import { getAppInfo, getAppGrantedScopes } from "../core/app-scope-checker";
+import { getStoredToken } from "../core/token-store";
+import { filterSensitiveScopes } from "../core/tool-scopes";
+import { assertOwnerAccessStrict, OwnerAccessDeniedError } from "../core/owner-policy";
+async function runFeishuAuth(config) {
+  const ticket = getTicket();
+  const senderOpenId = ticket?.senderOpenId;
+  if (!senderOpenId) {
+    return "\u274C \u65E0\u6CD5\u83B7\u53D6\u7528\u6237\u8EAB\u4EFD\uFF0C\u8BF7\u5728\u98DE\u4E66\u5BF9\u8BDD\u4E2D\u4F7F\u7528\u6B64\u547D\u4EE4";
+  }
+  const acct = getLarkAccount(config, ticket.accountId);
+  if (!acct.configured) {
+    return `\u274C \u8D26\u53F7 ${ticket.accountId} \u914D\u7F6E\u4E0D\u5B8C\u6574`;
+  }
+  const sdk = LarkClient.fromAccount(acct).sdk;
+  const { appId } = acct;
+  try {
+    await getAppInfo(sdk, appId);
+  } catch {
+    const link = `https://open.feishu.cn/app/${appId}/auth?q=application:application:self_manage&op_from=feishu-openclaw&token_type=tenant`;
+    return `\u274C \u5E94\u7528\u7F3A\u5C11\u6838\u5FC3\u6743\u9650 application:application:self_manage\uFF0C\u65E0\u6CD5\u67E5\u8BE2\u53EF\u6388\u6743 scope \u5217\u8868\u3002
+
+\u8BF7\u7BA1\u7406\u5458\u5728\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u5F00\u901A\u6B64\u6743\u9650\u540E\u91CD\u8BD5\uFF1A[\u7533\u8BF7\u6743\u9650](${link})`;
+  }
+  try {
+    await assertOwnerAccessStrict(acct, sdk, senderOpenId);
+  } catch (err) {
+    if (err instanceof OwnerAccessDeniedError) {
+      return "\u274C \u6B64\u547D\u4EE4\u4EC5\u9650\u5E94\u7528 owner \u6267\u884C\n\n\u5982\u9700\u6388\u6743\uFF0C\u8BF7\u8054\u7CFB\u5E94\u7528\u7BA1\u7406\u5458\u3002";
+    }
+    throw err;
+  }
+  let appScopes;
+  try {
+    appScopes = await getAppGrantedScopes(sdk, appId, "user");
+  } catch {
+    const link = `https://open.feishu.cn/app/${appId}/auth?q=application:application:self_manage&op_from=feishu-openclaw&token_type=tenant`;
+    return `\u274C \u5E94\u7528\u7F3A\u5C11\u6838\u5FC3\u6743\u9650 application:application:self_manage\uFF0C\u65E0\u6CD5\u67E5\u8BE2\u53EF\u6388\u6743 scope \u5217\u8868\u3002
+
+\u8BF7\u7BA1\u7406\u5458\u5728\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u5F00\u901A\u6B64\u6743\u9650\u540E\u91CD\u8BD5\uFF1A[\u7533\u8BF7\u6743\u9650](${link})`;
+  }
+  const allScopes = await getAppGrantedScopes(sdk, appId);
+  if (allScopes.length > 0 && !allScopes.includes("offline_access")) {
+    const link = `https://open.feishu.cn/app/${appId}/auth?q=offline_access&op_from=feishu-openclaw&token_type=user`;
+    return `\u274C \u5E94\u7528\u7F3A\u5C11\u6838\u5FC3\u6743\u9650 offline_access\uFF0C\u65E0\u6CD5\u67E5\u8BE2\u53EF\u6388\u6743 scope \u5217\u8868\u3002
+
+\u8BF7\u7BA1\u7406\u5458\u5728\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u5F00\u901A\u6B64\u6743\u9650\u540E\u91CD\u8BD5\uFF1A[\u7533\u8BF7\u6743\u9650](${link})`;
+  }
+  appScopes = filterSensitiveScopes(appScopes);
+  if (appScopes.length === 0) {
+    return "\u5F53\u524D\u5E94\u7528\u672A\u5F00\u901A\u4EFB\u4F55\u7528\u6237\u7EA7\u6743\u9650\uFF0C\u65E0\u9700\u6388\u6743\u3002";
+  }
+  const existing = await getStoredToken(appId, senderOpenId);
+  const grantedScopes = new Set(existing?.scope?.split(/\s+/).filter(Boolean) ?? []);
+  const missingScopes = appScopes.filter((s) => !grantedScopes.has(s));
+  if (missingScopes.length === 0) {
+    return `\u2705 \u60A8\u5DF2\u6388\u6743\u6240\u6709\u53EF\u7528\u6743\u9650\uFF08\u5171 ${appScopes.length} \u4E2A\uFF09\uFF0C\u65E0\u9700\u91CD\u590D\u6388\u6743\u3002`;
+  }
+  await triggerOnboarding({
+    cfg: config,
+    userOpenId: senderOpenId,
+    accountId: ticket.accountId
+  });
+  return `\u2705 \u5DF2\u53D1\u9001\u6388\u6743\u8BF7\u6C42`;
+}
+export {
+  runFeishuAuth
+};
+//# sourceMappingURL=auth.js.map

package/dist/src/commands/auth.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/commands/auth.ts"],
+  "sourcesContent": ["/**\n * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates\n * SPDX-License-Identifier: MIT\n *\n * feishu_auth command \u2014 \u98DE\u4E66\u7528\u6237\u6743\u9650\u6279\u91CF\u6388\u6743\u547D\u4EE4\u5B9E\u73B0\n *\n * \u76F4\u63A5\u590D\u7528 onboarding-auth.ts \u7684 triggerOnboarding() \u51FD\u6570\u3002\n * \u6CE8\u610F\uFF1A\u6B64\u547D\u4EE4\u4EC5\u9650\u5E94\u7528 owner \u6267\u884C\uFF08\u4E0E onboarding \u903B\u8F91\u4E00\u81F4\uFF09\n */\n\nimport type { OpenClawConfig } from 'openclaw/plugin-sdk';\nimport { triggerOnboarding } from '../tools/onboarding-auth';\nimport { getTicket } from '../core/lark-ticket';\nimport { getLarkAccount } from '../core/accounts';\nimport { LarkClient } from '../core/lark-client';\nimport { getAppInfo, getAppGrantedScopes } from '../core/app-scope-checker';\nimport { getStoredToken } from '../core/token-store';\nimport { filterSensitiveScopes } from '../core/tool-scopes';\nimport { assertOwnerAccessStrict, OwnerAccessDeniedError } from '../core/owner-policy';\n\n/**\n * \u6267\u884C\u98DE\u4E66\u7528\u6237\u6743\u9650\u6279\u91CF\u6388\u6743\u547D\u4EE4\n * \u76F4\u63A5\u8C03\u7528 triggerOnboarding()\uFF0C\u5305\u542B owner \u68C0\u67E5\n */\nexport async function runFeishuAuth(config: OpenClawConfig): Promise<string> {\n  const ticket = getTicket();\n  const senderOpenId = ticket?.senderOpenId;\n\n  if (!senderOpenId) {\n    return '\u274C \u65E0\u6CD5\u83B7\u53D6\u7528\u6237\u8EAB\u4EFD\uFF0C\u8BF7\u5728\u98DE\u4E66\u5BF9\u8BDD\u4E2D\u4F7F\u7528\u6B64\u547D\u4EE4';\n  }\n\n  // \u63D0\u524D\u68C0\u67E5 owner \u8EAB\u4EFD\uFF0C\u7ED9\u51FA\u660E\u786E\u63D0\u793A\n  const acct = getLarkAccount(config, ticket.accountId);\n  if (!acct.configured) {\n    return `\u274C \u8D26\u53F7 ${ticket.accountId} \u914D\u7F6E\u4E0D\u5B8C\u6574`;\n  }\n\n  const sdk = LarkClient.fromAccount(acct).sdk;\n  const { appId } = acct;\n\n  try {\n    await getAppInfo(sdk, appId);\n  } catch {\n    const link = `https://open.feishu.cn/app/${appId}/auth?q=application:application:self_manage&op_from=feishu-openclaw&token_type=tenant`;\n    return `\u274C \u5E94\u7528\u7F3A\u5C11\u6838\u5FC3\u6743\u9650 application:application:self_manage\uFF0C\u65E0\u6CD5\u67E5\u8BE2\u53EF\u6388\u6743 scope \u5217\u8868\u3002\\n\\n\u8BF7\u7BA1\u7406\u5458\u5728\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u5F00\u901A\u6B64\u6743\u9650\u540E\u91CD\u8BD5\uFF1A[\u7533\u8BF7\u6743\u9650](${link})`;\n  }\n\n  // Owner \u68C0\u67E5\uFF08fail-close: \u6388\u6743\u547D\u4EE4\u5B89\u5168\u4F18\u5148\uFF09\n  try {\n    await assertOwnerAccessStrict(acct, sdk, senderOpenId);\n  } catch (err) {\n    if (err instanceof OwnerAccessDeniedError) {\n      return '\u274C \u6B64\u547D\u4EE4\u4EC5\u9650\u5E94\u7528 owner \u6267\u884C\\n\\n\u5982\u9700\u6388\u6743\uFF0C\u8BF7\u8054\u7CFB\u5E94\u7528\u7BA1\u7406\u5458\u3002';\n    }\n    throw err;\n  }\n\n  // \u9884\u68C0\uFF1A\u662F\u5426\u8FD8\u6709\u672A\u6388\u6743\u7684 scope\n  let appScopes: string[];\n  try {\n    appScopes = await getAppGrantedScopes(sdk, appId, 'user');\n  } catch {\n    const link = `https://open.feishu.cn/app/${appId}/auth?q=application:application:self_manage&op_from=feishu-openclaw&token_type=tenant`;\n    return `\u274C \u5E94\u7528\u7F3A\u5C11\u6838\u5FC3\u6743\u9650 application:application:self_manage\uFF0C\u65E0\u6CD5\u67E5\u8BE2\u53EF\u6388\u6743 scope \u5217\u8868\u3002\\n\\n\u8BF7\u7BA1\u7406\u5458\u5728\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u5F00\u901A\u6B64\u6743\u9650\u540E\u91CD\u8BD5\uFF1A[\u7533\u8BF7\u6743\u9650](${link})`;\n  }\n\n  // offline_access \u9884\u68C0 \u2014 OAuth \u5FC5\u987B\u7684\u524D\u63D0\u6743\u9650\n  const allScopes = await getAppGrantedScopes(sdk, appId);\n  if (allScopes.length > 0 && !allScopes.includes('offline_access')) {\n    const link = `https://open.feishu.cn/app/${appId}/auth?q=offline_access&op_from=feishu-openclaw&token_type=user`;\n    return `\u274C \u5E94\u7528\u7F3A\u5C11\u6838\u5FC3\u6743\u9650 offline_access\uFF0C\u65E0\u6CD5\u67E5\u8BE2\u53EF\u6388\u6743 scope \u5217\u8868\u3002\\n\\n\u8BF7\u7BA1\u7406\u5458\u5728\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u5F00\u901A\u6B64\u6743\u9650\u540E\u91CD\u8BD5\uFF1A[\u7533\u8BF7\u6743\u9650](${link})`;\n  }\n\n  appScopes = filterSensitiveScopes(appScopes);\n\n  if (appScopes.length === 0) {\n    return '\u5F53\u524D\u5E94\u7528\u672A\u5F00\u901A\u4EFB\u4F55\u7528\u6237\u7EA7\u6743\u9650\uFF0C\u65E0\u9700\u6388\u6743\u3002';\n  }\n\n  const existing = await getStoredToken(appId, senderOpenId);\n  const grantedScopes = new Set(existing?.scope?.split(/\\s+/).filter(Boolean) ?? []);\n  const missingScopes = appScopes.filter((s) => !grantedScopes.has(s));\n\n  if (missingScopes.length === 0) {\n    return `\u2705 \u60A8\u5DF2\u6388\u6743\u6240\u6709\u53EF\u7528\u6743\u9650\uFF08\u5171 ${appScopes.length} \u4E2A\uFF09\uFF0C\u65E0\u9700\u91CD\u590D\u6388\u6743\u3002`;\n  }\n\n  // \u8C03\u7528 triggerOnboarding \u6267\u884C\u6279\u91CF\u6388\u6743\n  await triggerOnboarding({\n    cfg: config,\n    userOpenId: senderOpenId,\n    accountId: ticket.accountId,\n  });\n\n  return `\u2705 \u5DF2\u53D1\u9001\u6388\u6743\u8BF7\u6C42`;\n}\n"],
+  "mappings": "AAWA,SAAS,yBAAyB;AAClC,SAAS,iBAAiB;AAC1B,SAAS,sBAAsB;AAC/B,SAAS,kBAAkB;AAC3B,SAAS,YAAY,2BAA2B;AAChD,SAAS,sBAAsB;AAC/B,SAAS,6BAA6B;AACtC,SAAS,yBAAyB,8BAA8B;AAMhE,eAAsB,cAAc,QAAyC;AAC3E,QAAM,SAAS,UAAU;AACzB,QAAM,eAAe,QAAQ;AAE7B,MAAI,CAAC,cAAc;AACjB,WAAO;AAAA,EACT;AAGA,QAAM,OAAO,eAAe,QAAQ,OAAO,SAAS;AACpD,MAAI,CAAC,KAAK,YAAY;AACpB,WAAO,uBAAQ,OAAO,SAAS;AAAA,EACjC;AAEA,QAAM,MAAM,WAAW,YAAY,IAAI,EAAE;AACzC,QAAM,EAAE,MAAM,IAAI;AAElB,MAAI;AACF,UAAM,WAAW,KAAK,KAAK;AAAA,EAC7B,QAAQ;AACN,UAAM,OAAO,8BAA8B,KAAK;AAChD,WAAO;AAAA;AAAA,qJAAkG,IAAI;AAAA,EAC/G;AAGA,MAAI;AACF,UAAM,wBAAwB,MAAM,KAAK,YAAY;AAAA,EACvD,SAAS,KAAK;AACZ,QAAI,eAAe,wBAAwB;AACzC,aAAO;AAAA,IACT;AACA,UAAM;AAAA,EACR;AAGA,MAAI;AACJ,MAAI;AACF,gBAAY,MAAM,oBAAoB,KAAK,OAAO,MAAM;AAAA,EAC1D,QAAQ;AACN,UAAM,OAAO,8BAA8B,KAAK;AAChD,WAAO;AAAA;AAAA,qJAAkG,IAAI;AAAA,EAC/G;AAGA,QAAM,YAAY,MAAM,oBAAoB,KAAK,KAAK;AACtD,MAAI,UAAU,SAAS,KAAK,CAAC,UAAU,SAAS,gBAAgB,GAAG;AACjE,UAAM,OAAO,8BAA8B,KAAK;AAChD,WAAO;AAAA;AAAA,qJAA6E,IAAI;AAAA,EAC1F;AAEA,cAAY,sBAAsB,SAAS;AAE3C,MAAI,UAAU,WAAW,GAAG;AAC1B,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,MAAM,eAAe,OAAO,YAAY;AACzD,QAAM,gBAAgB,IAAI,IAAI,UAAU,OAAO,MAAM,KAAK,EAAE,OAAO,OAAO,KAAK,CAAC,CAAC;AACjF,QAAM,gBAAgB,UAAU,OAAO,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;AAEnE,MAAI,cAAc,WAAW,GAAG;AAC9B,WAAO,mFAAkB,UAAU,MAAM;AAAA,EAC3C;AAGA,QAAM,kBAAkB;AAAA,IACtB,KAAK;AAAA,IACL,YAAY;AAAA,IACZ,WAAW,OAAO;AAAA,EACpB,CAAC;AAED,SAAO;AACT;",
+  "names": []
+}