@lark-project/openclaw-lark-project 2026.3.131

package/dist/src/messaging/outbound/media.js

@@ -0,0 +1,463 @@
+import * as dns from "node:dns/promises";
+import * as fs from "node:fs";
+import * as net from "node:net";
+import * as os from "node:os";
+import * as path from "node:path";
+import { Readable } from "node:stream";
+import { LarkClient } from "../../core/lark-client";
+import { normalizeFeishuTarget, resolveReceiveIdType } from "../../core/targets";
+import {
+  isLocalMediaPath,
+  normalizeMediaUrlInput,
+  resolveFileNameFromMediaUrl,
+  safeFileUrlToPath,
+  validateLocalMediaRoots
+} from "./media-url-utils";
+import { larkLogger } from "../../core/lark-logger";
+const log = larkLogger("outbound/media");
+async function extractBufferFromResponse(response) {
+  if (Buffer.isBuffer(response)) {
+    return { buffer: response };
+  }
+  if (response instanceof ArrayBuffer) {
+    return { buffer: Buffer.from(response) };
+  }
+  if (response == null) {
+    throw new Error("[feishu-media] Received null/undefined response");
+  }
+  const resp = response;
+  const contentType = resp.headers?.["content-type"] ?? resp.contentType ?? void 0;
+  if (resp.data != null) {
+    if (Buffer.isBuffer(resp.data)) {
+      return { buffer: resp.data, contentType };
+    }
+    if (resp.data instanceof ArrayBuffer) {
+      return { buffer: Buffer.from(resp.data), contentType };
+    }
+    if (typeof resp.data.pipe === "function") {
+      const buf = await streamToBuffer(resp.data);
+      return { buffer: buf, contentType };
+    }
+  }
+  if (typeof resp.getReadableStream === "function") {
+    const stream = await resp.getReadableStream();
+    const buf = await streamToBuffer(stream);
+    return { buffer: buf, contentType };
+  }
+  if (typeof resp.writeFile === "function") {
+    const tmpDir = os.tmpdir();
+    const tmpFile = path.join(tmpDir, `feishu-media-${Date.now()}`);
+    try {
+      await resp.writeFile(tmpFile);
+      const buf = fs.readFileSync(tmpFile);
+      return { buffer: buf, contentType };
+    } finally {
+      try {
+        fs.unlinkSync(tmpFile);
+      } catch {
+      }
+    }
+  }
+  if (typeof resp[Symbol.asyncIterator] === "function" || typeof resp.next === "function") {
+    const chunks = [];
+    const iterable = typeof resp[Symbol.asyncIterator] === "function" ? resp : asyncIteratorToIterable(resp);
+    for await (const chunk of iterable) {
+      chunks.push(Buffer.from(chunk));
+    }
+    return { buffer: Buffer.concat(chunks), contentType };
+  }
+  if (typeof resp.pipe === "function") {
+    const buf = await streamToBuffer(resp);
+    return { buffer: buf, contentType };
+  }
+  throw new Error("[feishu-media] Unable to extract binary data from response: unrecognised format");
+}
+function streamToBuffer(stream) {
+  return new Promise((resolve, reject) => {
+    const chunks = [];
+    stream.on("data", (chunk) => {
+      chunks.push(Buffer.from(chunk));
+    });
+    stream.on("end", () => resolve(Buffer.concat(chunks)));
+    stream.on("error", reject);
+  });
+}
+async function* asyncIteratorToIterable(iterator) {
+  while (true) {
+    const { value, done } = await iterator.next();
+    if (done) break;
+    yield value;
+  }
+}
+async function downloadMessageResourceFeishu(params) {
+  const { cfg, messageId, fileKey, type, accountId } = params;
+  const client = LarkClient.fromCfg(cfg, accountId).sdk;
+  const response = await client.im.messageResource.get({
+    path: {
+      message_id: messageId,
+      file_key: fileKey
+    },
+    params: {
+      type
+    }
+  });
+  const { buffer, contentType } = await extractBufferFromResponse(response);
+  let fileName;
+  if (response && typeof response === "object") {
+    const resp = response;
+    const disposition = resp.headers?.["content-disposition"] ?? resp.headers?.["Content-Disposition"];
+    if (typeof disposition === "string") {
+      const match = disposition.match(/filename[*]?=(?:UTF-8'')?["']?([^"';\n]+)/i);
+      if (match) {
+        fileName = decodeURIComponent(match[1].trim());
+      }
+    }
+  }
+  return { buffer, contentType, fileName };
+}
+async function uploadImageLark(params) {
+  const { cfg, image, imageType = "message", accountId } = params;
+  const client = LarkClient.fromCfg(cfg, accountId).sdk;
+  const imageStream = Buffer.isBuffer(image) ? Readable.from(image) : fs.createReadStream(image);
+  const response = await client.im.image.create({
+    data: { image_type: imageType, image: imageStream }
+  });
+  const imageKey = response?.data?.image_key ?? response?.image_key;
+  if (!imageKey) {
+    throw new Error(
+      `[feishu-media] Image upload failed: no image_key in response. Check that the image is a valid format (JPEG/PNG/GIF/BMP/WEBP). Response: ${JSON.stringify(response).slice(0, 200)}`
+    );
+  }
+  return { imageKey };
+}
+async function uploadFileLark(params) {
+  const { cfg, file, fileName, fileType, duration, accountId } = params;
+  const client = LarkClient.fromCfg(cfg, accountId).sdk;
+  const fileStream = Buffer.isBuffer(file) ? Readable.from(file) : fs.createReadStream(file);
+  const response = await client.im.file.create({
+    data: {
+      file_type: fileType,
+      file_name: fileName,
+      file: fileStream,
+      ...duration !== void 0 ? { duration: String(duration) } : {}
+    }
+  });
+  const fileKey = response?.data?.file_key ?? response?.file_key;
+  if (!fileKey) {
+    throw new Error(
+      `[feishu-media] File upload failed: no file_key in response for "${fileName}" (type=${fileType}). Response: ${JSON.stringify(response).slice(0, 200)}`
+    );
+  }
+  return { fileKey };
+}
+async function sendMediaMessage(params) {
+  const { client, to, content, msgType, replyToMessageId, replyInThread } = params;
+  if (replyToMessageId) {
+    const response2 = await client.im.message.reply({
+      path: { message_id: replyToMessageId },
+      data: { content, msg_type: msgType, reply_in_thread: replyInThread }
+    });
+    return {
+      messageId: response2?.data?.message_id ?? "",
+      chatId: response2?.data?.chat_id ?? ""
+    };
+  }
+  const target = normalizeFeishuTarget(to);
+  if (!target) {
+    throw new Error(
+      `[feishu-media] Cannot send ${msgType} message: "${to}" is not a valid target. Expected a chat_id (oc_*), open_id (ou_*), or user_id.`
+    );
+  }
+  const receiveIdType = resolveReceiveIdType(target);
+  const response = await client.im.message.create({
+    params: { receive_id_type: receiveIdType },
+    data: { receive_id: target, msg_type: msgType, content }
+  });
+  return {
+    messageId: response?.data?.message_id ?? "",
+    chatId: response?.data?.chat_id ?? ""
+  };
+}
+async function sendImageLark(params) {
+  const { cfg, to, imageKey, replyToMessageId, replyInThread, accountId } = params;
+  log.info(`sendImageLark: target=${to}, imageKey=${imageKey}`);
+  const client = LarkClient.fromCfg(cfg, accountId).sdk;
+  const content = JSON.stringify({ image_key: imageKey });
+  return sendMediaMessage({ client, to, content, msgType: "image", replyToMessageId, replyInThread });
+}
+async function sendFileLark(params) {
+  const { cfg, to, fileKey, replyToMessageId, replyInThread, accountId } = params;
+  log.info(`sendFileLark: target=${to}, fileKey=${fileKey}`);
+  const client = LarkClient.fromCfg(cfg, accountId).sdk;
+  const content = JSON.stringify({ file_key: fileKey });
+  return sendMediaMessage({ client, to, content, msgType: "file", replyToMessageId, replyInThread });
+}
+async function sendVideoLark(params) {
+  const { cfg, to, fileKey, replyToMessageId, replyInThread, accountId } = params;
+  log.info(`sendVideoLark: target=${to}, fileKey=${fileKey}`);
+  const client = LarkClient.fromCfg(cfg, accountId).sdk;
+  const content = JSON.stringify({ file_key: fileKey });
+  return sendMediaMessage({ client, to, content, msgType: "media", replyToMessageId, replyInThread });
+}
+async function sendAudioLark(params) {
+  const { cfg, to, fileKey, replyToMessageId, replyInThread, accountId } = params;
+  log.info(`sendAudioLark: target=${to}, fileKey=${fileKey}`);
+  const client = LarkClient.fromCfg(cfg, accountId).sdk;
+  const content = JSON.stringify({ file_key: fileKey });
+  return sendMediaMessage({ client, to, content, msgType: "audio", replyToMessageId, replyInThread });
+}
+const IMAGE_EXTENSIONS = /* @__PURE__ */ new Set([".jpg", ".jpeg", ".png", ".gif", ".bmp", ".webp", ".ico", ".tiff", ".tif", ".heic"]);
+const EXTENSION_TYPE_MAP = {
+  ".opus": "opus",
+  ".ogg": "opus",
+  ".mp4": "mp4",
+  ".mov": "mp4",
+  ".avi": "mp4",
+  ".mkv": "mp4",
+  ".webm": "mp4",
+  ".pdf": "pdf",
+  ".doc": "doc",
+  ".docx": "doc",
+  ".xls": "xls",
+  ".xlsx": "xls",
+  ".csv": "xls",
+  ".ppt": "ppt",
+  ".pptx": "ppt"
+};
+function detectFileType(fileName) {
+  const ext = path.extname(fileName).toLowerCase();
+  return EXTENSION_TYPE_MAP[ext] ?? "stream";
+}
+function parseOggOpusDuration(buffer) {
+  const OGGS = Buffer.from("OggS");
+  let offset = -1;
+  for (let i = buffer.length - OGGS.length; i >= 0; i--) {
+    if (buffer[i] === 79 && buffer.compare(OGGS, 0, 4, i, i + 4) === 0) {
+      offset = i;
+      break;
+    }
+  }
+  if (offset < 0) return void 0;
+  const granuleOffset = offset + 6;
+  if (granuleOffset + 8 > buffer.length) return void 0;
+  const lo = buffer.readUInt32LE(granuleOffset);
+  const hi = buffer.readUInt32LE(granuleOffset + 4);
+  const granule = hi * 4294967296 + lo;
+  if (granule <= 0) return void 0;
+  return Math.ceil(granule / 48e3) * 1e3;
+}
+function parseMp4Duration(buffer) {
+  const moovData = findBox(buffer, 0, buffer.length, "moov");
+  if (!moovData) return void 0;
+  const mvhdData = findBox(buffer, moovData.dataStart, moovData.dataEnd, "mvhd");
+  if (!mvhdData) return void 0;
+  const off = mvhdData.dataStart;
+  if (off + 1 > buffer.length) return void 0;
+  const version = buffer.readUInt8(off);
+  let timescale;
+  let duration;
+  if (version === 0) {
+    if (off + 20 > buffer.length) return void 0;
+    timescale = buffer.readUInt32BE(off + 12);
+    duration = buffer.readUInt32BE(off + 16);
+  } else {
+    if (off + 32 > buffer.length) return void 0;
+    timescale = buffer.readUInt32BE(off + 20);
+    const hi = buffer.readUInt32BE(off + 24);
+    const lo = buffer.readUInt32BE(off + 28);
+    duration = hi * 4294967296 + lo;
+  }
+  if (timescale <= 0 || duration <= 0) return void 0;
+  return Math.round(duration / timescale * 1e3);
+}
+function findBox(buffer, start, end, type) {
+  let offset = start;
+  while (offset + 8 <= end) {
+    const size = buffer.readUInt32BE(offset);
+    const boxType = buffer.toString("ascii", offset + 4, offset + 8);
+    let boxEnd;
+    let dataStart;
+    if (size === 0) {
+      boxEnd = end;
+      dataStart = offset + 8;
+    } else if (size === 1) {
+      if (offset + 16 > end) break;
+      const hi = buffer.readUInt32BE(offset + 8);
+      const lo = buffer.readUInt32BE(offset + 12);
+      boxEnd = offset + hi * 4294967296 + lo;
+      dataStart = offset + 16;
+    } else {
+      if (size < 8) break;
+      boxEnd = offset + size;
+      dataStart = offset + 8;
+    }
+    if (boxType === type) {
+      return { dataStart, dataEnd: Math.min(boxEnd, end) };
+    }
+    offset = boxEnd;
+  }
+  return void 0;
+}
+function isImageFileName(fileName) {
+  const ext = path.extname(fileName).toLowerCase();
+  return IMAGE_EXTENSIONS.has(ext);
+}
+async function uploadAndSendMediaLark(params) {
+  const { cfg, to, mediaUrl, mediaBuffer, fileName, replyToMessageId, replyInThread, accountId, mediaLocalRoots } = params;
+  log.info(
+    `uploadAndSendMediaLark: target=${to}, source=${mediaBuffer ? "buffer" : mediaUrl ?? "(none)"}, fileName=${fileName ?? "(auto)"}`
+  );
+  let buffer;
+  let resolvedFileName = fileName ?? "file";
+  if (mediaBuffer) {
+    buffer = mediaBuffer;
+    log.debug(`using provided buffer: ${buffer.length} bytes`);
+  } else if (mediaUrl) {
+    buffer = await fetchMediaBuffer(mediaUrl, mediaLocalRoots);
+    log.debug(`fetched media: ${buffer.length} bytes from "${mediaUrl}"`);
+    if (!fileName) {
+      const derivedFileName = resolveFileNameFromMediaUrl(mediaUrl);
+      if (derivedFileName) {
+        resolvedFileName = derivedFileName;
+      }
+    }
+  } else {
+    throw new Error(
+      "[feishu-media] uploadAndSendMediaLark requires either mediaUrl or mediaBuffer. Provide a URL (http/https/file://) or a raw Buffer to send media."
+    );
+  }
+  const isImage = isImageFileName(resolvedFileName);
+  log.info(`resolved: fileName="${resolvedFileName}", type=${isImage ? "image" : "file"}, size=${buffer.length}`);
+  if (isImage) {
+    const { imageKey } = await uploadImageLark({
+      cfg,
+      image: buffer,
+      imageType: "message",
+      accountId
+    });
+    log.debug(`image uploaded: imageKey=${imageKey}`);
+    return sendImageLark({
+      cfg,
+      to,
+      imageKey,
+      replyToMessageId,
+      replyInThread,
+      accountId
+    });
+  }
+  const fileType = detectFileType(resolvedFileName);
+  const isAudio = fileType === "opus";
+  const isVideo = fileType === "mp4";
+  const duration = isAudio ? parseOggOpusDuration(buffer) : isVideo ? parseMp4Duration(buffer) : void 0;
+  const { fileKey } = await uploadFileLark({
+    cfg,
+    file: buffer,
+    fileName: resolvedFileName,
+    fileType,
+    duration,
+    accountId
+  });
+  log.debug(
+    `file uploaded: fileKey=${fileKey}, fileType=${fileType}${isAudio || isVideo ? `, duration=${duration ?? "unknown"}ms` : ""}`
+  );
+  if (isAudio) {
+    return sendAudioLark({ cfg, to, fileKey, replyToMessageId, replyInThread, accountId });
+  }
+  if (isVideo) {
+    return sendVideoLark({ cfg, to, fileKey, replyToMessageId, replyInThread, accountId });
+  }
+  return sendFileLark({
+    cfg,
+    to,
+    fileKey,
+    replyToMessageId,
+    replyInThread,
+    accountId
+  });
+}
+function isPrivateIP(ip) {
+  if (ip.startsWith("127.")) return true;
+  if (ip.startsWith("10.")) return true;
+  if (ip.startsWith("192.168.")) return true;
+  if (ip.startsWith("169.254.")) return true;
+  if (ip === "0.0.0.0") return true;
+  if (/^172\.(1[6-9]|2[0-9]|3[01])\./.test(ip)) return true;
+  if (ip === "::1" || ip === "::") return true;
+  if (ip.startsWith("fe80:")) return true;
+  if (ip.startsWith("fc") || ip.startsWith("fd")) return true;
+  return false;
+}
+async function validateRemoteUrl(raw) {
+  const parsed = new URL(raw);
+  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+    throw new Error(
+      `[feishu-media] Unsupported protocol "${parsed.protocol}" in URL "${raw}". Only http:// and https:// are allowed for remote media.`
+    );
+  }
+  const hostname = parsed.hostname.replace(/^\[|\]$/g, "");
+  if (net.isIP(hostname)) {
+    if (isPrivateIP(hostname)) {
+      throw new Error(
+        `[feishu-media] Access to private/reserved IP "${hostname}" is denied (SSRF protection). URL: "${raw}"`
+      );
+    }
+  } else {
+    try {
+      const addresses = await dns.resolve(hostname);
+      for (const addr of addresses) {
+        if (isPrivateIP(addr)) {
+          throw new Error(
+            `[feishu-media] Domain "${hostname}" resolves to private/reserved IP "${addr}" (SSRF protection). URL: "${raw}"`
+          );
+        }
+      }
+    } catch (err) {
+      if (err instanceof Error && err.message.includes("SSRF protection")) {
+        throw err;
+      }
+      log.warn(`[feishu-media] DNS resolution failed for "${hostname}": ${err}`);
+    }
+  }
+}
+async function fetchMediaBuffer(urlOrPath, localRoots) {
+  const raw = normalizeMediaUrlInput(urlOrPath);
+  if (isLocalMediaPath(raw)) {
+    const filePath = raw.startsWith("file://") ? safeFileUrlToPath(raw) : raw;
+    if (localRoots !== void 0) {
+      validateLocalMediaRoots(filePath, localRoots);
+    } else {
+      throw new Error(
+        `[feishu-media] Local file access denied for "${filePath}": mediaLocalRoots is not configured. Configure mediaLocalRoots to explicitly allow local file access.`
+      );
+    }
+    const buf = fs.readFileSync(filePath);
+    log.debug(`local file read: "${filePath}", ${buf.length} bytes`);
+    return buf;
+  }
+  await validateRemoteUrl(raw);
+  const FETCH_TIMEOUT_MS = 3e4;
+  log.info(`fetching remote media: ${raw}`);
+  const response = await fetch(raw, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });
+  if (!response.ok) {
+    throw new Error(
+      `[feishu-media] Failed to fetch media from "${raw}": HTTP ${response.status} ${response.statusText}. Verify the URL is accessible and returns a valid media resource.`
+    );
+  }
+  const arrayBuffer = await response.arrayBuffer();
+  log.debug(`remote media fetched: ${raw}, ${arrayBuffer.byteLength} bytes`);
+  return Buffer.from(arrayBuffer);
+}
+export {
+  detectFileType,
+  downloadMessageResourceFeishu,
+  parseMp4Duration,
+  parseOggOpusDuration,
+  sendAudioLark,
+  sendFileLark,
+  sendImageLark,
+  sendVideoLark,
+  uploadAndSendMediaLark,
+  uploadFileLark,
+  uploadImageLark
+};
+//# sourceMappingURL=media.js.map

package/dist/src/messaging/outbound/media.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/messaging/outbound/media.ts"],
+  "sourcesContent": ["/**\n * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates\n * SPDX-License-Identifier: MIT\n *\n * Media handling for the Lark/Feishu channel plugin.\n *\n * Provides functions for downloading images and file resources from\n * Feishu messages, uploading media to the Feishu IM storage, and\n * sending image / file messages to chats.\n */\n/* eslint-disable @typescript-eslint/no-explicit-any */\n\nimport * as dns from 'node:dns/promises';\nimport * as fs from 'node:fs';\nimport * as net from 'node:net';\nimport * as os from 'node:os';\nimport * as path from 'node:path';\nimport { Readable } from 'node:stream';\n\nimport type { OpenClawConfig } from 'openclaw/plugin-sdk';\nimport { LarkClient } from '../../core/lark-client';\nimport { normalizeFeishuTarget, resolveReceiveIdType } from '../../core/targets';\nimport {\n  isLocalMediaPath,\n  normalizeMediaUrlInput,\n  resolveFileNameFromMediaUrl,\n  safeFileUrlToPath,\n  validateLocalMediaRoots,\n} from './media-url-utils';\nimport { larkLogger } from '../../core/lark-logger';\n\nconst log = larkLogger('outbound/media');\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/**\n * Result of downloading an image from Feishu.\n */\nexport interface DownloadImageResult {\n  /** The raw image bytes. */\n  buffer: Buffer;\n  /** The MIME type of the image (e.g. \"image/png\"), if known. */\n  contentType?: string;\n}\n\n/**\n * Result of downloading a message resource (image or file) from Feishu.\n */\nexport interface DownloadMessageResourceResult {\n  /** The raw file bytes. */\n  buffer: Buffer;\n  /** The MIME type of the resource, if known. */\n  contentType?: string;\n  /** The original file name, if available. */\n  fileName?: string;\n}\n\n/**\n * Result of uploading an image to Feishu.\n */\nexport interface UploadImageResult {\n  /** The image_key assigned by Feishu, used to reference the image. */\n  imageKey: string;\n}\n\n/**\n * Result of uploading a file to Feishu.\n */\nexport interface UploadFileResult {\n  /** The file_key assigned by Feishu, used to reference the file. */\n  fileKey: string;\n}\n\n/**\n * Result of sending a media (image or file) message.\n */\nexport interface SendMediaResult {\n  /** Platform-assigned message ID. */\n  messageId: string;\n  /** Chat ID where the media was sent. */\n  chatId: string;\n}\n\n// ---------------------------------------------------------------------------\n// Response extraction helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Extract a Buffer from various SDK response formats.\n *\n * The Feishu Node SDK can return binary data in several shapes depending\n * on the runtime environment and SDK version:\n *   - A Buffer directly\n *   - An ArrayBuffer\n *   - A response object with a `.data` property\n *   - A response object with `.getReadableStream()`\n *   - A response object with `.writeFile(path)`\n *   - An async iterable / iterator\n *   - A Node.js Readable stream\n *\n * This helper normalises all of those into a single Buffer.\n */\nasync function extractBufferFromResponse(response: unknown): Promise<{ buffer: Buffer; contentType?: string }> {\n  // Direct Buffer\n  if (Buffer.isBuffer(response)) {\n    return { buffer: response };\n  }\n\n  // ArrayBuffer\n  if (response instanceof ArrayBuffer) {\n    return { buffer: Buffer.from(response) };\n  }\n\n  // Null / undefined guard\n  if (response == null) {\n    throw new Error('[feishu-media] Received null/undefined response');\n  }\n\n  const resp = response as Record<string, any>;\n  const contentType: string | undefined = resp.headers?.['content-type'] ?? resp.contentType ?? undefined;\n\n  // Response with .data as Buffer or ArrayBuffer\n  if (resp.data != null) {\n    if (Buffer.isBuffer(resp.data)) {\n      return { buffer: resp.data, contentType };\n    }\n    if (resp.data instanceof ArrayBuffer) {\n      return { buffer: Buffer.from(resp.data), contentType };\n    }\n    // .data might itself be a readable stream\n    if (typeof resp.data.pipe === 'function') {\n      const buf = await streamToBuffer(resp.data as Readable);\n      return { buffer: buf, contentType };\n    }\n  }\n\n  // Response with .getReadableStream()\n  if (typeof resp.getReadableStream === 'function') {\n    const stream = await resp.getReadableStream();\n    const buf = await streamToBuffer(stream);\n    return { buffer: buf, contentType };\n  }\n\n  // Response with .writeFile(path) -- write to a temp file and read back.\n  if (typeof resp.writeFile === 'function') {\n    const tmpDir = os.tmpdir();\n    const tmpFile = path.join(tmpDir, `feishu-media-${Date.now()}`);\n    try {\n      await resp.writeFile(tmpFile);\n      const buf = fs.readFileSync(tmpFile);\n      return { buffer: buf, contentType };\n    } finally {\n      // Clean up the temp file.\n      try {\n        fs.unlinkSync(tmpFile);\n      } catch {\n        // Ignore cleanup errors.\n      }\n    }\n  }\n\n  // Async iterable / iterator (e.g. response body chunks)\n  if (typeof (resp as any)[Symbol.asyncIterator] === 'function' || typeof (resp as any).next === 'function') {\n    const chunks: Buffer[] = [];\n    const iterable =\n      typeof (resp as any)[Symbol.asyncIterator] === 'function'\n        ? (resp as AsyncIterable<Uint8Array>)\n        : asyncIteratorToIterable(resp as AsyncIterator<Uint8Array>);\n\n    for await (const chunk of iterable) {\n      chunks.push(Buffer.from(chunk));\n    }\n    return { buffer: Buffer.concat(chunks), contentType };\n  }\n\n  // Node.js Readable stream\n  if (typeof resp.pipe === 'function') {\n    const buf = await streamToBuffer(resp as Readable);\n    return { buffer: buf, contentType };\n  }\n\n  throw new Error('[feishu-media] Unable to extract binary data from response: unrecognised format');\n}\n\n/**\n * Consume a Readable stream into a Buffer.\n */\nfunction streamToBuffer(stream: Readable): Promise<Buffer> {\n  return new Promise<Buffer>((resolve, reject) => {\n    const chunks: Buffer[] = [];\n    stream.on('data', (chunk: Buffer | Uint8Array) => {\n      chunks.push(Buffer.from(chunk));\n    });\n    stream.on('end', () => resolve(Buffer.concat(chunks)));\n    stream.on('error', reject);\n  });\n}\n\n/**\n * Wrap an AsyncIterator into an AsyncIterable.\n */\nasync function* asyncIteratorToIterable<T>(iterator: AsyncIterator<T>): AsyncIterable<T> {\n  while (true) {\n    const { value, done } = await iterator.next();\n    if (done) break;\n    yield value;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// downloadMessageResourceFeishu\n// ---------------------------------------------------------------------------\n\n/**\n * Download a resource (image or file) attached to a specific message.\n *\n * @param params.cfg       - Plugin configuration.\n * @param params.messageId - The message the resource belongs to.\n * @param params.fileKey   - The file_key or image_key of the resource.\n * @param params.type      - Whether the resource is an \"image\" or \"file\".\n * @param params.accountId - Optional account identifier.\n * @returns The resource buffer, content type, and file name.\n */\nexport async function downloadMessageResourceFeishu(params: {\n  cfg: OpenClawConfig;\n  messageId: string;\n  fileKey: string;\n  type: 'image' | 'file';\n  accountId?: string;\n}): Promise<DownloadMessageResourceResult> {\n  const { cfg, messageId, fileKey, type, accountId } = params;\n\n  const client = LarkClient.fromCfg(cfg, accountId).sdk;\n\n  const response = await client.im.messageResource.get({\n    path: {\n      message_id: messageId,\n      file_key: fileKey,\n    },\n    params: {\n      type,\n    },\n  });\n\n  const { buffer, contentType } = await extractBufferFromResponse(response);\n\n  // Attempt to extract file name from response headers.\n  let fileName: string | undefined;\n  if (response && typeof response === 'object') {\n    const resp = response as Record<string, any>;\n    const disposition = resp.headers?.['content-disposition'] ?? resp.headers?.['Content-Disposition'];\n    if (typeof disposition === 'string') {\n      const match = disposition.match(/filename[*]?=(?:UTF-8'')?[\"']?([^\"';\\n]+)/i);\n      if (match) {\n        fileName = decodeURIComponent(match[1].trim());\n      }\n    }\n  }\n\n  return { buffer, contentType, fileName };\n}\n\n// ---------------------------------------------------------------------------\n// uploadImageLark\n// ---------------------------------------------------------------------------\n\n/**\n * Upload an image to Feishu IM storage.\n *\n * Accepts either a Buffer containing the raw image bytes or a file\n * system path to read from.\n *\n * @param params.cfg       - Plugin configuration.\n * @param params.image     - A Buffer or local file path for the image.\n * @param params.imageType - The image usage type: \"message\" (default) or \"avatar\".\n * @param params.accountId - Optional account identifier.\n * @returns The assigned image_key.\n */\nexport async function uploadImageLark(params: {\n  cfg: OpenClawConfig;\n  image: Buffer | string;\n  imageType?: 'message' | 'avatar';\n  accountId?: string;\n}): Promise<UploadImageResult> {\n  const { cfg, image, imageType = 'message', accountId } = params;\n\n  const client = LarkClient.fromCfg(cfg, accountId).sdk;\n  const imageStream = Buffer.isBuffer(image) ? Readable.from(image) : fs.createReadStream(image);\n\n  const response = await client.im.image.create({\n    data: { image_type: imageType, image: imageStream as any },\n  });\n\n  const imageKey = (response as any)?.data?.image_key ?? (response as any)?.image_key;\n  if (!imageKey) {\n    throw new Error(\n      '[feishu-media] Image upload failed: no image_key in response. ' +\n        `Check that the image is a valid format (JPEG/PNG/GIF/BMP/WEBP). ` +\n        `Response: ${JSON.stringify(response).slice(0, 200)}`,\n    );\n  }\n\n  return { imageKey };\n}\n\n// ---------------------------------------------------------------------------\n// uploadFileLark\n// ---------------------------------------------------------------------------\n\n/**\n * Upload a file to Feishu IM storage.\n *\n * @param params.cfg       - Plugin configuration.\n * @param params.file      - A Buffer or local file path.\n * @param params.fileName  - The display name of the file.\n * @param params.fileType  - Feishu file type: \"opus\" | \"mp4\" | \"pdf\" | \"doc\" | \"xls\" | \"ppt\" | \"stream\".\n * @param params.duration  - Duration in milliseconds (for audio/video files).\n * @param params.accountId - Optional account identifier.\n * @returns The assigned file_key.\n */\nexport async function uploadFileLark(params: {\n  cfg: OpenClawConfig;\n  file: Buffer | string;\n  fileName: string;\n  fileType: 'opus' | 'mp4' | 'pdf' | 'doc' | 'xls' | 'ppt' | 'stream';\n  duration?: number;\n  accountId?: string;\n}): Promise<UploadFileResult> {\n  const { cfg, file, fileName, fileType, duration, accountId } = params;\n\n  const client = LarkClient.fromCfg(cfg, accountId).sdk;\n  const fileStream = Buffer.isBuffer(file) ? Readable.from(file) : fs.createReadStream(file);\n\n  const response = await client.im.file.create({\n    data: {\n      file_type: fileType,\n      file_name: fileName,\n      file: fileStream,\n      ...(duration !== undefined ? { duration: String(duration) } : {}),\n    } as any,\n  });\n\n  const fileKey = (response as any)?.data?.file_key ?? (response as any)?.file_key;\n  if (!fileKey) {\n    throw new Error(\n      `[feishu-media] File upload failed: no file_key in response for \"${fileName}\" (type=${fileType}). ` +\n        `Response: ${JSON.stringify(response).slice(0, 200)}`,\n    );\n  }\n\n  return { fileKey };\n}\n\n// ---------------------------------------------------------------------------\n// Shared media message sender\n// ---------------------------------------------------------------------------\n\n/**\n * Unified media message sender \u2014 handles both reply and create paths for\n * image / file / audio `msg_type` values.\n *\n * Mirrors {@link sendImMessage} in `deliver.ts` (which covers \"post\" and\n * \"interactive\"), extracted here to avoid a cross-module dependency.\n */\nasync function sendMediaMessage(params: {\n  client: ReturnType<typeof LarkClient.fromCfg>['sdk'];\n  to: string;\n  content: string;\n  msgType: 'image' | 'file' | 'audio' | 'media';\n  replyToMessageId?: string;\n  replyInThread?: boolean;\n}): Promise<SendMediaResult> {\n  const { client, to, content, msgType, replyToMessageId, replyInThread } = params;\n\n  if (replyToMessageId) {\n    const response = await client.im.message.reply({\n      path: { message_id: replyToMessageId },\n      data: { content, msg_type: msgType, reply_in_thread: replyInThread },\n    });\n    return {\n      messageId: response?.data?.message_id ?? '',\n      chatId: response?.data?.chat_id ?? '',\n    };\n  }\n\n  const target = normalizeFeishuTarget(to);\n  if (!target) {\n    throw new Error(\n      `[feishu-media] Cannot send ${msgType} message: \"${to}\" is not a valid target. ` +\n        `Expected a chat_id (oc_*), open_id (ou_*), or user_id.`,\n    );\n  }\n\n  const receiveIdType = resolveReceiveIdType(target);\n  const response = await client.im.message.create({\n    params: { receive_id_type: receiveIdType as any },\n    data: { receive_id: target, msg_type: msgType, content },\n  });\n\n  return {\n    messageId: response?.data?.message_id ?? '',\n    chatId: response?.data?.chat_id ?? '',\n  };\n}\n\n// ---------------------------------------------------------------------------\n// sendImageLark\n// ---------------------------------------------------------------------------\n\n/**\n * Send an image message to a chat or user.\n *\n * @param params.cfg              - Plugin configuration.\n * @param params.to               - Target identifier.\n * @param params.imageKey         - The image_key from a previous upload.\n * @param params.replyToMessageId - Optional message ID for threaded reply.\n * @param params.replyInThread    - When true, reply appears in thread.\n * @param params.accountId        - Optional account identifier.\n * @returns The send result.\n */\nexport async function sendImageLark(params: {\n  cfg: OpenClawConfig;\n  to: string;\n  imageKey: string;\n  replyToMessageId?: string;\n  replyInThread?: boolean;\n  accountId?: string;\n}): Promise<SendMediaResult> {\n  const { cfg, to, imageKey, replyToMessageId, replyInThread, accountId } = params;\n  log.info(`sendImageLark: target=${to}, imageKey=${imageKey}`);\n\n  const client = LarkClient.fromCfg(cfg, accountId).sdk;\n  const content = JSON.stringify({ image_key: imageKey });\n  return sendMediaMessage({ client, to, content, msgType: 'image', replyToMessageId, replyInThread });\n}\n\n// ---------------------------------------------------------------------------\n// sendFileLark\n// ---------------------------------------------------------------------------\n\n/**\n * Send a file message to a chat or user.\n *\n * @param params.cfg              - Plugin configuration.\n * @param params.to               - Target identifier.\n * @param params.fileKey          - The file_key from a previous upload.\n * @param params.replyToMessageId - Optional message ID for threaded reply.\n * @param params.replyInThread    - When true, reply appears in thread.\n * @param params.accountId        - Optional account identifier.\n * @returns The send result.\n */\nexport async function sendFileLark(params: {\n  cfg: OpenClawConfig;\n  to: string;\n  fileKey: string;\n  replyToMessageId?: string;\n  replyInThread?: boolean;\n  accountId?: string;\n}): Promise<SendMediaResult> {\n  const { cfg, to, fileKey, replyToMessageId, replyInThread, accountId } = params;\n  log.info(`sendFileLark: target=${to}, fileKey=${fileKey}`);\n\n  const client = LarkClient.fromCfg(cfg, accountId).sdk;\n  const content = JSON.stringify({ file_key: fileKey });\n  return sendMediaMessage({ client, to, content, msgType: 'file', replyToMessageId, replyInThread });\n}\n\n// ---------------------------------------------------------------------------\n// sendVideoLark\n// ---------------------------------------------------------------------------\n\n/**\n * Send a video message to a chat or user.\n *\n * Uses `msg_type: \"media\"` so Feishu renders the message as a playable\n * video instead of a file attachment.\n *\n * @param params.cfg              - Plugin configuration.\n * @param params.to               - Target identifier.\n * @param params.fileKey          - The file_key from a previous upload.\n * @param params.replyToMessageId - Optional message ID for threaded reply.\n * @param params.replyInThread    - When true, reply appears in thread.\n * @param params.accountId        - Optional account identifier.\n * @returns The send result.\n */\nexport async function sendVideoLark(params: {\n  cfg: OpenClawConfig;\n  to: string;\n  fileKey: string;\n  replyToMessageId?: string;\n  replyInThread?: boolean;\n  accountId?: string;\n}): Promise<SendMediaResult> {\n  const { cfg, to, fileKey, replyToMessageId, replyInThread, accountId } = params;\n  log.info(`sendVideoLark: target=${to}, fileKey=${fileKey}`);\n\n  const client = LarkClient.fromCfg(cfg, accountId).sdk;\n  const content = JSON.stringify({ file_key: fileKey });\n  return sendMediaMessage({ client, to, content, msgType: 'media', replyToMessageId, replyInThread });\n}\n\n// ---------------------------------------------------------------------------\n// sendAudioLark\n// ---------------------------------------------------------------------------\n\n/**\n * Send an audio message to a chat or user.\n *\n * Uses `msg_type: \"audio\"` so Feishu renders the message as a playable\n * voice bubble instead of a file attachment.\n *\n * @param params.cfg              - Plugin configuration.\n * @param params.to               - Target identifier.\n * @param params.fileKey          - The file_key from a previous upload.\n * @param params.replyToMessageId - Optional message ID for threaded reply.\n * @param params.replyInThread    - When true, reply appears in thread.\n * @param params.accountId        - Optional account identifier.\n * @returns The send result.\n */\nexport async function sendAudioLark(params: {\n  cfg: OpenClawConfig;\n  to: string;\n  fileKey: string;\n  replyToMessageId?: string;\n  replyInThread?: boolean;\n  accountId?: string;\n}): Promise<SendMediaResult> {\n  const { cfg, to, fileKey, replyToMessageId, replyInThread, accountId } = params;\n  log.info(`sendAudioLark: target=${to}, fileKey=${fileKey}`);\n\n  const client = LarkClient.fromCfg(cfg, accountId).sdk;\n  const content = JSON.stringify({ file_key: fileKey });\n  return sendMediaMessage({ client, to, content, msgType: 'audio', replyToMessageId, replyInThread });\n}\n\n// ---------------------------------------------------------------------------\n// detectFileType\n// ---------------------------------------------------------------------------\n\n/** Known image extensions. */\nconst IMAGE_EXTENSIONS = new Set(['.jpg', '.jpeg', '.png', '.gif', '.bmp', '.webp', '.ico', '.tiff', '.tif', '.heic']);\n\n/** Extension-to-Feishu-file-type mapping. */\nconst EXTENSION_TYPE_MAP: Record<string, 'opus' | 'mp4' | 'pdf' | 'doc' | 'xls' | 'ppt' | 'stream'> = {\n  '.opus': 'opus',\n  '.ogg': 'opus',\n  '.mp4': 'mp4',\n  '.mov': 'mp4',\n  '.avi': 'mp4',\n  '.mkv': 'mp4',\n  '.webm': 'mp4',\n  '.pdf': 'pdf',\n  '.doc': 'doc',\n  '.docx': 'doc',\n  '.xls': 'xls',\n  '.xlsx': 'xls',\n  '.csv': 'xls',\n  '.ppt': 'ppt',\n  '.pptx': 'ppt',\n};\n\n/**\n * Detect the Feishu file type from a file name extension.\n *\n * Returns one of the Feishu-supported file type strings, or \"stream\"\n * as a catch-all for unrecognised extensions.\n *\n * @param fileName - The file name (with extension).\n * @returns The detected file type.\n */\nexport function detectFileType(fileName: string): 'opus' | 'mp4' | 'pdf' | 'doc' | 'xls' | 'ppt' | 'stream' {\n  const ext = path.extname(fileName).toLowerCase();\n  return EXTENSION_TYPE_MAP[ext] ?? 'stream';\n}\n\n/**\n * Parse the duration (in milliseconds) from an OGG/Opus audio buffer.\n *\n * Scans backward from the end of the buffer to find the last OggS page\n * header, reads the granule position (absolute sample count), and divides\n * by 48 000 (the Opus standard sample rate) then converts to milliseconds.\n *\n * Returns `undefined` when the buffer cannot be parsed (e.g. truncated or\n * not actually OGG).  This is intentionally lenient so callers can fall\n * back gracefully.\n */\nexport function parseOggOpusDuration(buffer: Buffer): number | undefined {\n  // OggS magic bytes: 0x4f 0x67 0x67 0x53\n  const OGGS = Buffer.from('OggS');\n\n  // Scan backwards for the last OggS sync word.\n  let offset = -1;\n  for (let i = buffer.length - OGGS.length; i >= 0; i--) {\n    if (buffer[i] === 0x4f && buffer.compare(OGGS, 0, 4, i, i + 4) === 0) {\n      offset = i;\n      break;\n    }\n  }\n\n  if (offset < 0) return undefined;\n\n  // Granule position is at bytes 6..13 of the page header (8 bytes, little-endian).\n  const granuleOffset = offset + 6;\n  if (granuleOffset + 8 > buffer.length) return undefined;\n\n  // Read as two 32-bit LE values and combine (avoids BigInt for portability).\n  const lo = buffer.readUInt32LE(granuleOffset);\n  const hi = buffer.readUInt32LE(granuleOffset + 4);\n  const granule = hi * 0x1_0000_0000 + lo;\n\n  if (granule <= 0) return undefined;\n\n  return Math.ceil(granule / 48_000) * 1000;\n}\n\n/**\n * Parse the duration (in milliseconds) from an MP4 video buffer.\n *\n * Scans top-level boxes to locate the `moov` container, then finds the\n * `mvhd` (Movie Header) box inside it.  The `mvhd` box stores:\n *   - **timescale**: number of time-units per second\n *   - **duration**: total duration in those time-units\n *\n * Supports both version-0 (32-bit fields) and version-1 (64-bit fields)\n * of the `mvhd` box.\n *\n * Returns `undefined` when the buffer cannot be parsed (e.g. truncated,\n * `moov` at end of a huge file not fully buffered, or not actually MP4).\n */\nexport function parseMp4Duration(buffer: Buffer): number | undefined {\n  // Locate `moov` among top-level boxes.\n  const moovData = findBox(buffer, 0, buffer.length, 'moov');\n  if (!moovData) return undefined;\n\n  // Locate `mvhd` inside `moov`.\n  const mvhdData = findBox(buffer, moovData.dataStart, moovData.dataEnd, 'mvhd');\n  if (!mvhdData) return undefined;\n\n  const off = mvhdData.dataStart;\n  if (off + 1 > buffer.length) return undefined;\n\n  const version = buffer.readUInt8(off);\n\n  let timescale: number;\n  let duration: number;\n\n  if (version === 0) {\n    // version(1) + flags(3) + creation(4) + modification(4) + timescale(4) + duration(4) = 20 bytes\n    if (off + 20 > buffer.length) return undefined;\n    timescale = buffer.readUInt32BE(off + 12);\n    duration = buffer.readUInt32BE(off + 16);\n  } else {\n    // version(1) + flags(3) + creation(8) + modification(8) + timescale(4) + duration(8) = 32 bytes\n    if (off + 32 > buffer.length) return undefined;\n    timescale = buffer.readUInt32BE(off + 20);\n    // Read 64-bit duration as two 32-bit halves (avoids BigInt).\n    const hi = buffer.readUInt32BE(off + 24);\n    const lo = buffer.readUInt32BE(off + 28);\n    duration = hi * 0x1_0000_0000 + lo;\n  }\n\n  if (timescale <= 0 || duration <= 0) return undefined;\n\n  return Math.round((duration / timescale) * 1000);\n}\n\n/**\n * Find a box (atom) by its 4-character type within a range of the buffer.\n * Returns the data start/end offsets (after the 8-byte box header), or\n * `undefined` if not found.\n */\nfunction findBox(\n  buffer: Buffer,\n  start: number,\n  end: number,\n  type: string,\n): { dataStart: number; dataEnd: number } | undefined {\n  let offset = start;\n  while (offset + 8 <= end) {\n    const size = buffer.readUInt32BE(offset);\n    const boxType = buffer.toString('ascii', offset + 4, offset + 8);\n\n    // size == 0 means box extends to the end; size == 1 means 64-bit extended size.\n    let boxEnd: number;\n    let dataStart: number;\n    if (size === 0) {\n      boxEnd = end;\n      dataStart = offset + 8;\n    } else if (size === 1) {\n      if (offset + 16 > end) break;\n      const hi = buffer.readUInt32BE(offset + 8);\n      const lo = buffer.readUInt32BE(offset + 12);\n      boxEnd = offset + hi * 0x1_0000_0000 + lo;\n      dataStart = offset + 16;\n    } else {\n      if (size < 8) break; // invalid\n      boxEnd = offset + size;\n      dataStart = offset + 8;\n    }\n\n    if (boxType === type) {\n      return { dataStart, dataEnd: Math.min(boxEnd, end) };\n    }\n\n    offset = boxEnd;\n  }\n  return undefined;\n}\n\n/**\n * Check whether a file name has an image extension.\n */\nfunction isImageFileName(fileName: string): boolean {\n  const ext = path.extname(fileName).toLowerCase();\n  return IMAGE_EXTENSIONS.has(ext);\n}\n\n// ---------------------------------------------------------------------------\n// uploadAndSendMediaLark\n// ---------------------------------------------------------------------------\n\n/**\n * Upload and send a media file (image or general file) in one step.\n *\n * Accepts either a URL (remote or local `file://`) or a raw Buffer.\n * The function determines whether the media is an image (by extension)\n * and uses the appropriate upload/send path.\n *\n * @param params.cfg              - Plugin configuration.\n * @param params.to               - Target identifier.\n * @param params.mediaUrl         - URL of the media (http/https or local path).\n * @param params.mediaBuffer      - Raw bytes of the media (alternative to URL).\n * @param params.fileName         - File name (used for type detection and display).\n * @param params.replyToMessageId - Optional message ID for threaded reply.\n * @param params.accountId        - Optional account identifier.\n * @returns The send result.\n */\nexport async function uploadAndSendMediaLark(params: {\n  cfg: OpenClawConfig;\n  to: string;\n  mediaUrl?: string;\n  mediaBuffer?: Buffer;\n  fileName?: string;\n  replyToMessageId?: string;\n  replyInThread?: boolean;\n  accountId?: string;\n  /** Allowed root directories for local file access (SSRF prevention). */\n  mediaLocalRoots?: readonly string[];\n}): Promise<SendMediaResult> {\n  const { cfg, to, mediaUrl, mediaBuffer, fileName, replyToMessageId, replyInThread, accountId, mediaLocalRoots } =\n    params;\n\n  log.info(\n    `uploadAndSendMediaLark: target=${to}, ` +\n      `source=${mediaBuffer ? 'buffer' : (mediaUrl ?? '(none)')}, fileName=${fileName ?? '(auto)'}`,\n  );\n\n  // Resolve the media to a Buffer.\n  let buffer: Buffer;\n  let resolvedFileName = fileName ?? 'file';\n\n  if (mediaBuffer) {\n    buffer = mediaBuffer;\n    log.debug(`using provided buffer: ${buffer.length} bytes`);\n  } else if (mediaUrl) {\n    buffer = await fetchMediaBuffer(mediaUrl, mediaLocalRoots);\n    log.debug(`fetched media: ${buffer.length} bytes from \"${mediaUrl}\"`);\n\n    // Derive a file name from the URL if none was provided.\n    if (!fileName) {\n      const derivedFileName = resolveFileNameFromMediaUrl(mediaUrl);\n      if (derivedFileName) {\n        resolvedFileName = derivedFileName;\n      }\n    }\n  } else {\n    throw new Error(\n      '[feishu-media] uploadAndSendMediaLark requires either mediaUrl or mediaBuffer. ' +\n        'Provide a URL (http/https/file://) or a raw Buffer to send media.',\n    );\n  }\n\n  // Decide whether to send as image or file based on the extension.\n  const isImage = isImageFileName(resolvedFileName);\n  log.info(`resolved: fileName=\"${resolvedFileName}\", ` + `type=${isImage ? 'image' : 'file'}, size=${buffer.length}`);\n\n  if (isImage) {\n    // Upload as image, then send image message.\n    const { imageKey } = await uploadImageLark({\n      cfg,\n      image: buffer,\n      imageType: 'message',\n      accountId,\n    });\n    log.debug(`image uploaded: imageKey=${imageKey}`);\n\n    return sendImageLark({\n      cfg,\n      to,\n      imageKey,\n      replyToMessageId,\n      replyInThread,\n      accountId,\n    });\n  }\n\n  // Upload as file, then send as file or audio message.\n  const fileType = detectFileType(resolvedFileName);\n  const isAudio = fileType === 'opus';\n  const isVideo = fileType === 'mp4';\n  const duration = isAudio ? parseOggOpusDuration(buffer) : isVideo ? parseMp4Duration(buffer) : undefined;\n\n  const { fileKey } = await uploadFileLark({\n    cfg,\n    file: buffer,\n    fileName: resolvedFileName,\n    fileType,\n    duration,\n    accountId,\n  });\n  log.debug(\n    `file uploaded: fileKey=${fileKey}, ` +\n      `fileType=${fileType}${isAudio || isVideo ? `, duration=${duration ?? 'unknown'}ms` : ''}`,\n  );\n\n  if (isAudio) {\n    return sendAudioLark({ cfg, to, fileKey, replyToMessageId, replyInThread, accountId });\n  }\n\n  if (isVideo) {\n    return sendVideoLark({ cfg, to, fileKey, replyToMessageId, replyInThread, accountId });\n  }\n\n  return sendFileLark({\n    cfg,\n    to,\n    fileKey,\n    replyToMessageId,\n    replyInThread,\n    accountId,\n  });\n}\n\n// ---------------------------------------------------------------------------\n// SSRF protection \u2014 private/reserved IP filtering\n// ---------------------------------------------------------------------------\n\n/**\n * Check whether an IP address belongs to a private or reserved range.\n *\n * Blocks: 127.0.0.0/8, 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16,\n * 169.254.0.0/16 (link-local / cloud metadata), 0.0.0.0,\n * IPv6 loopback (::1), link-local (fe80::), ULA (fc/fd).\n */\nfunction isPrivateIP(ip: string): boolean {\n  // IPv4 private / reserved ranges\n  if (ip.startsWith('127.')) return true;\n  if (ip.startsWith('10.')) return true;\n  if (ip.startsWith('192.168.')) return true;\n  if (ip.startsWith('169.254.')) return true;\n  if (ip === '0.0.0.0') return true;\n  if (/^172\\.(1[6-9]|2[0-9]|3[01])\\./.test(ip)) return true;\n\n  // IPv6 private / reserved ranges\n  if (ip === '::1' || ip === '::') return true;\n  if (ip.startsWith('fe80:')) return true; // link-local\n  if (ip.startsWith('fc') || ip.startsWith('fd')) return true; // ULA\n  return false;\n}\n\n/**\n * Validate that a remote URL does not target private/reserved IP addresses.\n *\n * Resolves the hostname via DNS and checks all returned addresses.\n * Rejects URLs with non-http(s) protocols.\n */\nasync function validateRemoteUrl(raw: string): Promise<void> {\n  const parsed = new URL(raw);\n  if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {\n    throw new Error(\n      `[feishu-media] Unsupported protocol \"${parsed.protocol}\" in URL \"${raw}\". ` +\n        `Only http:// and https:// are allowed for remote media.`,\n    );\n  }\n\n  const hostname = parsed.hostname.replace(/^\\[|\\]$/g, '');\n\n  if (net.isIP(hostname)) {\n    // URL contains a literal IP address \u2014 check it directly.\n    if (isPrivateIP(hostname)) {\n      throw new Error(\n        `[feishu-media] Access to private/reserved IP \"${hostname}\" is denied (SSRF protection). ` +\n          `URL: \"${raw}\"`,\n      );\n    }\n  } else {\n    // Resolve the domain and check every address it points to.\n    try {\n      const addresses = await dns.resolve(hostname);\n      for (const addr of addresses) {\n        if (isPrivateIP(addr)) {\n          throw new Error(\n            `[feishu-media] Domain \"${hostname}\" resolves to private/reserved IP \"${addr}\" (SSRF protection). ` +\n              `URL: \"${raw}\"`,\n          );\n        }\n      }\n    } catch (err) {\n      if (err instanceof Error && err.message.includes('SSRF protection')) {\n        throw err;\n      }\n      // DNS failure is logged but not blocking \u2014 the subsequent fetch will\n      // produce a clear network error if the host is truly unreachable.\n      log.warn(`[feishu-media] DNS resolution failed for \"${hostname}\": ${err}`);\n    }\n  }\n}\n\n// ---------------------------------------------------------------------------\n// fetchMediaBuffer\n// ---------------------------------------------------------------------------\n\n/**\n * Fetch media bytes from a URL or local file path.\n *\n * Supports:\n * - `http://` and `https://` URLs (fetched via the global `fetch` API)\n * - `file://` URLs and bare file system paths (read from disk, gated\n *   by `localRoots` for path-traversal prevention)\n */\nasync function fetchMediaBuffer(urlOrPath: string, localRoots?: readonly string[]): Promise<Buffer> {\n  const raw = normalizeMediaUrlInput(urlOrPath);\n\n  // Local file path (absolute or relative, or file:// URL).\n  if (isLocalMediaPath(raw)) {\n    const filePath = raw.startsWith('file://') ? safeFileUrlToPath(raw) : raw;\n\n    if (localRoots !== undefined) {\n      // Explicit allowlist configured \u2014 enforce path restriction.\n      validateLocalMediaRoots(filePath, localRoots);\n    } else {\n      // Deny by default: unconfigured mediaLocalRoots must not allow\n      // arbitrary local file reads.\n      throw new Error(\n        `[feishu-media] Local file access denied for \"${filePath}\": ` +\n          `mediaLocalRoots is not configured. ` +\n          `Configure mediaLocalRoots to explicitly allow local file access.`,\n      );\n    }\n\n    const buf = fs.readFileSync(filePath);\n    log.debug(`local file read: \"${filePath}\", ${buf.length} bytes`);\n    return buf;\n  }\n\n  // Remote URL \u2014 validate against SSRF before fetching.\n  await validateRemoteUrl(raw);\n\n  const FETCH_TIMEOUT_MS = 30_000;\n  log.info(`fetching remote media: ${raw}`);\n  const response = await fetch(raw, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });\n  if (!response.ok) {\n    throw new Error(\n      `[feishu-media] Failed to fetch media from \"${raw}\": ` +\n        `HTTP ${response.status} ${response.statusText}. ` +\n        `Verify the URL is accessible and returns a valid media resource.`,\n    );\n  }\n\n  const arrayBuffer = await response.arrayBuffer();\n  log.debug(`remote media fetched: ${raw}, ${arrayBuffer.byteLength} bytes`);\n  return Buffer.from(arrayBuffer);\n}\n"],
+  "mappings": "AAYA,YAAY,SAAS;AACrB,YAAY,QAAQ;AACpB,YAAY,SAAS;AACrB,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,SAAS,gBAAgB;AAGzB,SAAS,kBAAkB;AAC3B,SAAS,uBAAuB,4BAA4B;AAC5D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;AAE3B,MAAM,MAAM,WAAW,gBAAgB;AAyEvC,eAAe,0BAA0B,UAAsE;AAE7G,MAAI,OAAO,SAAS,QAAQ,GAAG;AAC7B,WAAO,EAAE,QAAQ,SAAS;AAAA,EAC5B;AAGA,MAAI,oBAAoB,aAAa;AACnC,WAAO,EAAE,QAAQ,OAAO,KAAK,QAAQ,EAAE;AAAA,EACzC;AAGA,MAAI,YAAY,MAAM;AACpB,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AAEA,QAAM,OAAO;AACb,QAAM,cAAkC,KAAK,UAAU,cAAc,KAAK,KAAK,eAAe;AAG9F,MAAI,KAAK,QAAQ,MAAM;AACrB,QAAI,OAAO,SAAS,KAAK,IAAI,GAAG;AAC9B,aAAO,EAAE,QAAQ,KAAK,MAAM,YAAY;AAAA,IAC1C;AACA,QAAI,KAAK,gBAAgB,aAAa;AACpC,aAAO,EAAE,QAAQ,OAAO,KAAK,KAAK,IAAI,GAAG,YAAY;AAAA,IACvD;AAEA,QAAI,OAAO,KAAK,KAAK,SAAS,YAAY;AACxC,YAAM,MAAM,MAAM,eAAe,KAAK,IAAgB;AACtD,aAAO,EAAE,QAAQ,KAAK,YAAY;AAAA,IACpC;AAAA,EACF;AAGA,MAAI,OAAO,KAAK,sBAAsB,YAAY;AAChD,UAAM,SAAS,MAAM,KAAK,kBAAkB;AAC5C,UAAM,MAAM,MAAM,eAAe,MAAM;AACvC,WAAO,EAAE,QAAQ,KAAK,YAAY;AAAA,EACpC;AAGA,MAAI,OAAO,KAAK,cAAc,YAAY;AACxC,UAAM,SAAS,GAAG,OAAO;AACzB,UAAM,UAAU,KAAK,KAAK,QAAQ,gBAAgB,KAAK,IAAI,CAAC,EAAE;AAC9D,QAAI;AACF,YAAM,KAAK,UAAU,OAAO;AAC5B,YAAM,MAAM,GAAG,aAAa,OAAO;AACnC,aAAO,EAAE,QAAQ,KAAK,YAAY;AAAA,IACpC,UAAE;AAEA,UAAI;AACF,WAAG,WAAW,OAAO;AAAA,MACvB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAGA,MAAI,OAAQ,KAAa,OAAO,aAAa,MAAM,cAAc,OAAQ,KAAa,SAAS,YAAY;AACzG,UAAM,SAAmB,CAAC;AAC1B,UAAM,WACJ,OAAQ,KAAa,OAAO,aAAa,MAAM,aAC1C,OACD,wBAAwB,IAAiC;AAE/D,qBAAiB,SAAS,UAAU;AAClC,aAAO,KAAK,OAAO,KAAK,KAAK,CAAC;AAAA,IAChC;AACA,WAAO,EAAE,QAAQ,OAAO,OAAO,MAAM,GAAG,YAAY;AAAA,EACtD;AAGA,MAAI,OAAO,KAAK,SAAS,YAAY;AACnC,UAAM,MAAM,MAAM,eAAe,IAAgB;AACjD,WAAO,EAAE,QAAQ,KAAK,YAAY;AAAA,EACpC;AAEA,QAAM,IAAI,MAAM,iFAAiF;AACnG;AAKA,SAAS,eAAe,QAAmC;AACzD,SAAO,IAAI,QAAgB,CAAC,SAAS,WAAW;AAC9C,UAAM,SAAmB,CAAC;AAC1B,WAAO,GAAG,QAAQ,CAAC,UAA+B;AAChD,aAAO,KAAK,OAAO,KAAK,KAAK,CAAC;AAAA,IAChC,CAAC;AACD,WAAO,GAAG,OAAO,MAAM,QAAQ,OAAO,OAAO,MAAM,CAAC,CAAC;AACrD,WAAO,GAAG,SAAS,MAAM;AAAA,EAC3B,CAAC;AACH;AAKA,gBAAgB,wBAA2B,UAA8C;AACvF,SAAO,MAAM;AACX,UAAM,EAAE,OAAO,KAAK,IAAI,MAAM,SAAS,KAAK;AAC5C,QAAI,KAAM;AACV,UAAM;AAAA,EACR;AACF;AAgBA,eAAsB,8BAA8B,QAMT;AACzC,QAAM,EAAE,KAAK,WAAW,SAAS,MAAM,UAAU,IAAI;AAErD,QAAM,SAAS,WAAW,QAAQ,KAAK,SAAS,EAAE;AAElD,QAAM,WAAW,MAAM,OAAO,GAAG,gBAAgB,IAAI;AAAA,IACnD,MAAM;AAAA,MACJ,YAAY;AAAA,MACZ,UAAU;AAAA,IACZ;AAAA,IACA,QAAQ;AAAA,MACN;AAAA,IACF;AAAA,EACF,CAAC;AAED,QAAM,EAAE,QAAQ,YAAY,IAAI,MAAM,0BAA0B,QAAQ;AAGxE,MAAI;AACJ,MAAI,YAAY,OAAO,aAAa,UAAU;AAC5C,UAAM,OAAO;AACb,UAAM,cAAc,KAAK,UAAU,qBAAqB,KAAK,KAAK,UAAU,qBAAqB;AACjG,QAAI,OAAO,gBAAgB,UAAU;AACnC,YAAM,QAAQ,YAAY,MAAM,4CAA4C;AAC5E,UAAI,OAAO;AACT,mBAAW,mBAAmB,MAAM,CAAC,EAAE,KAAK,CAAC;AAAA,MAC/C;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,QAAQ,aAAa,SAAS;AACzC;AAkBA,eAAsB,gBAAgB,QAKP;AAC7B,QAAM,EAAE,KAAK,OAAO,YAAY,WAAW,UAAU,IAAI;AAEzD,QAAM,SAAS,WAAW,QAAQ,KAAK,SAAS,EAAE;AAClD,QAAM,cAAc,OAAO,SAAS,KAAK,IAAI,SAAS,KAAK,KAAK,IAAI,GAAG,iBAAiB,KAAK;AAE7F,QAAM,WAAW,MAAM,OAAO,GAAG,MAAM,OAAO;AAAA,IAC5C,MAAM,EAAE,YAAY,WAAW,OAAO,YAAmB;AAAA,EAC3D,CAAC;AAED,QAAM,WAAY,UAAkB,MAAM,aAAc,UAAkB;AAC1E,MAAI,CAAC,UAAU;AACb,UAAM,IAAI;AAAA,MACR,2IAEe,KAAK,UAAU,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAC;AAAA,IACvD;AAAA,EACF;AAEA,SAAO,EAAE,SAAS;AACpB;AAiBA,eAAsB,eAAe,QAOP;AAC5B,QAAM,EAAE,KAAK,MAAM,UAAU,UAAU,UAAU,UAAU,IAAI;AAE/D,QAAM,SAAS,WAAW,QAAQ,KAAK,SAAS,EAAE;AAClD,QAAM,aAAa,OAAO,SAAS,IAAI,IAAI,SAAS,KAAK,IAAI,IAAI,GAAG,iBAAiB,IAAI;AAEzF,QAAM,WAAW,MAAM,OAAO,GAAG,KAAK,OAAO;AAAA,IAC3C,MAAM;AAAA,MACJ,WAAW;AAAA,MACX,WAAW;AAAA,MACX,MAAM;AAAA,MACN,GAAI,aAAa,SAAY,EAAE,UAAU,OAAO,QAAQ,EAAE,IAAI,CAAC;AAAA,IACjE;AAAA,EACF,CAAC;AAED,QAAM,UAAW,UAAkB,MAAM,YAAa,UAAkB;AACxE,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI;AAAA,MACR,mEAAmE,QAAQ,WAAW,QAAQ,gBAC/E,KAAK,UAAU,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAC;AAAA,IACvD;AAAA,EACF;AAEA,SAAO,EAAE,QAAQ;AACnB;AAaA,eAAe,iBAAiB,QAOH;AAC3B,QAAM,EAAE,QAAQ,IAAI,SAAS,SAAS,kBAAkB,cAAc,IAAI;AAE1E,MAAI,kBAAkB;AACpB,UAAMA,YAAW,MAAM,OAAO,GAAG,QAAQ,MAAM;AAAA,MAC7C,MAAM,EAAE,YAAY,iBAAiB;AAAA,MACrC,MAAM,EAAE,SAAS,UAAU,SAAS,iBAAiB,cAAc;AAAA,IACrE,CAAC;AACD,WAAO;AAAA,MACL,WAAWA,WAAU,MAAM,cAAc;AAAA,MACzC,QAAQA,WAAU,MAAM,WAAW;AAAA,IACrC;AAAA,EACF;AAEA,QAAM,SAAS,sBAAsB,EAAE;AACvC,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR,8BAA8B,OAAO,cAAc,EAAE;AAAA,IAEvD;AAAA,EACF;AAEA,QAAM,gBAAgB,qBAAqB,MAAM;AACjD,QAAM,WAAW,MAAM,OAAO,GAAG,QAAQ,OAAO;AAAA,IAC9C,QAAQ,EAAE,iBAAiB,cAAqB;AAAA,IAChD,MAAM,EAAE,YAAY,QAAQ,UAAU,SAAS,QAAQ;AAAA,EACzD,CAAC;AAED,SAAO;AAAA,IACL,WAAW,UAAU,MAAM,cAAc;AAAA,IACzC,QAAQ,UAAU,MAAM,WAAW;AAAA,EACrC;AACF;AAiBA,eAAsB,cAAc,QAOP;AAC3B,QAAM,EAAE,KAAK,IAAI,UAAU,kBAAkB,eAAe,UAAU,IAAI;AAC1E,MAAI,KAAK,yBAAyB,EAAE,cAAc,QAAQ,EAAE;AAE5D,QAAM,SAAS,WAAW,QAAQ,KAAK,SAAS,EAAE;AAClD,QAAM,UAAU,KAAK,UAAU,EAAE,WAAW,SAAS,CAAC;AACtD,SAAO,iBAAiB,EAAE,QAAQ,IAAI,SAAS,SAAS,SAAS,kBAAkB,cAAc,CAAC;AACpG;AAiBA,eAAsB,aAAa,QAON;AAC3B,QAAM,EAAE,KAAK,IAAI,SAAS,kBAAkB,eAAe,UAAU,IAAI;AACzE,MAAI,KAAK,wBAAwB,EAAE,aAAa,OAAO,EAAE;AAEzD,QAAM,SAAS,WAAW,QAAQ,KAAK,SAAS,EAAE;AAClD,QAAM,UAAU,KAAK,UAAU,EAAE,UAAU,QAAQ,CAAC;AACpD,SAAO,iBAAiB,EAAE,QAAQ,IAAI,SAAS,SAAS,QAAQ,kBAAkB,cAAc,CAAC;AACnG;AAoBA,eAAsB,cAAc,QAOP;AAC3B,QAAM,EAAE,KAAK,IAAI,SAAS,kBAAkB,eAAe,UAAU,IAAI;AACzE,MAAI,KAAK,yBAAyB,EAAE,aAAa,OAAO,EAAE;AAE1D,QAAM,SAAS,WAAW,QAAQ,KAAK,SAAS,EAAE;AAClD,QAAM,UAAU,KAAK,UAAU,EAAE,UAAU,QAAQ,CAAC;AACpD,SAAO,iBAAiB,EAAE,QAAQ,IAAI,SAAS,SAAS,SAAS,kBAAkB,cAAc,CAAC;AACpG;AAoBA,eAAsB,cAAc,QAOP;AAC3B,QAAM,EAAE,KAAK,IAAI,SAAS,kBAAkB,eAAe,UAAU,IAAI;AACzE,MAAI,KAAK,yBAAyB,EAAE,aAAa,OAAO,EAAE;AAE1D,QAAM,SAAS,WAAW,QAAQ,KAAK,SAAS,EAAE;AAClD,QAAM,UAAU,KAAK,UAAU,EAAE,UAAU,QAAQ,CAAC;AACpD,SAAO,iBAAiB,EAAE,QAAQ,IAAI,SAAS,SAAS,SAAS,kBAAkB,cAAc,CAAC;AACpG;AAOA,MAAM,mBAAmB,oBAAI,IAAI,CAAC,QAAQ,SAAS,QAAQ,QAAQ,QAAQ,SAAS,QAAQ,SAAS,QAAQ,OAAO,CAAC;AAGrH,MAAM,qBAAgG;AAAA,EACpG,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AACX;AAWO,SAAS,eAAe,UAA6E;AAC1G,QAAM,MAAM,KAAK,QAAQ,QAAQ,EAAE,YAAY;AAC/C,SAAO,mBAAmB,GAAG,KAAK;AACpC;AAaO,SAAS,qBAAqB,QAAoC;AAEvE,QAAM,OAAO,OAAO,KAAK,MAAM;AAG/B,MAAI,SAAS;AACb,WAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,KAAK,GAAG,KAAK;AACrD,QAAI,OAAO,CAAC,MAAM,MAAQ,OAAO,QAAQ,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG;AACpE,eAAS;AACT;AAAA,IACF;AAAA,EACF;AAEA,MAAI,SAAS,EAAG,QAAO;AAGvB,QAAM,gBAAgB,SAAS;AAC/B,MAAI,gBAAgB,IAAI,OAAO,OAAQ,QAAO;AAG9C,QAAM,KAAK,OAAO,aAAa,aAAa;AAC5C,QAAM,KAAK,OAAO,aAAa,gBAAgB,CAAC;AAChD,QAAM,UAAU,KAAK,aAAgB;AAErC,MAAI,WAAW,EAAG,QAAO;AAEzB,SAAO,KAAK,KAAK,UAAU,IAAM,IAAI;AACvC;AAgBO,SAAS,iBAAiB,QAAoC;AAEnE,QAAM,WAAW,QAAQ,QAAQ,GAAG,OAAO,QAAQ,MAAM;AACzD,MAAI,CAAC,SAAU,QAAO;AAGtB,QAAM,WAAW,QAAQ,QAAQ,SAAS,WAAW,SAAS,SAAS,MAAM;AAC7E,MAAI,CAAC,SAAU,QAAO;AAEtB,QAAM,MAAM,SAAS;AACrB,MAAI,MAAM,IAAI,OAAO,OAAQ,QAAO;AAEpC,QAAM,UAAU,OAAO,UAAU,GAAG;AAEpC,MAAI;AACJ,MAAI;AAEJ,MAAI,YAAY,GAAG;AAEjB,QAAI,MAAM,KAAK,OAAO,OAAQ,QAAO;AACrC,gBAAY,OAAO,aAAa,MAAM,EAAE;AACxC,eAAW,OAAO,aAAa,MAAM,EAAE;AAAA,EACzC,OAAO;AAEL,QAAI,MAAM,KAAK,OAAO,OAAQ,QAAO;AACrC,gBAAY,OAAO,aAAa,MAAM,EAAE;AAExC,UAAM,KAAK,OAAO,aAAa,MAAM,EAAE;AACvC,UAAM,KAAK,OAAO,aAAa,MAAM,EAAE;AACvC,eAAW,KAAK,aAAgB;AAAA,EAClC;AAEA,MAAI,aAAa,KAAK,YAAY,EAAG,QAAO;AAE5C,SAAO,KAAK,MAAO,WAAW,YAAa,GAAI;AACjD;AAOA,SAAS,QACP,QACA,OACA,KACA,MACoD;AACpD,MAAI,SAAS;AACb,SAAO,SAAS,KAAK,KAAK;AACxB,UAAM,OAAO,OAAO,aAAa,MAAM;AACvC,UAAM,UAAU,OAAO,SAAS,SAAS,SAAS,GAAG,SAAS,CAAC;AAG/D,QAAI;AACJ,QAAI;AACJ,QAAI,SAAS,GAAG;AACd,eAAS;AACT,kBAAY,SAAS;AAAA,IACvB,WAAW,SAAS,GAAG;AACrB,UAAI,SAAS,KAAK,IAAK;AACvB,YAAM,KAAK,OAAO,aAAa,SAAS,CAAC;AACzC,YAAM,KAAK,OAAO,aAAa,SAAS,EAAE;AAC1C,eAAS,SAAS,KAAK,aAAgB;AACvC,kBAAY,SAAS;AAAA,IACvB,OAAO;AACL,UAAI,OAAO,EAAG;AACd,eAAS,SAAS;AAClB,kBAAY,SAAS;AAAA,IACvB;AAEA,QAAI,YAAY,MAAM;AACpB,aAAO,EAAE,WAAW,SAAS,KAAK,IAAI,QAAQ,GAAG,EAAE;AAAA,IACrD;AAEA,aAAS;AAAA,EACX;AACA,SAAO;AACT;AAKA,SAAS,gBAAgB,UAA2B;AAClD,QAAM,MAAM,KAAK,QAAQ,QAAQ,EAAE,YAAY;AAC/C,SAAO,iBAAiB,IAAI,GAAG;AACjC;AAsBA,eAAsB,uBAAuB,QAWhB;AAC3B,QAAM,EAAE,KAAK,IAAI,UAAU,aAAa,UAAU,kBAAkB,eAAe,WAAW,gBAAgB,IAC5G;AAEF,MAAI;AAAA,IACF,kCAAkC,EAAE,YACxB,cAAc,WAAY,YAAY,QAAS,cAAc,YAAY,QAAQ;AAAA,EAC/F;AAGA,MAAI;AACJ,MAAI,mBAAmB,YAAY;AAEnC,MAAI,aAAa;AACf,aAAS;AACT,QAAI,MAAM,0BAA0B,OAAO,MAAM,QAAQ;AAAA,EAC3D,WAAW,UAAU;AACnB,aAAS,MAAM,iBAAiB,UAAU,eAAe;AACzD,QAAI,MAAM,kBAAkB,OAAO,MAAM,gBAAgB,QAAQ,GAAG;AAGpE,QAAI,CAAC,UAAU;AACb,YAAM,kBAAkB,4BAA4B,QAAQ;AAC5D,UAAI,iBAAiB;AACnB,2BAAmB;AAAA,MACrB;AAAA,IACF;AAAA,EACF,OAAO;AACL,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AAGA,QAAM,UAAU,gBAAgB,gBAAgB;AAChD,MAAI,KAAK,uBAAuB,gBAAgB,WAAgB,UAAU,UAAU,MAAM,UAAU,OAAO,MAAM,EAAE;AAEnH,MAAI,SAAS;AAEX,UAAM,EAAE,SAAS,IAAI,MAAM,gBAAgB;AAAA,MACzC;AAAA,MACA,OAAO;AAAA,MACP,WAAW;AAAA,MACX;AAAA,IACF,CAAC;AACD,QAAI,MAAM,4BAA4B,QAAQ,EAAE;AAEhD,WAAO,cAAc;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAGA,QAAM,WAAW,eAAe,gBAAgB;AAChD,QAAM,UAAU,aAAa;AAC7B,QAAM,UAAU,aAAa;AAC7B,QAAM,WAAW,UAAU,qBAAqB,MAAM,IAAI,UAAU,iBAAiB,MAAM,IAAI;AAE/F,QAAM,EAAE,QAAQ,IAAI,MAAM,eAAe;AAAA,IACvC;AAAA,IACA,MAAM;AAAA,IACN,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,MAAI;AAAA,IACF,0BAA0B,OAAO,cACnB,QAAQ,GAAG,WAAW,UAAU,cAAc,YAAY,SAAS,OAAO,EAAE;AAAA,EAC5F;AAEA,MAAI,SAAS;AACX,WAAO,cAAc,EAAE,KAAK,IAAI,SAAS,kBAAkB,eAAe,UAAU,CAAC;AAAA,EACvF;AAEA,MAAI,SAAS;AACX,WAAO,cAAc,EAAE,KAAK,IAAI,SAAS,kBAAkB,eAAe,UAAU,CAAC;AAAA,EACvF;AAEA,SAAO,aAAa;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACH;AAaA,SAAS,YAAY,IAAqB;AAExC,MAAI,GAAG,WAAW,MAAM,EAAG,QAAO;AAClC,MAAI,GAAG,WAAW,KAAK,EAAG,QAAO;AACjC,MAAI,GAAG,WAAW,UAAU,EAAG,QAAO;AACtC,MAAI,GAAG,WAAW,UAAU,EAAG,QAAO;AACtC,MAAI,OAAO,UAAW,QAAO;AAC7B,MAAI,gCAAgC,KAAK,EAAE,EAAG,QAAO;AAGrD,MAAI,OAAO,SAAS,OAAO,KAAM,QAAO;AACxC,MAAI,GAAG,WAAW,OAAO,EAAG,QAAO;AACnC,MAAI,GAAG,WAAW,IAAI,KAAK,GAAG,WAAW,IAAI,EAAG,QAAO;AACvD,SAAO;AACT;AAQA,eAAe,kBAAkB,KAA4B;AAC3D,QAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,MAAI,OAAO,aAAa,WAAW,OAAO,aAAa,UAAU;AAC/D,UAAM,IAAI;AAAA,MACR,wCAAwC,OAAO,QAAQ,aAAa,GAAG;AAAA,IAEzE;AAAA,EACF;AAEA,QAAM,WAAW,OAAO,SAAS,QAAQ,YAAY,EAAE;AAEvD,MAAI,IAAI,KAAK,QAAQ,GAAG;AAEtB,QAAI,YAAY,QAAQ,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,iDAAiD,QAAQ,wCAC9C,GAAG;AAAA,MAChB;AAAA,IACF;AAAA,EACF,OAAO;AAEL,QAAI;AACF,YAAM,YAAY,MAAM,IAAI,QAAQ,QAAQ;AAC5C,iBAAW,QAAQ,WAAW;AAC5B,YAAI,YAAY,IAAI,GAAG;AACrB,gBAAM,IAAI;AAAA,YACR,0BAA0B,QAAQ,sCAAsC,IAAI,8BACjE,GAAG;AAAA,UAChB;AAAA,QACF;AAAA,MACF;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,eAAe,SAAS,IAAI,QAAQ,SAAS,iBAAiB,GAAG;AACnE,cAAM;AAAA,MACR;AAGA,UAAI,KAAK,6CAA6C,QAAQ,MAAM,GAAG,EAAE;AAAA,IAC3E;AAAA,EACF;AACF;AAcA,eAAe,iBAAiB,WAAmB,YAAiD;AAClG,QAAM,MAAM,uBAAuB,SAAS;AAG5C,MAAI,iBAAiB,GAAG,GAAG;AACzB,UAAM,WAAW,IAAI,WAAW,SAAS,IAAI,kBAAkB,GAAG,IAAI;AAEtE,QAAI,eAAe,QAAW;AAE5B,8BAAwB,UAAU,UAAU;AAAA,IAC9C,OAAO;AAGL,YAAM,IAAI;AAAA,QACR,gDAAgD,QAAQ;AAAA,MAG1D;AAAA,IACF;AAEA,UAAM,MAAM,GAAG,aAAa,QAAQ;AACpC,QAAI,MAAM,qBAAqB,QAAQ,MAAM,IAAI,MAAM,QAAQ;AAC/D,WAAO;AAAA,EACT;AAGA,QAAM,kBAAkB,GAAG;AAE3B,QAAM,mBAAmB;AACzB,MAAI,KAAK,0BAA0B,GAAG,EAAE;AACxC,QAAM,WAAW,MAAM,MAAM,KAAK,EAAE,QAAQ,YAAY,QAAQ,gBAAgB,EAAE,CAAC;AACnF,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,IAAI;AAAA,MACR,8CAA8C,GAAG,WACvC,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,IAElD;AAAA,EACF;AAEA,QAAM,cAAc,MAAM,SAAS,YAAY;AAC/C,MAAI,MAAM,yBAAyB,GAAG,KAAK,YAAY,UAAU,QAAQ;AACzE,SAAO,OAAO,KAAK,WAAW;AAChC;",
+  "names": ["response"]
+}

package/dist/src/messaging/outbound/outbound.js

@@ -0,0 +1,95 @@
+import { LarkClient } from "../../core/lark-client";
+import { sendTextLark, sendMediaLark, sendCardLark } from "./deliver";
+import { larkLogger } from "../../core/lark-logger";
+const log = larkLogger("outbound/outbound");
+function resolveFeishuSendContext(params) {
+  return {
+    cfg: params.cfg,
+    replyToMessageId: params.replyToId ?? void 0,
+    replyInThread: Boolean(params.threadId),
+    accountId: params.accountId ?? void 0
+  };
+}
+const feishuOutbound = {
+  deliveryMode: "direct",
+  chunker: (text, limit) => LarkClient.runtime.channel.text.chunkMarkdownText(text, limit),
+  chunkerMode: "markdown",
+  textChunkLimit: 15e3,
+  sendText: async ({ cfg, to, text, accountId, replyToId, threadId }) => {
+    log.info(`sendText: target=${to}, textLength=${text.length}`);
+    const ctx = resolveFeishuSendContext({ cfg, accountId, replyToId, threadId });
+    const result = await sendTextLark({ ...ctx, to, text });
+    return { channel: "feishu", ...result };
+  },
+  sendMedia: async ({ cfg, to, text, mediaUrl, mediaLocalRoots, accountId, replyToId, threadId }) => {
+    log.info(`sendMedia: target=${to}, hasText=${Boolean(text?.trim())}, mediaUrl=${mediaUrl ?? "(none)"}`);
+    const ctx = resolveFeishuSendContext({ cfg, accountId, replyToId, threadId });
+    if (text?.trim()) {
+      await sendTextLark({ ...ctx, to, text });
+    }
+    if (!mediaUrl) {
+      log.info("sendMedia: no mediaUrl provided, falling back to text-only");
+      const result2 = await sendTextLark({ ...ctx, to, text: text ?? "" });
+      return { channel: "feishu", ...result2 };
+    }
+    const result = await sendMediaLark({ ...ctx, to, mediaUrl, mediaLocalRoots });
+    return {
+      channel: "feishu",
+      messageId: result.messageId,
+      chatId: result.chatId,
+      ...result.warning ? { meta: { warnings: [result.warning] } } : {}
+    };
+  },
+  sendPayload: async ({ cfg, to, payload, mediaLocalRoots, accountId, replyToId, threadId }) => {
+    const ctx = resolveFeishuSendContext({ cfg, accountId, replyToId, threadId });
+    const feishuData = payload.channelData?.feishu;
+    const text = payload.text ?? "";
+    const mediaUrls = payload.mediaUrls?.length ? payload.mediaUrls : payload.mediaUrl ? [payload.mediaUrl] : [];
+    log.info(
+      `sendPayload: target=${to}, textLength=${text.length}, mediaCount=${mediaUrls.length}, hasCard=${Boolean(feishuData?.card)}`
+    );
+    if (feishuData?.card) {
+      if (text.trim()) {
+        await sendTextLark({ ...ctx, to, text });
+      }
+      const cardResult = await sendCardLark({ ...ctx, to, card: feishuData.card });
+      const warnings2 = [];
+      for (const mediaUrl of mediaUrls) {
+        const mediaResult = await sendMediaLark({ ...ctx, to, mediaUrl, mediaLocalRoots });
+        if (mediaResult.warning) {
+          warnings2.push(mediaResult.warning);
+        }
+      }
+      return {
+        channel: "feishu",
+        messageId: cardResult.messageId,
+        chatId: cardResult.chatId,
+        ...warnings2.length > 0 ? { meta: { warnings: warnings2 } } : {}
+      };
+    }
+    if (mediaUrls.length === 0) {
+      const result = await sendTextLark({ ...ctx, to, text });
+      return { channel: "feishu", ...result };
+    }
+    if (text.trim()) {
+      await sendTextLark({ ...ctx, to, text });
+    }
+    const warnings = [];
+    let lastResult;
+    for (const mediaUrl of mediaUrls) {
+      lastResult = await sendMediaLark({ ...ctx, to, mediaUrl, mediaLocalRoots });
+      if (lastResult.warning) {
+        warnings.push(lastResult.warning);
+      }
+    }
+    return {
+      channel: "feishu",
+      ...lastResult ?? { messageId: "", chatId: "" },
+      ...warnings.length > 0 ? { meta: { warnings } } : {}
+    };
+  }
+};
+export {
+  feishuOutbound
+};
+//# sourceMappingURL=outbound.js.map