@lark-project/openclaw-lark-project 2026.3.173 → 2026.3.174

package/dist/src/tools/project-oauth.js

@@ -477,7 +477,7 @@ async function handleProjectAuthCardAction(data, cfg, accountId) {
               chat_id: t.chatId,
               chat_type: t.chatType ?? "p2p",
               message_type: "text",
-              content: JSON.stringify({ text: "\u6211\u5DF2\u5B8C\u6210\u98DE\u4E66\u9879\u76EE\u6388\u6743\uFF0C\u8BF7\u7EE7\u7EED\u6267\u884C\u4E4B\u524D\u7684\u64CD\u4F5C\u3002" }),
+              content: JSON.stringify({ text: "[\u7CFB\u7EDF\u901A\u77E5] \u98DE\u4E66\u9879\u76EE\u6388\u6743\u5DF2\u6210\u529F\u5B8C\u6210\uFF0Ctoken \u5DF2\u4FDD\u5B58\u751F\u6548\u3002\u8BF7\u76F4\u63A5\u7EE7\u7EED\u6267\u884C\u7528\u6237\u4E4B\u524D\u8BF7\u6C42\u7684\u64CD\u4F5C\uFF0C\u65E0\u9700\u518D\u8C03\u7528 feishu_project_oauth \u5DE5\u5177\uFF08\u4E0D\u8981 revoke\u3001\u4E0D\u8981 authorize\u3001\u4E0D\u8981 status\uFF09\u3002" }),
               thread_id: t.threadId
             }
           };
@@ -544,7 +544,7 @@ async function handleProjectAuthCardAction(data, cfg, accountId) {
               chat_id: t.chatId,
               chat_type: t.chatType ?? "p2p",
               message_type: "text",
-              content: JSON.stringify({ text: `\u98DE\u4E66\u9879\u76EE\u6388\u6743\u5931\u8D25\uFF1A${errMsg}\u3002\u8BF7\u91CD\u65B0\u53D1\u8D77\u6388\u6743\u3002` }),
+              content: JSON.stringify({ text: `[\u7CFB\u7EDF\u901A\u77E5] \u98DE\u4E66\u9879\u76EE\u6388\u6743\u5931\u8D25\uFF1A${errMsg}\u3002\u8BF7\u544A\u77E5\u7528\u6237\u6388\u6743\u5931\u8D25\u539F\u56E0\uFF0C\u5E76\u5EFA\u8BAE\u7528\u6237\u91CD\u65B0\u53D1\u8D77\u6388\u6743\u3002` }),
               thread_id: t.threadId
             }
           };
@@ -612,10 +612,16 @@ async function handleProjectDomainCardAction(data, cfg, accountId) {
   let domain;
   let envLabel;
   if (domainCustom) {
-    if (!domainCustom.startsWith("https://")) {
-      return { toast: { type: "error", content: "\u81EA\u5B9A\u4E49\u57DF\u540D\u5FC5\u987B\u4EE5 https:// \u5F00\u5934" } };
+    let parsed;
+    try {
+      parsed = new URL(domainCustom);
+    } catch {
+      return { toast: { type: "error", content: "\u65E0\u6548\u7684 URL\uFF0C\u8BF7\u8F93\u5165\u4EE5 https:// \u5F00\u5934\u7684\u57DF\u540D\u6216\u94FE\u63A5" } };
+    }
+    if (parsed.protocol !== "https:") {
+      return { toast: { type: "error", content: "\u4EC5\u652F\u6301 https \u534F\u8BAE" } };
     }
-    domain = domainCustom.replace(/\/+$/, "");
+    domain = parsed.origin;
     envLabel = domain;
   } else {
     domain = domainPreset ?? "feishu";
@@ -670,7 +676,7 @@ async function handleProjectDomainCardAction(data, cfg, accountId) {
             chat_id: t.chatId,
             chat_type: t.chatType ?? "p2p",
             message_type: "text",
-            content: JSON.stringify({ text: "\u5DF2\u9009\u62E9\u98DE\u4E66\u9879\u76EE\u73AF\u5883\uFF0C\u8BF7\u7EE7\u7EED\u6267\u884C\u4E4B\u524D\u7684\u64CD\u4F5C\u3002" }),
+            content: JSON.stringify({ text: "[\u7CFB\u7EDF\u901A\u77E5] \u7528\u6237\u5DF2\u9009\u62E9\u98DE\u4E66\u9879\u76EE\u73AF\u5883\uFF0C\u914D\u7F6E\u5DF2\u4FDD\u5B58\u3002\u8BF7\u8C03\u7528 feishu_project_oauth \u5DE5\u5177\u7684 authorize \u64CD\u4F5C\u7EE7\u7EED\u5B8C\u6210\u6388\u6743\u6D41\u7A0B\u3002" }),
             thread_id: t.threadId
           }
         };

package/dist/src/tools/project-oauth.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/tools/project-oauth.ts"],
-  "sourcesContent": ["/**\n * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates\n * SPDX-License-Identifier: MIT\n *\n * feishu_project_oauth \u2014 \u98DE\u4E66\u9879\u76EE\uFF08Meego\uFF09\u72EC\u7ACB OAuth \u6388\u6743\u5DE5\u5177\u3002\n *\n * \u57FA\u4E8E MCP \u6807\u51C6 OAuth\uFF08Authorization Code + PKCE + \u52A8\u6001\u5BA2\u6237\u7AEF\u6CE8\u518C\uFF09\uFF0C\n * \u4E0D\u9700\u8981 appId/appSecret\u3002\n *\n * \u5355\u4E00 authorize action \u81EA\u52A8\u5224\u65AD\u8FD0\u884C\u73AF\u5883\uFF1A\n *   - \u672C\u5730\uFF08\u80FD\u7ED1\u7AEF\u53E3\uFF09\uFF1A\u542F\u52A8\u56DE\u8C03\u670D\u52A1\u5668\uFF0C\u6D4F\u89C8\u5668\u91CD\u5B9A\u5411\u81EA\u52A8\u5B8C\u6210\n *   - \u8FDC\u7A0B\uFF08\u7ED1\u7AEF\u53E3\u5931\u8D25 / headless\uFF09\uFF1A\u964D\u7EA7\u4E3A\u53D1\u9001\u6388\u6743\u94FE\u63A5\uFF0C\u7B49\u7528\u6237\u56DE\u4F20 callback URL\n *\n * Actions:\n *   - authorize      : \u53D1\u8D77\u6388\u6743\uFF08\u81EA\u52A8\u9009\u62E9\u672C\u5730/\u8FDC\u7A0B\u6A21\u5F0F\uFF09\n *   - complete_auth  : \u8FDC\u7A0B\u6A21\u5F0F\u4E0B\uFF0C\u7528\u6237\u56DE\u4F20 callback URL \u5B8C\u6210\u6388\u6743\n *   - status         : \u68C0\u67E5\u98DE\u4E66\u9879\u76EE\u6388\u6743\u72B6\u6001\n *   - revoke         : \u64A4\u9500\u98DE\u4E66\u9879\u76EE\u6388\u6743\n */\n\nimport type { OpenClawPluginApi } from 'openclaw/plugin-sdk';\nimport { Type } from '@sinclair/typebox';\nimport { getTicket } from '../core/lark-ticket';\nimport { larkLogger } from '../core/lark-logger';\nimport { formatLarkError } from '../core/api-error';\nimport {\n  startLocalAuthFlow,\n  prepareRemoteAuth,\n  completeRemoteAuth,\n  type ProjectAuthSession,\n} from '../core/project-auth';\nimport {\n  getProjectStoredToken,\n  setProjectStoredToken,\n  removeProjectStoredToken,\n  projectTokenStatus,\n  getProjectClientId,\n} from '../core/project-token-store';\nimport type { StoredUAToken } from '../core/token-store';\nimport { getProjectMcpEndpoint, getProjectDomainFromConfig } from '../tools/mcp/project/endpoint';\nimport { createCardEntity, sendCardByCardId, updateCardKitCardForAuth } from '../card/cardkit';\nimport { buildAuthCard, buildAuthSuccessCard, buildAuthFailedCard, buildProjectAuthCard, buildProjectDomainCard, buildProjectDomainConfirmedCard } from './oauth-cards';\nimport { LarkClient } from '../core/lark-client';\nimport { json } from './oapi/helpers';\nimport { handleFeishuMessage } from '../messaging/inbound/handler';\nimport { enqueueFeishuChatTask } from '../channel/chat-queue';\nimport { withTicket } from '../core/lark-ticket';\n\nconst log = larkLogger('tools/project-oauth');\n\n// ---------------------------------------------------------------------------\n// Schema\n// ---------------------------------------------------------------------------\n\nconst FeishuProjectOAuthSchema = Type.Object(\n  {\n    action: Type.Union(\n      [\n        Type.Literal('authorize'),\n        Type.Literal('complete_auth'),\n        Type.Literal('status'),\n        Type.Literal('revoke'),\n        Type.Literal('select_env'),\n      ],\n      {\n        description:\n          'authorize: \u53D1\u8D77\u98DE\u4E66\u9879\u76EE\u6388\u6743; ' +\n          'complete_auth: \u8FDC\u7A0B\u6A21\u5F0F\u4E0B\u56DE\u4F20 callback URL \u5B8C\u6210\u6388\u6743; ' +\n          'status: \u68C0\u67E5\u6388\u6743\u72B6\u6001; revoke: \u64A4\u9500\u6388\u6743; ' +\n          'select_env: \u9009\u62E9\u6216\u66F4\u6362\u98DE\u4E66\u9879\u76EE\u73AF\u5883\uFF08\u98DE\u4E66\u9879\u76EE/Meegle/\u81EA\u5B9A\u4E49\uFF09',\n      },\n    ),\n    callback_url: Type.Optional(\n      Type.String({\n        description: '\u4EC5 complete_auth \u65F6\u9700\u8981\uFF1A\u7528\u6237\u4ECE\u6D4F\u89C8\u5668\u5730\u5740\u680F\u590D\u5236\u7684\u5B8C\u6574\u56DE\u8C03 URL',\n      }),\n    ),\n  },\n  {\n    description:\n      '\u98DE\u4E66\u9879\u76EE\uFF08Meego\uFF09\u72EC\u7ACB\u6388\u6743\u5DE5\u5177\u3002\u98DE\u4E66\u9879\u76EE\u7684\u6388\u6743\u4E0E\u98DE\u4E66 IM/\u6587\u6863\u7684\u6388\u6743\u4E0D\u5171\u4EAB\uFF0C\u9996\u6B21\u4F7F\u7528\u9700\u5355\u72EC\u6388\u6743\u3002',\n  },\n);\n\ninterface FeishuProjectOAuthParams {\n  action: 'authorize' | 'complete_auth' | 'status' | 'revoke' | 'select_env';\n  callback_url?: string;\n}\n\n// ---------------------------------------------------------------------------\n// In-flight state\n// ---------------------------------------------------------------------------\n\ninterface PendingLocalFlow {\n  controller: AbortController;\n  cardId: string;\n  sequence: number;\n  superseded: boolean;\n  close: () => Promise<void>;\n}\n\nconst pendingLocalFlows = new Map<string, PendingLocalFlow>();\ninterface PendingRemoteSession {\n  session: ProjectAuthSession;\n  cardId?: string;\n  senderOpenId: string;\n  ticket: {\n    messageId: string;\n    chatId: string;\n    accountId: string;\n    chatType?: 'p2p' | 'group';\n    threadId?: string;\n  };\n}\n\n/** userKey \u2192 PendingRemoteSession */\nconst pendingRemoteSessions = new Map<string, PendingRemoteSession>();\n\nconst PENDING_SESSION_TTL_MS = 10 * 60 * 1000; // 10 min\n\ninterface PendingDomainSelection {\n  senderOpenId: string;\n  cardId?: string;\n  ticket: { messageId: string; chatId: string; accountId: string; chatType?: string; threadId?: string };\n}\n\nconst pendingDomainSelections = new Map<string, PendingDomainSelection>();\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\nfunction fk(userOpenId: string): string {\n  return `project:${userOpenId}`;\n}\n\nfunction buildTokenFromOAuth(\n  userOpenId: string,\n  clientId: string,\n  tokens: { access_token: string; refresh_token?: string; expires_in?: number; scope?: string },\n): StoredUAToken {\n  const now = Date.now();\n  const expiresIn = tokens.expires_in ?? 7200;\n  const refreshExpiresIn = 30 * 24 * 3600;\n  return {\n    userOpenId,\n    appId: clientId,\n    accessToken: tokens.access_token,\n    refreshToken: tokens.refresh_token ?? '',\n    expiresAt: now + expiresIn * 1000,\n    refreshExpiresAt: now + refreshExpiresIn * 1000,\n    scope: tokens.scope ?? '',\n    grantedAt: now,\n  };\n}\n\nasync function isAlreadyAuthorized(senderOpenId: string): Promise<boolean> {\n  const clientId = await getProjectClientId(senderOpenId);\n  if (!clientId) return false;\n  const existing = await getProjectStoredToken(clientId, senderOpenId);\n  return !!existing && projectTokenStatus(existing) !== 'expired';\n}\n\n/**\n * \u5C1D\u8BD5\u542F\u52A8\u672C\u5730\u56DE\u8C03\u670D\u52A1\u5668\u3002\n * \u6210\u529F\u8FD4\u56DE flow \u5BF9\u8C61\uFF1B\u5931\u8D25\uFF08\u7AEF\u53E3\u7ED1\u5B9A\u5931\u8D25\u7B49\uFF09\u8FD4\u56DE null\uFF0C\u8C03\u7528\u65B9\u964D\u7EA7\u4E3A\u8FDC\u7A0B\u6A21\u5F0F\u3002\n */\nasync function tryLocalAuth(mcpEndpoint: string) {\n  try {\n    return await startLocalAuthFlow(mcpEndpoint);\n  } catch (err) {\n    log.info(`local auth unavailable, falling back to remote: ${err instanceof Error ? err.message : err}`);\n    return null;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Registration\n// ---------------------------------------------------------------------------\n\nexport function registerFeishuProjectOAuthTool(api: OpenClawPluginApi) {\n  if (!api.config) return;\n\n  const cfg = api.config;\n\n  api.registerTool(\n    {\n      name: 'feishu_project_oauth',\n      label: 'Feishu Project OAuth',\n      description:\n        '\u98DE\u4E66\u9879\u76EE\uFF08Meego\uFF09\u72EC\u7ACB\u6388\u6743\u5DE5\u5177\u3002' +\n        '\u98DE\u4E66\u9879\u76EE\u7684\u6388\u6743\u4E0E\u98DE\u4E66 IM/\u6587\u6863\u7684\u6388\u6743\u4E0D\u5171\u4EAB\uFF0C\u9996\u6B21\u4F7F\u7528\u98DE\u4E66\u9879\u76EE\u529F\u80FD\u65F6\u9700\u8981\u5355\u72EC\u6388\u6743\u3002' +\n        '\u8C03\u7528 authorize \u81EA\u52A8\u53D1\u8D77\u6388\u6743\u6D41\u7A0B\u3002\u5982\u679C\u63D0\u793A\u9700\u8981\u624B\u52A8\u56DE\u4F20 URL\uFF0C\u518D\u8C03\u7528 complete_auth\u3002',\n      parameters: FeishuProjectOAuthSchema,\n\n      async execute(_toolCallId: string, params: unknown) {\n        const p = params as FeishuProjectOAuthParams;\n\n        const ticket = getTicket();\n        const senderOpenId = ticket?.senderOpenId;\n        if (!senderOpenId) {\n          return json({\n            error: '\u65E0\u6CD5\u83B7\u53D6\u5F53\u524D\u7528\u6237\u8EAB\u4EFD\uFF08senderOpenId\uFF09\uFF0C\u8BF7\u5728\u98DE\u4E66\u5BF9\u8BDD\u4E2D\u4F7F\u7528\u6B64\u5DE5\u5177\u3002',\n          });\n        }\n\n        const accountId = ticket.accountId;\n\n        try {\n          switch (p.action) {\n            // ---------------------------------------------------------------\n            // STATUS\n            // ---------------------------------------------------------------\n            case 'status': {\n              const clientId = await getProjectClientId(senderOpenId);\n              if (!clientId) {\n                return json({\n                  authorized: false,\n                  message: '\u98DE\u4E66\u9879\u76EE\u672A\u6388\u6743\u3002\u8BF7\u8C03\u7528 authorize \u53D1\u8D77\u6388\u6743\u3002',\n                });\n              }\n              const existing = await getProjectStoredToken(clientId, senderOpenId);\n              if (!existing) {\n                return json({\n                  authorized: false,\n                  message: '\u98DE\u4E66\u9879\u76EE\u672A\u6388\u6743\u3002\u8BF7\u8C03\u7528 authorize \u53D1\u8D77\u6388\u6743\u3002',\n                });\n              }\n              const status = projectTokenStatus(existing);\n              return json({\n                authorized: status !== 'expired',\n                token_status: status,\n                scope: existing.scope,\n                granted_at: existing.grantedAt ? new Date(existing.grantedAt).toISOString() : undefined,\n                expires_at: existing.expiresAt ? new Date(existing.expiresAt).toISOString() : undefined,\n              });\n            }\n\n            // ---------------------------------------------------------------\n            // AUTHORIZE\uFF08\u81EA\u52A8\u9009\u62E9\u672C\u5730/\u8FDC\u7A0B\uFF09\n            // ---------------------------------------------------------------\n            case 'authorize': {\n              if (await isAlreadyAuthorized(senderOpenId)) {\n                return json({\n                  success: true,\n                  message: '\u98DE\u4E66\u9879\u76EE\u5DF2\u6388\u6743\uFF0C\u65E0\u9700\u91CD\u590D\u6388\u6743\u3002',\n                  authorized: true,\n                });\n              }\n\n              const chatId = ticket.chatId;\n              if (!chatId) {\n                return json({ error: '\u65E0\u6CD5\u786E\u5B9A\u53D1\u9001\u76EE\u6807' });\n              }\n\n              // Cancel any existing local flow\n              const key = fk(senderOpenId);\n              const oldLocal = pendingLocalFlows.get(key);\n              if (oldLocal) {\n                oldLocal.superseded = true;\n                oldLocal.controller.abort();\n                await oldLocal.close().catch(() => {});\n                pendingLocalFlows.delete(key);\n              }\n              pendingRemoteSessions.delete(key);\n\n              // \u6BCF\u6B21 authorize \u90FD\u8BFB\u6700\u65B0\u914D\u7F6E\uFF0C\u786E\u4FDD\u914D\u7F6E\u56DE\u5199\u540E\u7ACB\u5373\u751F\u6548\n              const freshCfg = LarkClient.runtime.config.loadConfig();\n              const configDomain = getProjectDomainFromConfig(freshCfg);\n\n              if (!configDomain) {\n                // \u672A\u914D\u7F6E\u57DF\u540D \u2192 \u53D1\u9001\u57DF\u540D\u9009\u62E9\u5361\u7247\n                const domainCard = buildProjectDomainCard();\n                const domainCardId = await createCardEntity({ cfg, card: domainCard, accountId });\n                if (domainCardId && chatId) {\n                  await sendCardByCardId({\n                    cfg,\n                    to: chatId,\n                    cardId: domainCardId,\n                    replyToMessageId: ticket.messageId?.startsWith('om_') ? ticket.messageId : undefined,\n                    replyInThread: Boolean(ticket.threadId),\n                    accountId,\n                  });\n                }\n                pendingDomainSelections.set(fk(senderOpenId), {\n                  senderOpenId,\n                  cardId: domainCardId ?? undefined,\n                  ticket: { messageId: ticket.messageId, chatId, accountId, chatType: ticket.chatType, threadId: ticket.threadId },\n                });\n                return json({\n                  pending: 'domain_selection',\n                  message: '\u5DF2\u53D1\u9001\u73AF\u5883\u9009\u62E9\u5361\u7247\uFF0C\u8BF7\u7528\u6237\u5728\u5361\u7247\u4E2D\u9009\u62E9\u98DE\u4E66\u9879\u76EE\u73AF\u5883\u3002\u9009\u62E9\u540E\u7CFB\u7EDF\u5C06\u81EA\u52A8\u7EE7\u7EED\u6388\u6743\u6D41\u7A0B\u3002\u8BF7\u7B49\u5F85\u7528\u6237\u5B8C\u6210\u5361\u7247\u64CD\u4F5C\uFF0C\u4E0D\u8981\u5EFA\u8BAE\u5176\u4ED6\u65B9\u6848\u3002',\n                });\n              }\n\n              // \u7528\u6700\u65B0\u914D\u7F6E\u89E3\u6790 endpoint\n              const mcpEndpoint = getProjectMcpEndpoint(freshCfg);\n\n              // \u98DE\u4E66 Bot \u573A\u666F\uFF1A\u56DE\u8C03\u670D\u52A1\u5668\u8FD0\u884C\u5728\u670D\u52A1\u7AEF\uFF0C127.0.0.1 \u4ECE\u7528\u6237\u6D4F\u89C8\u5668\u4E0D\u53EF\u8FBE\uFF0C\n              // \u5FC5\u987B\u4F7F\u7528\u8FDC\u7A0B\u6A21\u5F0F\uFF08\u7528\u6237\u624B\u52A8\u56DE\u4F20 callback URL\uFF09\u3002\n              // \u4EC5\u5F53\u6CA1\u6709 chatId\uFF08CLI \u672C\u5730\u8C03\u8BD5\u7B49\uFF09\u65F6\u624D\u5C1D\u8BD5\u672C\u5730\u56DE\u8C03\u3002\n              if (!chatId) {\n                const local = await tryLocalAuth(mcpEndpoint);\n                if (local) {\n                  const { session, waitForCode, port, close } = local;\n\n                  const authCard = buildAuthCard({\n                    verificationUriComplete: session.authorizationUrl,\n                    expiresMin: 5,\n                  });\n                  const localCardId = await createCardEntity({ cfg, card: authCard, accountId });\n                  if (!localCardId) {\n                    await close();\n                    return json({ error: '\u521B\u5EFA\u6388\u6743\u5361\u7247\u5931\u8D25' });\n                  }\n\n                  const abortController = new AbortController();\n                  let seq = 1;\n                  const currentFlow: PendingLocalFlow = {\n                    controller: abortController,\n                    cardId: localCardId,\n                    sequence: seq,\n                    superseded: false,\n                    close,\n                  };\n                  pendingLocalFlows.set(key, currentFlow);\n\n                  waitForCode()\n                    .then(async (result) => {\n                      if (currentFlow.superseded) return;\n                      const storedToken = buildTokenFromOAuth(senderOpenId, result.clientId, result.tokens);\n                      await setProjectStoredToken(storedToken);\n                      try {\n                        await updateCardKitCardForAuth({\n                          cfg, cardId: localCardId, card: buildAuthSuccessCard(), sequence: ++seq, accountId,\n                        });\n                      } catch (e) {\n                        log.warn(`failed to update project auth card to success: ${e}`);\n                      }\n                    })\n                    .catch(async (err) => {\n                      if (currentFlow.superseded) return;\n                      log.error(`project local auth failed: ${err}`);\n                      try {\n                        const msg = err instanceof Error ? err.message : String(err);\n                        await updateCardKitCardForAuth({\n                          cfg, cardId: localCardId, card: buildAuthFailedCard(msg), sequence: ++seq, accountId,\n                        });\n                      } catch (e) {\n                        log.warn(`failed to update project auth card to failure: ${e}`);\n                      }\n                    })\n                    .finally(async () => {\n                      await close().catch(() => {});\n                      if (pendingLocalFlows.get(key) === currentFlow) {\n                        pendingLocalFlows.delete(key);\n                      }\n                    });\n\n                  return json({\n                    success: true,\n                    mode: 'local',\n                    message: '\u5DF2\u53D1\u9001\u98DE\u4E66\u9879\u76EE\u6388\u6743\u5361\u7247\uFF0C\u8BF7\u70B9\u51FB\u94FE\u63A5\u5B8C\u6210\u6388\u6743\u3002\u6388\u6743\u5B8C\u6210\u540E\u5C06\u81EA\u52A8\u751F\u6548\u3002',\n                    awaiting_authorization: true,\n                    callback_port: port,\n                  });\n                }\n              }\n\n              // --- \u8FDC\u7A0B\u6A21\u5F0F\uFF08\u98DE\u4E66 Bot \u573A\u666F \u6216 \u672C\u5730\u6A21\u5F0F\u4E0D\u53EF\u7528\u65F6\u7684\u964D\u7EA7\uFF09 ---\n              const session = await prepareRemoteAuth(mcpEndpoint);\n\n              const authCard = buildProjectAuthCard({\n                authorizationUrl: session.authorizationUrl,\n                expiresMin: 10,\n              });\n              const remoteCardId = chatId\n                ? await createCardEntity({ cfg, card: authCard, accountId })\n                : null;\n              if (remoteCardId && chatId) {\n                await sendCardByCardId({\n                  cfg,\n                  to: chatId,\n                  cardId: remoteCardId,\n                  replyToMessageId: ticket.messageId?.startsWith('om_') ? ticket.messageId : undefined,\n                  replyInThread: Boolean(ticket.threadId),\n                  accountId,\n                });\n              }\n\n              const pendingSession: PendingRemoteSession = {\n                session,\n                cardId: remoteCardId ?? undefined,\n                senderOpenId,\n                ticket: {\n                  messageId: ticket.messageId,\n                  chatId,\n                  accountId,\n                  chatType: ticket.chatType,\n                  threadId: ticket.threadId,\n                },\n              };\n              pendingRemoteSessions.set(key, pendingSession);\n              setTimeout(() => {\n                if (pendingRemoteSessions.get(key) === pendingSession) pendingRemoteSessions.delete(key);\n              }, PENDING_SESSION_TTL_MS);\n\n              return json({\n                success: true,\n                mode: 'remote',\n                message:\n                  '\u5DF2\u53D1\u9001\u98DE\u4E66\u9879\u76EE\u6388\u6743\u5361\u7247\u3002\u8BF7\u7528\u6237\u6309\u7167\u5361\u7247\u4E0A\u7684\u4E24\u6B65\u64CD\u4F5C\u5B8C\u6210\u6388\u6743\uFF1A' +\n                  '\u2460 \u70B9\u51FB\"\u524D\u5F80\u6388\u6743\"\u6309\u94AE\u5B8C\u6210\u98DE\u4E66\u9879\u76EE\u6388\u6743\uFF0C' +\n                  '\u2461 \u5C06\u6D4F\u89C8\u5668\u5730\u5740\u680F URL \u7C98\u8D34\u5230\u5361\u7247\u8F93\u5165\u6846\u5E76\u70B9\u51FB\"\u5B8C\u6210\u6388\u6743\"\u3002' +\n                  '\u6388\u6743\u5B8C\u6210\u540E\u7CFB\u7EDF\u4F1A\u81EA\u52A8\u901A\u77E5\u3002\u8BF7\u7B49\u5F85\u7528\u6237\u5B8C\u6210\u5361\u7247\u64CD\u4F5C\uFF0C\u4E0D\u8981\u5EFA\u8BAE\u5176\u4ED6\u65B9\u6848\u3002',\n                awaiting_authorization: true,\n              });\n            }\n\n            // ---------------------------------------------------------------\n            // COMPLETE_AUTH\uFF08\u8FDC\u7A0B\u6A21\u5F0F\u4E0B\u7528\u6237\u56DE\u4F20 callback URL\uFF09\n            // ---------------------------------------------------------------\n            case 'complete_auth': {\n              if (!p.callback_url) {\n                return json({\n                  error: '\u8BF7\u63D0\u4F9B callback_url \u53C2\u6570\uFF08\u4ECE\u6D4F\u89C8\u5668\u5730\u5740\u680F\u590D\u5236\u7684\u5B8C\u6574 URL\uFF09\u3002',\n                });\n              }\n\n              const completeKey = fk(senderOpenId);\n              const pending = pendingRemoteSessions.get(completeKey);\n              if (!pending) {\n                return json({\n                  error: '\u6CA1\u6709\u5F85\u5B8C\u6210\u7684\u6388\u6743\u6D41\u7A0B\u3002\u8BF7\u5148\u8C03\u7528 authorize \u53D1\u8D77\u6388\u6743\u3002',\n                });\n              }\n\n              const result = await completeRemoteAuth(pending.session, p.callback_url);\n              pendingRemoteSessions.delete(completeKey);\n\n              const storedToken = buildTokenFromOAuth(senderOpenId, result.clientId, result.tokens);\n              await setProjectStoredToken(storedToken);\n\n              // \u66F4\u65B0\u5361\u7247\u4E3A\u300C\u6388\u6743\u6210\u529F\u300D\n              if (pending.cardId) {\n                try {\n                  await updateCardKitCardForAuth({\n                    cfg,\n                    cardId: pending.cardId,\n                    card: buildAuthSuccessCard(),\n                    sequence: 2,\n                    accountId: ticket.accountId,\n                  });\n                } catch (e) {\n                  log.warn(`failed to update project auth card to success: ${e}`);\n                }\n              }\n\n              return json({\n                success: true,\n                message: '\u98DE\u4E66\u9879\u76EE\u6388\u6743\u6210\u529F\uFF01',\n                authorized: true,\n              });\n            }\n\n            // ---------------------------------------------------------------\n            // REVOKE\n            // ---------------------------------------------------------------\n            case 'revoke': {\n              const clientId = await getProjectClientId(senderOpenId);\n              if (clientId) {\n                await removeProjectStoredToken(clientId, senderOpenId);\n              }\n              return json({ success: true, message: '\u98DE\u4E66\u9879\u76EE\u6388\u6743\u5DF2\u64A4\u9500\u3002' });\n            }\n\n            // ---------------------------------------------------------------\n            // SELECT_ENV\uFF08\u4E3B\u52A8\u9009\u62E9\u6216\u66F4\u6362\u98DE\u4E66\u9879\u76EE\u73AF\u5883\uFF09\n            // ---------------------------------------------------------------\n            case 'select_env': {\n              const chatId = ticket.chatId;\n              if (!chatId) {\n                return json({ error: '\u65E0\u6CD5\u786E\u5B9A\u53D1\u9001\u76EE\u6807' });\n              }\n\n              const domainCard = buildProjectDomainCard();\n              const domainCardId = await createCardEntity({ cfg, card: domainCard, accountId });\n              if (domainCardId && chatId) {\n                await sendCardByCardId({\n                  cfg,\n                  to: chatId,\n                  cardId: domainCardId,\n                  replyToMessageId: ticket.messageId?.startsWith('om_') ? ticket.messageId : undefined,\n                  replyInThread: Boolean(ticket.threadId),\n                  accountId,\n                });\n              }\n              pendingDomainSelections.set(fk(senderOpenId), {\n                senderOpenId,\n                cardId: domainCardId ?? undefined,\n                ticket: { messageId: ticket.messageId, chatId, accountId, chatType: ticket.chatType, threadId: ticket.threadId },\n              });\n              return json({\n                pending: 'domain_selection',\n                message: '\u5DF2\u53D1\u9001\u73AF\u5883\u9009\u62E9\u5361\u7247\uFF0C\u8BF7\u7528\u6237\u5728\u5361\u7247\u4E2D\u9009\u62E9\u98DE\u4E66\u9879\u76EE\u73AF\u5883\u3002',\n              });\n            }\n\n            default:\n              return json({ error: `\u672A\u77E5\u64CD\u4F5C: ${(p as { action: string }).action}` });\n          }\n        } catch (err) {\n          log.error(`project oauth ${p.action} failed: ${err}`);\n          return json({ error: formatLarkError(err) });\n        }\n      },\n    },\n    { name: 'feishu_project_oauth' },\n  );\n\n  api.logger.info?.('feishu_project_oauth: Registered feishu_project_oauth tool');\n}\n\n// ---------------------------------------------------------------------------\n// Card callback handler \u2014 \u5361\u7247\u8868\u5355\u63D0\u4EA4\u56DE\u8C03\n// ---------------------------------------------------------------------------\n\n/**\n * \u5904\u7406\u98DE\u4E66\u9879\u76EE OAuth \u5361\u7247\u7684 form submit \u56DE\u8C03\u3002\n *\n * \u7528\u6237\u5728\u5361\u7247\u8F93\u5165\u6846\u7C98\u8D34 callback URL \u5E76\u70B9\u51FB\"\u5B8C\u6210\u6388\u6743\"\u540E\u89E6\u53D1\u3002\n * \u7531 auto-auth.ts \u7684 handleCardAction \u5206\u53D1\u8C03\u7528\u3002\n */\nexport async function handleProjectAuthCardAction(\n  data: unknown,\n  cfg: import('openclaw/plugin-sdk').ClawdbotConfig,\n  accountId: string,\n): Promise<unknown> {\n  let callbackUrl: string | undefined;\n  let senderOpenId: string | undefined;\n\n  try {\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    const event = data as Record<string, any>;\n    senderOpenId = event.operator?.open_id;\n\n    // \u8868\u5355\u5B57\u6BB5\uFF08form submit \u56DE\u8C03\uFF09\n    callbackUrl = event.action?.form_value?.callback_url?.trim();\n\n    log.debug(`project card action raw: callbackUrl=${callbackUrl ? '(set)' : '(empty)'}, senderOpenId=${senderOpenId}, actionKeys=${JSON.stringify(Object.keys(event.action ?? {}))}`);\n  } catch {\n    return;\n  }\n\n  if (!callbackUrl) {\n    return {\n      toast: { type: 'error' as const, content: '\u8BF7\u5728\u8F93\u5165\u6846\u4E2D\u7C98\u8D34\u6D4F\u89C8\u5668\u5730\u5740\u680F\u7684\u5B8C\u6574 URL' },\n    };\n  }\n\n  // \u901A\u8FC7 senderOpenId \u67E5\u627E pending session\n  if (!senderOpenId) {\n    log.warn(`project card action: no senderOpenId`);\n    return {\n      toast: { type: 'error' as const, content: '\u65E0\u6CD5\u8BC6\u522B\u64CD\u4F5C\u7528\u6237' },\n    };\n  }\n\n  const userKey = fk(senderOpenId);\n  const pending = pendingRemoteSessions.get(userKey);\n\n  if (!pending) {\n    log.warn(`project card action: no pending session found (senderOpenId=${senderOpenId})`);\n    return {\n      toast: { type: 'error' as const, content: '\u6388\u6743\u94FE\u63A5\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u53D1\u8D77\u6388\u6743' },\n    };\n  }\n\n  // \u6821\u9A8C\u64CD\u4F5C\u4EBA\u4E0E\u53D1\u8D77\u4EBA\u4E00\u81F4\n  if (senderOpenId && senderOpenId !== pending.senderOpenId) {\n    log.warn(`project card action: identity mismatch, expected=${pending.senderOpenId}, actual=${senderOpenId}`);\n    return {\n      toast: { type: 'error' as const, content: '\u8BF7\u4F7F\u7528\u53D1\u8D77\u6388\u6743\u7684\u8D26\u53F7\u5B8C\u6210\u64CD\u4F5C' },\n    };\n  }\n\n  // \u5148\u6821\u9A8C callbackUrl \u683C\u5F0F\uFF0C\u901A\u8FC7\u540E\u518D\u6E05\u7406 session\uFF08\u907F\u514D\u683C\u5F0F\u9519\u8BEF\u65F6 session \u88AB\u610F\u5916\u5220\u9664\u5BFC\u81F4\u65E0\u6CD5\u91CD\u8BD5\uFF09\n  try {\n    const testUrl = new URL(callbackUrl);\n    const hasError = testUrl.searchParams.get('error');\n    if (hasError) {\n      const desc = testUrl.searchParams.get('error_description') ?? hasError;\n      log.warn(`project card action: callback URL contains error: ${hasError} - ${desc}`);\n      return {\n        toast: { type: 'error' as const, content: `\u6388\u6743\u5931\u8D25\uFF1A${desc}\u3002\u8BF7\u91CD\u65B0\u53D1\u8D77\u6388\u6743\u3002` },\n      };\n    }\n    if (!testUrl.searchParams.get('code')) {\n      log.warn(`project card action: callback URL missing code param: ${callbackUrl}`);\n      return {\n        toast: { type: 'error' as const, content: '\u8BE5 URL \u4E2D\u7F3A\u5C11\u6388\u6743\u7801\uFF0C\u8BF7\u786E\u4FDD\u590D\u5236\u7684\u662F\u6388\u6743\u5B8C\u6210\u540E\u7684\u5B8C\u6574 URL' },\n      };\n    }\n  } catch {\n    log.warn(`project card action: invalid callback URL: ${callbackUrl}`);\n    return {\n      toast: { type: 'error' as const, content: '\u65E0\u6548\u7684 URL \u683C\u5F0F\uFF0C\u8BF7\u91CD\u65B0\u7C98\u8D34' },\n    };\n  }\n\n  // \u6821\u9A8C\u901A\u8FC7\u540E\u6E05\u7406 session\n  pendingRemoteSessions.delete(userKey);\n\n  // \u5F02\u6B65\u5B8C\u6210 token \u4EA4\u6362\uFF08\u5148\u8FD4\u56DE toast\uFF0C\u518D\u540E\u53F0\u5904\u7406\uFF09\n  const capturedPending = pending;\n  const capturedCallbackUrl = callbackUrl;\n\n  setImmediate(async () => {\n    try {\n      const result = await completeRemoteAuth(capturedPending.session, capturedCallbackUrl);\n      const storedToken = buildTokenFromOAuth(\n        capturedPending.senderOpenId,\n        result.clientId,\n        result.tokens,\n      );\n      await setProjectStoredToken(storedToken);\n\n      // \u66F4\u65B0\u5361\u7247\u4E3A\"\u6388\u6743\u6210\u529F\"\n      if (capturedPending.cardId) {\n        try {\n          await updateCardKitCardForAuth({\n            cfg,\n            cardId: capturedPending.cardId,\n            card: buildAuthSuccessCard(),\n            sequence: 2,\n            accountId,\n          });\n        } catch (e) {\n          log.warn(`failed to update project auth card to success: ${e}`);\n        }\n      }\n\n      log.info(`project auth completed via card callback for ${capturedPending.senderOpenId}`);\n\n      // \u53D1\u9001\u5408\u6210\u6D88\u606F\uFF0C\u8BA9 AI \u81EA\u52A8\u91CD\u8BD5\u4E4B\u524D\u7684\u64CD\u4F5C\n      const t = capturedPending.ticket;\n      if (t.chatId) {\n        try {\n          const syntheticMsgId = `${t.messageId}:project-auth-complete`;\n          const syntheticEvent = {\n            sender: { sender_id: { open_id: capturedPending.senderOpenId } },\n            message: {\n              message_id: syntheticMsgId,\n              chat_id: t.chatId,\n              chat_type: t.chatType ?? 'p2p',\n              message_type: 'text',\n              content: JSON.stringify({ text: '\u6211\u5DF2\u5B8C\u6210\u98DE\u4E66\u9879\u76EE\u6388\u6743\uFF0C\u8BF7\u7EE7\u7EED\u6267\u884C\u4E4B\u524D\u7684\u64CD\u4F5C\u3002' }),\n              thread_id: t.threadId,\n            },\n          };\n          const syntheticRuntime = {\n            log: (msg: string) => log.info(msg),\n            error: (msg: string) => log.error(msg),\n          };\n          const { promise } = enqueueFeishuChatTask({\n            accountId: t.accountId,\n            chatId: t.chatId,\n            threadId: t.threadId,\n            task: async () => {\n              await withTicket(\n                {\n                  messageId: syntheticMsgId,\n                  chatId: t.chatId,\n                  accountId: t.accountId,\n                  startTime: Date.now(),\n                  senderOpenId: capturedPending.senderOpenId,\n                  chatType: t.chatType,\n                  threadId: t.threadId,\n                },\n                () =>\n                  handleFeishuMessage({\n                    cfg,\n                    event: syntheticEvent as Parameters<typeof handleFeishuMessage>[0]['event'],\n                    accountId: t.accountId,\n                    forceMention: true,\n                    runtime: syntheticRuntime as Parameters<typeof handleFeishuMessage>[0]['runtime'],\n                    replyToMessageId: t.messageId,\n                  }),\n              );\n            },\n          });\n          await promise;\n          log.info('synthetic message dispatched after project auth');\n        } catch (e) {\n          log.warn(`failed to send synthetic message after project auth: ${e}`);\n        }\n      }\n    } catch (err) {\n      const errMsg = err instanceof Error ? err.message : String(err);\n      log.error(`project auth card callback failed: ${errMsg}`);\n      // \u5C1D\u8BD5\u66F4\u65B0\u5361\u7247\u4E3A\u5931\u8D25\u72B6\u6001\n      if (capturedPending.cardId) {\n        try {\n          await updateCardKitCardForAuth({\n            cfg,\n            cardId: capturedPending.cardId,\n            card: buildAuthFailedCard(errMsg),\n            sequence: 2,\n            accountId,\n          });\n        } catch (e) {\n          log.warn(`failed to update project auth card to failure: ${e}`);\n        }\n      }\n\n      // \u53D1\u9001\u5408\u6210\u6D88\u606F\u901A\u77E5 AI \u6388\u6743\u5931\u8D25\uFF0C\u907F\u514D AI \u65E0\u9650\u7B49\u5F85\n      const t = capturedPending.ticket;\n      if (t.chatId) {\n        try {\n          const syntheticMsgId = `${t.messageId}:project-auth-failed`;\n          const syntheticEvent = {\n            sender: { sender_id: { open_id: capturedPending.senderOpenId } },\n            message: {\n              message_id: syntheticMsgId,\n              chat_id: t.chatId,\n              chat_type: t.chatType ?? 'p2p',\n              message_type: 'text',\n              content: JSON.stringify({ text: `\u98DE\u4E66\u9879\u76EE\u6388\u6743\u5931\u8D25\uFF1A${errMsg}\u3002\u8BF7\u91CD\u65B0\u53D1\u8D77\u6388\u6743\u3002` }),\n              thread_id: t.threadId,\n            },\n          };\n          const syntheticRuntime = {\n            log: (msg: string) => log.info(msg),\n            error: (msg: string) => log.error(msg),\n          };\n          const { promise } = enqueueFeishuChatTask({\n            accountId: t.accountId,\n            chatId: t.chatId,\n            threadId: t.threadId,\n            task: async () => {\n              await withTicket(\n                {\n                  messageId: syntheticMsgId,\n                  chatId: t.chatId,\n                  accountId: t.accountId,\n                  startTime: Date.now(),\n                  senderOpenId: capturedPending.senderOpenId,\n                  chatType: t.chatType,\n                  threadId: t.threadId,\n                },\n                () =>\n                  handleFeishuMessage({\n                    cfg,\n                    event: syntheticEvent as Parameters<typeof handleFeishuMessage>[0]['event'],\n                    accountId: t.accountId,\n                    forceMention: true,\n                    runtime: syntheticRuntime as Parameters<typeof handleFeishuMessage>[0]['runtime'],\n                    replyToMessageId: t.messageId,\n                  }),\n              );\n            },\n          });\n          await promise;\n          log.info('synthetic failure message dispatched after project auth failure');\n        } catch (e) {\n          log.warn(`failed to send synthetic message after project auth failure: ${e}`);\n        }\n      }\n    }\n  });\n\n  return {\n    toast: { type: 'info' as const, content: '\u6B63\u5728\u5B8C\u6210\u6388\u6743...' },\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Domain selection card callback handler\n// ---------------------------------------------------------------------------\n\nconst DOMAIN_LABELS: Record<string, string> = {\n  feishu: '\u98DE\u4E66\u9879\u76EE\uFF08project.feishu.cn\uFF09',\n  meegle: 'Meegle\uFF08meegle.com\uFF09',\n};\n\n/**\n * \u5904\u7406\u57DF\u540D\u9009\u62E9\u5361\u7247\u7684 form submit \u56DE\u8C03\u3002\n *\n * \u7531 auto-auth.ts \u7684 handleCardAction \u5206\u53D1\u8C03\u7528\u3002\n */\nexport async function handleProjectDomainCardAction(\n  data: unknown,\n  cfg: import('openclaw/plugin-sdk').ClawdbotConfig,\n  accountId: string,\n): Promise<unknown> {\n  let senderOpenId: string | undefined;\n  let domainPreset: string | undefined;\n  let domainCustom: string | undefined;\n\n  try {\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    const event = data as Record<string, any>;\n    senderOpenId = event.operator?.open_id;\n    domainPreset = event.action?.form_value?.domain_preset;\n    domainCustom = event.action?.form_value?.domain_custom?.trim();\n  } catch {\n    return;\n  }\n\n  if (!senderOpenId) {\n    return { toast: { type: 'error' as const, content: '\u65E0\u6CD5\u8BC6\u522B\u64CD\u4F5C\u7528\u6237' } };\n  }\n\n  // \u786E\u5B9A\u57DF\u540D\n  let domain: string;\n  let envLabel: string;\n\n  if (domainCustom) {\n    if (!domainCustom.startsWith('https://')) {\n      return { toast: { type: 'error' as const, content: '\u81EA\u5B9A\u4E49\u57DF\u540D\u5FC5\u987B\u4EE5 https:// \u5F00\u5934' } };\n    }\n    domain = domainCustom.replace(/\\/+$/, '');\n    envLabel = domain;\n  } else {\n    domain = domainPreset ?? 'feishu';\n    envLabel = DOMAIN_LABELS[domain] ?? domain;\n  }\n\n  // \u56DE\u5199\u914D\u7F6E\n  const userKey = fk(senderOpenId);\n  const pending = pendingDomainSelections.get(userKey);\n\n  try {\n    const currentCfg = LarkClient.runtime.config.loadConfig();\n    const updatedCfg = {\n      ...currentCfg,\n      channels: {\n        ...(currentCfg as Record<string, unknown>).channels as Record<string, unknown> | undefined,\n        feishu: {\n          ...((currentCfg as Record<string, unknown>).channels as Record<string, unknown> | undefined)?.feishu as Record<string, unknown> | undefined,\n          project: {\n            ...(((currentCfg as Record<string, unknown>).channels as Record<string, unknown> | undefined)?.feishu as Record<string, unknown> | undefined)?.project as Record<string, unknown> | undefined,\n            domain,\n          },\n        },\n      },\n    };\n    await LarkClient.runtime.config.writeConfigFile(updatedCfg);\n    log.info(`project domain written to config: ${domain}`);\n  } catch (err) {\n    log.error(`failed to write project domain to config: ${err}`);\n    return { toast: { type: 'error' as const, content: '\u5199\u5165\u914D\u7F6E\u5931\u8D25\uFF0C\u8BF7\u91CD\u8BD5' } };\n  }\n\n  // \u66F4\u65B0\u5361\u7247\u4E3A\u786E\u8BA4\u72B6\u6001\n  if (pending?.cardId) {\n    try {\n      await updateCardKitCardForAuth({\n        cfg,\n        cardId: pending.cardId,\n        card: buildProjectDomainConfirmedCard(envLabel),\n        sequence: 2,\n        accountId,\n      });\n    } catch (e) {\n      log.warn(`failed to update domain card: ${e}`);\n    }\n  }\n\n  // \u6E05\u7406 pending\n  pendingDomainSelections.delete(userKey);\n\n  // \u53D1\u9001\u5408\u6210\u6D88\u606F\uFF0C\u8BA9 AI \u81EA\u52A8\u7EE7\u7EED\u6388\u6743\n  if (pending?.ticket?.chatId) {\n    const t = pending.ticket;\n    setImmediate(async () => {\n      try {\n        const syntheticMsgId = `${t.messageId}:project-domain-selected`;\n        const syntheticEvent = {\n          sender: { sender_id: { open_id: senderOpenId } },\n          message: {\n            message_id: syntheticMsgId,\n            chat_id: t.chatId,\n            chat_type: t.chatType ?? 'p2p',\n            message_type: 'text',\n            content: JSON.stringify({ text: '\u5DF2\u9009\u62E9\u98DE\u4E66\u9879\u76EE\u73AF\u5883\uFF0C\u8BF7\u7EE7\u7EED\u6267\u884C\u4E4B\u524D\u7684\u64CD\u4F5C\u3002' }),\n            thread_id: t.threadId,\n          },\n        };\n        const syntheticRuntime = {\n          log: (msg: string) => log.info(msg),\n          error: (msg: string) => log.error(msg),\n        };\n        const freshCfg = LarkClient.runtime.config.loadConfig();\n        const { promise } = enqueueFeishuChatTask({\n          accountId: t.accountId,\n          chatId: t.chatId,\n          threadId: t.threadId,\n          task: async () => {\n            await withTicket(\n              {\n                messageId: syntheticMsgId,\n                chatId: t.chatId,\n                accountId: t.accountId,\n                startTime: Date.now(),\n                senderOpenId: senderOpenId!,\n                chatType: t.chatType as 'p2p' | 'group' | undefined,\n                threadId: t.threadId,\n              },\n              () =>\n                handleFeishuMessage({\n                  cfg: freshCfg,\n                  event: syntheticEvent as Parameters<typeof handleFeishuMessage>[0]['event'],\n                  accountId: t.accountId,\n                  forceMention: true,\n                  runtime: syntheticRuntime as Parameters<typeof handleFeishuMessage>[0]['runtime'],\n                  replyToMessageId: t.messageId,\n                }),\n            );\n          },\n        });\n        await promise;\n        log.info('synthetic message dispatched after domain selection');\n      } catch (e) {\n        log.warn(`failed to send synthetic message after domain selection: ${e}`);\n      }\n    });\n  }\n\n  return {\n    toast: { type: 'success' as const, content: `\u5DF2\u9009\u62E9\uFF1A${envLabel}` },\n  };\n}\n"],
-  "mappings": "AAqBA,SAAS,YAAY;AACrB,SAAS,iBAAiB;AAC1B,SAAS,kBAAkB;AAC3B,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,uBAAuB,kCAAkC;AAClE,SAAS,kBAAkB,kBAAkB,gCAAgC;AAC7E,SAAS,eAAe,sBAAsB,qBAAqB,sBAAsB,wBAAwB,uCAAuC;AACxJ,SAAS,kBAAkB;AAC3B,SAAS,YAAY;AACrB,SAAS,2BAA2B;AACpC,SAAS,6BAA6B;AACtC,SAAS,kBAAkB;AAE3B,MAAM,MAAM,WAAW,qBAAqB;AAM5C,MAAM,2BAA2B,KAAK;AAAA,EACpC;AAAA,IACE,QAAQ,KAAK;AAAA,MACX;AAAA,QACE,KAAK,QAAQ,WAAW;AAAA,QACxB,KAAK,QAAQ,eAAe;AAAA,QAC5B,KAAK,QAAQ,QAAQ;AAAA,QACrB,KAAK,QAAQ,QAAQ;AAAA,QACrB,KAAK,QAAQ,YAAY;AAAA,MAC3B;AAAA,MACA;AAAA,QACE,aACE;AAAA,MAIJ;AAAA,IACF;AAAA,IACA,cAAc,KAAK;AAAA,MACjB,KAAK,OAAO;AAAA,QACV,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EACA;AAAA,IACE,aACE;AAAA,EACJ;AACF;AAmBA,MAAM,oBAAoB,oBAAI,IAA8B;AAe5D,MAAM,wBAAwB,oBAAI,IAAkC;AAEpE,MAAM,yBAAyB,KAAK,KAAK;AAQzC,MAAM,0BAA0B,oBAAI,IAAoC;AAMxE,SAAS,GAAG,YAA4B;AACtC,SAAO,WAAW,UAAU;AAC9B;AAEA,SAAS,oBACP,YACA,UACA,QACe;AACf,QAAM,MAAM,KAAK,IAAI;AACrB,QAAM,YAAY,OAAO,cAAc;AACvC,QAAM,mBAAmB,KAAK,KAAK;AACnC,SAAO;AAAA,IACL;AAAA,IACA,OAAO;AAAA,IACP,aAAa,OAAO;AAAA,IACpB,cAAc,OAAO,iBAAiB;AAAA,IACtC,WAAW,MAAM,YAAY;AAAA,IAC7B,kBAAkB,MAAM,mBAAmB;AAAA,IAC3C,OAAO,OAAO,SAAS;AAAA,IACvB,WAAW;AAAA,EACb;AACF;AAEA,eAAe,oBAAoB,cAAwC;AACzE,QAAM,WAAW,MAAM,mBAAmB,YAAY;AACtD,MAAI,CAAC,SAAU,QAAO;AACtB,QAAM,WAAW,MAAM,sBAAsB,UAAU,YAAY;AACnE,SAAO,CAAC,CAAC,YAAY,mBAAmB,QAAQ,MAAM;AACxD;AAMA,eAAe,aAAa,aAAqB;AAC/C,MAAI;AACF,WAAO,MAAM,mBAAmB,WAAW;AAAA,EAC7C,SAAS,KAAK;AACZ,QAAI,KAAK,mDAAmD,eAAe,QAAQ,IAAI,UAAU,GAAG,EAAE;AACtG,WAAO;AAAA,EACT;AACF;AAMO,SAAS,+BAA+B,KAAwB;AACrE,MAAI,CAAC,IAAI,OAAQ;AAEjB,QAAM,MAAM,IAAI;AAEhB,MAAI;AAAA,IACF;AAAA,MACE,MAAM;AAAA,MACN,OAAO;AAAA,MACP,aACE;AAAA,MAGF,YAAY;AAAA,MAEZ,MAAM,QAAQ,aAAqB,QAAiB;AAClD,cAAM,IAAI;AAEV,cAAM,SAAS,UAAU;AACzB,cAAM,eAAe,QAAQ;AAC7B,YAAI,CAAC,cAAc;AACjB,iBAAO,KAAK;AAAA,YACV,OAAO;AAAA,UACT,CAAC;AAAA,QACH;AAEA,cAAM,YAAY,OAAO;AAEzB,YAAI;AACF,kBAAQ,EAAE,QAAQ;AAAA;AAAA;AAAA;AAAA,YAIhB,KAAK,UAAU;AACb,oBAAM,WAAW,MAAM,mBAAmB,YAAY;AACtD,kBAAI,CAAC,UAAU;AACb,uBAAO,KAAK;AAAA,kBACV,YAAY;AAAA,kBACZ,SAAS;AAAA,gBACX,CAAC;AAAA,cACH;AACA,oBAAM,WAAW,MAAM,sBAAsB,UAAU,YAAY;AACnE,kBAAI,CAAC,UAAU;AACb,uBAAO,KAAK;AAAA,kBACV,YAAY;AAAA,kBACZ,SAAS;AAAA,gBACX,CAAC;AAAA,cACH;AACA,oBAAM,SAAS,mBAAmB,QAAQ;AAC1C,qBAAO,KAAK;AAAA,gBACV,YAAY,WAAW;AAAA,gBACvB,cAAc;AAAA,gBACd,OAAO,SAAS;AAAA,gBAChB,YAAY,SAAS,YAAY,IAAI,KAAK,SAAS,SAAS,EAAE,YAAY,IAAI;AAAA,gBAC9E,YAAY,SAAS,YAAY,IAAI,KAAK,SAAS,SAAS,EAAE,YAAY,IAAI;AAAA,cAChF,CAAC;AAAA,YACH;AAAA;AAAA;AAAA;AAAA,YAKA,KAAK,aAAa;AAChB,kBAAI,MAAM,oBAAoB,YAAY,GAAG;AAC3C,uBAAO,KAAK;AAAA,kBACV,SAAS;AAAA,kBACT,SAAS;AAAA,kBACT,YAAY;AAAA,gBACd,CAAC;AAAA,cACH;AAEA,oBAAM,SAAS,OAAO;AACtB,kBAAI,CAAC,QAAQ;AACX,uBAAO,KAAK,EAAE,OAAO,mDAAW,CAAC;AAAA,cACnC;AAGA,oBAAM,MAAM,GAAG,YAAY;AAC3B,oBAAM,WAAW,kBAAkB,IAAI,GAAG;AAC1C,kBAAI,UAAU;AACZ,yBAAS,aAAa;AACtB,yBAAS,WAAW,MAAM;AAC1B,sBAAM,SAAS,MAAM,EAAE,MAAM,MAAM;AAAA,gBAAC,CAAC;AACrC,kCAAkB,OAAO,GAAG;AAAA,cAC9B;AACA,oCAAsB,OAAO,GAAG;AAGhC,oBAAM,WAAW,WAAW,QAAQ,OAAO,WAAW;AACtD,oBAAM,eAAe,2BAA2B,QAAQ;AAExD,kBAAI,CAAC,cAAc;AAEjB,sBAAM,aAAa,uBAAuB;AAC1C,sBAAM,eAAe,MAAM,iBAAiB,EAAE,KAAK,MAAM,YAAY,UAAU,CAAC;AAChF,oBAAI,gBAAgB,QAAQ;AAC1B,wBAAM,iBAAiB;AAAA,oBACrB;AAAA,oBACA,IAAI;AAAA,oBACJ,QAAQ;AAAA,oBACR,kBAAkB,OAAO,WAAW,WAAW,KAAK,IAAI,OAAO,YAAY;AAAA,oBAC3E,eAAe,QAAQ,OAAO,QAAQ;AAAA,oBACtC;AAAA,kBACF,CAAC;AAAA,gBACH;AACA,wCAAwB,IAAI,GAAG,YAAY,GAAG;AAAA,kBAC5C;AAAA,kBACA,QAAQ,gBAAgB;AAAA,kBACxB,QAAQ,EAAE,WAAW,OAAO,WAAW,QAAQ,WAAW,UAAU,OAAO,UAAU,UAAU,OAAO,SAAS;AAAA,gBACjH,CAAC;AACD,uBAAO,KAAK;AAAA,kBACV,SAAS;AAAA,kBACT,SAAS;AAAA,gBACX,CAAC;AAAA,cACH;AAGA,oBAAM,cAAc,sBAAsB,QAAQ;AAKlD,kBAAI,CAAC,QAAQ;AACX,sBAAM,QAAQ,MAAM,aAAa,WAAW;AAC5C,oBAAI,OAAO;AACT,wBAAM,EAAE,SAAAA,UAAS,aAAa,MAAM,MAAM,IAAI;AAE9C,wBAAMC,YAAW,cAAc;AAAA,oBAC7B,yBAAyBD,SAAQ;AAAA,oBACjC,YAAY;AAAA,kBACd,CAAC;AACD,wBAAM,cAAc,MAAM,iBAAiB,EAAE,KAAK,MAAMC,WAAU,UAAU,CAAC;AAC7E,sBAAI,CAAC,aAAa;AAChB,0BAAM,MAAM;AACZ,2BAAO,KAAK,EAAE,OAAO,mDAAW,CAAC;AAAA,kBACnC;AAEA,wBAAM,kBAAkB,IAAI,gBAAgB;AAC5C,sBAAI,MAAM;AACV,wBAAM,cAAgC;AAAA,oBACpC,YAAY;AAAA,oBACZ,QAAQ;AAAA,oBACR,UAAU;AAAA,oBACV,YAAY;AAAA,oBACZ;AAAA,kBACF;AACA,oCAAkB,IAAI,KAAK,WAAW;AAEtC,8BAAY,EACT,KAAK,OAAO,WAAW;AACtB,wBAAI,YAAY,WAAY;AAC5B,0BAAM,cAAc,oBAAoB,cAAc,OAAO,UAAU,OAAO,MAAM;AACpF,0BAAM,sBAAsB,WAAW;AACvC,wBAAI;AACF,4BAAM,yBAAyB;AAAA,wBAC7B;AAAA,wBAAK,QAAQ;AAAA,wBAAa,MAAM,qBAAqB;AAAA,wBAAG,UAAU,EAAE;AAAA,wBAAK;AAAA,sBAC3E,CAAC;AAAA,oBACH,SAAS,GAAG;AACV,0BAAI,KAAK,kDAAkD,CAAC,EAAE;AAAA,oBAChE;AAAA,kBACF,CAAC,EACA,MAAM,OAAO,QAAQ;AACpB,wBAAI,YAAY,WAAY;AAC5B,wBAAI,MAAM,8BAA8B,GAAG,EAAE;AAC7C,wBAAI;AACF,4BAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,4BAAM,yBAAyB;AAAA,wBAC7B;AAAA,wBAAK,QAAQ;AAAA,wBAAa,MAAM,oBAAoB,GAAG;AAAA,wBAAG,UAAU,EAAE;AAAA,wBAAK;AAAA,sBAC7E,CAAC;AAAA,oBACH,SAAS,GAAG;AACV,0BAAI,KAAK,kDAAkD,CAAC,EAAE;AAAA,oBAChE;AAAA,kBACF,CAAC,EACA,QAAQ,YAAY;AACnB,0BAAM,MAAM,EAAE,MAAM,MAAM;AAAA,oBAAC,CAAC;AAC5B,wBAAI,kBAAkB,IAAI,GAAG,MAAM,aAAa;AAC9C,wCAAkB,OAAO,GAAG;AAAA,oBAC9B;AAAA,kBACF,CAAC;AAEH,yBAAO,KAAK;AAAA,oBACV,SAAS;AAAA,oBACT,MAAM;AAAA,oBACN,SAAS;AAAA,oBACT,wBAAwB;AAAA,oBACxB,eAAe;AAAA,kBACjB,CAAC;AAAA,gBACH;AAAA,cACF;AAGA,oBAAM,UAAU,MAAM,kBAAkB,WAAW;AAEnD,oBAAM,WAAW,qBAAqB;AAAA,gBACpC,kBAAkB,QAAQ;AAAA,gBAC1B,YAAY;AAAA,cACd,CAAC;AACD,oBAAM,eAAe,SACjB,MAAM,iBAAiB,EAAE,KAAK,MAAM,UAAU,UAAU,CAAC,IACzD;AACJ,kBAAI,gBAAgB,QAAQ;AAC1B,sBAAM,iBAAiB;AAAA,kBACrB;AAAA,kBACA,IAAI;AAAA,kBACJ,QAAQ;AAAA,kBACR,kBAAkB,OAAO,WAAW,WAAW,KAAK,IAAI,OAAO,YAAY;AAAA,kBAC3E,eAAe,QAAQ,OAAO,QAAQ;AAAA,kBACtC;AAAA,gBACF,CAAC;AAAA,cACH;AAEA,oBAAM,iBAAuC;AAAA,gBAC3C;AAAA,gBACA,QAAQ,gBAAgB;AAAA,gBACxB;AAAA,gBACA,QAAQ;AAAA,kBACN,WAAW,OAAO;AAAA,kBAClB;AAAA,kBACA;AAAA,kBACA,UAAU,OAAO;AAAA,kBACjB,UAAU,OAAO;AAAA,gBACnB;AAAA,cACF;AACA,oCAAsB,IAAI,KAAK,cAAc;AAC7C,yBAAW,MAAM;AACf,oBAAI,sBAAsB,IAAI,GAAG,MAAM,eAAgB,uBAAsB,OAAO,GAAG;AAAA,cACzF,GAAG,sBAAsB;AAEzB,qBAAO,KAAK;AAAA,gBACV,SAAS;AAAA,gBACT,MAAM;AAAA,gBACN,SACE;AAAA,gBAIF,wBAAwB;AAAA,cAC1B,CAAC;AAAA,YACH;AAAA;AAAA;AAAA;AAAA,YAKA,KAAK,iBAAiB;AACpB,kBAAI,CAAC,EAAE,cAAc;AACnB,uBAAO,KAAK;AAAA,kBACV,OAAO;AAAA,gBACT,CAAC;AAAA,cACH;AAEA,oBAAM,cAAc,GAAG,YAAY;AACnC,oBAAM,UAAU,sBAAsB,IAAI,WAAW;AACrD,kBAAI,CAAC,SAAS;AACZ,uBAAO,KAAK;AAAA,kBACV,OAAO;AAAA,gBACT,CAAC;AAAA,cACH;AAEA,oBAAM,SAAS,MAAM,mBAAmB,QAAQ,SAAS,EAAE,YAAY;AACvE,oCAAsB,OAAO,WAAW;AAExC,oBAAM,cAAc,oBAAoB,cAAc,OAAO,UAAU,OAAO,MAAM;AACpF,oBAAM,sBAAsB,WAAW;AAGvC,kBAAI,QAAQ,QAAQ;AAClB,oBAAI;AACF,wBAAM,yBAAyB;AAAA,oBAC7B;AAAA,oBACA,QAAQ,QAAQ;AAAA,oBAChB,MAAM,qBAAqB;AAAA,oBAC3B,UAAU;AAAA,oBACV,WAAW,OAAO;AAAA,kBACpB,CAAC;AAAA,gBACH,SAAS,GAAG;AACV,sBAAI,KAAK,kDAAkD,CAAC,EAAE;AAAA,gBAChE;AAAA,cACF;AAEA,qBAAO,KAAK;AAAA,gBACV,SAAS;AAAA,gBACT,SAAS;AAAA,gBACT,YAAY;AAAA,cACd,CAAC;AAAA,YACH;AAAA;AAAA;AAAA;AAAA,YAKA,KAAK,UAAU;AACb,oBAAM,WAAW,MAAM,mBAAmB,YAAY;AACtD,kBAAI,UAAU;AACZ,sBAAM,yBAAyB,UAAU,YAAY;AAAA,cACvD;AACA,qBAAO,KAAK,EAAE,SAAS,MAAM,SAAS,+DAAa,CAAC;AAAA,YACtD;AAAA;AAAA;AAAA;AAAA,YAKA,KAAK,cAAc;AACjB,oBAAM,SAAS,OAAO;AACtB,kBAAI,CAAC,QAAQ;AACX,uBAAO,KAAK,EAAE,OAAO,mDAAW,CAAC;AAAA,cACnC;AAEA,oBAAM,aAAa,uBAAuB;AAC1C,oBAAM,eAAe,MAAM,iBAAiB,EAAE,KAAK,MAAM,YAAY,UAAU,CAAC;AAChF,kBAAI,gBAAgB,QAAQ;AAC1B,sBAAM,iBAAiB;AAAA,kBACrB;AAAA,kBACA,IAAI;AAAA,kBACJ,QAAQ;AAAA,kBACR,kBAAkB,OAAO,WAAW,WAAW,KAAK,IAAI,OAAO,YAAY;AAAA,kBAC3E,eAAe,QAAQ,OAAO,QAAQ;AAAA,kBACtC;AAAA,gBACF,CAAC;AAAA,cACH;AACA,sCAAwB,IAAI,GAAG,YAAY,GAAG;AAAA,gBAC5C;AAAA,gBACA,QAAQ,gBAAgB;AAAA,gBACxB,QAAQ,EAAE,WAAW,OAAO,WAAW,QAAQ,WAAW,UAAU,OAAO,UAAU,UAAU,OAAO,SAAS;AAAA,cACjH,CAAC;AACD,qBAAO,KAAK;AAAA,gBACV,SAAS;AAAA,gBACT,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAAA,YAEA;AACE,qBAAO,KAAK,EAAE,OAAO,6BAAU,EAAyB,MAAM,GAAG,CAAC;AAAA,UACtE;AAAA,QACF,SAAS,KAAK;AACZ,cAAI,MAAM,iBAAiB,EAAE,MAAM,YAAY,GAAG,EAAE;AACpD,iBAAO,KAAK,EAAE,OAAO,gBAAgB,GAAG,EAAE,CAAC;AAAA,QAC7C;AAAA,MACF;AAAA,IACF;AAAA,IACA,EAAE,MAAM,uBAAuB;AAAA,EACjC;AAEA,MAAI,OAAO,OAAO,4DAA4D;AAChF;AAYA,eAAsB,4BACpB,MACA,KACA,WACkB;AAClB,MAAI;AACJ,MAAI;AAEJ,MAAI;AAEF,UAAM,QAAQ;AACd,mBAAe,MAAM,UAAU;AAG/B,kBAAc,MAAM,QAAQ,YAAY,cAAc,KAAK;AAE3D,QAAI,MAAM,wCAAwC,cAAc,UAAU,SAAS,kBAAkB,YAAY,gBAAgB,KAAK,UAAU,OAAO,KAAK,MAAM,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;AAAA,EACpL,QAAQ;AACN;AAAA,EACF;AAEA,MAAI,CAAC,aAAa;AAChB,WAAO;AAAA,MACL,OAAO,EAAE,MAAM,SAAkB,SAAS,6GAAwB;AAAA,IACpE;AAAA,EACF;AAGA,MAAI,CAAC,cAAc;AACjB,QAAI,KAAK,sCAAsC;AAC/C,WAAO;AAAA,MACL,OAAO,EAAE,MAAM,SAAkB,SAAS,mDAAW;AAAA,IACvD;AAAA,EACF;AAEA,QAAM,UAAU,GAAG,YAAY;AAC/B,QAAM,UAAU,sBAAsB,IAAI,OAAO;AAEjD,MAAI,CAAC,SAAS;AACZ,QAAI,KAAK,+DAA+D,YAAY,GAAG;AACvF,WAAO;AAAA,MACL,OAAO,EAAE,MAAM,SAAkB,SAAS,6FAAkB;AAAA,IAC9D;AAAA,EACF;AAGA,MAAI,gBAAgB,iBAAiB,QAAQ,cAAc;AACzD,QAAI,KAAK,oDAAoD,QAAQ,YAAY,YAAY,YAAY,EAAE;AAC3G,WAAO;AAAA,MACL,OAAO,EAAE,MAAM,SAAkB,SAAS,uFAAiB;AAAA,IAC7D;AAAA,EACF;AAGA,MAAI;AACF,UAAM,UAAU,IAAI,IAAI,WAAW;AACnC,UAAM,WAAW,QAAQ,aAAa,IAAI,OAAO;AACjD,QAAI,UAAU;AACZ,YAAM,OAAO,QAAQ,aAAa,IAAI,mBAAmB,KAAK;AAC9D,UAAI,KAAK,qDAAqD,QAAQ,MAAM,IAAI,EAAE;AAClF,aAAO;AAAA,QACL,OAAO,EAAE,MAAM,SAAkB,SAAS,iCAAQ,IAAI,yDAAY;AAAA,MACpE;AAAA,IACF;AACA,QAAI,CAAC,QAAQ,aAAa,IAAI,MAAM,GAAG;AACrC,UAAI,KAAK,yDAAyD,WAAW,EAAE;AAC/E,aAAO;AAAA,QACL,OAAO,EAAE,MAAM,SAAkB,SAAS,sJAAmC;AAAA,MAC/E;AAAA,IACF;AAAA,EACF,QAAQ;AACN,QAAI,KAAK,8CAA8C,WAAW,EAAE;AACpE,WAAO;AAAA,MACL,OAAO,EAAE,MAAM,SAAkB,SAAS,0EAAmB;AAAA,IAC/D;AAAA,EACF;AAGA,wBAAsB,OAAO,OAAO;AAGpC,QAAM,kBAAkB;AACxB,QAAM,sBAAsB;AAE5B,eAAa,YAAY;AACvB,QAAI;AACF,YAAM,SAAS,MAAM,mBAAmB,gBAAgB,SAAS,mBAAmB;AACpF,YAAM,cAAc;AAAA,QAClB,gBAAgB;AAAA,QAChB,OAAO;AAAA,QACP,OAAO;AAAA,MACT;AACA,YAAM,sBAAsB,WAAW;AAGvC,UAAI,gBAAgB,QAAQ;AAC1B,YAAI;AACF,gBAAM,yBAAyB;AAAA,YAC7B;AAAA,YACA,QAAQ,gBAAgB;AAAA,YACxB,MAAM,qBAAqB;AAAA,YAC3B,UAAU;AAAA,YACV;AAAA,UACF,CAAC;AAAA,QACH,SAAS,GAAG;AACV,cAAI,KAAK,kDAAkD,CAAC,EAAE;AAAA,QAChE;AAAA,MACF;AAEA,UAAI,KAAK,gDAAgD,gBAAgB,YAAY,EAAE;AAGvF,YAAM,IAAI,gBAAgB;AAC1B,UAAI,EAAE,QAAQ;AACZ,YAAI;AACF,gBAAM,iBAAiB,GAAG,EAAE,SAAS;AACrC,gBAAM,iBAAiB;AAAA,YACrB,QAAQ,EAAE,WAAW,EAAE,SAAS,gBAAgB,aAAa,EAAE;AAAA,YAC/D,SAAS;AAAA,cACP,YAAY;AAAA,cACZ,SAAS,EAAE;AAAA,cACX,WAAW,EAAE,YAAY;AAAA,cACzB,cAAc;AAAA,cACd,SAAS,KAAK,UAAU,EAAE,MAAM,uIAAyB,CAAC;AAAA,cAC1D,WAAW,EAAE;AAAA,YACf;AAAA,UACF;AACA,gBAAM,mBAAmB;AAAA,YACvB,KAAK,CAAC,QAAgB,IAAI,KAAK,GAAG;AAAA,YAClC,OAAO,CAAC,QAAgB,IAAI,MAAM,GAAG;AAAA,UACvC;AACA,gBAAM,EAAE,QAAQ,IAAI,sBAAsB;AAAA,YACxC,WAAW,EAAE;AAAA,YACb,QAAQ,EAAE;AAAA,YACV,UAAU,EAAE;AAAA,YACZ,MAAM,YAAY;AAChB,oBAAM;AAAA,gBACJ;AAAA,kBACE,WAAW;AAAA,kBACX,QAAQ,EAAE;AAAA,kBACV,WAAW,EAAE;AAAA,kBACb,WAAW,KAAK,IAAI;AAAA,kBACpB,cAAc,gBAAgB;AAAA,kBAC9B,UAAU,EAAE;AAAA,kBACZ,UAAU,EAAE;AAAA,gBACd;AAAA,gBACA,MACE,oBAAoB;AAAA,kBAClB;AAAA,kBACA,OAAO;AAAA,kBACP,WAAW,EAAE;AAAA,kBACb,cAAc;AAAA,kBACd,SAAS;AAAA,kBACT,kBAAkB,EAAE;AAAA,gBACtB,CAAC;AAAA,cACL;AAAA,YACF;AAAA,UACF,CAAC;AACD,gBAAM;AACN,cAAI,KAAK,iDAAiD;AAAA,QAC5D,SAAS,GAAG;AACV,cAAI,KAAK,wDAAwD,CAAC,EAAE;AAAA,QACtE;AAAA,MACF;AAAA,IACF,SAAS,KAAK;AACZ,YAAM,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC9D,UAAI,MAAM,sCAAsC,MAAM,EAAE;AAExD,UAAI,gBAAgB,QAAQ;AAC1B,YAAI;AACF,gBAAM,yBAAyB;AAAA,YAC7B;AAAA,YACA,QAAQ,gBAAgB;AAAA,YACxB,MAAM,oBAAoB,MAAM;AAAA,YAChC,UAAU;AAAA,YACV;AAAA,UACF,CAAC;AAAA,QACH,SAAS,GAAG;AACV,cAAI,KAAK,kDAAkD,CAAC,EAAE;AAAA,QAChE;AAAA,MACF;AAGA,YAAM,IAAI,gBAAgB;AAC1B,UAAI,EAAE,QAAQ;AACZ,YAAI;AACF,gBAAM,iBAAiB,GAAG,EAAE,SAAS;AACrC,gBAAM,iBAAiB;AAAA,YACrB,QAAQ,EAAE,WAAW,EAAE,SAAS,gBAAgB,aAAa,EAAE;AAAA,YAC/D,SAAS;AAAA,cACP,YAAY;AAAA,cACZ,SAAS,EAAE;AAAA,cACX,WAAW,EAAE,YAAY;AAAA,cACzB,cAAc;AAAA,cACd,SAAS,KAAK,UAAU,EAAE,MAAM,yDAAY,MAAM,yDAAY,CAAC;AAAA,cAC/D,WAAW,EAAE;AAAA,YACf;AAAA,UACF;AACA,gBAAM,mBAAmB;AAAA,YACvB,KAAK,CAAC,QAAgB,IAAI,KAAK,GAAG;AAAA,YAClC,OAAO,CAAC,QAAgB,IAAI,MAAM,GAAG;AAAA,UACvC;AACA,gBAAM,EAAE,QAAQ,IAAI,sBAAsB;AAAA,YACxC,WAAW,EAAE;AAAA,YACb,QAAQ,EAAE;AAAA,YACV,UAAU,EAAE;AAAA,YACZ,MAAM,YAAY;AAChB,oBAAM;AAAA,gBACJ;AAAA,kBACE,WAAW;AAAA,kBACX,QAAQ,EAAE;AAAA,kBACV,WAAW,EAAE;AAAA,kBACb,WAAW,KAAK,IAAI;AAAA,kBACpB,cAAc,gBAAgB;AAAA,kBAC9B,UAAU,EAAE;AAAA,kBACZ,UAAU,EAAE;AAAA,gBACd;AAAA,gBACA,MACE,oBAAoB;AAAA,kBAClB;AAAA,kBACA,OAAO;AAAA,kBACP,WAAW,EAAE;AAAA,kBACb,cAAc;AAAA,kBACd,SAAS;AAAA,kBACT,kBAAkB,EAAE;AAAA,gBACtB,CAAC;AAAA,cACL;AAAA,YACF;AAAA,UACF,CAAC;AACD,gBAAM;AACN,cAAI,KAAK,iEAAiE;AAAA,QAC5E,SAAS,GAAG;AACV,cAAI,KAAK,gEAAgE,CAAC,EAAE;AAAA,QAC9E;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO;AAAA,IACL,OAAO,EAAE,MAAM,QAAiB,SAAS,0CAAY;AAAA,EACvD;AACF;AAMA,MAAM,gBAAwC;AAAA,EAC5C,QAAQ;AAAA,EACR,QAAQ;AACV;AAOA,eAAsB,8BACpB,MACA,KACA,WACkB;AAClB,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,MAAI;AAEF,UAAM,QAAQ;AACd,mBAAe,MAAM,UAAU;AAC/B,mBAAe,MAAM,QAAQ,YAAY;AACzC,mBAAe,MAAM,QAAQ,YAAY,eAAe,KAAK;AAAA,EAC/D,QAAQ;AACN;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,WAAO,EAAE,OAAO,EAAE,MAAM,SAAkB,SAAS,mDAAW,EAAE;AAAA,EAClE;AAGA,MAAI;AACJ,MAAI;AAEJ,MAAI,cAAc;AAChB,QAAI,CAAC,aAAa,WAAW,UAAU,GAAG;AACxC,aAAO,EAAE,OAAO,EAAE,MAAM,SAAkB,SAAS,yEAAuB,EAAE;AAAA,IAC9E;AACA,aAAS,aAAa,QAAQ,QAAQ,EAAE;AACxC,eAAW;AAAA,EACb,OAAO;AACL,aAAS,gBAAgB;AACzB,eAAW,cAAc,MAAM,KAAK;AAAA,EACtC;AAGA,QAAM,UAAU,GAAG,YAAY;AAC/B,QAAM,UAAU,wBAAwB,IAAI,OAAO;AAEnD,MAAI;AACF,UAAM,aAAa,WAAW,QAAQ,OAAO,WAAW;AACxD,UAAM,aAAa;AAAA,MACjB,GAAG;AAAA,MACH,UAAU;AAAA,QACR,GAAI,WAAuC;AAAA,QAC3C,QAAQ;AAAA,UACN,GAAK,WAAuC,UAAkD;AAAA,UAC9F,SAAS;AAAA,YACP,GAAM,WAAuC,UAAkD,QAAgD;AAAA,YAC/I;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,UAAM,WAAW,QAAQ,OAAO,gBAAgB,UAAU;AAC1D,QAAI,KAAK,qCAAqC,MAAM,EAAE;AAAA,EACxD,SAAS,KAAK;AACZ,QAAI,MAAM,6CAA6C,GAAG,EAAE;AAC5D,WAAO,EAAE,OAAO,EAAE,MAAM,SAAkB,SAAS,+DAAa,EAAE;AAAA,EACpE;AAGA,MAAI,SAAS,QAAQ;AACnB,QAAI;AACF,YAAM,yBAAyB;AAAA,QAC7B;AAAA,QACA,QAAQ,QAAQ;AAAA,QAChB,MAAM,gCAAgC,QAAQ;AAAA,QAC9C,UAAU;AAAA,QACV;AAAA,MACF,CAAC;AAAA,IACH,SAAS,GAAG;AACV,UAAI,KAAK,iCAAiC,CAAC,EAAE;AAAA,IAC/C;AAAA,EACF;AAGA,0BAAwB,OAAO,OAAO;AAGtC,MAAI,SAAS,QAAQ,QAAQ;AAC3B,UAAM,IAAI,QAAQ;AAClB,iBAAa,YAAY;AACvB,UAAI;AACF,cAAM,iBAAiB,GAAG,EAAE,SAAS;AACrC,cAAM,iBAAiB;AAAA,UACrB,QAAQ,EAAE,WAAW,EAAE,SAAS,aAAa,EAAE;AAAA,UAC/C,SAAS;AAAA,YACP,YAAY;AAAA,YACZ,SAAS,EAAE;AAAA,YACX,WAAW,EAAE,YAAY;AAAA,YACzB,cAAc;AAAA,YACd,SAAS,KAAK,UAAU,EAAE,MAAM,iIAAwB,CAAC;AAAA,YACzD,WAAW,EAAE;AAAA,UACf;AAAA,QACF;AACA,cAAM,mBAAmB;AAAA,UACvB,KAAK,CAAC,QAAgB,IAAI,KAAK,GAAG;AAAA,UAClC,OAAO,CAAC,QAAgB,IAAI,MAAM,GAAG;AAAA,QACvC;AACA,cAAM,WAAW,WAAW,QAAQ,OAAO,WAAW;AACtD,cAAM,EAAE,QAAQ,IAAI,sBAAsB;AAAA,UACxC,WAAW,EAAE;AAAA,UACb,QAAQ,EAAE;AAAA,UACV,UAAU,EAAE;AAAA,UACZ,MAAM,YAAY;AAChB,kBAAM;AAAA,cACJ;AAAA,gBACE,WAAW;AAAA,gBACX,QAAQ,EAAE;AAAA,gBACV,WAAW,EAAE;AAAA,gBACb,WAAW,KAAK,IAAI;AAAA,gBACpB;AAAA,gBACA,UAAU,EAAE;AAAA,gBACZ,UAAU,EAAE;AAAA,cACd;AAAA,cACA,MACE,oBAAoB;AAAA,gBAClB,KAAK;AAAA,gBACL,OAAO;AAAA,gBACP,WAAW,EAAE;AAAA,gBACb,cAAc;AAAA,gBACd,SAAS;AAAA,gBACT,kBAAkB,EAAE;AAAA,cACtB,CAAC;AAAA,YACL;AAAA,UACF;AAAA,QACF,CAAC;AACD,cAAM;AACN,YAAI,KAAK,qDAAqD;AAAA,MAChE,SAAS,GAAG;AACV,YAAI,KAAK,4DAA4D,CAAC,EAAE;AAAA,MAC1E;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,OAAO,EAAE,MAAM,WAAoB,SAAS,2BAAO,QAAQ,GAAG;AAAA,EAChE;AACF;",
+  "sourcesContent": ["/**\n * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates\n * SPDX-License-Identifier: MIT\n *\n * feishu_project_oauth \u2014 \u98DE\u4E66\u9879\u76EE\uFF08Meego\uFF09\u72EC\u7ACB OAuth \u6388\u6743\u5DE5\u5177\u3002\n *\n * \u57FA\u4E8E MCP \u6807\u51C6 OAuth\uFF08Authorization Code + PKCE + \u52A8\u6001\u5BA2\u6237\u7AEF\u6CE8\u518C\uFF09\uFF0C\n * \u4E0D\u9700\u8981 appId/appSecret\u3002\n *\n * \u5355\u4E00 authorize action \u81EA\u52A8\u5224\u65AD\u8FD0\u884C\u73AF\u5883\uFF1A\n *   - \u672C\u5730\uFF08\u80FD\u7ED1\u7AEF\u53E3\uFF09\uFF1A\u542F\u52A8\u56DE\u8C03\u670D\u52A1\u5668\uFF0C\u6D4F\u89C8\u5668\u91CD\u5B9A\u5411\u81EA\u52A8\u5B8C\u6210\n *   - \u8FDC\u7A0B\uFF08\u7ED1\u7AEF\u53E3\u5931\u8D25 / headless\uFF09\uFF1A\u964D\u7EA7\u4E3A\u53D1\u9001\u6388\u6743\u94FE\u63A5\uFF0C\u7B49\u7528\u6237\u56DE\u4F20 callback URL\n *\n * Actions:\n *   - authorize      : \u53D1\u8D77\u6388\u6743\uFF08\u81EA\u52A8\u9009\u62E9\u672C\u5730/\u8FDC\u7A0B\u6A21\u5F0F\uFF09\n *   - complete_auth  : \u8FDC\u7A0B\u6A21\u5F0F\u4E0B\uFF0C\u7528\u6237\u56DE\u4F20 callback URL \u5B8C\u6210\u6388\u6743\n *   - status         : \u68C0\u67E5\u98DE\u4E66\u9879\u76EE\u6388\u6743\u72B6\u6001\n *   - revoke         : \u64A4\u9500\u98DE\u4E66\u9879\u76EE\u6388\u6743\n */\n\nimport type { OpenClawPluginApi } from 'openclaw/plugin-sdk';\nimport { Type } from '@sinclair/typebox';\nimport { getTicket } from '../core/lark-ticket';\nimport { larkLogger } from '../core/lark-logger';\nimport { formatLarkError } from '../core/api-error';\nimport {\n  startLocalAuthFlow,\n  prepareRemoteAuth,\n  completeRemoteAuth,\n  type ProjectAuthSession,\n} from '../core/project-auth';\nimport {\n  getProjectStoredToken,\n  setProjectStoredToken,\n  removeProjectStoredToken,\n  projectTokenStatus,\n  getProjectClientId,\n} from '../core/project-token-store';\nimport type { StoredUAToken } from '../core/token-store';\nimport { getProjectMcpEndpoint, getProjectDomainFromConfig } from '../tools/mcp/project/endpoint';\nimport { createCardEntity, sendCardByCardId, updateCardKitCardForAuth } from '../card/cardkit';\nimport { buildAuthCard, buildAuthSuccessCard, buildAuthFailedCard, buildProjectAuthCard, buildProjectDomainCard, buildProjectDomainConfirmedCard } from './oauth-cards';\nimport { LarkClient } from '../core/lark-client';\nimport { json } from './oapi/helpers';\nimport { handleFeishuMessage } from '../messaging/inbound/handler';\nimport { enqueueFeishuChatTask } from '../channel/chat-queue';\nimport { withTicket } from '../core/lark-ticket';\n\nconst log = larkLogger('tools/project-oauth');\n\n// ---------------------------------------------------------------------------\n// Schema\n// ---------------------------------------------------------------------------\n\nconst FeishuProjectOAuthSchema = Type.Object(\n  {\n    action: Type.Union(\n      [\n        Type.Literal('authorize'),\n        Type.Literal('complete_auth'),\n        Type.Literal('status'),\n        Type.Literal('revoke'),\n        Type.Literal('select_env'),\n      ],\n      {\n        description:\n          'authorize: \u53D1\u8D77\u98DE\u4E66\u9879\u76EE\u6388\u6743; ' +\n          'complete_auth: \u8FDC\u7A0B\u6A21\u5F0F\u4E0B\u56DE\u4F20 callback URL \u5B8C\u6210\u6388\u6743; ' +\n          'status: \u68C0\u67E5\u6388\u6743\u72B6\u6001; revoke: \u64A4\u9500\u6388\u6743; ' +\n          'select_env: \u9009\u62E9\u6216\u66F4\u6362\u98DE\u4E66\u9879\u76EE\u73AF\u5883\uFF08\u98DE\u4E66\u9879\u76EE/Meegle/\u81EA\u5B9A\u4E49\uFF09',\n      },\n    ),\n    callback_url: Type.Optional(\n      Type.String({\n        description: '\u4EC5 complete_auth \u65F6\u9700\u8981\uFF1A\u7528\u6237\u4ECE\u6D4F\u89C8\u5668\u5730\u5740\u680F\u590D\u5236\u7684\u5B8C\u6574\u56DE\u8C03 URL',\n      }),\n    ),\n  },\n  {\n    description:\n      '\u98DE\u4E66\u9879\u76EE\uFF08Meego\uFF09\u72EC\u7ACB\u6388\u6743\u5DE5\u5177\u3002\u98DE\u4E66\u9879\u76EE\u7684\u6388\u6743\u4E0E\u98DE\u4E66 IM/\u6587\u6863\u7684\u6388\u6743\u4E0D\u5171\u4EAB\uFF0C\u9996\u6B21\u4F7F\u7528\u9700\u5355\u72EC\u6388\u6743\u3002',\n  },\n);\n\ninterface FeishuProjectOAuthParams {\n  action: 'authorize' | 'complete_auth' | 'status' | 'revoke' | 'select_env';\n  callback_url?: string;\n}\n\n// ---------------------------------------------------------------------------\n// In-flight state\n// ---------------------------------------------------------------------------\n\ninterface PendingLocalFlow {\n  controller: AbortController;\n  cardId: string;\n  sequence: number;\n  superseded: boolean;\n  close: () => Promise<void>;\n}\n\nconst pendingLocalFlows = new Map<string, PendingLocalFlow>();\ninterface PendingRemoteSession {\n  session: ProjectAuthSession;\n  cardId?: string;\n  senderOpenId: string;\n  ticket: {\n    messageId: string;\n    chatId: string;\n    accountId: string;\n    chatType?: 'p2p' | 'group';\n    threadId?: string;\n  };\n}\n\n/** userKey \u2192 PendingRemoteSession */\nconst pendingRemoteSessions = new Map<string, PendingRemoteSession>();\n\nconst PENDING_SESSION_TTL_MS = 10 * 60 * 1000; // 10 min\n\ninterface PendingDomainSelection {\n  senderOpenId: string;\n  cardId?: string;\n  ticket: { messageId: string; chatId: string; accountId: string; chatType?: string; threadId?: string };\n}\n\nconst pendingDomainSelections = new Map<string, PendingDomainSelection>();\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\nfunction fk(userOpenId: string): string {\n  return `project:${userOpenId}`;\n}\n\nfunction buildTokenFromOAuth(\n  userOpenId: string,\n  clientId: string,\n  tokens: { access_token: string; refresh_token?: string; expires_in?: number; scope?: string },\n): StoredUAToken {\n  const now = Date.now();\n  const expiresIn = tokens.expires_in ?? 7200;\n  const refreshExpiresIn = 30 * 24 * 3600;\n  return {\n    userOpenId,\n    appId: clientId,\n    accessToken: tokens.access_token,\n    refreshToken: tokens.refresh_token ?? '',\n    expiresAt: now + expiresIn * 1000,\n    refreshExpiresAt: now + refreshExpiresIn * 1000,\n    scope: tokens.scope ?? '',\n    grantedAt: now,\n  };\n}\n\nasync function isAlreadyAuthorized(senderOpenId: string): Promise<boolean> {\n  const clientId = await getProjectClientId(senderOpenId);\n  if (!clientId) return false;\n  const existing = await getProjectStoredToken(clientId, senderOpenId);\n  return !!existing && projectTokenStatus(existing) !== 'expired';\n}\n\n/**\n * \u5C1D\u8BD5\u542F\u52A8\u672C\u5730\u56DE\u8C03\u670D\u52A1\u5668\u3002\n * \u6210\u529F\u8FD4\u56DE flow \u5BF9\u8C61\uFF1B\u5931\u8D25\uFF08\u7AEF\u53E3\u7ED1\u5B9A\u5931\u8D25\u7B49\uFF09\u8FD4\u56DE null\uFF0C\u8C03\u7528\u65B9\u964D\u7EA7\u4E3A\u8FDC\u7A0B\u6A21\u5F0F\u3002\n */\nasync function tryLocalAuth(mcpEndpoint: string) {\n  try {\n    return await startLocalAuthFlow(mcpEndpoint);\n  } catch (err) {\n    log.info(`local auth unavailable, falling back to remote: ${err instanceof Error ? err.message : err}`);\n    return null;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Registration\n// ---------------------------------------------------------------------------\n\nexport function registerFeishuProjectOAuthTool(api: OpenClawPluginApi) {\n  if (!api.config) return;\n\n  const cfg = api.config;\n\n  api.registerTool(\n    {\n      name: 'feishu_project_oauth',\n      label: 'Feishu Project OAuth',\n      description:\n        '\u98DE\u4E66\u9879\u76EE\uFF08Meego\uFF09\u72EC\u7ACB\u6388\u6743\u5DE5\u5177\u3002' +\n        '\u98DE\u4E66\u9879\u76EE\u7684\u6388\u6743\u4E0E\u98DE\u4E66 IM/\u6587\u6863\u7684\u6388\u6743\u4E0D\u5171\u4EAB\uFF0C\u9996\u6B21\u4F7F\u7528\u98DE\u4E66\u9879\u76EE\u529F\u80FD\u65F6\u9700\u8981\u5355\u72EC\u6388\u6743\u3002' +\n        '\u8C03\u7528 authorize \u81EA\u52A8\u53D1\u8D77\u6388\u6743\u6D41\u7A0B\u3002\u5982\u679C\u63D0\u793A\u9700\u8981\u624B\u52A8\u56DE\u4F20 URL\uFF0C\u518D\u8C03\u7528 complete_auth\u3002',\n      parameters: FeishuProjectOAuthSchema,\n\n      async execute(_toolCallId: string, params: unknown) {\n        const p = params as FeishuProjectOAuthParams;\n\n        const ticket = getTicket();\n        const senderOpenId = ticket?.senderOpenId;\n        if (!senderOpenId) {\n          return json({\n            error: '\u65E0\u6CD5\u83B7\u53D6\u5F53\u524D\u7528\u6237\u8EAB\u4EFD\uFF08senderOpenId\uFF09\uFF0C\u8BF7\u5728\u98DE\u4E66\u5BF9\u8BDD\u4E2D\u4F7F\u7528\u6B64\u5DE5\u5177\u3002',\n          });\n        }\n\n        const accountId = ticket.accountId;\n\n        try {\n          switch (p.action) {\n            // ---------------------------------------------------------------\n            // STATUS\n            // ---------------------------------------------------------------\n            case 'status': {\n              const clientId = await getProjectClientId(senderOpenId);\n              if (!clientId) {\n                return json({\n                  authorized: false,\n                  message: '\u98DE\u4E66\u9879\u76EE\u672A\u6388\u6743\u3002\u8BF7\u8C03\u7528 authorize \u53D1\u8D77\u6388\u6743\u3002',\n                });\n              }\n              const existing = await getProjectStoredToken(clientId, senderOpenId);\n              if (!existing) {\n                return json({\n                  authorized: false,\n                  message: '\u98DE\u4E66\u9879\u76EE\u672A\u6388\u6743\u3002\u8BF7\u8C03\u7528 authorize \u53D1\u8D77\u6388\u6743\u3002',\n                });\n              }\n              const status = projectTokenStatus(existing);\n              return json({\n                authorized: status !== 'expired',\n                token_status: status,\n                scope: existing.scope,\n                granted_at: existing.grantedAt ? new Date(existing.grantedAt).toISOString() : undefined,\n                expires_at: existing.expiresAt ? new Date(existing.expiresAt).toISOString() : undefined,\n              });\n            }\n\n            // ---------------------------------------------------------------\n            // AUTHORIZE\uFF08\u81EA\u52A8\u9009\u62E9\u672C\u5730/\u8FDC\u7A0B\uFF09\n            // ---------------------------------------------------------------\n            case 'authorize': {\n              if (await isAlreadyAuthorized(senderOpenId)) {\n                return json({\n                  success: true,\n                  message: '\u98DE\u4E66\u9879\u76EE\u5DF2\u6388\u6743\uFF0C\u65E0\u9700\u91CD\u590D\u6388\u6743\u3002',\n                  authorized: true,\n                });\n              }\n\n              const chatId = ticket.chatId;\n              if (!chatId) {\n                return json({ error: '\u65E0\u6CD5\u786E\u5B9A\u53D1\u9001\u76EE\u6807' });\n              }\n\n              // Cancel any existing local flow\n              const key = fk(senderOpenId);\n              const oldLocal = pendingLocalFlows.get(key);\n              if (oldLocal) {\n                oldLocal.superseded = true;\n                oldLocal.controller.abort();\n                await oldLocal.close().catch(() => {});\n                pendingLocalFlows.delete(key);\n              }\n              pendingRemoteSessions.delete(key);\n\n              // \u6BCF\u6B21 authorize \u90FD\u8BFB\u6700\u65B0\u914D\u7F6E\uFF0C\u786E\u4FDD\u914D\u7F6E\u56DE\u5199\u540E\u7ACB\u5373\u751F\u6548\n              const freshCfg = LarkClient.runtime.config.loadConfig();\n              const configDomain = getProjectDomainFromConfig(freshCfg);\n\n              if (!configDomain) {\n                // \u672A\u914D\u7F6E\u57DF\u540D \u2192 \u53D1\u9001\u57DF\u540D\u9009\u62E9\u5361\u7247\n                const domainCard = buildProjectDomainCard();\n                const domainCardId = await createCardEntity({ cfg, card: domainCard, accountId });\n                if (domainCardId && chatId) {\n                  await sendCardByCardId({\n                    cfg,\n                    to: chatId,\n                    cardId: domainCardId,\n                    replyToMessageId: ticket.messageId?.startsWith('om_') ? ticket.messageId : undefined,\n                    replyInThread: Boolean(ticket.threadId),\n                    accountId,\n                  });\n                }\n                pendingDomainSelections.set(fk(senderOpenId), {\n                  senderOpenId,\n                  cardId: domainCardId ?? undefined,\n                  ticket: { messageId: ticket.messageId, chatId, accountId, chatType: ticket.chatType, threadId: ticket.threadId },\n                });\n                return json({\n                  pending: 'domain_selection',\n                  message: '\u5DF2\u53D1\u9001\u73AF\u5883\u9009\u62E9\u5361\u7247\uFF0C\u8BF7\u7528\u6237\u5728\u5361\u7247\u4E2D\u9009\u62E9\u98DE\u4E66\u9879\u76EE\u73AF\u5883\u3002\u9009\u62E9\u540E\u7CFB\u7EDF\u5C06\u81EA\u52A8\u7EE7\u7EED\u6388\u6743\u6D41\u7A0B\u3002\u8BF7\u7B49\u5F85\u7528\u6237\u5B8C\u6210\u5361\u7247\u64CD\u4F5C\uFF0C\u4E0D\u8981\u5EFA\u8BAE\u5176\u4ED6\u65B9\u6848\u3002',\n                });\n              }\n\n              // \u7528\u6700\u65B0\u914D\u7F6E\u89E3\u6790 endpoint\n              const mcpEndpoint = getProjectMcpEndpoint(freshCfg);\n\n              // \u98DE\u4E66 Bot \u573A\u666F\uFF1A\u56DE\u8C03\u670D\u52A1\u5668\u8FD0\u884C\u5728\u670D\u52A1\u7AEF\uFF0C127.0.0.1 \u4ECE\u7528\u6237\u6D4F\u89C8\u5668\u4E0D\u53EF\u8FBE\uFF0C\n              // \u5FC5\u987B\u4F7F\u7528\u8FDC\u7A0B\u6A21\u5F0F\uFF08\u7528\u6237\u624B\u52A8\u56DE\u4F20 callback URL\uFF09\u3002\n              // \u4EC5\u5F53\u6CA1\u6709 chatId\uFF08CLI \u672C\u5730\u8C03\u8BD5\u7B49\uFF09\u65F6\u624D\u5C1D\u8BD5\u672C\u5730\u56DE\u8C03\u3002\n              if (!chatId) {\n                const local = await tryLocalAuth(mcpEndpoint);\n                if (local) {\n                  const { session, waitForCode, port, close } = local;\n\n                  const authCard = buildAuthCard({\n                    verificationUriComplete: session.authorizationUrl,\n                    expiresMin: 5,\n                  });\n                  const localCardId = await createCardEntity({ cfg, card: authCard, accountId });\n                  if (!localCardId) {\n                    await close();\n                    return json({ error: '\u521B\u5EFA\u6388\u6743\u5361\u7247\u5931\u8D25' });\n                  }\n\n                  const abortController = new AbortController();\n                  let seq = 1;\n                  const currentFlow: PendingLocalFlow = {\n                    controller: abortController,\n                    cardId: localCardId,\n                    sequence: seq,\n                    superseded: false,\n                    close,\n                  };\n                  pendingLocalFlows.set(key, currentFlow);\n\n                  waitForCode()\n                    .then(async (result) => {\n                      if (currentFlow.superseded) return;\n                      const storedToken = buildTokenFromOAuth(senderOpenId, result.clientId, result.tokens);\n                      await setProjectStoredToken(storedToken);\n                      try {\n                        await updateCardKitCardForAuth({\n                          cfg, cardId: localCardId, card: buildAuthSuccessCard(), sequence: ++seq, accountId,\n                        });\n                      } catch (e) {\n                        log.warn(`failed to update project auth card to success: ${e}`);\n                      }\n                    })\n                    .catch(async (err) => {\n                      if (currentFlow.superseded) return;\n                      log.error(`project local auth failed: ${err}`);\n                      try {\n                        const msg = err instanceof Error ? err.message : String(err);\n                        await updateCardKitCardForAuth({\n                          cfg, cardId: localCardId, card: buildAuthFailedCard(msg), sequence: ++seq, accountId,\n                        });\n                      } catch (e) {\n                        log.warn(`failed to update project auth card to failure: ${e}`);\n                      }\n                    })\n                    .finally(async () => {\n                      await close().catch(() => {});\n                      if (pendingLocalFlows.get(key) === currentFlow) {\n                        pendingLocalFlows.delete(key);\n                      }\n                    });\n\n                  return json({\n                    success: true,\n                    mode: 'local',\n                    message: '\u5DF2\u53D1\u9001\u98DE\u4E66\u9879\u76EE\u6388\u6743\u5361\u7247\uFF0C\u8BF7\u70B9\u51FB\u94FE\u63A5\u5B8C\u6210\u6388\u6743\u3002\u6388\u6743\u5B8C\u6210\u540E\u5C06\u81EA\u52A8\u751F\u6548\u3002',\n                    awaiting_authorization: true,\n                    callback_port: port,\n                  });\n                }\n              }\n\n              // --- \u8FDC\u7A0B\u6A21\u5F0F\uFF08\u98DE\u4E66 Bot \u573A\u666F \u6216 \u672C\u5730\u6A21\u5F0F\u4E0D\u53EF\u7528\u65F6\u7684\u964D\u7EA7\uFF09 ---\n              const session = await prepareRemoteAuth(mcpEndpoint);\n\n              const authCard = buildProjectAuthCard({\n                authorizationUrl: session.authorizationUrl,\n                expiresMin: 10,\n              });\n              const remoteCardId = chatId\n                ? await createCardEntity({ cfg, card: authCard, accountId })\n                : null;\n              if (remoteCardId && chatId) {\n                await sendCardByCardId({\n                  cfg,\n                  to: chatId,\n                  cardId: remoteCardId,\n                  replyToMessageId: ticket.messageId?.startsWith('om_') ? ticket.messageId : undefined,\n                  replyInThread: Boolean(ticket.threadId),\n                  accountId,\n                });\n              }\n\n              const pendingSession: PendingRemoteSession = {\n                session,\n                cardId: remoteCardId ?? undefined,\n                senderOpenId,\n                ticket: {\n                  messageId: ticket.messageId,\n                  chatId,\n                  accountId,\n                  chatType: ticket.chatType,\n                  threadId: ticket.threadId,\n                },\n              };\n              pendingRemoteSessions.set(key, pendingSession);\n              setTimeout(() => {\n                if (pendingRemoteSessions.get(key) === pendingSession) pendingRemoteSessions.delete(key);\n              }, PENDING_SESSION_TTL_MS);\n\n              return json({\n                success: true,\n                mode: 'remote',\n                message:\n                  '\u5DF2\u53D1\u9001\u98DE\u4E66\u9879\u76EE\u6388\u6743\u5361\u7247\u3002\u8BF7\u7528\u6237\u6309\u7167\u5361\u7247\u4E0A\u7684\u4E24\u6B65\u64CD\u4F5C\u5B8C\u6210\u6388\u6743\uFF1A' +\n                  '\u2460 \u70B9\u51FB\"\u524D\u5F80\u6388\u6743\"\u6309\u94AE\u5B8C\u6210\u98DE\u4E66\u9879\u76EE\u6388\u6743\uFF0C' +\n                  '\u2461 \u5C06\u6D4F\u89C8\u5668\u5730\u5740\u680F URL \u7C98\u8D34\u5230\u5361\u7247\u8F93\u5165\u6846\u5E76\u70B9\u51FB\"\u5B8C\u6210\u6388\u6743\"\u3002' +\n                  '\u6388\u6743\u5B8C\u6210\u540E\u7CFB\u7EDF\u4F1A\u81EA\u52A8\u901A\u77E5\u3002\u8BF7\u7B49\u5F85\u7528\u6237\u5B8C\u6210\u5361\u7247\u64CD\u4F5C\uFF0C\u4E0D\u8981\u5EFA\u8BAE\u5176\u4ED6\u65B9\u6848\u3002',\n                awaiting_authorization: true,\n              });\n            }\n\n            // ---------------------------------------------------------------\n            // COMPLETE_AUTH\uFF08\u8FDC\u7A0B\u6A21\u5F0F\u4E0B\u7528\u6237\u56DE\u4F20 callback URL\uFF09\n            // ---------------------------------------------------------------\n            case 'complete_auth': {\n              if (!p.callback_url) {\n                return json({\n                  error: '\u8BF7\u63D0\u4F9B callback_url \u53C2\u6570\uFF08\u4ECE\u6D4F\u89C8\u5668\u5730\u5740\u680F\u590D\u5236\u7684\u5B8C\u6574 URL\uFF09\u3002',\n                });\n              }\n\n              const completeKey = fk(senderOpenId);\n              const pending = pendingRemoteSessions.get(completeKey);\n              if (!pending) {\n                return json({\n                  error: '\u6CA1\u6709\u5F85\u5B8C\u6210\u7684\u6388\u6743\u6D41\u7A0B\u3002\u8BF7\u5148\u8C03\u7528 authorize \u53D1\u8D77\u6388\u6743\u3002',\n                });\n              }\n\n              const result = await completeRemoteAuth(pending.session, p.callback_url);\n              pendingRemoteSessions.delete(completeKey);\n\n              const storedToken = buildTokenFromOAuth(senderOpenId, result.clientId, result.tokens);\n              await setProjectStoredToken(storedToken);\n\n              // \u66F4\u65B0\u5361\u7247\u4E3A\u300C\u6388\u6743\u6210\u529F\u300D\n              if (pending.cardId) {\n                try {\n                  await updateCardKitCardForAuth({\n                    cfg,\n                    cardId: pending.cardId,\n                    card: buildAuthSuccessCard(),\n                    sequence: 2,\n                    accountId: ticket.accountId,\n                  });\n                } catch (e) {\n                  log.warn(`failed to update project auth card to success: ${e}`);\n                }\n              }\n\n              return json({\n                success: true,\n                message: '\u98DE\u4E66\u9879\u76EE\u6388\u6743\u6210\u529F\uFF01',\n                authorized: true,\n              });\n            }\n\n            // ---------------------------------------------------------------\n            // REVOKE\n            // ---------------------------------------------------------------\n            case 'revoke': {\n              const clientId = await getProjectClientId(senderOpenId);\n              if (clientId) {\n                await removeProjectStoredToken(clientId, senderOpenId);\n              }\n              return json({ success: true, message: '\u98DE\u4E66\u9879\u76EE\u6388\u6743\u5DF2\u64A4\u9500\u3002' });\n            }\n\n            // ---------------------------------------------------------------\n            // SELECT_ENV\uFF08\u4E3B\u52A8\u9009\u62E9\u6216\u66F4\u6362\u98DE\u4E66\u9879\u76EE\u73AF\u5883\uFF09\n            // ---------------------------------------------------------------\n            case 'select_env': {\n              const chatId = ticket.chatId;\n              if (!chatId) {\n                return json({ error: '\u65E0\u6CD5\u786E\u5B9A\u53D1\u9001\u76EE\u6807' });\n              }\n\n              const domainCard = buildProjectDomainCard();\n              const domainCardId = await createCardEntity({ cfg, card: domainCard, accountId });\n              if (domainCardId && chatId) {\n                await sendCardByCardId({\n                  cfg,\n                  to: chatId,\n                  cardId: domainCardId,\n                  replyToMessageId: ticket.messageId?.startsWith('om_') ? ticket.messageId : undefined,\n                  replyInThread: Boolean(ticket.threadId),\n                  accountId,\n                });\n              }\n              pendingDomainSelections.set(fk(senderOpenId), {\n                senderOpenId,\n                cardId: domainCardId ?? undefined,\n                ticket: { messageId: ticket.messageId, chatId, accountId, chatType: ticket.chatType, threadId: ticket.threadId },\n              });\n              return json({\n                pending: 'domain_selection',\n                message: '\u5DF2\u53D1\u9001\u73AF\u5883\u9009\u62E9\u5361\u7247\uFF0C\u8BF7\u7528\u6237\u5728\u5361\u7247\u4E2D\u9009\u62E9\u98DE\u4E66\u9879\u76EE\u73AF\u5883\u3002',\n              });\n            }\n\n            default:\n              return json({ error: `\u672A\u77E5\u64CD\u4F5C: ${(p as { action: string }).action}` });\n          }\n        } catch (err) {\n          log.error(`project oauth ${p.action} failed: ${err}`);\n          return json({ error: formatLarkError(err) });\n        }\n      },\n    },\n    { name: 'feishu_project_oauth' },\n  );\n\n  api.logger.info?.('feishu_project_oauth: Registered feishu_project_oauth tool');\n}\n\n// ---------------------------------------------------------------------------\n// Card callback handler \u2014 \u5361\u7247\u8868\u5355\u63D0\u4EA4\u56DE\u8C03\n// ---------------------------------------------------------------------------\n\n/**\n * \u5904\u7406\u98DE\u4E66\u9879\u76EE OAuth \u5361\u7247\u7684 form submit \u56DE\u8C03\u3002\n *\n * \u7528\u6237\u5728\u5361\u7247\u8F93\u5165\u6846\u7C98\u8D34 callback URL \u5E76\u70B9\u51FB\"\u5B8C\u6210\u6388\u6743\"\u540E\u89E6\u53D1\u3002\n * \u7531 auto-auth.ts \u7684 handleCardAction \u5206\u53D1\u8C03\u7528\u3002\n */\nexport async function handleProjectAuthCardAction(\n  data: unknown,\n  cfg: import('openclaw/plugin-sdk').ClawdbotConfig,\n  accountId: string,\n): Promise<unknown> {\n  let callbackUrl: string | undefined;\n  let senderOpenId: string | undefined;\n\n  try {\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    const event = data as Record<string, any>;\n    senderOpenId = event.operator?.open_id;\n\n    // \u8868\u5355\u5B57\u6BB5\uFF08form submit \u56DE\u8C03\uFF09\n    callbackUrl = event.action?.form_value?.callback_url?.trim();\n\n    log.debug(`project card action raw: callbackUrl=${callbackUrl ? '(set)' : '(empty)'}, senderOpenId=${senderOpenId}, actionKeys=${JSON.stringify(Object.keys(event.action ?? {}))}`);\n  } catch {\n    return;\n  }\n\n  if (!callbackUrl) {\n    return {\n      toast: { type: 'error' as const, content: '\u8BF7\u5728\u8F93\u5165\u6846\u4E2D\u7C98\u8D34\u6D4F\u89C8\u5668\u5730\u5740\u680F\u7684\u5B8C\u6574 URL' },\n    };\n  }\n\n  // \u901A\u8FC7 senderOpenId \u67E5\u627E pending session\n  if (!senderOpenId) {\n    log.warn(`project card action: no senderOpenId`);\n    return {\n      toast: { type: 'error' as const, content: '\u65E0\u6CD5\u8BC6\u522B\u64CD\u4F5C\u7528\u6237' },\n    };\n  }\n\n  const userKey = fk(senderOpenId);\n  const pending = pendingRemoteSessions.get(userKey);\n\n  if (!pending) {\n    log.warn(`project card action: no pending session found (senderOpenId=${senderOpenId})`);\n    return {\n      toast: { type: 'error' as const, content: '\u6388\u6743\u94FE\u63A5\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u53D1\u8D77\u6388\u6743' },\n    };\n  }\n\n  // \u6821\u9A8C\u64CD\u4F5C\u4EBA\u4E0E\u53D1\u8D77\u4EBA\u4E00\u81F4\n  if (senderOpenId && senderOpenId !== pending.senderOpenId) {\n    log.warn(`project card action: identity mismatch, expected=${pending.senderOpenId}, actual=${senderOpenId}`);\n    return {\n      toast: { type: 'error' as const, content: '\u8BF7\u4F7F\u7528\u53D1\u8D77\u6388\u6743\u7684\u8D26\u53F7\u5B8C\u6210\u64CD\u4F5C' },\n    };\n  }\n\n  // \u5148\u6821\u9A8C callbackUrl \u683C\u5F0F\uFF0C\u901A\u8FC7\u540E\u518D\u6E05\u7406 session\uFF08\u907F\u514D\u683C\u5F0F\u9519\u8BEF\u65F6 session \u88AB\u610F\u5916\u5220\u9664\u5BFC\u81F4\u65E0\u6CD5\u91CD\u8BD5\uFF09\n  try {\n    const testUrl = new URL(callbackUrl);\n    const hasError = testUrl.searchParams.get('error');\n    if (hasError) {\n      const desc = testUrl.searchParams.get('error_description') ?? hasError;\n      log.warn(`project card action: callback URL contains error: ${hasError} - ${desc}`);\n      return {\n        toast: { type: 'error' as const, content: `\u6388\u6743\u5931\u8D25\uFF1A${desc}\u3002\u8BF7\u91CD\u65B0\u53D1\u8D77\u6388\u6743\u3002` },\n      };\n    }\n    if (!testUrl.searchParams.get('code')) {\n      log.warn(`project card action: callback URL missing code param: ${callbackUrl}`);\n      return {\n        toast: { type: 'error' as const, content: '\u8BE5 URL \u4E2D\u7F3A\u5C11\u6388\u6743\u7801\uFF0C\u8BF7\u786E\u4FDD\u590D\u5236\u7684\u662F\u6388\u6743\u5B8C\u6210\u540E\u7684\u5B8C\u6574 URL' },\n      };\n    }\n  } catch {\n    log.warn(`project card action: invalid callback URL: ${callbackUrl}`);\n    return {\n      toast: { type: 'error' as const, content: '\u65E0\u6548\u7684 URL \u683C\u5F0F\uFF0C\u8BF7\u91CD\u65B0\u7C98\u8D34' },\n    };\n  }\n\n  // \u6821\u9A8C\u901A\u8FC7\u540E\u6E05\u7406 session\n  pendingRemoteSessions.delete(userKey);\n\n  // \u5F02\u6B65\u5B8C\u6210 token \u4EA4\u6362\uFF08\u5148\u8FD4\u56DE toast\uFF0C\u518D\u540E\u53F0\u5904\u7406\uFF09\n  const capturedPending = pending;\n  const capturedCallbackUrl = callbackUrl;\n\n  setImmediate(async () => {\n    try {\n      const result = await completeRemoteAuth(capturedPending.session, capturedCallbackUrl);\n      const storedToken = buildTokenFromOAuth(\n        capturedPending.senderOpenId,\n        result.clientId,\n        result.tokens,\n      );\n      await setProjectStoredToken(storedToken);\n\n      // \u66F4\u65B0\u5361\u7247\u4E3A\"\u6388\u6743\u6210\u529F\"\n      if (capturedPending.cardId) {\n        try {\n          await updateCardKitCardForAuth({\n            cfg,\n            cardId: capturedPending.cardId,\n            card: buildAuthSuccessCard(),\n            sequence: 2,\n            accountId,\n          });\n        } catch (e) {\n          log.warn(`failed to update project auth card to success: ${e}`);\n        }\n      }\n\n      log.info(`project auth completed via card callback for ${capturedPending.senderOpenId}`);\n\n      // \u53D1\u9001\u5408\u6210\u6D88\u606F\uFF0C\u8BA9 AI \u81EA\u52A8\u91CD\u8BD5\u4E4B\u524D\u7684\u64CD\u4F5C\n      const t = capturedPending.ticket;\n      if (t.chatId) {\n        try {\n          const syntheticMsgId = `${t.messageId}:project-auth-complete`;\n          const syntheticEvent = {\n            sender: { sender_id: { open_id: capturedPending.senderOpenId } },\n            message: {\n              message_id: syntheticMsgId,\n              chat_id: t.chatId,\n              chat_type: t.chatType ?? 'p2p',\n              message_type: 'text',\n              content: JSON.stringify({ text: '[\u7CFB\u7EDF\u901A\u77E5] \u98DE\u4E66\u9879\u76EE\u6388\u6743\u5DF2\u6210\u529F\u5B8C\u6210\uFF0Ctoken \u5DF2\u4FDD\u5B58\u751F\u6548\u3002\u8BF7\u76F4\u63A5\u7EE7\u7EED\u6267\u884C\u7528\u6237\u4E4B\u524D\u8BF7\u6C42\u7684\u64CD\u4F5C\uFF0C\u65E0\u9700\u518D\u8C03\u7528 feishu_project_oauth \u5DE5\u5177\uFF08\u4E0D\u8981 revoke\u3001\u4E0D\u8981 authorize\u3001\u4E0D\u8981 status\uFF09\u3002' }),\n              thread_id: t.threadId,\n            },\n          };\n          const syntheticRuntime = {\n            log: (msg: string) => log.info(msg),\n            error: (msg: string) => log.error(msg),\n          };\n          const { promise } = enqueueFeishuChatTask({\n            accountId: t.accountId,\n            chatId: t.chatId,\n            threadId: t.threadId,\n            task: async () => {\n              await withTicket(\n                {\n                  messageId: syntheticMsgId,\n                  chatId: t.chatId,\n                  accountId: t.accountId,\n                  startTime: Date.now(),\n                  senderOpenId: capturedPending.senderOpenId,\n                  chatType: t.chatType,\n                  threadId: t.threadId,\n                },\n                () =>\n                  handleFeishuMessage({\n                    cfg,\n                    event: syntheticEvent as Parameters<typeof handleFeishuMessage>[0]['event'],\n                    accountId: t.accountId,\n                    forceMention: true,\n                    runtime: syntheticRuntime as Parameters<typeof handleFeishuMessage>[0]['runtime'],\n                    replyToMessageId: t.messageId,\n                  }),\n              );\n            },\n          });\n          await promise;\n          log.info('synthetic message dispatched after project auth');\n        } catch (e) {\n          log.warn(`failed to send synthetic message after project auth: ${e}`);\n        }\n      }\n    } catch (err) {\n      const errMsg = err instanceof Error ? err.message : String(err);\n      log.error(`project auth card callback failed: ${errMsg}`);\n      // \u5C1D\u8BD5\u66F4\u65B0\u5361\u7247\u4E3A\u5931\u8D25\u72B6\u6001\n      if (capturedPending.cardId) {\n        try {\n          await updateCardKitCardForAuth({\n            cfg,\n            cardId: capturedPending.cardId,\n            card: buildAuthFailedCard(errMsg),\n            sequence: 2,\n            accountId,\n          });\n        } catch (e) {\n          log.warn(`failed to update project auth card to failure: ${e}`);\n        }\n      }\n\n      // \u53D1\u9001\u5408\u6210\u6D88\u606F\u901A\u77E5 AI \u6388\u6743\u5931\u8D25\uFF0C\u907F\u514D AI \u65E0\u9650\u7B49\u5F85\n      const t = capturedPending.ticket;\n      if (t.chatId) {\n        try {\n          const syntheticMsgId = `${t.messageId}:project-auth-failed`;\n          const syntheticEvent = {\n            sender: { sender_id: { open_id: capturedPending.senderOpenId } },\n            message: {\n              message_id: syntheticMsgId,\n              chat_id: t.chatId,\n              chat_type: t.chatType ?? 'p2p',\n              message_type: 'text',\n              content: JSON.stringify({ text: `[\u7CFB\u7EDF\u901A\u77E5] \u98DE\u4E66\u9879\u76EE\u6388\u6743\u5931\u8D25\uFF1A${errMsg}\u3002\u8BF7\u544A\u77E5\u7528\u6237\u6388\u6743\u5931\u8D25\u539F\u56E0\uFF0C\u5E76\u5EFA\u8BAE\u7528\u6237\u91CD\u65B0\u53D1\u8D77\u6388\u6743\u3002` }),\n              thread_id: t.threadId,\n            },\n          };\n          const syntheticRuntime = {\n            log: (msg: string) => log.info(msg),\n            error: (msg: string) => log.error(msg),\n          };\n          const { promise } = enqueueFeishuChatTask({\n            accountId: t.accountId,\n            chatId: t.chatId,\n            threadId: t.threadId,\n            task: async () => {\n              await withTicket(\n                {\n                  messageId: syntheticMsgId,\n                  chatId: t.chatId,\n                  accountId: t.accountId,\n                  startTime: Date.now(),\n                  senderOpenId: capturedPending.senderOpenId,\n                  chatType: t.chatType,\n                  threadId: t.threadId,\n                },\n                () =>\n                  handleFeishuMessage({\n                    cfg,\n                    event: syntheticEvent as Parameters<typeof handleFeishuMessage>[0]['event'],\n                    accountId: t.accountId,\n                    forceMention: true,\n                    runtime: syntheticRuntime as Parameters<typeof handleFeishuMessage>[0]['runtime'],\n                    replyToMessageId: t.messageId,\n                  }),\n              );\n            },\n          });\n          await promise;\n          log.info('synthetic failure message dispatched after project auth failure');\n        } catch (e) {\n          log.warn(`failed to send synthetic message after project auth failure: ${e}`);\n        }\n      }\n    }\n  });\n\n  return {\n    toast: { type: 'info' as const, content: '\u6B63\u5728\u5B8C\u6210\u6388\u6743...' },\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Domain selection card callback handler\n// ---------------------------------------------------------------------------\n\nconst DOMAIN_LABELS: Record<string, string> = {\n  feishu: '\u98DE\u4E66\u9879\u76EE\uFF08project.feishu.cn\uFF09',\n  meegle: 'Meegle\uFF08meegle.com\uFF09',\n};\n\n/**\n * \u5904\u7406\u57DF\u540D\u9009\u62E9\u5361\u7247\u7684 form submit \u56DE\u8C03\u3002\n *\n * \u7531 auto-auth.ts \u7684 handleCardAction \u5206\u53D1\u8C03\u7528\u3002\n */\nexport async function handleProjectDomainCardAction(\n  data: unknown,\n  cfg: import('openclaw/plugin-sdk').ClawdbotConfig,\n  accountId: string,\n): Promise<unknown> {\n  let senderOpenId: string | undefined;\n  let domainPreset: string | undefined;\n  let domainCustom: string | undefined;\n\n  try {\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    const event = data as Record<string, any>;\n    senderOpenId = event.operator?.open_id;\n    domainPreset = event.action?.form_value?.domain_preset;\n    domainCustom = event.action?.form_value?.domain_custom?.trim();\n  } catch {\n    return;\n  }\n\n  if (!senderOpenId) {\n    return { toast: { type: 'error' as const, content: '\u65E0\u6CD5\u8BC6\u522B\u64CD\u4F5C\u7528\u6237' } };\n  }\n\n  // \u786E\u5B9A\u57DF\u540D\n  let domain: string;\n  let envLabel: string;\n\n  if (domainCustom) {\n    // \u652F\u6301\u7528\u6237\u7C98\u8D34\u5B8C\u6574 URL\uFF0C\u81EA\u52A8\u63D0\u53D6 origin\uFF08\u5982 https://project.feishu.cn/xxx \u2192 https://project.feishu.cn\uFF09\n    let parsed: URL;\n    try {\n      parsed = new URL(domainCustom);\n    } catch {\n      return { toast: { type: 'error' as const, content: '\u65E0\u6548\u7684 URL\uFF0C\u8BF7\u8F93\u5165\u4EE5 https:// \u5F00\u5934\u7684\u57DF\u540D\u6216\u94FE\u63A5' } };\n    }\n    if (parsed.protocol !== 'https:') {\n      return { toast: { type: 'error' as const, content: '\u4EC5\u652F\u6301 https \u534F\u8BAE' } };\n    }\n    domain = parsed.origin; // e.g. https://project.feishu.cn\n    envLabel = domain;\n  } else {\n    domain = domainPreset ?? 'feishu';\n    envLabel = DOMAIN_LABELS[domain] ?? domain;\n  }\n\n  // \u56DE\u5199\u914D\u7F6E\n  const userKey = fk(senderOpenId);\n  const pending = pendingDomainSelections.get(userKey);\n\n  try {\n    const currentCfg = LarkClient.runtime.config.loadConfig();\n    const updatedCfg = {\n      ...currentCfg,\n      channels: {\n        ...(currentCfg as Record<string, unknown>).channels as Record<string, unknown> | undefined,\n        feishu: {\n          ...((currentCfg as Record<string, unknown>).channels as Record<string, unknown> | undefined)?.feishu as Record<string, unknown> | undefined,\n          project: {\n            ...(((currentCfg as Record<string, unknown>).channels as Record<string, unknown> | undefined)?.feishu as Record<string, unknown> | undefined)?.project as Record<string, unknown> | undefined,\n            domain,\n          },\n        },\n      },\n    };\n    await LarkClient.runtime.config.writeConfigFile(updatedCfg);\n    log.info(`project domain written to config: ${domain}`);\n  } catch (err) {\n    log.error(`failed to write project domain to config: ${err}`);\n    return { toast: { type: 'error' as const, content: '\u5199\u5165\u914D\u7F6E\u5931\u8D25\uFF0C\u8BF7\u91CD\u8BD5' } };\n  }\n\n  // \u66F4\u65B0\u5361\u7247\u4E3A\u786E\u8BA4\u72B6\u6001\n  if (pending?.cardId) {\n    try {\n      await updateCardKitCardForAuth({\n        cfg,\n        cardId: pending.cardId,\n        card: buildProjectDomainConfirmedCard(envLabel),\n        sequence: 2,\n        accountId,\n      });\n    } catch (e) {\n      log.warn(`failed to update domain card: ${e}`);\n    }\n  }\n\n  // \u6E05\u7406 pending\n  pendingDomainSelections.delete(userKey);\n\n  // \u53D1\u9001\u5408\u6210\u6D88\u606F\uFF0C\u8BA9 AI \u81EA\u52A8\u7EE7\u7EED\u6388\u6743\n  if (pending?.ticket?.chatId) {\n    const t = pending.ticket;\n    setImmediate(async () => {\n      try {\n        const syntheticMsgId = `${t.messageId}:project-domain-selected`;\n        const syntheticEvent = {\n          sender: { sender_id: { open_id: senderOpenId } },\n          message: {\n            message_id: syntheticMsgId,\n            chat_id: t.chatId,\n            chat_type: t.chatType ?? 'p2p',\n            message_type: 'text',\n            content: JSON.stringify({ text: '[\u7CFB\u7EDF\u901A\u77E5] \u7528\u6237\u5DF2\u9009\u62E9\u98DE\u4E66\u9879\u76EE\u73AF\u5883\uFF0C\u914D\u7F6E\u5DF2\u4FDD\u5B58\u3002\u8BF7\u8C03\u7528 feishu_project_oauth \u5DE5\u5177\u7684 authorize \u64CD\u4F5C\u7EE7\u7EED\u5B8C\u6210\u6388\u6743\u6D41\u7A0B\u3002' }),\n            thread_id: t.threadId,\n          },\n        };\n        const syntheticRuntime = {\n          log: (msg: string) => log.info(msg),\n          error: (msg: string) => log.error(msg),\n        };\n        const freshCfg = LarkClient.runtime.config.loadConfig();\n        const { promise } = enqueueFeishuChatTask({\n          accountId: t.accountId,\n          chatId: t.chatId,\n          threadId: t.threadId,\n          task: async () => {\n            await withTicket(\n              {\n                messageId: syntheticMsgId,\n                chatId: t.chatId,\n                accountId: t.accountId,\n                startTime: Date.now(),\n                senderOpenId: senderOpenId!,\n                chatType: t.chatType as 'p2p' | 'group' | undefined,\n                threadId: t.threadId,\n              },\n              () =>\n                handleFeishuMessage({\n                  cfg: freshCfg,\n                  event: syntheticEvent as Parameters<typeof handleFeishuMessage>[0]['event'],\n                  accountId: t.accountId,\n                  forceMention: true,\n                  runtime: syntheticRuntime as Parameters<typeof handleFeishuMessage>[0]['runtime'],\n                  replyToMessageId: t.messageId,\n                }),\n            );\n          },\n        });\n        await promise;\n        log.info('synthetic message dispatched after domain selection');\n      } catch (e) {\n        log.warn(`failed to send synthetic message after domain selection: ${e}`);\n      }\n    });\n  }\n\n  return {\n    toast: { type: 'success' as const, content: `\u5DF2\u9009\u62E9\uFF1A${envLabel}` },\n  };\n}\n"],
+  "mappings": "AAqBA,SAAS,YAAY;AACrB,SAAS,iBAAiB;AAC1B,SAAS,kBAAkB;AAC3B,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,uBAAuB,kCAAkC;AAClE,SAAS,kBAAkB,kBAAkB,gCAAgC;AAC7E,SAAS,eAAe,sBAAsB,qBAAqB,sBAAsB,wBAAwB,uCAAuC;AACxJ,SAAS,kBAAkB;AAC3B,SAAS,YAAY;AACrB,SAAS,2BAA2B;AACpC,SAAS,6BAA6B;AACtC,SAAS,kBAAkB;AAE3B,MAAM,MAAM,WAAW,qBAAqB;AAM5C,MAAM,2BAA2B,KAAK;AAAA,EACpC;AAAA,IACE,QAAQ,KAAK;AAAA,MACX;AAAA,QACE,KAAK,QAAQ,WAAW;AAAA,QACxB,KAAK,QAAQ,eAAe;AAAA,QAC5B,KAAK,QAAQ,QAAQ;AAAA,QACrB,KAAK,QAAQ,QAAQ;AAAA,QACrB,KAAK,QAAQ,YAAY;AAAA,MAC3B;AAAA,MACA;AAAA,QACE,aACE;AAAA,MAIJ;AAAA,IACF;AAAA,IACA,cAAc,KAAK;AAAA,MACjB,KAAK,OAAO;AAAA,QACV,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EACA;AAAA,IACE,aACE;AAAA,EACJ;AACF;AAmBA,MAAM,oBAAoB,oBAAI,IAA8B;AAe5D,MAAM,wBAAwB,oBAAI,IAAkC;AAEpE,MAAM,yBAAyB,KAAK,KAAK;AAQzC,MAAM,0BAA0B,oBAAI,IAAoC;AAMxE,SAAS,GAAG,YAA4B;AACtC,SAAO,WAAW,UAAU;AAC9B;AAEA,SAAS,oBACP,YACA,UACA,QACe;AACf,QAAM,MAAM,KAAK,IAAI;AACrB,QAAM,YAAY,OAAO,cAAc;AACvC,QAAM,mBAAmB,KAAK,KAAK;AACnC,SAAO;AAAA,IACL;AAAA,IACA,OAAO;AAAA,IACP,aAAa,OAAO;AAAA,IACpB,cAAc,OAAO,iBAAiB;AAAA,IACtC,WAAW,MAAM,YAAY;AAAA,IAC7B,kBAAkB,MAAM,mBAAmB;AAAA,IAC3C,OAAO,OAAO,SAAS;AAAA,IACvB,WAAW;AAAA,EACb;AACF;AAEA,eAAe,oBAAoB,cAAwC;AACzE,QAAM,WAAW,MAAM,mBAAmB,YAAY;AACtD,MAAI,CAAC,SAAU,QAAO;AACtB,QAAM,WAAW,MAAM,sBAAsB,UAAU,YAAY;AACnE,SAAO,CAAC,CAAC,YAAY,mBAAmB,QAAQ,MAAM;AACxD;AAMA,eAAe,aAAa,aAAqB;AAC/C,MAAI;AACF,WAAO,MAAM,mBAAmB,WAAW;AAAA,EAC7C,SAAS,KAAK;AACZ,QAAI,KAAK,mDAAmD,eAAe,QAAQ,IAAI,UAAU,GAAG,EAAE;AACtG,WAAO;AAAA,EACT;AACF;AAMO,SAAS,+BAA+B,KAAwB;AACrE,MAAI,CAAC,IAAI,OAAQ;AAEjB,QAAM,MAAM,IAAI;AAEhB,MAAI;AAAA,IACF;AAAA,MACE,MAAM;AAAA,MACN,OAAO;AAAA,MACP,aACE;AAAA,MAGF,YAAY;AAAA,MAEZ,MAAM,QAAQ,aAAqB,QAAiB;AAClD,cAAM,IAAI;AAEV,cAAM,SAAS,UAAU;AACzB,cAAM,eAAe,QAAQ;AAC7B,YAAI,CAAC,cAAc;AACjB,iBAAO,KAAK;AAAA,YACV,OAAO;AAAA,UACT,CAAC;AAAA,QACH;AAEA,cAAM,YAAY,OAAO;AAEzB,YAAI;AACF,kBAAQ,EAAE,QAAQ;AAAA;AAAA;AAAA;AAAA,YAIhB,KAAK,UAAU;AACb,oBAAM,WAAW,MAAM,mBAAmB,YAAY;AACtD,kBAAI,CAAC,UAAU;AACb,uBAAO,KAAK;AAAA,kBACV,YAAY;AAAA,kBACZ,SAAS;AAAA,gBACX,CAAC;AAAA,cACH;AACA,oBAAM,WAAW,MAAM,sBAAsB,UAAU,YAAY;AACnE,kBAAI,CAAC,UAAU;AACb,uBAAO,KAAK;AAAA,kBACV,YAAY;AAAA,kBACZ,SAAS;AAAA,gBACX,CAAC;AAAA,cACH;AACA,oBAAM,SAAS,mBAAmB,QAAQ;AAC1C,qBAAO,KAAK;AAAA,gBACV,YAAY,WAAW;AAAA,gBACvB,cAAc;AAAA,gBACd,OAAO,SAAS;AAAA,gBAChB,YAAY,SAAS,YAAY,IAAI,KAAK,SAAS,SAAS,EAAE,YAAY,IAAI;AAAA,gBAC9E,YAAY,SAAS,YAAY,IAAI,KAAK,SAAS,SAAS,EAAE,YAAY,IAAI;AAAA,cAChF,CAAC;AAAA,YACH;AAAA;AAAA;AAAA;AAAA,YAKA,KAAK,aAAa;AAChB,kBAAI,MAAM,oBAAoB,YAAY,GAAG;AAC3C,uBAAO,KAAK;AAAA,kBACV,SAAS;AAAA,kBACT,SAAS;AAAA,kBACT,YAAY;AAAA,gBACd,CAAC;AAAA,cACH;AAEA,oBAAM,SAAS,OAAO;AACtB,kBAAI,CAAC,QAAQ;AACX,uBAAO,KAAK,EAAE,OAAO,mDAAW,CAAC;AAAA,cACnC;AAGA,oBAAM,MAAM,GAAG,YAAY;AAC3B,oBAAM,WAAW,kBAAkB,IAAI,GAAG;AAC1C,kBAAI,UAAU;AACZ,yBAAS,aAAa;AACtB,yBAAS,WAAW,MAAM;AAC1B,sBAAM,SAAS,MAAM,EAAE,MAAM,MAAM;AAAA,gBAAC,CAAC;AACrC,kCAAkB,OAAO,GAAG;AAAA,cAC9B;AACA,oCAAsB,OAAO,GAAG;AAGhC,oBAAM,WAAW,WAAW,QAAQ,OAAO,WAAW;AACtD,oBAAM,eAAe,2BAA2B,QAAQ;AAExD,kBAAI,CAAC,cAAc;AAEjB,sBAAM,aAAa,uBAAuB;AAC1C,sBAAM,eAAe,MAAM,iBAAiB,EAAE,KAAK,MAAM,YAAY,UAAU,CAAC;AAChF,oBAAI,gBAAgB,QAAQ;AAC1B,wBAAM,iBAAiB;AAAA,oBACrB;AAAA,oBACA,IAAI;AAAA,oBACJ,QAAQ;AAAA,oBACR,kBAAkB,OAAO,WAAW,WAAW,KAAK,IAAI,OAAO,YAAY;AAAA,oBAC3E,eAAe,QAAQ,OAAO,QAAQ;AAAA,oBACtC;AAAA,kBACF,CAAC;AAAA,gBACH;AACA,wCAAwB,IAAI,GAAG,YAAY,GAAG;AAAA,kBAC5C;AAAA,kBACA,QAAQ,gBAAgB;AAAA,kBACxB,QAAQ,EAAE,WAAW,OAAO,WAAW,QAAQ,WAAW,UAAU,OAAO,UAAU,UAAU,OAAO,SAAS;AAAA,gBACjH,CAAC;AACD,uBAAO,KAAK;AAAA,kBACV,SAAS;AAAA,kBACT,SAAS;AAAA,gBACX,CAAC;AAAA,cACH;AAGA,oBAAM,cAAc,sBAAsB,QAAQ;AAKlD,kBAAI,CAAC,QAAQ;AACX,sBAAM,QAAQ,MAAM,aAAa,WAAW;AAC5C,oBAAI,OAAO;AACT,wBAAM,EAAE,SAAAA,UAAS,aAAa,MAAM,MAAM,IAAI;AAE9C,wBAAMC,YAAW,cAAc;AAAA,oBAC7B,yBAAyBD,SAAQ;AAAA,oBACjC,YAAY;AAAA,kBACd,CAAC;AACD,wBAAM,cAAc,MAAM,iBAAiB,EAAE,KAAK,MAAMC,WAAU,UAAU,CAAC;AAC7E,sBAAI,CAAC,aAAa;AAChB,0BAAM,MAAM;AACZ,2BAAO,KAAK,EAAE,OAAO,mDAAW,CAAC;AAAA,kBACnC;AAEA,wBAAM,kBAAkB,IAAI,gBAAgB;AAC5C,sBAAI,MAAM;AACV,wBAAM,cAAgC;AAAA,oBACpC,YAAY;AAAA,oBACZ,QAAQ;AAAA,oBACR,UAAU;AAAA,oBACV,YAAY;AAAA,oBACZ;AAAA,kBACF;AACA,oCAAkB,IAAI,KAAK,WAAW;AAEtC,8BAAY,EACT,KAAK,OAAO,WAAW;AACtB,wBAAI,YAAY,WAAY;AAC5B,0BAAM,cAAc,oBAAoB,cAAc,OAAO,UAAU,OAAO,MAAM;AACpF,0BAAM,sBAAsB,WAAW;AACvC,wBAAI;AACF,4BAAM,yBAAyB;AAAA,wBAC7B;AAAA,wBAAK,QAAQ;AAAA,wBAAa,MAAM,qBAAqB;AAAA,wBAAG,UAAU,EAAE;AAAA,wBAAK;AAAA,sBAC3E,CAAC;AAAA,oBACH,SAAS,GAAG;AACV,0BAAI,KAAK,kDAAkD,CAAC,EAAE;AAAA,oBAChE;AAAA,kBACF,CAAC,EACA,MAAM,OAAO,QAAQ;AACpB,wBAAI,YAAY,WAAY;AAC5B,wBAAI,MAAM,8BAA8B,GAAG,EAAE;AAC7C,wBAAI;AACF,4BAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,4BAAM,yBAAyB;AAAA,wBAC7B;AAAA,wBAAK,QAAQ;AAAA,wBAAa,MAAM,oBAAoB,GAAG;AAAA,wBAAG,UAAU,EAAE;AAAA,wBAAK;AAAA,sBAC7E,CAAC;AAAA,oBACH,SAAS,GAAG;AACV,0BAAI,KAAK,kDAAkD,CAAC,EAAE;AAAA,oBAChE;AAAA,kBACF,CAAC,EACA,QAAQ,YAAY;AACnB,0BAAM,MAAM,EAAE,MAAM,MAAM;AAAA,oBAAC,CAAC;AAC5B,wBAAI,kBAAkB,IAAI,GAAG,MAAM,aAAa;AAC9C,wCAAkB,OAAO,GAAG;AAAA,oBAC9B;AAAA,kBACF,CAAC;AAEH,yBAAO,KAAK;AAAA,oBACV,SAAS;AAAA,oBACT,MAAM;AAAA,oBACN,SAAS;AAAA,oBACT,wBAAwB;AAAA,oBACxB,eAAe;AAAA,kBACjB,CAAC;AAAA,gBACH;AAAA,cACF;AAGA,oBAAM,UAAU,MAAM,kBAAkB,WAAW;AAEnD,oBAAM,WAAW,qBAAqB;AAAA,gBACpC,kBAAkB,QAAQ;AAAA,gBAC1B,YAAY;AAAA,cACd,CAAC;AACD,oBAAM,eAAe,SACjB,MAAM,iBAAiB,EAAE,KAAK,MAAM,UAAU,UAAU,CAAC,IACzD;AACJ,kBAAI,gBAAgB,QAAQ;AAC1B,sBAAM,iBAAiB;AAAA,kBACrB;AAAA,kBACA,IAAI;AAAA,kBACJ,QAAQ;AAAA,kBACR,kBAAkB,OAAO,WAAW,WAAW,KAAK,IAAI,OAAO,YAAY;AAAA,kBAC3E,eAAe,QAAQ,OAAO,QAAQ;AAAA,kBACtC;AAAA,gBACF,CAAC;AAAA,cACH;AAEA,oBAAM,iBAAuC;AAAA,gBAC3C;AAAA,gBACA,QAAQ,gBAAgB;AAAA,gBACxB;AAAA,gBACA,QAAQ;AAAA,kBACN,WAAW,OAAO;AAAA,kBAClB;AAAA,kBACA;AAAA,kBACA,UAAU,OAAO;AAAA,kBACjB,UAAU,OAAO;AAAA,gBACnB;AAAA,cACF;AACA,oCAAsB,IAAI,KAAK,cAAc;AAC7C,yBAAW,MAAM;AACf,oBAAI,sBAAsB,IAAI,GAAG,MAAM,eAAgB,uBAAsB,OAAO,GAAG;AAAA,cACzF,GAAG,sBAAsB;AAEzB,qBAAO,KAAK;AAAA,gBACV,SAAS;AAAA,gBACT,MAAM;AAAA,gBACN,SACE;AAAA,gBAIF,wBAAwB;AAAA,cAC1B,CAAC;AAAA,YACH;AAAA;AAAA;AAAA;AAAA,YAKA,KAAK,iBAAiB;AACpB,kBAAI,CAAC,EAAE,cAAc;AACnB,uBAAO,KAAK;AAAA,kBACV,OAAO;AAAA,gBACT,CAAC;AAAA,cACH;AAEA,oBAAM,cAAc,GAAG,YAAY;AACnC,oBAAM,UAAU,sBAAsB,IAAI,WAAW;AACrD,kBAAI,CAAC,SAAS;AACZ,uBAAO,KAAK;AAAA,kBACV,OAAO;AAAA,gBACT,CAAC;AAAA,cACH;AAEA,oBAAM,SAAS,MAAM,mBAAmB,QAAQ,SAAS,EAAE,YAAY;AACvE,oCAAsB,OAAO,WAAW;AAExC,oBAAM,cAAc,oBAAoB,cAAc,OAAO,UAAU,OAAO,MAAM;AACpF,oBAAM,sBAAsB,WAAW;AAGvC,kBAAI,QAAQ,QAAQ;AAClB,oBAAI;AACF,wBAAM,yBAAyB;AAAA,oBAC7B;AAAA,oBACA,QAAQ,QAAQ;AAAA,oBAChB,MAAM,qBAAqB;AAAA,oBAC3B,UAAU;AAAA,oBACV,WAAW,OAAO;AAAA,kBACpB,CAAC;AAAA,gBACH,SAAS,GAAG;AACV,sBAAI,KAAK,kDAAkD,CAAC,EAAE;AAAA,gBAChE;AAAA,cACF;AAEA,qBAAO,KAAK;AAAA,gBACV,SAAS;AAAA,gBACT,SAAS;AAAA,gBACT,YAAY;AAAA,cACd,CAAC;AAAA,YACH;AAAA;AAAA;AAAA;AAAA,YAKA,KAAK,UAAU;AACb,oBAAM,WAAW,MAAM,mBAAmB,YAAY;AACtD,kBAAI,UAAU;AACZ,sBAAM,yBAAyB,UAAU,YAAY;AAAA,cACvD;AACA,qBAAO,KAAK,EAAE,SAAS,MAAM,SAAS,+DAAa,CAAC;AAAA,YACtD;AAAA;AAAA;AAAA;AAAA,YAKA,KAAK,cAAc;AACjB,oBAAM,SAAS,OAAO;AACtB,kBAAI,CAAC,QAAQ;AACX,uBAAO,KAAK,EAAE,OAAO,mDAAW,CAAC;AAAA,cACnC;AAEA,oBAAM,aAAa,uBAAuB;AAC1C,oBAAM,eAAe,MAAM,iBAAiB,EAAE,KAAK,MAAM,YAAY,UAAU,CAAC;AAChF,kBAAI,gBAAgB,QAAQ;AAC1B,sBAAM,iBAAiB;AAAA,kBACrB;AAAA,kBACA,IAAI;AAAA,kBACJ,QAAQ;AAAA,kBACR,kBAAkB,OAAO,WAAW,WAAW,KAAK,IAAI,OAAO,YAAY;AAAA,kBAC3E,eAAe,QAAQ,OAAO,QAAQ;AAAA,kBACtC;AAAA,gBACF,CAAC;AAAA,cACH;AACA,sCAAwB,IAAI,GAAG,YAAY,GAAG;AAAA,gBAC5C;AAAA,gBACA,QAAQ,gBAAgB;AAAA,gBACxB,QAAQ,EAAE,WAAW,OAAO,WAAW,QAAQ,WAAW,UAAU,OAAO,UAAU,UAAU,OAAO,SAAS;AAAA,cACjH,CAAC;AACD,qBAAO,KAAK;AAAA,gBACV,SAAS;AAAA,gBACT,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAAA,YAEA;AACE,qBAAO,KAAK,EAAE,OAAO,6BAAU,EAAyB,MAAM,GAAG,CAAC;AAAA,UACtE;AAAA,QACF,SAAS,KAAK;AACZ,cAAI,MAAM,iBAAiB,EAAE,MAAM,YAAY,GAAG,EAAE;AACpD,iBAAO,KAAK,EAAE,OAAO,gBAAgB,GAAG,EAAE,CAAC;AAAA,QAC7C;AAAA,MACF;AAAA,IACF;AAAA,IACA,EAAE,MAAM,uBAAuB;AAAA,EACjC;AAEA,MAAI,OAAO,OAAO,4DAA4D;AAChF;AAYA,eAAsB,4BACpB,MACA,KACA,WACkB;AAClB,MAAI;AACJ,MAAI;AAEJ,MAAI;AAEF,UAAM,QAAQ;AACd,mBAAe,MAAM,UAAU;AAG/B,kBAAc,MAAM,QAAQ,YAAY,cAAc,KAAK;AAE3D,QAAI,MAAM,wCAAwC,cAAc,UAAU,SAAS,kBAAkB,YAAY,gBAAgB,KAAK,UAAU,OAAO,KAAK,MAAM,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;AAAA,EACpL,QAAQ;AACN;AAAA,EACF;AAEA,MAAI,CAAC,aAAa;AAChB,WAAO;AAAA,MACL,OAAO,EAAE,MAAM,SAAkB,SAAS,6GAAwB;AAAA,IACpE;AAAA,EACF;AAGA,MAAI,CAAC,cAAc;AACjB,QAAI,KAAK,sCAAsC;AAC/C,WAAO;AAAA,MACL,OAAO,EAAE,MAAM,SAAkB,SAAS,mDAAW;AAAA,IACvD;AAAA,EACF;AAEA,QAAM,UAAU,GAAG,YAAY;AAC/B,QAAM,UAAU,sBAAsB,IAAI,OAAO;AAEjD,MAAI,CAAC,SAAS;AACZ,QAAI,KAAK,+DAA+D,YAAY,GAAG;AACvF,WAAO;AAAA,MACL,OAAO,EAAE,MAAM,SAAkB,SAAS,6FAAkB;AAAA,IAC9D;AAAA,EACF;AAGA,MAAI,gBAAgB,iBAAiB,QAAQ,cAAc;AACzD,QAAI,KAAK,oDAAoD,QAAQ,YAAY,YAAY,YAAY,EAAE;AAC3G,WAAO;AAAA,MACL,OAAO,EAAE,MAAM,SAAkB,SAAS,uFAAiB;AAAA,IAC7D;AAAA,EACF;AAGA,MAAI;AACF,UAAM,UAAU,IAAI,IAAI,WAAW;AACnC,UAAM,WAAW,QAAQ,aAAa,IAAI,OAAO;AACjD,QAAI,UAAU;AACZ,YAAM,OAAO,QAAQ,aAAa,IAAI,mBAAmB,KAAK;AAC9D,UAAI,KAAK,qDAAqD,QAAQ,MAAM,IAAI,EAAE;AAClF,aAAO;AAAA,QACL,OAAO,EAAE,MAAM,SAAkB,SAAS,iCAAQ,IAAI,yDAAY;AAAA,MACpE;AAAA,IACF;AACA,QAAI,CAAC,QAAQ,aAAa,IAAI,MAAM,GAAG;AACrC,UAAI,KAAK,yDAAyD,WAAW,EAAE;AAC/E,aAAO;AAAA,QACL,OAAO,EAAE,MAAM,SAAkB,SAAS,sJAAmC;AAAA,MAC/E;AAAA,IACF;AAAA,EACF,QAAQ;AACN,QAAI,KAAK,8CAA8C,WAAW,EAAE;AACpE,WAAO;AAAA,MACL,OAAO,EAAE,MAAM,SAAkB,SAAS,0EAAmB;AAAA,IAC/D;AAAA,EACF;AAGA,wBAAsB,OAAO,OAAO;AAGpC,QAAM,kBAAkB;AACxB,QAAM,sBAAsB;AAE5B,eAAa,YAAY;AACvB,QAAI;AACF,YAAM,SAAS,MAAM,mBAAmB,gBAAgB,SAAS,mBAAmB;AACpF,YAAM,cAAc;AAAA,QAClB,gBAAgB;AAAA,QAChB,OAAO;AAAA,QACP,OAAO;AAAA,MACT;AACA,YAAM,sBAAsB,WAAW;AAGvC,UAAI,gBAAgB,QAAQ;AAC1B,YAAI;AACF,gBAAM,yBAAyB;AAAA,YAC7B;AAAA,YACA,QAAQ,gBAAgB;AAAA,YACxB,MAAM,qBAAqB;AAAA,YAC3B,UAAU;AAAA,YACV;AAAA,UACF,CAAC;AAAA,QACH,SAAS,GAAG;AACV,cAAI,KAAK,kDAAkD,CAAC,EAAE;AAAA,QAChE;AAAA,MACF;AAEA,UAAI,KAAK,gDAAgD,gBAAgB,YAAY,EAAE;AAGvF,YAAM,IAAI,gBAAgB;AAC1B,UAAI,EAAE,QAAQ;AACZ,YAAI;AACF,gBAAM,iBAAiB,GAAG,EAAE,SAAS;AACrC,gBAAM,iBAAiB;AAAA,YACrB,QAAQ,EAAE,WAAW,EAAE,SAAS,gBAAgB,aAAa,EAAE;AAAA,YAC/D,SAAS;AAAA,cACP,YAAY;AAAA,cACZ,SAAS,EAAE;AAAA,cACX,WAAW,EAAE,YAAY;AAAA,cACzB,cAAc;AAAA,cACd,SAAS,KAAK,UAAU,EAAE,MAAM,gZAAmH,CAAC;AAAA,cACpJ,WAAW,EAAE;AAAA,YACf;AAAA,UACF;AACA,gBAAM,mBAAmB;AAAA,YACvB,KAAK,CAAC,QAAgB,IAAI,KAAK,GAAG;AAAA,YAClC,OAAO,CAAC,QAAgB,IAAI,MAAM,GAAG;AAAA,UACvC;AACA,gBAAM,EAAE,QAAQ,IAAI,sBAAsB;AAAA,YACxC,WAAW,EAAE;AAAA,YACb,QAAQ,EAAE;AAAA,YACV,UAAU,EAAE;AAAA,YACZ,MAAM,YAAY;AAChB,oBAAM;AAAA,gBACJ;AAAA,kBACE,WAAW;AAAA,kBACX,QAAQ,EAAE;AAAA,kBACV,WAAW,EAAE;AAAA,kBACb,WAAW,KAAK,IAAI;AAAA,kBACpB,cAAc,gBAAgB;AAAA,kBAC9B,UAAU,EAAE;AAAA,kBACZ,UAAU,EAAE;AAAA,gBACd;AAAA,gBACA,MACE,oBAAoB;AAAA,kBAClB;AAAA,kBACA,OAAO;AAAA,kBACP,WAAW,EAAE;AAAA,kBACb,cAAc;AAAA,kBACd,SAAS;AAAA,kBACT,kBAAkB,EAAE;AAAA,gBACtB,CAAC;AAAA,cACL;AAAA,YACF;AAAA,UACF,CAAC;AACD,gBAAM;AACN,cAAI,KAAK,iDAAiD;AAAA,QAC5D,SAAS,GAAG;AACV,cAAI,KAAK,wDAAwD,CAAC,EAAE;AAAA,QACtE;AAAA,MACF;AAAA,IACF,SAAS,KAAK;AACZ,YAAM,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC9D,UAAI,MAAM,sCAAsC,MAAM,EAAE;AAExD,UAAI,gBAAgB,QAAQ;AAC1B,YAAI;AACF,gBAAM,yBAAyB;AAAA,YAC7B;AAAA,YACA,QAAQ,gBAAgB;AAAA,YACxB,MAAM,oBAAoB,MAAM;AAAA,YAChC,UAAU;AAAA,YACV;AAAA,UACF,CAAC;AAAA,QACH,SAAS,GAAG;AACV,cAAI,KAAK,kDAAkD,CAAC,EAAE;AAAA,QAChE;AAAA,MACF;AAGA,YAAM,IAAI,gBAAgB;AAC1B,UAAI,EAAE,QAAQ;AACZ,YAAI;AACF,gBAAM,iBAAiB,GAAG,EAAE,SAAS;AACrC,gBAAM,iBAAiB;AAAA,YACrB,QAAQ,EAAE,WAAW,EAAE,SAAS,gBAAgB,aAAa,EAAE;AAAA,YAC/D,SAAS;AAAA,cACP,YAAY;AAAA,cACZ,SAAS,EAAE;AAAA,cACX,WAAW,EAAE,YAAY;AAAA,cACzB,cAAc;AAAA,cACd,SAAS,KAAK,UAAU,EAAE,MAAM,oFAAmB,MAAM,yJAA4B,CAAC;AAAA,cACtF,WAAW,EAAE;AAAA,YACf;AAAA,UACF;AACA,gBAAM,mBAAmB;AAAA,YACvB,KAAK,CAAC,QAAgB,IAAI,KAAK,GAAG;AAAA,YAClC,OAAO,CAAC,QAAgB,IAAI,MAAM,GAAG;AAAA,UACvC;AACA,gBAAM,EAAE,QAAQ,IAAI,sBAAsB;AAAA,YACxC,WAAW,EAAE;AAAA,YACb,QAAQ,EAAE;AAAA,YACV,UAAU,EAAE;AAAA,YACZ,MAAM,YAAY;AAChB,oBAAM;AAAA,gBACJ;AAAA,kBACE,WAAW;AAAA,kBACX,QAAQ,EAAE;AAAA,kBACV,WAAW,EAAE;AAAA,kBACb,WAAW,KAAK,IAAI;AAAA,kBACpB,cAAc,gBAAgB;AAAA,kBAC9B,UAAU,EAAE;AAAA,kBACZ,UAAU,EAAE;AAAA,gBACd;AAAA,gBACA,MACE,oBAAoB;AAAA,kBAClB;AAAA,kBACA,OAAO;AAAA,kBACP,WAAW,EAAE;AAAA,kBACb,cAAc;AAAA,kBACd,SAAS;AAAA,kBACT,kBAAkB,EAAE;AAAA,gBACtB,CAAC;AAAA,cACL;AAAA,YACF;AAAA,UACF,CAAC;AACD,gBAAM;AACN,cAAI,KAAK,iEAAiE;AAAA,QAC5E,SAAS,GAAG;AACV,cAAI,KAAK,gEAAgE,CAAC,EAAE;AAAA,QAC9E;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO;AAAA,IACL,OAAO,EAAE,MAAM,QAAiB,SAAS,0CAAY;AAAA,EACvD;AACF;AAMA,MAAM,gBAAwC;AAAA,EAC5C,QAAQ;AAAA,EACR,QAAQ;AACV;AAOA,eAAsB,8BACpB,MACA,KACA,WACkB;AAClB,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,MAAI;AAEF,UAAM,QAAQ;AACd,mBAAe,MAAM,UAAU;AAC/B,mBAAe,MAAM,QAAQ,YAAY;AACzC,mBAAe,MAAM,QAAQ,YAAY,eAAe,KAAK;AAAA,EAC/D,QAAQ;AACN;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,WAAO,EAAE,OAAO,EAAE,MAAM,SAAkB,SAAS,mDAAW,EAAE;AAAA,EAClE;AAGA,MAAI;AACJ,MAAI;AAEJ,MAAI,cAAc;AAEhB,QAAI;AACJ,QAAI;AACF,eAAS,IAAI,IAAI,YAAY;AAAA,IAC/B,QAAQ;AACN,aAAO,EAAE,OAAO,EAAE,MAAM,SAAkB,SAAS,iHAAiC,EAAE;AAAA,IACxF;AACA,QAAI,OAAO,aAAa,UAAU;AAChC,aAAO,EAAE,OAAO,EAAE,MAAM,SAAkB,SAAS,wCAAe,EAAE;AAAA,IACtE;AACA,aAAS,OAAO;AAChB,eAAW;AAAA,EACb,OAAO;AACL,aAAS,gBAAgB;AACzB,eAAW,cAAc,MAAM,KAAK;AAAA,EACtC;AAGA,QAAM,UAAU,GAAG,YAAY;AAC/B,QAAM,UAAU,wBAAwB,IAAI,OAAO;AAEnD,MAAI;AACF,UAAM,aAAa,WAAW,QAAQ,OAAO,WAAW;AACxD,UAAM,aAAa;AAAA,MACjB,GAAG;AAAA,MACH,UAAU;AAAA,QACR,GAAI,WAAuC;AAAA,QAC3C,QAAQ;AAAA,UACN,GAAK,WAAuC,UAAkD;AAAA,UAC9F,SAAS;AAAA,YACP,GAAM,WAAuC,UAAkD,QAAgD;AAAA,YAC/I;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,UAAM,WAAW,QAAQ,OAAO,gBAAgB,UAAU;AAC1D,QAAI,KAAK,qCAAqC,MAAM,EAAE;AAAA,EACxD,SAAS,KAAK;AACZ,QAAI,MAAM,6CAA6C,GAAG,EAAE;AAC5D,WAAO,EAAE,OAAO,EAAE,MAAM,SAAkB,SAAS,+DAAa,EAAE;AAAA,EACpE;AAGA,MAAI,SAAS,QAAQ;AACnB,QAAI;AACF,YAAM,yBAAyB;AAAA,QAC7B;AAAA,QACA,QAAQ,QAAQ;AAAA,QAChB,MAAM,gCAAgC,QAAQ;AAAA,QAC9C,UAAU;AAAA,QACV;AAAA,MACF,CAAC;AAAA,IACH,SAAS,GAAG;AACV,UAAI,KAAK,iCAAiC,CAAC,EAAE;AAAA,IAC/C;AAAA,EACF;AAGA,0BAAwB,OAAO,OAAO;AAGtC,MAAI,SAAS,QAAQ,QAAQ;AAC3B,UAAM,IAAI,QAAQ;AAClB,iBAAa,YAAY;AACvB,UAAI;AACF,cAAM,iBAAiB,GAAG,EAAE,SAAS;AACrC,cAAM,iBAAiB;AAAA,UACrB,QAAQ,EAAE,WAAW,EAAE,SAAS,aAAa,EAAE;AAAA,UAC/C,SAAS;AAAA,YACP,YAAY;AAAA,YACZ,SAAS,EAAE;AAAA,YACX,WAAW,EAAE,YAAY;AAAA,YACzB,cAAc;AAAA,YACd,SAAS,KAAK,UAAU,EAAE,MAAM,iRAA8E,CAAC;AAAA,YAC/G,WAAW,EAAE;AAAA,UACf;AAAA,QACF;AACA,cAAM,mBAAmB;AAAA,UACvB,KAAK,CAAC,QAAgB,IAAI,KAAK,GAAG;AAAA,UAClC,OAAO,CAAC,QAAgB,IAAI,MAAM,GAAG;AAAA,QACvC;AACA,cAAM,WAAW,WAAW,QAAQ,OAAO,WAAW;AACtD,cAAM,EAAE,QAAQ,IAAI,sBAAsB;AAAA,UACxC,WAAW,EAAE;AAAA,UACb,QAAQ,EAAE;AAAA,UACV,UAAU,EAAE;AAAA,UACZ,MAAM,YAAY;AAChB,kBAAM;AAAA,cACJ;AAAA,gBACE,WAAW;AAAA,gBACX,QAAQ,EAAE;AAAA,gBACV,WAAW,EAAE;AAAA,gBACb,WAAW,KAAK,IAAI;AAAA,gBACpB;AAAA,gBACA,UAAU,EAAE;AAAA,gBACZ,UAAU,EAAE;AAAA,cACd;AAAA,cACA,MACE,oBAAoB;AAAA,gBAClB,KAAK;AAAA,gBACL,OAAO;AAAA,gBACP,WAAW,EAAE;AAAA,gBACb,cAAc;AAAA,gBACd,SAAS;AAAA,gBACT,kBAAkB,EAAE;AAAA,cACtB,CAAC;AAAA,YACL;AAAA,UACF;AAAA,QACF,CAAC;AACD,cAAM;AACN,YAAI,KAAK,qDAAqD;AAAA,MAChE,SAAS,GAAG;AACV,YAAI,KAAK,4DAA4D,CAAC,EAAE;AAAA,MAC1E;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,OAAO,EAAE,MAAM,WAAoB,SAAS,2BAAO,QAAQ,GAAG;AAAA,EAChE;AACF;",
   "names": ["session", "authCard"]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-project/openclaw-lark-project",
-  "version": "2026.3.173",
+  "version": "2026.3.174",
   "description": "OpenClaw Lark/Feishu channel plugin",
   "type": "module",
   "files": [

package/skills/feishu-project/SKILL.md

@@ -21,6 +21,27 @@ description: |
 当用户首次发起飞书项目授权（authorize）且配置中未设置 `channels.feishu.project.domain` 时，系统会自动发送环境选择卡片。用户在卡片中选择后，域名会自动写入配置文件持久保存，后续使用无需再选。
 如果用户想主动选择或更换环境，调用 `feishu_project_oauth` 的 `select_env` action 即可重新弹出选择卡片。
 
+## URL 解析
+
+用户可能会直接粘贴飞书项目的页面链接。需要从 URL 中提取关键参数，URL 格式如下：
+
+**工作项详情页**：`https://{domain}/{simple_name}/{work_item_type}/detail/{work_item_id}`
+
+- 示例：`https://meego.larkoffice.com/xopenapp/story/detail/6837493514`
+  - `simple_name`（即 project_key）：`xopenapp`
+  - `work_item_type`：`story`
+  - `work_item_id`：`6837493514`
+
+**视图页**：`https://{domain}/{simple_name}/{work_item_type}View/{view_id}`
+
+- 示例：`https://meego.larkoffice.com/xopenapp/storyView/HouF2WpNg`
+  - `simple_name`（即 project_key）：`xopenapp`
+  - `view_id`：`HouF2WpNg`
+
+**domain 部分**可能是 `project.feishu.cn`、`meego.larkoffice.com`、`meegle.com` 或其他私有化部署域名，解析时忽略即可。
+
+提取到参数后直接调用对应工具，无需再问用户确认这些字段。
+
 ## 授权前置检查
 
 飞书项目的 OAuth 授权与飞书 IM/文档的授权**完全独立**，不共享 token。首次使用飞书项目功能时，必须先完成独立授权。