@larksuite/openclaw-lark 2026.3.9

package/src/commands/index.js

@@ -0,0 +1,208 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * Register all chat commands (/feishu_diagnose, /feishu_doctor, /feishu_auth, /feishu).
+ */
+import { runDiagnosis, formatDiagReportText } from './diagnose';
+import { runFeishuDoctor } from './doctor';
+import { runFeishuAuth } from './auth';
+import { getPluginVersion } from '../core/version';
+// TODO: 暂时注释掉，等产品策略明确后再放开
+// import {
+//   checkMultiAccountIsolation,
+//   formatIsolationWarning,
+//   generateIsolationFixCommands,
+//   generateSharedAgentCommands,
+//   needsDmScopeFix,
+// } from "../core/security-check";
+export function registerCommands(api) {
+    // /feishu_diagnose
+    api.registerCommand({
+        name: 'feishu_diagnose',
+        description: '运行飞书插件诊断，检查配置、连通性和权限状态',
+        acceptsArgs: false,
+        requireAuth: true,
+        async handler(ctx) {
+            try {
+                const report = await runDiagnosis({ config: ctx.config });
+                return { text: formatDiagReportText(report) };
+            }
+            catch (err) {
+                return {
+                    text: `诊断执行失败: ${err instanceof Error ? err.message : String(err)}`,
+                };
+            }
+        },
+    });
+    // /feishu_doctor
+    api.registerCommand({
+        name: 'feishu_doctor',
+        description: '运行飞书插件诊断',
+        acceptsArgs: false,
+        requireAuth: true,
+        async handler(ctx) {
+            try {
+                const markdown = await runFeishuDoctor(ctx.config, ctx.accountId);
+                return { text: markdown };
+            }
+            catch (err) {
+                return {
+                    text: `诊断执行失败: ${err instanceof Error ? err.message : String(err)}`,
+                };
+            }
+        },
+    });
+    // /feishu_auth
+    api.registerCommand({
+        name: 'feishu_auth',
+        description: '飞书用户权限批量授权',
+        acceptsArgs: false,
+        requireAuth: true,
+        async handler(ctx) {
+            try {
+                const result = await runFeishuAuth(ctx.config);
+                return { text: result };
+            }
+            catch (err) {
+                return {
+                    text: `授权执行失败: ${err instanceof Error ? err.message : String(err)}`,
+                };
+            }
+        },
+    });
+    // /feishu (统一入口，支持子命令)
+    api.registerCommand({
+        name: 'feishu',
+        description: '飞书插件命令（支持子命令: auth, doctor, start）',
+        acceptsArgs: true,
+        requireAuth: true,
+        async handler(ctx) {
+            const args = ctx.args?.trim().split(/\s+/) || [];
+            const subcommand = args[0]?.toLowerCase();
+            try {
+                // /feishu auth 或 /feishu onboarding
+                if (subcommand === 'auth' || subcommand === 'onboarding') {
+                    const result = await runFeishuAuth(ctx.config);
+                    return { text: result };
+                }
+                // /feishu doctor
+                if (subcommand === 'doctor') {
+                    const markdown = await runFeishuDoctor(ctx.config, ctx.accountId);
+                    return { text: markdown };
+                }
+                // /feishu start
+                if (subcommand === 'start') {
+                    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+                    const cfg = ctx.config;
+                    const errors = [];
+                    const warnings = [];
+                    // 检查旧版插件是否已禁用 (error)
+                    const feishuEntry = cfg.plugins?.entries?.feishu;
+                    if (feishuEntry && feishuEntry.enabled !== false) {
+                        errors.push('❌ 检测到旧版插件未禁用。\n' +
+                            '👉 请依次运行命令：\n' +
+                            '```\n' +
+                            'openclaw config set plugins.entries.feishu.enabled false --json\n' +
+                            'openclaw gateway restart\n' +
+                            '```');
+                    }
+                    // 检查 tools.profile (warning)
+                    const profile = cfg.tools?.profile;
+                    const incompleteProfiles = new Set(['minimal', 'coding', 'messaging']);
+                    if (profile && incompleteProfiles.has(profile)) {
+                        warnings.push(`⚠️ 工具 Profile 当前为 \`${profile}\`，飞书工具可能无法加载。请检查配置是否正确。\n`);
+                    }
+                    // 检查多账号隔离
+                    // TODO: 暂时注释掉，等产品策略明确后再放开
+                    // const isolationWarning = formatIsolationWarning(
+                    //   checkMultiAccountIsolation(cfg),
+                    //   cfg,
+                    // );
+                    // if (isolationWarning) {
+                    //   warnings.push(isolationWarning);
+                    // }
+                    if (errors.length > 0) {
+                        const all = [...errors, ...warnings];
+                        return {
+                            text: `❌ 飞书 OpenClaw 插件启动失败：\n\n${all.join('\n\n')}`,
+                        };
+                    }
+                    if (warnings.length > 0) {
+                        return {
+                            text: `⚠️ 飞书 OpenClaw 插件已启动 v${getPluginVersion()}（存在警告）\n\n${warnings.join('\n\n')}`,
+                        };
+                    }
+                    return { text: `✅ 飞书 OpenClaw 插件已启动 v${getPluginVersion()}` };
+                }
+                // /feishu isolate
+                // TODO: 暂时注释掉，等产品策略明确后再放开
+                // if (subcommand === "isolate") {
+                //   return handleIsolate(ctx.config);
+                // }
+                // /feishu help 或无效子命令或无参数
+                return {
+                    text: `飞书OpenClaw插件 v${getPluginVersion()}\n\n` +
+                        '用法：\n' +
+                        '  /feishu start - 校验插件配置\n' +
+                        '  /feishu auth - 批量授权用户权限\n' +
+                        '  /feishu doctor - 运行诊断\n' +
+                        '  /feishu help - 显示此帮助',
+                };
+            }
+            catch (err) {
+                return {
+                    text: `执行失败: ${err instanceof Error ? err.message : String(err)}`,
+                };
+            }
+        },
+    });
+}
+// ---------------------------------------------------------------------------
+// /feishu isolate handler
+// TODO: 暂时注释掉，等产品策略明确后再放开
+// ---------------------------------------------------------------------------
+// function handleIsolate(config: any): { text: string } {
+//   const status = checkMultiAccountIsolation(config);
+//   const hasDmIssue = needsDmScopeFix(config);
+//
+//   if (status.mode === "not-applicable") {
+//     return { text: "✅ 当前只有一个飞书机器人，无需配置。" };
+//   }
+//   if (status.mode === "isolated") {
+//     const names = status.accounts.map((a) => a.name ?? a.accountId).join("、");
+//     const lines = [`✅ **记忆已隔离** — ${status.accounts.length} 个机器人（${names}）各自拥有独立记忆，互不干扰。`];
+//     if (hasDmIssue) { lines.push("", "---", "", ...formatDmIssueSection()); }
+//     return { text: lines.join("\n") };
+//   }
+//   if (status.mode === "shared-explicit") {
+//     const names = status.accounts.map((a) => a.name ?? a.accountId).join("、");
+//     const lines = [
+//       `✅ **记忆共用（已确认）** — ${status.accounts.length} 个机器人（${names}）共用同一份记忆（${status.sharedAgentId}）。`,
+//       "", "这是您主动配置的。如需改为各自独立，先删除现有 bindings 后重新执行 **/feishu isolate**。",
+//     ];
+//     if (hasDmIssue) { lines.push("", "---", "", ...formatDmIssueSection()); }
+//     return { text: lines.join("\n") };
+//   }
+//   const fix = generateIsolationFixCommands(config);
+//   const shared = generateSharedAgentCommands(config);
+//   const names = status.accounts.map((a) => a.name ?? a.accountId);
+//   const lines: string[] = [];
+//   lines.push("⚠️ **检测到以下问题，建议修复：**", "");
+//   lines.push(`**1. 多个机器人共用记忆** — 用户跟「${names[0]}」说的话，可能出现在「${names[1] ?? "..."}」的回复里。`);
+//   if (hasDmIssue) { lines.push(`**2. 私聊消息串混** — 同一用户跟不同机器人的私聊会混在一段对话中，AI 无法分辨。`); }
+//   if (fix) { lines.push("", "---", "", "✅ **方案一：各自独立**（推荐）", "", "每个机器人拥有独立的记忆，互不干扰：", "", fix.preview, "", "复制到终端执行：", "", "```"); for (const cmd of fix.commands) lines.push(cmd); lines.push("```"); }
+//   if (shared) { lines.push("", "---", "", "☑️ **方案二：确认共用**", "", "所有机器人共享同一份记忆（消除告警，不再提示）：", "", shared.preview, "", "复制到终端执行：", "", "```"); for (const cmd of shared.commands) lines.push(cmd); lines.push("```"); }
+//   lines.push("", "---", "", "执行后重新发送 **/feishu isolate** 验证。");
+//   return { text: lines.join("\n") };
+// }
+//
+// function formatDmIssueSection(): string[] {
+//   return [
+//     "⚠️ **私聊消息串混**", "",
+//     "同一用户跟不同机器人的私聊会混在同一段对话中，AI 无法分辨在跟哪个机器人说话。", "",
+//     "复制到终端执行：", "",
+//     "```", `openclaw config set session.dmScope "per-account-channel-peer"`, "openclaw gateway restart", "```",
+//   ];
+// }
+//# sourceMappingURL=index.js.map

package/src/commands/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,0BAA0B;AAC1B,WAAW;AACX,gCAAgC;AAChC,4BAA4B;AAC5B,kCAAkC;AAClC,iCAAiC;AACjC,qBAAqB;AACrB,mCAAmC;AAEnC,MAAM,UAAU,gBAAgB,CAAC,GAAsB;IACrD,mBAAmB;IACnB,GAAG,CAAC,eAAe,CAAC;QAClB,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,wBAAwB;QACrC,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,IAAI;QACjB,KAAK,CAAC,OAAO,CAAC,GAAG;YACf,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC1D,OAAO,EAAE,IAAI,EAAE,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,IAAI,EAAE,WAAW,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBACpE,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,iBAAiB;IACjB,GAAG,CAAC,eAAe,CAAC;QAClB,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,IAAI;QACjB,KAAK,CAAC,OAAO,CAAC,GAAG;YACf,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;gBAClE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC5B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,IAAI,EAAE,WAAW,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBACpE,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,eAAe;IACf,GAAG,CAAC,eAAe,CAAC;QAClB,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,YAAY;QACzB,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,IAAI;QACjB,KAAK,CAAC,OAAO,CAAC,GAAG;YACf,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAC1B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,IAAI,EAAE,WAAW,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBACpE,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,uBAAuB;IACvB,GAAG,CAAC,eAAe,CAAC;QAClB,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,oCAAoC;QACjD,WAAW,EAAE,IAAI;QACjB,WAAW,EAAE,IAAI;QACjB,KAAK,CAAC,OAAO,CAAC,GAAG;YACf,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACjD,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YAE1C,IAAI,CAAC;gBACH,oCAAoC;gBACpC,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;oBACzD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC1B,CAAC;gBAED,iBAAiB;gBACjB,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;oBAC5B,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;oBAClE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;gBAC5B,CAAC;gBAED,gBAAgB;gBAChB,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;oBAC3B,8DAA8D;oBAC9D,MAAM,GAAG,GAAG,GAAG,CAAC,MAAa,CAAC;oBAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;oBAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;oBAE9B,sBAAsB;oBACtB,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;oBACjD,IAAI,WAAW,IAAI,WAAW,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;wBACjD,MAAM,CAAC,IAAI,CACT,iBAAiB;4BACf,eAAe;4BACf,OAAO;4BACP,mEAAmE;4BACnE,4BAA4B;4BAC5B,KAAK,CACR,CAAC;oBACJ,CAAC;oBAED,6BAA6B;oBAC7B,MAAM,OAAO,GAAuB,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC;oBACvD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;oBACvE,IAAI,OAAO,IAAI,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC/C,QAAQ,CAAC,IAAI,CAAC,uBAAuB,OAAO,4BAA4B,CAAC,CAAC;oBAC5E,CAAC;oBAED,UAAU;oBACV,0BAA0B;oBAC1B,mDAAmD;oBACnD,qCAAqC;oBACrC,SAAS;oBACT,KAAK;oBACL,0BAA0B;oBAC1B,qCAAqC;oBACrC,IAAI;oBAEJ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACtB,MAAM,GAAG,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC;wBACrC,OAAO;4BACL,IAAI,EAAE,4BAA4B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;yBACrD,CAAC;oBACJ,CAAC;oBAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACxB,OAAO;4BACL,IAAI,EAAE,yBAAyB,gBAAgB,EAAE,aAAa,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;yBACtF,CAAC;oBACJ,CAAC;oBAED,OAAO,EAAE,IAAI,EAAE,wBAAwB,gBAAgB,EAAE,EAAE,EAAE,CAAC;gBAChE,CAAC;gBAED,kBAAkB;gBAClB,0BAA0B;gBAC1B,kCAAkC;gBAClC,sCAAsC;gBACtC,IAAI;gBAEJ,0BAA0B;gBAC1B,OAAO;oBACL,IAAI,EACF,iBAAiB,gBAAgB,EAAE,MAAM;wBACzC,OAAO;wBACP,4BAA4B;wBAC5B,6BAA6B;wBAC7B,2BAA2B;wBAC3B,wBAAwB;iBAC3B,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,IAAI,EAAE,SAAS,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBAClE,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,0BAA0B;AAC1B,8EAA8E;AAE9E,0DAA0D;AAC1D,uDAAuD;AACvD,gDAAgD;AAChD,EAAE;AACF,4CAA4C;AAC5C,8CAA8C;AAC9C,MAAM;AACN,sCAAsC;AACtC,iFAAiF;AACjF,8FAA8F;AAC9F,gFAAgF;AAChF,yCAAyC;AACzC,MAAM;AACN,6CAA6C;AAC7C,iFAAiF;AACjF,sBAAsB;AACtB,uGAAuG;AACvG,2EAA2E;AAC3E,SAAS;AACT,gFAAgF;AAChF,yCAAyC;AACzC,MAAM;AACN,sDAAsD;AACtD,wDAAwD;AACxD,qEAAqE;AACrE,gCAAgC;AAChC,4CAA4C;AAC5C,2FAA2F;AAC3F,sFAAsF;AACtF,4MAA4M;AAC5M,wNAAwN;AACxN,kEAAkE;AAClE,uCAAuC;AACvC,IAAI;AACJ,EAAE;AACF,8CAA8C;AAC9C,aAAa;AACb,2BAA2B;AAC3B,sDAAsD;AACtD,sBAAsB;AACtB,kHAAkH;AAClH,OAAO;AACP,IAAI"}

package/src/core/accounts.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * Lark multi-account management.
+ *
+ * Account overrides live under `cfg.channels.feishu.accounts`.
+ * Each account may override any top-level Feishu config field;
+ * unset fields fall back to the top-level defaults.
+ */
+import type { ClawdbotConfig } from 'openclaw/plugin-sdk';
+import type { FeishuConfig, LarkAccount, LarkCredentials, ConfiguredLarkAccount } from './types';
+/**
+ * List all account IDs defined in the Lark config.
+ *
+ * Returns `[DEFAULT_ACCOUNT_ID]` when no explicit accounts exist.
+ */
+export declare function getLarkAccountIds(cfg: ClawdbotConfig): string[];
+/** Return the first (default) account ID. */
+export declare function getDefaultLarkAccountId(cfg: ClawdbotConfig): string;
+/**
+ * Resolve a single account by merging the top-level config with
+ * account-level overrides.  Account fields take precedence.
+ *
+ * Falls back to the default account when `accountId` is omitted or `null`.
+ */
+export declare function getLarkAccount(cfg: ClawdbotConfig, accountId?: string | null): LarkAccount;
+/** Return all accounts that are both configured and enabled. */
+export declare function getEnabledLarkAccounts(cfg: ClawdbotConfig): LarkAccount[];
+/**
+ * Extract API credentials from a Feishu config fragment.
+ *
+ * Returns `null` when `appId` or `appSecret` is missing.
+ */
+export declare function getLarkCredentials(feishuCfg?: FeishuConfig): LarkCredentials | null;
+/** Type guard: narrow `LarkAccount` to `ConfiguredLarkAccount`. */
+export declare function isConfigured(account: LarkAccount): account is ConfiguredLarkAccount;
+//# sourceMappingURL=accounts.d.ts.map

package/src/core/accounts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts.d.ts","sourceRoot":"","sources":["../../../src/core/accounts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,KAAK,EAAE,YAAY,EAAa,WAAW,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAsD5G;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,EAAE,CAuB/D;AAED,6CAA6C;AAC7C,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,CAEnE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,WAAW,CA8D1F;AAED,gEAAgE;AAChE,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,cAAc,GAAG,WAAW,EAAE,CAYzE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,YAAY,GAAG,eAAe,GAAG,IAAI,CAenF;AAED,mEAAmE;AACnE,wBAAgB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,IAAI,qBAAqB,CAEnF"}

package/src/core/accounts.js

@@ -0,0 +1,179 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * Lark multi-account management.
+ *
+ * Account overrides live under `cfg.channels.feishu.accounts`.
+ * Each account may override any top-level Feishu config field;
+ * unset fields fall back to the top-level defaults.
+ */
+import { DEFAULT_ACCOUNT_ID, normalizeAccountId } from 'openclaw/plugin-sdk';
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+/** Extract the `channels.feishu` section from the top-level config. */
+function getLarkConfig(cfg) {
+    return cfg?.channels?.feishu;
+}
+/** Return the per-account override map, if present. */
+function getAccountMap(section) {
+    return section.accounts;
+}
+/** Strip the `accounts` key and return the remaining top-level config. */
+function baseConfig(section) {
+    const { accounts: _ignored, ...rest } = section;
+    return rest;
+}
+/**
+ * 合并 base config 与 account override。
+ *
+ * 当 account 将策略设为 "open" 时，剔除从 base 继承的限制性字段，
+ * 避免与 "open" 语义冲突。
+ */
+function mergeAccountConfig(base, override) {
+    const merged = { ...base, ...override };
+    if (override.groupPolicy === 'open') {
+        if (!('groups' in override))
+            merged.groups = undefined;
+        if (!('groupAllowFrom' in override))
+            merged.groupAllowFrom = undefined;
+    }
+    if (override.dmPolicy === 'open' && !('allowFrom' in override)) {
+        merged.allowFrom = ['*'];
+    }
+    return merged;
+}
+/** Coerce a domain string to `LarkBrand`, defaulting to `"feishu"`. */
+function toBrand(domain) {
+    return domain ?? 'feishu';
+}
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * List all account IDs defined in the Lark config.
+ *
+ * Returns `[DEFAULT_ACCOUNT_ID]` when no explicit accounts exist.
+ */
+export function getLarkAccountIds(cfg) {
+    const section = getLarkConfig(cfg);
+    if (!section)
+        return [DEFAULT_ACCOUNT_ID];
+    const accountMap = getAccountMap(section);
+    if (!accountMap || Object.keys(accountMap).length === 0) {
+        return [DEFAULT_ACCOUNT_ID];
+    }
+    const accountIds = Object.keys(accountMap);
+    // 当 accounts 存在时，如果顶层也配置了 appId/appSecret（即默认机器人），
+    // 将 DEFAULT_ACCOUNT_ID 加入列表，确保顶层机器人不会被忽略。
+    // 但如果 accountMap 已经包含 default，则不重复添加。
+    const hasDefault = accountIds.some((id) => id.trim().toLowerCase() === DEFAULT_ACCOUNT_ID);
+    if (!hasDefault) {
+        const base = baseConfig(section);
+        if (base.appId && base.appSecret) {
+            return [DEFAULT_ACCOUNT_ID, ...accountIds];
+        }
+    }
+    return accountIds;
+}
+/** Return the first (default) account ID. */
+export function getDefaultLarkAccountId(cfg) {
+    return getLarkAccountIds(cfg)[0];
+}
+/**
+ * Resolve a single account by merging the top-level config with
+ * account-level overrides.  Account fields take precedence.
+ *
+ * Falls back to the default account when `accountId` is omitted or `null`.
+ */
+export function getLarkAccount(cfg, accountId) {
+    const requestedId = accountId ? (normalizeAccountId(accountId) ?? DEFAULT_ACCOUNT_ID) : DEFAULT_ACCOUNT_ID;
+    const section = getLarkConfig(cfg);
+    if (!section) {
+        return {
+            accountId: requestedId,
+            enabled: false,
+            configured: false,
+            brand: 'feishu',
+            config: {},
+        };
+    }
+    const base = baseConfig(section);
+    const accountMap = getAccountMap(section);
+    const accountOverride = accountMap && requestedId !== DEFAULT_ACCOUNT_ID
+        ? accountMap[requestedId]
+        : undefined;
+    const merged = accountOverride
+        ? mergeAccountConfig(base, accountOverride)
+        : { ...base };
+    const appId = merged.appId;
+    const appSecret = merged.appSecret;
+    const configured = !!(appId && appSecret);
+    // Respect explicit `enabled` when set; otherwise derive from `configured`.
+    const enabled = !!(merged.enabled ?? configured);
+    const brand = toBrand(merged.domain);
+    if (configured) {
+        return {
+            accountId: requestedId,
+            enabled,
+            configured: true,
+            name: merged.name ?? undefined,
+            appId: appId,
+            appSecret: appSecret,
+            encryptKey: merged.encryptKey ?? undefined,
+            verificationToken: merged.verificationToken ?? undefined,
+            brand,
+            config: merged,
+        };
+    }
+    return {
+        accountId: requestedId,
+        enabled,
+        configured: false,
+        name: merged.name ?? undefined,
+        appId: appId ?? undefined,
+        appSecret: appSecret ?? undefined,
+        encryptKey: merged.encryptKey ?? undefined,
+        verificationToken: merged.verificationToken ?? undefined,
+        brand,
+        config: merged,
+    };
+}
+/** Return all accounts that are both configured and enabled. */
+export function getEnabledLarkAccounts(cfg) {
+    const ids = getLarkAccountIds(cfg);
+    const results = [];
+    for (const id of ids) {
+        const account = getLarkAccount(cfg, id);
+        if (account.enabled && account.configured) {
+            results.push(account);
+        }
+    }
+    return results;
+}
+/**
+ * Extract API credentials from a Feishu config fragment.
+ *
+ * Returns `null` when `appId` or `appSecret` is missing.
+ */
+export function getLarkCredentials(feishuCfg) {
+    if (!feishuCfg)
+        return null;
+    const appId = feishuCfg.appId;
+    const appSecret = feishuCfg.appSecret;
+    if (!appId || !appSecret)
+        return null;
+    return {
+        appId,
+        appSecret,
+        encryptKey: feishuCfg.encryptKey ?? undefined,
+        verificationToken: feishuCfg.verificationToken ?? undefined,
+        brand: toBrand(feishuCfg.domain),
+    };
+}
+/** Type guard: narrow `LarkAccount` to `ConfiguredLarkAccount`. */
+export function isConfigured(account) {
+    return account.configured;
+}
+//# sourceMappingURL=accounts.js.map

package/src/core/accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts.js","sourceRoot":"","sources":["../../../src/core/accounts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAM7E,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,uEAAuE;AACvE,SAAS,aAAa,CAAC,GAAmB;IACxC,OAAO,GAAG,EAAE,QAAQ,EAAE,MAAkC,CAAC;AAC3D,CAAC;AAED,uDAAuD;AACvD,SAAS,aAAa,CAAC,OAAqB;IAC1C,OAAQ,OAA+E,CAAC,QAAQ,CAAC;AACnG,CAAC;AAED,0EAA0E;AAC1E,SAAS,UAAU,CAAC,OAAqB;IACvC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,OAEvC,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,IAAoC,EAAE,QAA+B;IAC/F,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,EAAkB,CAAC;IAExD,IAAI,QAAQ,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;QACpC,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC;YAAE,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC;QACvD,IAAI,CAAC,CAAC,gBAAgB,IAAI,QAAQ,CAAC;YAAE,MAAM,CAAC,cAAc,GAAG,SAAS,CAAC;IACzE,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,WAAW,IAAI,QAAQ,CAAC,EAAE,CAAC;QAC/D,MAAM,CAAC,SAAS,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,uEAAuE;AACvE,SAAS,OAAO,CAAC,MAA0B;IACzC,OAAQ,MAAoB,IAAI,QAAQ,CAAC;AAC3C,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAmB;IACnD,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAE1C,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAE3C,mDAAmD;IACnD,0CAA0C;IAC1C,sCAAsC;IACtC,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,kBAAkB,CAAC,CAAC;IAC3F,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,kBAAkB,EAAE,GAAG,UAAU,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,uBAAuB,CAAC,GAAmB;IACzD,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,GAAmB,EAAE,SAAyB;IAC3E,MAAM,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,SAAS,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC;IAE3G,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAEnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,SAAS,EAAE,WAAW;YACtB,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,KAAK;YACjB,KAAK,EAAE,QAAQ;YACf,MAAM,EAAE,EAAkB;SAC3B,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,eAAe,GACnB,UAAU,IAAI,WAAW,KAAK,kBAAkB;QAC9C,CAAC,CAAE,UAAU,CAAC,WAAW,CAAuC;QAChE,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,MAAM,GAAiB,eAAe;QAC1C,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,eAAe,CAAC;QAC3C,CAAC,CAAE,EAAE,GAAG,IAAI,EAAmB,CAAC;IAElC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACnC,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC;IAE1C,2EAA2E;IAC3E,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,UAAU,CAAC,CAAC;IAEjD,MAAM,KAAK,GAAc,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhD,IAAI,UAAU,EAAE,CAAC;QACf,OAAO;YACL,SAAS,EAAE,WAAW;YACtB,OAAO;YACP,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS;YAC9B,KAAK,EAAE,KAAM;YACb,SAAS,EAAE,SAAU;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS;YAC1C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,SAAS;YACxD,KAAK;YACL,MAAM,EAAE,MAAM;SACf,CAAC;IACJ,CAAC;IAED,OAAO;QACL,SAAS,EAAE,WAAW;QACtB,OAAO;QACP,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS;QAC9B,KAAK,EAAE,KAAK,IAAI,SAAS;QACzB,SAAS,EAAE,SAAS,IAAI,SAAS;QACjC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS;QAC1C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,SAAS;QACxD,KAAK;QACL,MAAM,EAAE,MAAM;KACf,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,sBAAsB,CAAC,GAAmB;IACxD,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAwB;IACzD,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;IAC9B,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;IAEtC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAEtC,OAAO;QACL,KAAK;QACL,SAAS;QACT,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,SAAS;QAC7C,iBAAiB,EAAE,SAAS,CAAC,iBAAiB,IAAI,SAAS;QAC3D,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,YAAY,CAAC,OAAoB;IAC/C,OAAO,OAAO,CAAC,UAAU,CAAC;AAC5B,CAAC"}

package/src/core/agent-config.d.ts

@@ -0,0 +1,101 @@
+/**
+ * Agent configuration helpers for the Feishu/Lark channel plugin.
+ *
+ * Reads agent-level configuration (identity, skills, tools, subagents)
+ * from the top-level `agents.list` in OpenClawConfig.  These helpers
+ * bridge the gap between the SDK's agent infrastructure and the Feishu
+ * plugin's dispatch/reply layers.
+ */
+import type { ClawdbotConfig } from 'openclaw/plugin-sdk';
+/** Minimal agent identity fields used by the Feishu plugin. */
+interface AgentIdentity {
+    name?: string;
+    emoji?: string;
+    avatar?: string;
+}
+/** Minimal agent tools policy fields. */
+interface AgentToolsPolicy {
+    allow?: string[];
+    deny?: string[];
+}
+/** Shape of an agent entry in `config.agents.list`. */
+interface AgentEntry {
+    id: string;
+    name?: string;
+    skills?: string[];
+    identity?: AgentIdentity;
+    tools?: AgentToolsPolicy & Record<string, unknown>;
+    subagents?: {
+        allowAgents?: string[];
+    };
+}
+/**
+ * Retrieve the full list of configured agents from config.
+ *
+ * @param cfg - The top-level application config.
+ * @returns Array of agent entries, or empty array if none configured.
+ */
+export declare function listConfiguredAgents(cfg: ClawdbotConfig): AgentEntry[];
+/**
+ * Look up a specific agent's configuration by its ID.
+ *
+ * @param cfg - The top-level application config.
+ * @param agentId - The agent ID to search for.
+ * @returns The matching agent entry, or `undefined` if not found.
+ */
+export declare function resolveAgentEntry(cfg: ClawdbotConfig, agentId: string): AgentEntry | undefined;
+/**
+ * Resolve a human-readable display name for an agent.
+ *
+ * Priority: `identity.name` > `name` > `undefined`.
+ *
+ * @param cfg - The top-level application config.
+ * @param agentId - The agent ID.
+ * @returns The display name, or `undefined` if none configured.
+ */
+export declare function getAgentDisplayName(cfg: ClawdbotConfig, agentId: string): string | undefined;
+/**
+ * Resolve the per-agent skills filter.
+ *
+ * @param cfg - The top-level application config.
+ * @param agentId - The agent ID.
+ * @returns Skill allowlist, or `undefined` if no agent-level filter.
+ */
+export declare function getAgentSkillsFilter(cfg: ClawdbotConfig, agentId: string): string[] | undefined;
+/**
+ * Resolve the per-agent tools policy (allow/deny lists).
+ *
+ * @param cfg - The top-level application config.
+ * @param agentId - The agent ID.
+ * @returns Tools policy object, or `undefined` if none configured.
+ */
+export declare function getAgentToolsPolicy(cfg: ClawdbotConfig, agentId: string): AgentToolsPolicy | undefined;
+/**
+ * Merge agent-level and group-level skill filters.
+ *
+ * When both are present, the effective filter is the intersection:
+ * a skill must appear in both lists to be included.  When only one
+ * is present, that list is used as-is.
+ *
+ * @param agentSkills - Per-agent skill allowlist (from AgentConfig.skills).
+ * @param groupSkills - Per-group skill allowlist (from FeishuGroupConfig.skills).
+ * @returns Merged skill filter, or `undefined` if neither is set.
+ */
+export declare function mergeSkillFilters(agentSkills: string[] | undefined, groupSkills: string[] | undefined): string[] | undefined;
+/**
+ * Check whether a tool name is permitted by an agent's tool policy.
+ *
+ * Evaluation order:
+ *   1. If `deny` list exists and tool matches → denied.
+ *   2. If `allow` list exists and tool does NOT match → denied.
+ *   3. Otherwise → allowed.
+ *
+ * Supports glob-like patterns with trailing `*` (e.g. `feishu_calendar_*`).
+ *
+ * @param toolName - The tool name being invoked.
+ * @param policy - The agent's tool policy.
+ * @returns `true` if the tool is allowed, `false` if denied.
+ */
+export declare function isToolAllowedByPolicy(toolName: string, policy: AgentToolsPolicy | undefined): boolean;
+export {};
+//# sourceMappingURL=agent-config.d.ts.map

package/src/core/agent-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-config.d.ts","sourceRoot":"","sources":["../../../src/core/agent-config.ts"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAM1D,+DAA+D;AAC/D,UAAU,aAAa;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,yCAAyC;AACzC,UAAU,gBAAgB;IACxB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,uDAAuD;AACvD,UAAU,UAAU;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,KAAK,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnD,SAAS,CAAC,EAAE;QACV,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;CACH;AAMD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,cAAc,GAAG,UAAU,EAAE,CAGtE;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAE9F;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAI5F;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAE/F;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAMtG;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,MAAM,EAAE,GAAG,SAAS,EACjC,WAAW,EAAE,MAAM,EAAE,GAAG,SAAS,GAChC,MAAM,EAAE,GAAG,SAAS,CAQtB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,SAAS,GAAG,OAAO,CAYrG"}