@larksuite/openclaw-lark 2026.3.9

package/src/core/config-schema.js

@@ -0,0 +1,201 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * Zod-based configuration schema for the OpenClaw Feishu/Lark channel plugin.
+ *
+ * Provides runtime validation, sensible defaults, and cross-field refinements
+ * so that every consuming module can rely on well-typed configuration objects.
+ */
+import { z, toJSONSchema } from 'zod';
+export { z };
+// ---------------------------------------------------------------------------
+// Shared micro-schemas
+// ---------------------------------------------------------------------------
+const DmPolicyEnum = z.enum(['open', 'pairing', 'allowlist', 'disabled']);
+const GroupPolicyEnum = z.enum(['open', 'allowlist', 'disabled']);
+const ConnectionModeEnum = z.enum(['websocket', 'webhook']);
+const ReplyModeValue = z.enum(['auto', 'static', 'streaming']);
+const ReplyModeSchema = z
+    .union([
+    ReplyModeValue,
+    z.object({
+        default: ReplyModeValue.optional(),
+        group: ReplyModeValue.optional(),
+        direct: ReplyModeValue.optional(),
+    }),
+])
+    .optional();
+const ChunkModeEnum = z.enum(['newline', 'paragraph', 'none']);
+const DomainSchema = z.union([z.literal('feishu'), z.literal('lark'), z.string().regex(/^https:\/\//)]).optional();
+const AllowFromSchema = z
+    .union([z.string(), z.array(z.string())])
+    .optional()
+    .transform((v) => {
+    if (v === undefined || v === null)
+        return undefined;
+    return Array.isArray(v) ? v : [v];
+});
+const ToolPolicySchema = z
+    .object({
+    allow: z.array(z.string()).optional(),
+    deny: z.array(z.string()).optional(),
+})
+    .optional();
+const FeishuToolsFlagSchema = z
+    .object({
+    doc: z.boolean().optional(),
+    wiki: z.boolean().optional(),
+    drive: z.boolean().optional(),
+    perm: z.boolean().optional(),
+    scopes: z.boolean().optional(),
+})
+    .optional();
+const FeishuFooterSchema = z
+    .object({
+    status: z.boolean().optional(),
+    elapsed: z.boolean().optional(),
+})
+    .optional();
+const BlockStreamingCoalesceSchema = z
+    .object({
+    minChars: z.number().optional(),
+    maxChars: z.number().optional(),
+    idleMs: z.number().optional(),
+})
+    .optional();
+const MarkdownConfigSchema = z
+    .object({
+    tables: z.enum(['off', 'bullets', 'code']).optional(),
+})
+    .optional();
+const HeartbeatSchema = z
+    .object({
+    every: z.string().optional(),
+    activeHours: z
+        .object({
+        start: z.string().optional(),
+        end: z.string().optional(),
+        timezone: z.string().optional(),
+    })
+        .optional(),
+    target: z.string().optional(),
+    to: z.string().optional(),
+    prompt: z.string().optional(),
+    accountId: z.string().optional(),
+})
+    .optional();
+const CapabilitiesSchema = z
+    .object({
+    image: z.boolean().optional(),
+    audio: z.boolean().optional(),
+    video: z.boolean().optional(),
+})
+    .optional();
+const DedupSchema = z
+    .object({
+    ttlMs: z.number().optional(), // default 43200000 (12h)
+    maxEntries: z.number().optional(), // default 5000
+})
+    .optional();
+const ReactionNotificationModeSchema = z.enum(['off', 'own', 'all']).optional();
+export const UATConfigSchema = z
+    .object({
+    enabled: z.boolean().optional(),
+    allowedScopes: z.array(z.string()).optional(),
+    blockedScopes: z.array(z.string()).optional(),
+})
+    .optional();
+const DmConfigSchema = z
+    .object({
+    historyLimit: z.number().optional(),
+})
+    .optional();
+// ---------------------------------------------------------------------------
+// Group schema
+// ---------------------------------------------------------------------------
+export const FeishuGroupSchema = z.object({
+    groupPolicy: GroupPolicyEnum.optional(),
+    requireMention: z.boolean().optional(),
+    tools: ToolPolicySchema,
+    skills: z.array(z.string()).optional(),
+    enabled: z.boolean().optional(),
+    allowFrom: AllowFromSchema,
+    systemPrompt: z.string().optional(),
+});
+// ---------------------------------------------------------------------------
+// Account config schema (same shape as top-level minus `accounts`)
+// ---------------------------------------------------------------------------
+export const FeishuAccountConfigSchema = z.object({
+    appId: z.string().optional(),
+    appSecret: z.string().optional(),
+    encryptKey: z.string().optional(),
+    verificationToken: z.string().optional(),
+    name: z.string().optional(),
+    enabled: z.boolean().optional(),
+    domain: DomainSchema,
+    connectionMode: ConnectionModeEnum.optional(),
+    webhookPath: z.string().optional(),
+    webhookPort: z.number().optional(),
+    dmPolicy: DmPolicyEnum.optional(),
+    allowFrom: AllowFromSchema,
+    groupPolicy: GroupPolicyEnum.optional(),
+    groupAllowFrom: AllowFromSchema,
+    requireMention: z.boolean().optional(),
+    groups: z.record(z.string(), FeishuGroupSchema).optional(),
+    historyLimit: z.number().optional(),
+    dmHistoryLimit: z.number().optional(),
+    dms: DmConfigSchema,
+    textChunkLimit: z.number().optional(),
+    chunkMode: ChunkModeEnum.optional(),
+    blockStreamingCoalesce: BlockStreamingCoalesceSchema,
+    mediaMaxMb: z.number().optional(),
+    heartbeat: HeartbeatSchema,
+    replyMode: ReplyModeSchema,
+    streaming: z.boolean().optional(),
+    blockStreaming: z.boolean().optional(),
+    tools: FeishuToolsFlagSchema,
+    footer: FeishuFooterSchema,
+    markdown: MarkdownConfigSchema,
+    configWrites: z.boolean().optional(),
+    capabilities: CapabilitiesSchema,
+    dedup: DedupSchema,
+    reactionNotifications: ReactionNotificationModeSchema,
+    threadSession: z.boolean().optional(),
+    uat: UATConfigSchema,
+});
+// ---------------------------------------------------------------------------
+// Top-level Feishu config schema
+// ---------------------------------------------------------------------------
+export const FeishuConfigSchema = FeishuAccountConfigSchema.extend({
+    accounts: z.record(z.string(), FeishuAccountConfigSchema).optional(),
+}).superRefine((data, ctx) => {
+    // When dmPolicy is "open", allowFrom must contain the wildcard "*".
+    if (data.dmPolicy === 'open') {
+        const list = data.allowFrom;
+        const hasWildcard = Array.isArray(list) && list.includes('*');
+        if (!hasWildcard) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ['allowFrom'],
+                message: 'When dmPolicy is "open", allowFrom must include "*" to permit all senders.',
+            });
+        }
+    }
+});
+// ---------------------------------------------------------------------------
+// Auto-generated JSON Schema (single source of truth)
+// ---------------------------------------------------------------------------
+/**
+ * JSON Schema derived from FeishuConfigSchema.
+ *
+ * - `io: "input"` exposes the input type for `.transform()` schemas (e.g. AllowFromSchema).
+ * - `unrepresentable: "any"` degrades `.superRefine()` constraints to `{}`.
+ * - `target: "draft-07"` matches the plugin system's expected JSON Schema version.
+ */
+export const FEISHU_CONFIG_JSON_SCHEMA = toJSONSchema(FeishuConfigSchema, {
+    target: 'draft-07',
+    io: 'input',
+    unrepresentable: 'any',
+});
+//# sourceMappingURL=config-schema.js.map

package/src/core/config-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-schema.js","sourceRoot":"","sources":["../../../src/core/config-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,KAAK,CAAC;AAEtC,OAAO,EAAE,CAAC,EAAE,CAAC;AAEb,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;AAC1E,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;AAClE,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;AAC5D,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAC/D,MAAM,eAAe,GAAG,CAAC;KACtB,KAAK,CAAC;IACL,cAAc;IACd,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,cAAc,CAAC,QAAQ,EAAE;QAClC,KAAK,EAAE,cAAc,CAAC,QAAQ,EAAE;QAChC,MAAM,EAAE,cAAc,CAAC,QAAQ,EAAE;KAClC,CAAC;CACH,CAAC;KACD,QAAQ,EAAE,CAAC;AACd,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;AAE/D,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEnH,MAAM,eAAe,GAAG,CAAC;KACtB,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;KACxC,QAAQ,EAAE;KACV,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACf,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC,CAAC,CAAC;AAEL,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,MAAM,qBAAqB,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3B,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7B,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,MAAM,kBAAkB,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,MAAM,4BAA4B,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,MAAM,oBAAoB,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,WAAW,EAAE,CAAC;SACX,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;SACD,QAAQ,EAAE;IACb,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,MAAM,kBAAkB,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,yBAAyB;IACvD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,eAAe;CACnD,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,MAAM,8BAA8B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEhF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7C,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC9C,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,MAAM,cAAc,GAAG,CAAC;KACrB,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,WAAW,EAAE,eAAe,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,KAAK,EAAE,gBAAgB;IACvB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,eAAe;IAC1B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,mEAAmE;AACnE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,YAAY;IACpB,cAAc,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IAC7C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,eAAe;IAC1B,WAAW,EAAE,eAAe,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,eAAe;IAC/B,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,QAAQ,EAAE;IAC1D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,GAAG,EAAE,cAAc;IACnB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,aAAa,CAAC,QAAQ,EAAE;IACnC,sBAAsB,EAAE,4BAA4B;IACpD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,KAAK,EAAE,qBAAqB;IAC5B,MAAM,EAAE,kBAAkB;IAC1B,QAAQ,EAAE,oBAAoB;IAC9B,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,YAAY,EAAE,kBAAkB;IAChC,KAAK,EAAE,WAAW;IAClB,qBAAqB,EAAE,8BAA8B;IACrD,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,GAAG,EAAE,eAAe;CACrB,CAAC,CAAC;AAEH,8EAA8E;AAC9E,iCAAiC;AACjC,8EAA8E;AAE9E,MAAM,CAAC,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,MAAM,CAAC;IACjE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,QAAQ,EAAE;CACrE,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IAC3B,oEAAoE;IACpE,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC5B,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAE9D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,WAAW,CAAC;gBACnB,OAAO,EAAE,4EAA4E;aACtF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,sDAAsD;AACtD,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAA4B,YAAY,CAAC,kBAAkB,EAAE;IACjG,MAAM,EAAE,UAAU;IAClB,EAAE,EAAE,OAAO;IACX,eAAe,EAAE,KAAK;CACvB,CAAC,CAAC"}

package/src/core/device-flow.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * OAuth 2.0 Device Authorization Grant (RFC 8628) for Feishu/Lark.
+ *
+ * Two-step flow:
+ *   1. `requestDeviceAuthorization` – obtains device_code + user_code.
+ *   2. `pollDeviceToken` – polls the token endpoint until the user authorises,
+ *      rejects, or the code expires.
+ *
+ * All HTTP calls use the built-in `fetch` (Node 18+). The Lark SDK is not
+ * used here because these OAuth endpoints are outside the SDK's scope.
+ */
+import type { LarkBrand } from './types';
+export interface DeviceAuthResponse {
+    deviceCode: string;
+    userCode: string;
+    verificationUri: string;
+    verificationUriComplete: string;
+    expiresIn: number;
+    interval: number;
+}
+export interface DeviceFlowTokenData {
+    accessToken: string;
+    refreshToken: string;
+    expiresIn: number;
+    refreshExpiresIn: number;
+    scope: string;
+}
+export type DeviceFlowResult = {
+    ok: true;
+    token: DeviceFlowTokenData;
+} | {
+    ok: false;
+    error: DeviceFlowError;
+    message: string;
+};
+export type DeviceFlowError = 'authorization_pending' | 'slow_down' | 'access_denied' | 'expired_token';
+/**
+ * Resolve the two OAuth endpoint URLs based on the configured brand.
+ */
+export declare function resolveOAuthEndpoints(brand: LarkBrand): {
+    deviceAuthorization: string;
+    token: string;
+};
+/**
+ * Request a device authorisation code from the Feishu OAuth server.
+ *
+ * Uses Confidential Client authentication (HTTP Basic with appId:appSecret).
+ * The `offline_access` scope is automatically appended so that the token
+ * response includes a refresh_token.
+ */
+export declare function requestDeviceAuthorization(params: {
+    appId: string;
+    appSecret: string;
+    brand: LarkBrand;
+    scope?: string;
+}): Promise<DeviceAuthResponse>;
+/**
+ * Poll the token endpoint until the user authorises, rejects, or the code
+ * expires.
+ *
+ * Handles `authorization_pending` (keep polling), `slow_down` (back off by
+ * +5 s), `access_denied` and `expired_token` (terminal errors).
+ *
+ * Pass an `AbortSignal` to cancel polling from the outside.
+ */
+export declare function pollDeviceToken(params: {
+    appId: string;
+    appSecret: string;
+    brand: LarkBrand;
+    deviceCode: string;
+    interval: number;
+    expiresIn: number;
+    signal?: AbortSignal;
+}): Promise<DeviceFlowResult>;
+//# sourceMappingURL=device-flow.d.ts.map

package/src/core/device-flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-flow.d.ts","sourceRoot":"","sources":["../../../src/core/device-flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAUzC,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,mBAAmB,CAAA;CAAE,GACxC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3D,MAAM,MAAM,eAAe,GAAG,uBAAuB,GAAG,WAAW,GAAG,eAAe,GAAG,eAAe,CAAC;AAMxG;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,SAAS,GAAG;IACvD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;CACf,CA8BA;AAMD;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAAC,MAAM,EAAE;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,SAAS,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAwD9B;AAoBD;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,SAAS,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA2F5B"}

package/src/core/device-flow.js

@@ -0,0 +1,213 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * OAuth 2.0 Device Authorization Grant (RFC 8628) for Feishu/Lark.
+ *
+ * Two-step flow:
+ *   1. `requestDeviceAuthorization` – obtains device_code + user_code.
+ *   2. `pollDeviceToken` – polls the token endpoint until the user authorises,
+ *      rejects, or the code expires.
+ *
+ * All HTTP calls use the built-in `fetch` (Node 18+). The Lark SDK is not
+ * used here because these OAuth endpoints are outside the SDK's scope.
+ */
+import { larkLogger } from './lark-logger';
+const log = larkLogger('core/device-flow');
+import { feishuFetch } from './feishu-fetch';
+// ---------------------------------------------------------------------------
+// Endpoint resolution
+// ---------------------------------------------------------------------------
+/**
+ * Resolve the two OAuth endpoint URLs based on the configured brand.
+ */
+export function resolveOAuthEndpoints(brand) {
+    if (!brand || brand === 'feishu') {
+        return {
+            deviceAuthorization: 'https://accounts.feishu.cn/oauth/v1/device_authorization',
+            token: 'https://open.feishu.cn/open-apis/authen/v2/oauth/token',
+        };
+    }
+    if (brand === 'lark') {
+        return {
+            deviceAuthorization: 'https://accounts.larksuite.com/oauth/v1/device_authorization',
+            token: 'https://open.larksuite.com/open-apis/authen/v2/oauth/token',
+        };
+    }
+    // Custom domain – derive paths by convention.
+    // Smart derivation: open.X → accounts.X for the device authorization endpoint.
+    const base = brand.replace(/\/+$/, '');
+    let accountsBase = base;
+    try {
+        const parsed = new URL(base);
+        if (parsed.hostname.startsWith('open.')) {
+            accountsBase = `${parsed.protocol}//${parsed.hostname.replace(/^open\./, 'accounts.')}`;
+        }
+    }
+    catch {
+        /* fallback to base */
+    }
+    return {
+        deviceAuthorization: `${accountsBase}/oauth/v1/device_authorization`,
+        token: `${base}/open-apis/authen/v2/oauth/token`,
+    };
+}
+// ---------------------------------------------------------------------------
+// Step 1 – Device Authorization Request
+// ---------------------------------------------------------------------------
+/**
+ * Request a device authorisation code from the Feishu OAuth server.
+ *
+ * Uses Confidential Client authentication (HTTP Basic with appId:appSecret).
+ * The `offline_access` scope is automatically appended so that the token
+ * response includes a refresh_token.
+ */
+export async function requestDeviceAuthorization(params) {
+    const { appId, appSecret, brand } = params;
+    const endpoints = resolveOAuthEndpoints(brand);
+    // Ensure offline_access is always requested.
+    let scope = params.scope ?? '';
+    if (!scope.includes('offline_access')) {
+        scope = scope ? `${scope} offline_access` : 'offline_access';
+    }
+    const basicAuth = Buffer.from(`${appId}:${appSecret}`).toString('base64');
+    const body = new URLSearchParams();
+    body.set('client_id', appId);
+    body.set('scope', scope);
+    log.info(`requesting device authorization (scope="${scope}") url=${endpoints.deviceAuthorization} token_url=${endpoints.token}`);
+    const resp = await feishuFetch(endpoints.deviceAuthorization, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/x-www-form-urlencoded',
+            Authorization: `Basic ${basicAuth}`,
+        },
+        body: body.toString(),
+    });
+    const text = await resp.text();
+    log.info(`response status=${resp.status} body=${text.slice(0, 500)}`);
+    let data;
+    try {
+        data = JSON.parse(text);
+    }
+    catch {
+        throw new Error(`Device authorization failed: HTTP ${resp.status} – ${text.slice(0, 200)}`);
+    }
+    if (!resp.ok || data.error) {
+        const msg = data.error_description ?? data.error ?? 'Unknown error';
+        throw new Error(`Device authorization failed: ${msg}`);
+    }
+    const expiresIn = data.expires_in ?? 240;
+    const interval = data.interval ?? 5;
+    log.info(`device_code obtained, expires_in=${expiresIn}s (${Math.round(expiresIn / 60)}min), interval=${interval}s`);
+    return {
+        deviceCode: data.device_code,
+        userCode: data.user_code,
+        verificationUri: data.verification_uri,
+        verificationUriComplete: data.verification_uri_complete ?? data.verification_uri,
+        expiresIn,
+        interval,
+    };
+}
+// ---------------------------------------------------------------------------
+// Step 2 – Poll Token Endpoint
+// ---------------------------------------------------------------------------
+function sleep(ms, signal) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(resolve, ms);
+        signal?.addEventListener('abort', () => {
+            clearTimeout(timer);
+            reject(new DOMException('Aborted', 'AbortError'));
+        }, { once: true });
+    });
+}
+/**
+ * Poll the token endpoint until the user authorises, rejects, or the code
+ * expires.
+ *
+ * Handles `authorization_pending` (keep polling), `slow_down` (back off by
+ * +5 s), `access_denied` and `expired_token` (terminal errors).
+ *
+ * Pass an `AbortSignal` to cancel polling from the outside.
+ */
+export async function pollDeviceToken(params) {
+    const MAX_POLL_INTERVAL = 60; // slow_down 最大间隔 60 秒
+    const MAX_POLL_ATTEMPTS = 200; // 安全上限（远超设备码有效期）
+    const { appId, appSecret, brand, deviceCode, expiresIn, signal } = params;
+    let interval = params.interval;
+    const endpoints = resolveOAuthEndpoints(brand);
+    const deadline = Date.now() + expiresIn * 1000;
+    let attempts = 0;
+    while (Date.now() < deadline && attempts < MAX_POLL_ATTEMPTS) {
+        attempts++;
+        if (signal?.aborted) {
+            return { ok: false, error: 'expired_token', message: 'Polling was cancelled' };
+        }
+        await sleep(interval * 1000, signal);
+        let data;
+        try {
+            const resp = await feishuFetch(endpoints.token, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                body: new URLSearchParams({
+                    grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
+                    device_code: deviceCode,
+                    client_id: appId,
+                    client_secret: appSecret,
+                }).toString(),
+            });
+            data = (await resp.json());
+        }
+        catch (err) {
+            log.warn(`poll network error: ${err}`);
+            interval = Math.min(interval + 1, MAX_POLL_INTERVAL);
+            continue;
+        }
+        const error = data.error;
+        if (!error && data.access_token) {
+            log.info('token obtained successfully');
+            const refreshToken = data.refresh_token ?? '';
+            const expiresIn = data.expires_in ?? 7200;
+            let refreshExpiresIn = data.refresh_token_expires_in ?? 604800;
+            if (!refreshToken) {
+                log.warn('no refresh_token in response, token will not be refreshable');
+                refreshExpiresIn = expiresIn;
+            }
+            return {
+                ok: true,
+                token: {
+                    accessToken: data.access_token,
+                    refreshToken,
+                    expiresIn,
+                    refreshExpiresIn,
+                    scope: data.scope ?? '',
+                },
+            };
+        }
+        if (error === 'authorization_pending') {
+            log.debug('authorization_pending, retrying...');
+            continue;
+        }
+        if (error === 'slow_down') {
+            interval = Math.min(interval + 5, MAX_POLL_INTERVAL);
+            log.info(`slow_down, interval increased to ${interval}s`);
+            continue;
+        }
+        if (error === 'access_denied') {
+            log.info('user denied authorization');
+            return { ok: false, error: 'access_denied', message: '用户拒绝了授权' };
+        }
+        if (error === 'expired_token' || error === 'invalid_grant') {
+            log.info(`device code expired/invalid (error=${error})`);
+            return { ok: false, error: 'expired_token', message: '授权码已过期，请重新发起' };
+        }
+        // Unknown error – treat as terminal.
+        const desc = data.error_description ?? error ?? 'Unknown error';
+        log.warn(`unexpected error: error=${error}, desc=${desc}`);
+        return { ok: false, error: 'expired_token', message: desc };
+    }
+    if (attempts >= MAX_POLL_ATTEMPTS) {
+        log.warn(`max poll attempts (${MAX_POLL_ATTEMPTS}) reached`);
+    }
+    return { ok: false, error: 'expired_token', message: '授权超时，请重新发起' };
+}
+//# sourceMappingURL=device-flow.js.map

package/src/core/device-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-flow.js","sourceRoot":"","sources":["../../../src/core/device-flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,MAAM,GAAG,GAAG,UAAU,CAAC,kBAAkB,CAAC,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AA6B7C,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAgB;IAIpD,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO;YACL,mBAAmB,EAAE,0DAA0D;YAC/E,KAAK,EAAE,wDAAwD;SAChE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO;YACL,mBAAmB,EAAE,8DAA8D;YACnF,KAAK,EAAE,4DAA4D;SACpE,CAAC;IACJ,CAAC;IACD,8CAA8C;IAC9C,+EAA+E;IAC/E,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvC,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,YAAY,GAAG,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC;QAC1F,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB;IACxB,CAAC;IAED,OAAO;QACL,mBAAmB,EAAE,GAAG,YAAY,gCAAgC;QACpE,KAAK,EAAE,GAAG,IAAI,kCAAkC;KACjD,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,wCAAwC;AACxC,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,MAKhD;IACC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IAC3C,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAE/C,6CAA6C;IAC7C,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACtC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,iBAAiB,CAAC,CAAC,CAAC,gBAAgB,CAAC;IAC/D,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE1E,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAEzB,GAAG,CAAC,IAAI,CACN,2CAA2C,KAAK,UAAU,SAAS,CAAC,mBAAmB,cAAc,SAAS,CAAC,KAAK,EAAE,CACvH,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,mBAAmB,EAAE;QAC5D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,aAAa,EAAE,SAAS,SAAS,EAAE;SACpC;QACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,GAAG,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,MAAM,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAEtE,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAI,IAAI,CAAC,iBAA4B,IAAK,IAAI,CAAC,KAAgB,IAAI,eAAe,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,SAAS,GAAI,IAAI,CAAC,UAAqB,IAAI,GAAG,CAAC;IACrD,MAAM,QAAQ,GAAI,IAAI,CAAC,QAAmB,IAAI,CAAC,CAAC;IAChD,GAAG,CAAC,IAAI,CAAC,oCAAoC,SAAS,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,EAAE,CAAC,kBAAkB,QAAQ,GAAG,CAAC,CAAC;IAErH,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,WAAqB;QACtC,QAAQ,EAAE,IAAI,CAAC,SAAmB;QAClC,eAAe,EAAE,IAAI,CAAC,gBAA0B;QAChD,uBAAuB,EAAG,IAAI,CAAC,yBAAoC,IAAK,IAAI,CAAC,gBAA2B;QACxG,SAAS;QACT,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAE9E,SAAS,KAAK,CAAC,EAAU,EAAE,MAAoB;IAC7C,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,EAAE,gBAAgB,CACtB,OAAO,EACP,GAAG,EAAE;YACH,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;QACpD,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAQrC;IACC,MAAM,iBAAiB,GAAG,EAAE,CAAC,CAAC,sBAAsB;IACpD,MAAM,iBAAiB,GAAG,GAAG,CAAC,CAAC,iBAAiB;IAEhD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC1E,IAAI,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC/B,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC;IAC/C,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,IAAI,QAAQ,GAAG,iBAAiB,EAAE,CAAC;QAC7D,QAAQ,EAAE,CAAC;QACX,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;QACjF,CAAC;QAED,MAAM,KAAK,CAAC,QAAQ,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QAErC,IAAI,IAA6B,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,KAAK,EAAE;gBAC9C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,IAAI,eAAe,CAAC;oBACxB,UAAU,EAAE,8CAA8C;oBAC1D,WAAW,EAAE,UAAU;oBACvB,SAAS,EAAE,KAAK;oBAChB,aAAa,EAAE,SAAS;iBACzB,CAAC,CAAC,QAAQ,EAAE;aACd,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA4B,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;YACvC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,iBAAiB,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAA2B,CAAC;QAE/C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAChC,GAAG,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YACxC,MAAM,YAAY,GAAI,IAAI,CAAC,aAAwB,IAAI,EAAE,CAAC;YAC1D,MAAM,SAAS,GAAI,IAAI,CAAC,UAAqB,IAAI,IAAI,CAAC;YACtD,IAAI,gBAAgB,GAAI,IAAI,CAAC,wBAAmC,IAAI,MAAM,CAAC;YAC3E,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,GAAG,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;gBACxE,gBAAgB,GAAG,SAAS,CAAC;YAC/B,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE;oBACL,WAAW,EAAE,IAAI,CAAC,YAAsB;oBACxC,YAAY;oBACZ,SAAS;oBACT,gBAAgB;oBAChB,KAAK,EAAG,IAAI,CAAC,KAAgB,IAAI,EAAE;iBACpC;aACF,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,KAAK,uBAAuB,EAAE,CAAC;YACtC,GAAG,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;YAChD,SAAS;QACX,CAAC;QAED,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;YAC1B,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,iBAAiB,CAAC,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,oCAAoC,QAAQ,GAAG,CAAC,CAAC;YAC1D,SAAS;QACX,CAAC;QAED,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;YAC9B,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QACnE,CAAC;QAED,IAAI,KAAK,KAAK,eAAe,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;YAC3D,GAAG,CAAC,IAAI,CAAC,sCAAsC,KAAK,GAAG,CAAC,CAAC;YACzD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;QACxE,CAAC;QAED,qCAAqC;QACrC,MAAM,IAAI,GAAI,IAAI,CAAC,iBAA4B,IAAI,KAAK,IAAI,eAAe,CAAC;QAC5E,GAAG,CAAC,IAAI,CAAC,2BAA2B,KAAK,UAAU,IAAI,EAAE,CAAC,CAAC;QAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC9D,CAAC;IAED,IAAI,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,sBAAsB,iBAAiB,WAAW,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;AACtE,CAAC"}

package/src/core/feishu-fetch.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * Header-aware fetch for Feishu API calls.
+ *
+ * Drop-in replacement for `fetch()` that automatically injects
+ * the User-Agent header.
+ */
+/**
+ * Drop-in replacement for `fetch()` that automatically injects
+ * the User-Agent header.
+ *
+ * Used by `device-flow.ts` and `uat-client.ts` so that the custom
+ * User-Agent is transparently applied without changing every
+ * call-site's signature.
+ */
+export declare function feishuFetch(url: string | URL | Request, init?: RequestInit): Promise<Response>;
+//# sourceMappingURL=feishu-fetch.d.ts.map

package/src/core/feishu-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feishu-fetch.d.ts","sourceRoot":"","sources":["../../../src/core/feishu-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAO9F"}

package/src/core/feishu-fetch.js

@@ -0,0 +1,26 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * Header-aware fetch for Feishu API calls.
+ *
+ * Drop-in replacement for `fetch()` that automatically injects
+ * the User-Agent header.
+ */
+import { getUserAgent } from './version';
+/**
+ * Drop-in replacement for `fetch()` that automatically injects
+ * the User-Agent header.
+ *
+ * Used by `device-flow.ts` and `uat-client.ts` so that the custom
+ * User-Agent is transparently applied without changing every
+ * call-site's signature.
+ */
+export function feishuFetch(url, init) {
+    const headers = {
+        ...init?.headers,
+        'User-Agent': getUserAgent(),
+    };
+    return fetch(url, { ...init, headers });
+}
+//# sourceMappingURL=feishu-fetch.js.map

package/src/core/feishu-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feishu-fetch.js","sourceRoot":"","sources":["../../../src/core/feishu-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,GAA2B,EAAE,IAAkB;IACzE,MAAM,OAAO,GAAG;QACd,GAAG,IAAI,EAAE,OAAO;QAChB,YAAY,EAAE,YAAY,EAAE;KAC7B,CAAC;IAEF,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C,CAAC"}

package/src/core/footer-config.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * Default values and resolution logic for the Feishu card footer configuration.
+ *
+ * Each boolean flag controls whether a particular metadata item is displayed
+ * in the card footer (e.g. elapsed time, model name).
+ */
+import type { FeishuFooterConfig } from './types';
+/**
+ * The default footer configuration.
+ *
+ * By default all metadata items are hidden — neither status text
+ * ("已完成" / "出错" / "已停止") nor elapsed time are shown.
+ */
+export declare const DEFAULT_FOOTER_CONFIG: Required<FeishuFooterConfig>;
+/**
+ * Merge a partial footer configuration with `DEFAULT_FOOTER_CONFIG`.
+ *
+ * Fields present in the input take precedence; anything absent falls back
+ * to the default value.
+ */
+export declare function resolveFooterConfig(cfg?: FeishuFooterConfig): Required<FeishuFooterConfig>;
+//# sourceMappingURL=footer-config.d.ts.map

package/src/core/footer-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"footer-config.d.ts","sourceRoot":"","sources":["../../../src/core/footer-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAMlD;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,kBAAkB,CAG9D,CAAC;AAMF;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,CAAC,EAAE,kBAAkB,GAAG,QAAQ,CAAC,kBAAkB,CAAC,CAM1F"}

package/src/core/footer-config.js

@@ -0,0 +1,40 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * Default values and resolution logic for the Feishu card footer configuration.
+ *
+ * Each boolean flag controls whether a particular metadata item is displayed
+ * in the card footer (e.g. elapsed time, model name).
+ */
+// ---------------------------------------------------------------------------
+// Defaults
+// ---------------------------------------------------------------------------
+/**
+ * The default footer configuration.
+ *
+ * By default all metadata items are hidden — neither status text
+ * ("已完成" / "出错" / "已停止") nor elapsed time are shown.
+ */
+export const DEFAULT_FOOTER_CONFIG = {
+    status: false,
+    elapsed: false,
+};
+// ---------------------------------------------------------------------------
+// Resolver
+// ---------------------------------------------------------------------------
+/**
+ * Merge a partial footer configuration with `DEFAULT_FOOTER_CONFIG`.
+ *
+ * Fields present in the input take precedence; anything absent falls back
+ * to the default value.
+ */
+export function resolveFooterConfig(cfg) {
+    if (!cfg)
+        return { ...DEFAULT_FOOTER_CONFIG };
+    return {
+        status: cfg.status ?? DEFAULT_FOOTER_CONFIG.status,
+        elapsed: cfg.elapsed ?? DEFAULT_FOOTER_CONFIG.elapsed,
+    };
+}
+//# sourceMappingURL=footer-config.js.map

package/src/core/footer-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"footer-config.js","sourceRoot":"","sources":["../../../src/core/footer-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAiC;IACjE,MAAM,EAAE,KAAK;IACb,OAAO,EAAE,KAAK;CACf,CAAC;AAEF,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAwB;IAC1D,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,GAAG,qBAAqB,EAAE,CAAC;IAC9C,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,qBAAqB,CAAC,MAAM;QAClD,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,qBAAqB,CAAC,OAAO;KACtD,CAAC;AACJ,CAAC"}