@larksuite/openclaw-lark 2026.3.9

package/src/messaging/inbound/gate-effects.js

@@ -0,0 +1,44 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * Side-effect functions for the inbound message gate.
+ *
+ * Extracted from gate.ts to separate pure policy decisions from I/O
+ * operations (pairing request creation, message sending).
+ */
+import { LarkClient } from '../../core/lark-client';
+import { sendMessageFeishu } from '../outbound/send';
+// ---------------------------------------------------------------------------
+// Pairing reply
+// ---------------------------------------------------------------------------
+/**
+ * Create a pairing request and send a pairing reply message to the user.
+ *
+ * This is the side-effect portion of the DM pairing gate: the pure
+ * policy decision (whether to pair) is made in gate.ts, and this
+ * function executes the resulting I/O.
+ */
+export async function sendPairingReply(params) {
+    const { senderId, chatId, accountId, accountScopedCfg } = params;
+    const core = LarkClient.runtime;
+    const { code } = await core.channel.pairing.upsertPairingRequest({
+        channel: 'feishu',
+        id: senderId,
+        accountId,
+    });
+    const pairingReply = core.channel.pairing.buildPairingReply({
+        channel: 'feishu',
+        idLine: senderId,
+        code,
+    });
+    if (accountScopedCfg) {
+        await sendMessageFeishu({
+            cfg: accountScopedCfg,
+            to: chatId,
+            text: pairingReply,
+            accountId,
+        });
+    }
+}
+//# sourceMappingURL=gate-effects.js.map

package/src/messaging/inbound/gate-effects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-effects.js","sourceRoot":"","sources":["../../../../src/messaging/inbound/gate-effects.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAKtC;IACC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAAC;IACjE,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC;IAEhC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC;QAC/D,OAAO,EAAE,QAAQ;QACjB,EAAE,EAAE,QAAQ;QACZ,SAAS;KACV,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAC1D,OAAO,EAAE,QAAQ;QACjB,MAAM,EAAE,QAAQ;QAChB,IAAI;KACL,CAAC,CAAC;IAEH,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,iBAAiB,CAAC;YACtB,GAAG,EAAE,gBAAgB;YACrB,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,YAAY;YAClB,SAAS;SACV,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/src/messaging/inbound/gate.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * Policy gate for inbound Feishu messages.
+ *
+ * Determines whether a parsed message should be processed or rejected
+ * based on group/DM access policies, sender allowlists, and mention
+ * requirements.
+ *
+ * Group access follows the same two-layer model as Telegram:
+ *
+ *   Layer 1 – Which GROUPS are allowed (SDK `resolveGroupPolicy`):
+ *     - No `groups` configured + `groupPolicy: "open"` → any group passes
+ *     - `groupPolicy: "allowlist"` or `groups` configured → acts as allowlist
+ *       (explicit group IDs or `"*"` wildcard)
+ *     - `groupPolicy: "disabled"` → all groups blocked
+ *
+ *   Layer 2 – Which SENDERS are allowed within a group:
+ *     - Per-group `groupPolicy` overrides global for sender filtering
+ *     - `groupAllowFrom` (global) + per-group `allowFrom` are merged
+ *     - `"open"` → any sender; `"allowlist"` → check merged list;
+ *       `"disabled"` → block all senders
+ */
+import type { ClawdbotConfig, HistoryEntry } from 'openclaw/plugin-sdk';
+import type { MessageContext } from '../types';
+import type { FeishuConfig } from '../../core/types';
+import type { LarkAccount } from '../../core/types';
+/**
+ * Read the pairing allowFrom store for the Feishu channel via the SDK runtime.
+ */
+declare function readAllowFromStore(accountId: string): Promise<string[]>;
+export interface GateResult {
+    allowed: boolean;
+    reason?: string;
+    /** When a group message is rejected due to missing bot mention, the
+     *  caller should record this entry into the chat history map. */
+    historyEntry?: HistoryEntry;
+}
+/**
+ * Read the pairing allowFrom store for the Feishu channel.
+ *
+ * Exported so that handler.ts can provide it as a closure to the SDK's
+ * `resolveSenderCommandAuthorization` helper.
+ */
+export { readAllowFromStore as readFeishuAllowFromStore };
+/**
+ * Check whether an inbound message passes all access-control gates.
+ *
+ * The DM gate is async because it may read from the pairing store
+ * and send pairing request messages.
+ */
+export declare function checkMessageGate(params: {
+    ctx: MessageContext;
+    accountFeishuCfg?: FeishuConfig;
+    account: LarkAccount;
+    /** account 级别的 ClawdbotConfig（channels.feishu 已替换为 per-account 合并后的配置） */
+    accountScopedCfg?: ClawdbotConfig;
+    log: (...args: unknown[]) => void;
+}): Promise<GateResult>;
+//# sourceMappingURL=gate.d.ts.map

package/src/messaging/inbound/gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../../../src/messaging/inbound/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAmBpD;;GAEG;AACH,iBAAe,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAMtE;AAMD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;qEACiE;IACjE,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAMD;;;;;GAKG;AACH,OAAO,EAAE,kBAAkB,IAAI,wBAAwB,EAAE,CAAC;AAE1D;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE;IAC7C,GAAG,EAAE,cAAc,CAAC;IACpB,gBAAgB,CAAC,EAAE,YAAY,CAAC;IAChC,OAAO,EAAE,WAAW,CAAC;IACrB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,cAAc,CAAC;IAClC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;CACnC,GAAG,OAAO,CAAC,UAAU,CAAC,CAStB"}

package/src/messaging/inbound/gate.js

@@ -0,0 +1,234 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * Policy gate for inbound Feishu messages.
+ *
+ * Determines whether a parsed message should be processed or rejected
+ * based on group/DM access policies, sender allowlists, and mention
+ * requirements.
+ *
+ * Group access follows the same two-layer model as Telegram:
+ *
+ *   Layer 1 – Which GROUPS are allowed (SDK `resolveGroupPolicy`):
+ *     - No `groups` configured + `groupPolicy: "open"` → any group passes
+ *     - `groupPolicy: "allowlist"` or `groups` configured → acts as allowlist
+ *       (explicit group IDs or `"*"` wildcard)
+ *     - `groupPolicy: "disabled"` → all groups blocked
+ *
+ *   Layer 2 – Which SENDERS are allowed within a group:
+ *     - Per-group `groupPolicy` overrides global for sender filtering
+ *     - `groupAllowFrom` (global) + per-group `allowFrom` are merged
+ *     - `"open"` → any sender; `"allowlist"` → check merged list;
+ *       `"disabled"` → block all senders
+ */
+import { LarkClient } from '../../core/lark-client';
+import { resolveFeishuGroupConfig, resolveFeishuAllowlistMatch, isFeishuGroupAllowed, splitLegacyGroupAllowFrom, resolveGroupSenderPolicyContext, } from './policy';
+import { mentionedBot } from './mention';
+import { sendPairingReply } from './gate-effects';
+/** Prevent spamming the legacy groupAllowFrom migration warning. */
+let legacyGroupAllowFromWarned = false;
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+/**
+ * Read the pairing allowFrom store for the Feishu channel via the SDK runtime.
+ */
+async function readAllowFromStore(accountId) {
+    const core = LarkClient.runtime;
+    return await core.channel.pairing.readAllowFromStore({
+        channel: 'feishu',
+        accountId,
+    });
+}
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Read the pairing allowFrom store for the Feishu channel.
+ *
+ * Exported so that handler.ts can provide it as a closure to the SDK's
+ * `resolveSenderCommandAuthorization` helper.
+ */
+export { readAllowFromStore as readFeishuAllowFromStore };
+/**
+ * Check whether an inbound message passes all access-control gates.
+ *
+ * The DM gate is async because it may read from the pairing store
+ * and send pairing request messages.
+ */
+export async function checkMessageGate(params) {
+    const { ctx, accountFeishuCfg, account, accountScopedCfg, log } = params;
+    const isGroup = ctx.chatType === 'group';
+    if (isGroup) {
+        return checkGroupGate({ ctx, accountFeishuCfg, account, accountScopedCfg, log });
+    }
+    return checkDmGate({ ctx, accountFeishuCfg, account, accountScopedCfg, log });
+}
+// ---------------------------------------------------------------------------
+// Internal: group gate
+// ---------------------------------------------------------------------------
+function checkGroupGate(params) {
+    const { ctx, accountFeishuCfg, account, accountScopedCfg, log } = params;
+    const core = LarkClient.runtime;
+    // ---- Legacy compat: groupAllowFrom with chat_id entries ----
+    // Older Feishu configs used groupAllowFrom with chat_ids (oc_xxx) to
+    // control which groups are allowed.  The correct semantic (aligned with
+    // Telegram) is sender_ids.  Detect and split so both layers still work.
+    const rawGroupAllowFrom = accountFeishuCfg?.groupAllowFrom ?? [];
+    const { legacyChatIds, senderAllowFrom: senderGroupAllowFrom } = splitLegacyGroupAllowFrom(rawGroupAllowFrom);
+    if (legacyChatIds.length > 0 && !legacyGroupAllowFromWarned) {
+        legacyGroupAllowFromWarned = true;
+        log(`feishu[${account.accountId}]: ⚠️  groupAllowFrom contains chat_id entries ` +
+            `(${legacyChatIds.join(', ')}). groupAllowFrom is for SENDER filtering ` +
+            `(open_ids like ou_xxx). Please move chat_ids to "groups" config instead:\n` +
+            `  channels.feishu.groups: {\n` +
+            legacyChatIds.map((id) => `    "${id}": {},`).join('\n') +
+            `\n  }`);
+    }
+    // ---- Layer 1: Group-level access (SDK) ----
+    // The SDK reads `channels.feishu.groups` as an allowlist of group IDs.
+    // - No groups configured + groupPolicy "open" → any group passes
+    // - groupPolicy "allowlist" (or groups configured) → only listed groups pass
+    // - groupPolicy "disabled" → all groups blocked
+    const groupAccess = core.channel.groups.resolveGroupPolicy({
+        cfg: accountScopedCfg ?? {},
+        channel: 'feishu',
+        groupId: ctx.chatId,
+        accountId: account.accountId,
+        groupIdCaseInsensitive: true,
+        hasGroupAllowFrom: senderGroupAllowFrom.length > 0,
+    });
+    // Legacy compat: if SDK rejects the group but the chat_id is in the
+    // old-style groupAllowFrom, allow it (backward compatibility).
+    // Track whether this group was admitted via legacy path so we can skip
+    // sender filtering below (old semantic: chat_id in groupAllowFrom meant
+    // "allow this group for any sender").
+    let legacyGroupAdmit = false;
+    if (!groupAccess.allowed) {
+        const chatIdLower = ctx.chatId.toLowerCase();
+        const legacyMatch = legacyChatIds.some((id) => String(id).toLowerCase() === chatIdLower);
+        if (!legacyMatch) {
+            log(`feishu[${account.accountId}]: group ${ctx.chatId} blocked by group-level policy`);
+            return { allowed: false, reason: 'group_not_allowed' };
+        }
+        legacyGroupAdmit = true;
+    }
+    // ---- Per-group config (Feishu-specific fields) ----
+    const groupConfig = resolveFeishuGroupConfig({
+        cfg: accountFeishuCfg,
+        groupId: ctx.chatId,
+    });
+    const defaultConfig = accountFeishuCfg?.groups?.['*'];
+    // Per-group enabled flag
+    const enabled = groupConfig?.enabled ?? defaultConfig?.enabled;
+    if (enabled === false) {
+        log(`feishu[${account.accountId}]: group ${ctx.chatId} disabled by per-group config`);
+        return { allowed: false, reason: 'group_disabled' };
+    }
+    // ---- Layer 2: Sender-level access ----
+    // Per-group groupPolicy overrides the global groupPolicy for sender filtering.
+    // senderGroupAllowFrom (global, oc_ entries excluded) + per-group allowFrom.
+    //
+    // Legacy compat: when a group was admitted via old-style chat_id in
+    // groupAllowFrom AND there is no explicit per-group sender config,
+    // skip sender filtering (old semantic = "group allowed, any sender").
+    const hasExplicitSenderConfig = senderGroupAllowFrom.length > 0 || (groupConfig?.allowFrom ?? []).length > 0 || groupConfig?.groupPolicy != null;
+    if (!(legacyGroupAdmit && !hasExplicitSenderConfig)) {
+        const { senderPolicy, senderAllowFrom } = resolveGroupSenderPolicyContext({
+            groupConfig,
+            defaultConfig,
+            accountFeishuCfg,
+            senderGroupAllowFrom,
+        });
+        const senderAllowed = isFeishuGroupAllowed({
+            groupPolicy: senderPolicy,
+            allowFrom: senderAllowFrom,
+            senderId: ctx.senderId,
+            senderName: ctx.senderName,
+        });
+        if (!senderAllowed) {
+            log(`feishu[${account.accountId}]: sender ${ctx.senderId} not allowed in group ${ctx.chatId}`);
+            return { allowed: false, reason: 'sender_not_allowed' };
+        }
+    }
+    // ---- Mention requirement (SDK) ----
+    // SDK precedence: per-group > default ("*") > requireMentionOverride > true
+    const requireMention = core.channel.groups.resolveRequireMention({
+        cfg: accountScopedCfg ?? {},
+        channel: 'feishu',
+        groupId: ctx.chatId,
+        accountId: account.accountId,
+        groupIdCaseInsensitive: true,
+        requireMentionOverride: accountFeishuCfg?.requireMention,
+    });
+    if (requireMention && !mentionedBot(ctx)) {
+        log(`feishu[${account.accountId}]: message in group ${ctx.chatId} did not mention bot, recording to history`);
+        return {
+            allowed: false,
+            reason: 'no_mention',
+            historyEntry: {
+                sender: ctx.senderId,
+                body: `${ctx.senderName ?? ctx.senderId}: ${ctx.content}`,
+                timestamp: Date.now(),
+                messageId: ctx.messageId,
+            },
+        };
+    }
+    return { allowed: true };
+}
+// ---------------------------------------------------------------------------
+// Internal: DM gate
+// ---------------------------------------------------------------------------
+async function checkDmGate(params) {
+    const { ctx, accountFeishuCfg, account, accountScopedCfg, log } = params;
+    const dmPolicy = accountFeishuCfg?.dmPolicy ?? 'pairing';
+    const configAllowFrom = accountFeishuCfg?.allowFrom ?? [];
+    if (dmPolicy === 'disabled') {
+        log(`feishu[${account.accountId}]: DM disabled by policy, rejecting sender ${ctx.senderId}`);
+        return { allowed: false, reason: 'dm_disabled' };
+    }
+    if (dmPolicy === 'open') {
+        return { allowed: true };
+    }
+    if (dmPolicy === 'allowlist') {
+        const storeAllowFrom = await readAllowFromStore(account.accountId).catch(() => []);
+        const combinedAllowFrom = [...configAllowFrom, ...storeAllowFrom];
+        const match = resolveFeishuAllowlistMatch({
+            allowFrom: combinedAllowFrom,
+            senderId: ctx.senderId,
+            senderName: ctx.senderName,
+        });
+        if (!match.allowed) {
+            log(`feishu[${account.accountId}]: sender ${ctx.senderId} not in DM allowlist`);
+            return { allowed: false, reason: 'dm_not_allowed' };
+        }
+        return { allowed: true };
+    }
+    // dmPolicy === "pairing"
+    const storeAllowFrom = await readAllowFromStore(account.accountId).catch(() => []);
+    const combinedAllowFrom = [...configAllowFrom, ...storeAllowFrom];
+    const match = resolveFeishuAllowlistMatch({
+        allowFrom: combinedAllowFrom,
+        senderId: ctx.senderId,
+        senderName: ctx.senderName,
+    });
+    if (match.allowed) {
+        return { allowed: true };
+    }
+    // Sender not yet paired — create a pairing request and notify them
+    log(`feishu[${account.accountId}]: sender ${ctx.senderId} not paired, creating pairing request`);
+    try {
+        await sendPairingReply({
+            senderId: ctx.senderId,
+            chatId: ctx.chatId,
+            accountId: account.accountId,
+            accountScopedCfg,
+        });
+    }
+    catch (err) {
+        log(`feishu[${account.accountId}]: failed to create pairing request for ${ctx.senderId}: ${String(err)}`);
+    }
+    return { allowed: false, reason: 'pairing_pending' };
+}
+//# sourceMappingURL=gate.js.map

package/src/messaging/inbound/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../../../src/messaging/inbound/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAMH,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EACL,wBAAwB,EACxB,2BAA2B,EAC3B,oBAAoB,EACpB,yBAAyB,EACzB,+BAA+B,GAChC,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,oEAAoE;AACpE,IAAI,0BAA0B,GAAG,KAAK,CAAC;AAEvC,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACjD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC;IAChC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC;QACnD,OAAO,EAAE,QAAQ;QACjB,SAAS;KACV,CAAC,CAAC;AACL,CAAC;AAcD,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;GAKG;AACH,OAAO,EAAE,kBAAkB,IAAI,wBAAwB,EAAE,CAAC;AAE1D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAOtC;IACC,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;IACzE,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;IAEzC,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,cAAc,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,WAAW,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,SAAS,cAAc,CAAC,MAMvB;IACC,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;IACzE,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC;IAEhC,+DAA+D;IAC/D,qEAAqE;IACrE,wEAAwE;IACxE,wEAAwE;IACxE,MAAM,iBAAiB,GAAG,gBAAgB,EAAE,cAAc,IAAI,EAAE,CAAC;IACjE,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,oBAAoB,EAAE,GAAG,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;IAE9G,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAC5D,0BAA0B,GAAG,IAAI,CAAC;QAClC,GAAG,CACD,UAAU,OAAO,CAAC,SAAS,iDAAiD;YAC1E,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,4CAA4C;YACxE,4EAA4E;YAC5E,+BAA+B;YAC/B,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACxD,OAAO,CACV,CAAC;IACJ,CAAC;IAED,8CAA8C;IAC9C,uEAAuE;IACvE,iEAAiE;IACjE,6EAA6E;IAC7E,gDAAgD;IAChD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC;QACzD,GAAG,EAAE,gBAAgB,IAAI,EAAE;QAC3B,OAAO,EAAE,QAAQ;QACjB,OAAO,EAAE,GAAG,CAAC,MAAM;QACnB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,sBAAsB,EAAE,IAAI;QAC5B,iBAAiB,EAAE,oBAAoB,CAAC,MAAM,GAAG,CAAC;KACnD,CAAC,CAAC;IAEH,oEAAoE;IACpE,+DAA+D;IAC/D,uEAAuE;IACvE,wEAAwE;IACxE,sCAAsC;IACtC,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,CAAC;QACzF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,GAAG,CAAC,UAAU,OAAO,CAAC,SAAS,YAAY,GAAG,CAAC,MAAM,gCAAgC,CAAC,CAAC;YACvF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QACzD,CAAC;QACD,gBAAgB,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,sDAAsD;IACtD,MAAM,WAAW,GAAG,wBAAwB,CAAC;QAC3C,GAAG,EAAE,gBAAgB;QACrB,OAAO,EAAE,GAAG,CAAC,MAAM;KACpB,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,gBAAgB,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAEtD,yBAAyB;IACzB,MAAM,OAAO,GAAG,WAAW,EAAE,OAAO,IAAI,aAAa,EAAE,OAAO,CAAC;IAC/D,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,UAAU,OAAO,CAAC,SAAS,YAAY,GAAG,CAAC,MAAM,+BAA+B,CAAC,CAAC;QACtF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACtD,CAAC;IAED,yCAAyC;IACzC,+EAA+E;IAC/E,6EAA6E;IAC7E,EAAE;IACF,oEAAoE;IACpE,mEAAmE;IACnE,sEAAsE;IACtE,MAAM,uBAAuB,GAC3B,oBAAoB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,EAAE,WAAW,IAAI,IAAI,CAAC;IAEnH,IAAI,CAAC,CAAC,gBAAgB,IAAI,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACpD,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,GAAG,+BAA+B,CAAC;YACxE,WAAW;YACX,aAAa;YACb,gBAAgB;YAChB,oBAAoB;SACrB,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,oBAAoB,CAAC;YACzC,WAAW,EAAE,YAAY;YACzB,SAAS,EAAE,eAAe;YAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,UAAU,EAAE,GAAG,CAAC,UAAU;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,GAAG,CAAC,UAAU,OAAO,CAAC,SAAS,aAAa,GAAG,CAAC,QAAQ,yBAAyB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,4EAA4E;IAC5E,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC;QAC/D,GAAG,EAAE,gBAAgB,IAAI,EAAE;QAC3B,OAAO,EAAE,QAAQ;QACjB,OAAO,EAAE,GAAG,CAAC,MAAM;QACnB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,sBAAsB,EAAE,IAAI;QAC5B,sBAAsB,EAAE,gBAAgB,EAAE,cAAc;KACzD,CAAC,CAAC;IAEH,IAAI,cAAc,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,UAAU,OAAO,CAAC,SAAS,uBAAuB,GAAG,CAAC,MAAM,4CAA4C,CAAC,CAAC;QAE9G,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,YAAY;YACpB,YAAY,EAAE;gBACZ,MAAM,EAAE,GAAG,CAAC,QAAQ;gBACpB,IAAI,EAAE,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,OAAO,EAAE;gBACzD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,SAAS,EAAE,GAAG,CAAC,SAAS;aACzB;SACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,KAAK,UAAU,WAAW,CAAC,MAM1B;IACC,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;IAEzE,MAAM,QAAQ,GAAG,gBAAgB,EAAE,QAAQ,IAAI,SAAS,CAAC;IACzD,MAAM,eAAe,GAAG,gBAAgB,EAAE,SAAS,IAAI,EAAE,CAAC;IAE1D,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC5B,GAAG,CAAC,UAAU,OAAO,CAAC,SAAS,8CAA8C,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACnD,CAAC;IAED,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,CAAC;QAC/F,MAAM,iBAAiB,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,cAAc,CAAC,CAAC;QAElE,MAAM,KAAK,GAAG,2BAA2B,CAAC;YACxC,SAAS,EAAE,iBAAiB;YAC5B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,UAAU,EAAE,GAAG,CAAC,UAAU;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,GAAG,CAAC,UAAU,OAAO,CAAC,SAAS,aAAa,GAAG,CAAC,QAAQ,sBAAsB,CAAC,CAAC;YAChF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QACtD,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,yBAAyB;IACzB,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,CAAC;IAC/F,MAAM,iBAAiB,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,cAAc,CAAC,CAAC;IAElE,MAAM,KAAK,GAAG,2BAA2B,CAAC;QACxC,SAAS,EAAE,iBAAiB;QAC5B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,UAAU,EAAE,GAAG,CAAC,UAAU;KAC3B,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,mEAAmE;IACnE,GAAG,CAAC,UAAU,OAAO,CAAC,SAAS,aAAa,GAAG,CAAC,QAAQ,uCAAuC,CAAC,CAAC;IACjG,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC;YACrB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,gBAAgB;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,UAAU,OAAO,CAAC,SAAS,2CAA2C,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5G,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;AACvD,CAAC"}

package/src/messaging/inbound/handler.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * Inbound message handling pipeline for the Feishu/Lark channel plugin.
+ *
+ * Orchestrates a seven-stage pipeline:
+ *   1. Account resolution
+ *   2. Event parsing         → parse.ts (merge_forward expanded in-place)
+ *   3. Sender enrichment     → enrich.ts (lightweight, before gate)
+ *   4. Policy gate           → gate.ts
+ *   5. User name prefetch    → enrich.ts (batch cache warm-up)
+ *   6. Content resolution    → enrich.ts (media / quote, parallel)
+ *   7. Agent dispatch        → dispatch.ts
+ */
+import type { ClawdbotConfig, RuntimeEnv } from 'openclaw/plugin-sdk';
+import { type HistoryEntry } from 'openclaw/plugin-sdk';
+import type { FeishuMessageEvent } from '../types';
+export declare function handleFeishuMessage(params: {
+    cfg: ClawdbotConfig;
+    event: FeishuMessageEvent;
+    botOpenId?: string;
+    runtime?: RuntimeEnv;
+    chatHistories?: Map<string, HistoryEntry[]>;
+    accountId?: string;
+    /** Override the message ID used for reply threading (typing indicators,
+     *  card replies, etc.).  Useful for synthetic messages whose message_id
+     *  is not a real Feishu message ID. */
+    replyToMessageId?: string;
+    /** When true, skip the policy gate (mention requirement, allowlist).
+     *  Used for synthetic messages that are not real user messages. */
+    forceMention?: boolean;
+    /** When true, skip the typing indicator for this dispatch (e.g. reactions). */
+    skipTyping?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=handler.d.ts.map

package/src/messaging/inbound/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/messaging/inbound/handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAKL,KAAK,YAAY,EAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAwBnD,wBAAsB,mBAAmB,CAAC,MAAM,EAAE;IAChD,GAAG,EAAE,cAAc,CAAC;IACpB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;2CAEuC;IACvC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;uEACmE;IACnE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkKhB"}

package/src/messaging/inbound/handler.js

@@ -0,0 +1,174 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * Inbound message handling pipeline for the Feishu/Lark channel plugin.
+ *
+ * Orchestrates a seven-stage pipeline:
+ *   1. Account resolution
+ *   2. Event parsing         → parse.ts (merge_forward expanded in-place)
+ *   3. Sender enrichment     → enrich.ts (lightweight, before gate)
+ *   4. Policy gate           → gate.ts
+ *   5. User name prefetch    → enrich.ts (batch cache warm-up)
+ *   6. Content resolution    → enrich.ts (media / quote, parallel)
+ *   7. Agent dispatch        → dispatch.ts
+ */
+import { recordPendingHistoryEntryIfEnabled, DEFAULT_GROUP_HISTORY_LIMIT, resolveSenderCommandAuthorization, isNormalizedSenderAllowed, } from 'openclaw/plugin-sdk';
+import { getLarkAccount } from '../../core/accounts';
+import { LarkClient } from '../../core/lark-client';
+import { larkLogger } from '../../core/lark-logger';
+import { ticketElapsed } from '../../core/lark-ticket';
+import { parseMessageEvent } from './parse';
+import { resolveSenderInfo, prefetchUserNames, resolveMedia, resolveQuotedContent, substituteMediaPaths, } from './enrich';
+import { checkMessageGate, readFeishuAllowFromStore } from './gate';
+import { dispatchToAgent } from './dispatch';
+import { resolveFeishuGroupConfig, splitLegacyGroupAllowFrom } from './policy';
+import { threadScopedKey } from '../../channel/chat-queue';
+const logger = larkLogger('inbound/handler');
+// ---------------------------------------------------------------------------
+// Public: handle inbound message
+// ---------------------------------------------------------------------------
+export async function handleFeishuMessage(params) {
+    const { cfg, event, botOpenId, runtime, chatHistories, accountId, replyToMessageId, forceMention, skipTyping } = params;
+    // 1. Account resolution
+    const account = getLarkAccount(cfg, accountId);
+    const accountFeishuCfg = account.config;
+    // ★ 多账号配置隔离：构造 account 级别的 ClawdbotConfig
+    //
+    //   在多账号场景下，每个 account 可以独立配置 groupPolicy / requireMention
+    //   等策略。但 SDK 的 resolveGroupPolicy / resolveRequireMention 等函数从
+    //   cfg.channels.feishu 读取配置，而 cfg 是顶层全局配置，不包含 per-account
+    //   的覆盖值。
+    //
+    //   这里将 cfg.channels.feishu 替换为经过 getLarkAccount() 合并后的
+    //   accountFeishuCfg（= base config + account override），确保下游所有 SDK 调用
+    //   都能正确读取当前 account 的配置。
+    const accountScopedCfg = {
+        ...cfg,
+        channels: { ...cfg.channels, feishu: accountFeishuCfg },
+    };
+    const log = runtime?.log ?? ((...args) => logger.info(args.map(String).join(' ')));
+    const error = runtime?.error ?? ((...args) => logger.error(args.map(String).join(' ')));
+    // 2. Parse event → MessageContext (merge_forward expanded in-place)
+    let ctx = await parseMessageEvent(event, botOpenId, {
+        cfg: accountScopedCfg,
+        accountId: account.accountId,
+    });
+    // 3. Enrich (lightweight): sender name + permission error tracking
+    const { ctx: enrichedCtx, permissionError } = await resolveSenderInfo({
+        ctx,
+        account,
+        log,
+    });
+    ctx = enrichedCtx;
+    log(`feishu[${account.accountId}]: received message from ${ctx.senderId} in ${ctx.chatId} (${ctx.chatType})`);
+    logger.info(`received from ${ctx.senderId} in ${ctx.chatId} (${ctx.chatType})`);
+    const historyLimit = Math.max(0, accountFeishuCfg?.historyLimit ?? accountScopedCfg.messages?.groupChat?.historyLimit ?? DEFAULT_GROUP_HISTORY_LIMIT);
+    // 4. Gate: policy / access-control checks (skipped for synthetic messages)
+    const gate = forceMention
+        ? { allowed: true }
+        : await checkMessageGate({ ctx, accountFeishuCfg, account, accountScopedCfg, log });
+    if (!gate.allowed) {
+        if (gate.reason === 'no_mention') {
+            logger.info(`rejected: no bot mention in group ${ctx.chatId}`);
+        }
+        // Record history entry if the gate produced one (group no-mention case)
+        if (gate.historyEntry && chatHistories) {
+            const historyKey = threadScopedKey(ctx.chatId, ctx.threadId);
+            recordPendingHistoryEntryIfEnabled({
+                historyMap: chatHistories,
+                historyKey,
+                limit: historyLimit,
+                entry: gate.historyEntry,
+            });
+        }
+        return;
+    }
+    // 5. Batch pre-warm user name cache (sender + mentions)
+    await prefetchUserNames({ ctx, account, log });
+    // 6. Enrich (heavyweight, after gate — parallel where possible)
+    const enrichParams = { ctx, accountScopedCfg, account, log };
+    const [mediaResult, quotedContent] = await Promise.all([
+        resolveMedia(enrichParams),
+        resolveQuotedContent(enrichParams),
+    ]);
+    // 6b. Replace Feishu file-key placeholders in content with local
+    //     file paths so the SDK can detect images for native vision and
+    //     the AI receives meaningful file references.
+    if (mediaResult.mediaList.length > 0) {
+        ctx = {
+            ...ctx,
+            content: substituteMediaPaths(ctx.content, mediaResult.mediaList),
+        };
+    }
+    // 7. Compute commandAuthorized via SDK access group command gating
+    const core = LarkClient.runtime;
+    const isGroup = ctx.chatType === 'group';
+    const dmPolicy = accountFeishuCfg?.dmPolicy ?? 'pairing';
+    // Resolve per-group config early — shared by both command authorization
+    // and dispatch (step 8).
+    const groupConfig = isGroup ? resolveFeishuGroupConfig({ cfg: accountFeishuCfg, groupId: ctx.chatId }) : undefined;
+    const defaultGroupConfig = isGroup ? accountFeishuCfg?.groups?.['*'] : undefined;
+    // Build the sender allowlist for command authorization in group context.
+    // Excludes legacy oc_xxx chat-id entries (group admission, not sender identity).
+    //
+    // When the explicit group sender policy is "open", pass ["*"] to align
+    // command authorization with chat access (if you can chat, you can run
+    // commands).  When no policy is configured (undefined fallback), default to
+    // allowlist behaviour — only users in accountFeishuCfg.allowFrom (owner list) or
+    // an explicit groupAllowFrom/per-group allowFrom can run commands.
+    const configuredGroupAllowFrom = (() => {
+        if (!isGroup)
+            return undefined;
+        // Exclude legacy oc_xxx chat-id entries from groupAllowFrom (sender filter only).
+        const { senderAllowFrom } = splitLegacyGroupAllowFrom(accountFeishuCfg?.groupAllowFrom ?? []);
+        const senderGroupAllowFrom = senderAllowFrom;
+        const perGroupAllowFrom = (groupConfig?.allowFrom ?? []).map(String);
+        const defaultSenderAllowFrom = !groupConfig && defaultGroupConfig?.allowFrom ? defaultGroupConfig.allowFrom.map(String) : [];
+        const combined = [...senderGroupAllowFrom, ...perGroupAllowFrom, ...defaultSenderAllowFrom];
+        if (combined.length > 0)
+            return combined;
+        // No allowFrom list configured — check if sender policy is explicitly "open".
+        // Do NOT fall back to "open" as a default: unset policy → allowlist behaviour.
+        const explicitSenderPolicy = groupConfig?.groupPolicy ?? defaultGroupConfig?.groupPolicy ?? accountFeishuCfg?.groupPolicy;
+        return explicitSenderPolicy === 'open' ? ['*'] : [];
+    })();
+    const { commandAuthorized } = await resolveSenderCommandAuthorization({
+        rawBody: ctx.content,
+        cfg: accountScopedCfg,
+        isGroup,
+        dmPolicy,
+        configuredAllowFrom: (accountFeishuCfg?.allowFrom ?? []).map(String),
+        configuredGroupAllowFrom,
+        senderId: ctx.senderId,
+        isSenderAllowed: (senderId, allowFrom) => isNormalizedSenderAllowed({ senderId, allowFrom }),
+        readAllowFromStore: () => readFeishuAllowFromStore(account.accountId),
+        shouldComputeCommandAuthorized: core.channel.commands.shouldComputeCommandAuthorized,
+        resolveCommandAuthorizedFromAuthorizers: core.channel.commands.resolveCommandAuthorizedFromAuthorizers,
+    });
+    // 8. Dispatch to agent
+    // groupConfig and defaultGroupConfig are already resolved above.
+    try {
+        await dispatchToAgent({
+            ctx,
+            permissionError,
+            mediaPayload: mediaResult.payload,
+            quotedContent,
+            account,
+            accountScopedCfg,
+            runtime,
+            chatHistories,
+            historyLimit,
+            replyToMessageId,
+            commandAuthorized,
+            groupConfig,
+            defaultGroupConfig,
+            skipTyping,
+        });
+    }
+    catch (err) {
+        error(`feishu[${account.accountId}]: failed to dispatch message: ${String(err)}`);
+        logger.error(`dispatch failed: ${String(err)} (elapsed=${ticketElapsed()}ms)`);
+    }
+}
+//# sourceMappingURL=handler.js.map

package/src/messaging/inbound/handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.js","sourceRoot":"","sources":["../../../../src/messaging/inbound/handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EACL,kCAAkC,EAClC,2BAA2B,EAC3B,iCAAiC,EACjC,yBAAyB,GAE1B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAmB,MAAM,QAAQ,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,UAAU,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE3D,MAAM,MAAM,GAAG,UAAU,CAAC,iBAAiB,CAAC,CAAC;AAE7C,8EAA8E;AAC9E,iCAAiC;AACjC,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAgBzC;IACC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,GAC5G,MAAM,CAAC;IAET,wBAAwB;IACxB,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/C,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;IAExC,0CAA0C;IAC1C,EAAE;IACF,2DAA2D;IAC3D,gEAAgE;IAChE,2DAA2D;IAC3D,UAAU;IACV,EAAE;IACF,wDAAwD;IACxD,qEAAqE;IACrE,0BAA0B;IAC1B,MAAM,gBAAgB,GAAmB;QACvC,GAAG,GAAG;QACN,QAAQ,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE;KACxD,CAAC;IAEF,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9F,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAEnG,oEAAoE;IACpE,IAAI,GAAG,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,SAAS,EAAE;QAClD,GAAG,EAAE,gBAAgB;QACrB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IAEH,mEAAmE;IACnE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,MAAM,iBAAiB,CAAC;QACpE,GAAG;QACH,OAAO;QACP,GAAG;KACJ,CAAC,CAAC;IACH,GAAG,GAAG,WAAW,CAAC;IAElB,GAAG,CAAC,UAAU,OAAO,CAAC,SAAS,4BAA4B,GAAG,CAAC,QAAQ,OAAO,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;IAC9G,MAAM,CAAC,IAAI,CAAC,iBAAiB,GAAG,CAAC,QAAQ,OAAO,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;IAEhF,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAC3B,CAAC,EACD,gBAAgB,EAAE,YAAY,IAAI,gBAAgB,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,IAAI,2BAA2B,CACpH,CAAC;IAEF,2EAA2E;IAC3E,MAAM,IAAI,GAAG,YAAY;QACvB,CAAC,CAAE,EAAE,OAAO,EAAE,IAAI,EAAiB;QACnC,CAAC,CAAC,MAAM,gBAAgB,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;IACtF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,qCAAqC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,wEAAwE;QACxE,IAAI,IAAI,CAAC,YAAY,IAAI,aAAa,EAAE,CAAC;YACvC,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7D,kCAAkC,CAAC;gBACjC,UAAU,EAAE,aAAa;gBACzB,UAAU;gBACV,KAAK,EAAE,YAAY;gBACnB,KAAK,EAAE,IAAI,CAAC,YAAY;aACzB,CAAC,CAAC;QACL,CAAC;QACD,OAAO;IACT,CAAC;IAED,wDAAwD;IACxD,MAAM,iBAAiB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IAE/C,gEAAgE;IAChE,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAC7D,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrD,YAAY,CAAC,YAAY,CAAC;QAC1B,oBAAoB,CAAC,YAAY,CAAC;KACnC,CAAC,CAAC;IAEH,iEAAiE;IACjE,oEAAoE;IACpE,kDAAkD;IAClD,IAAI,WAAW,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,GAAG,GAAG;YACJ,GAAG,GAAG;YACN,OAAO,EAAE,oBAAoB,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC;SAClE,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC;IAChC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;IACzC,MAAM,QAAQ,GAAG,gBAAgB,EAAE,QAAQ,IAAI,SAAS,CAAC;IAEzD,wEAAwE;IACxE,yBAAyB;IACzB,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnH,MAAM,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEjF,yEAAyE;IACzE,iFAAiF;IACjF,EAAE;IACF,uEAAuE;IACvE,uEAAuE;IACvE,4EAA4E;IAC5E,iFAAiF;IACjF,mEAAmE;IACnE,MAAM,wBAAwB,GAAG,CAAC,GAAG,EAAE;QACrC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,kFAAkF;QAClF,MAAM,EAAE,eAAe,EAAE,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,cAAc,IAAI,EAAE,CAAC,CAAC;QAC9F,MAAM,oBAAoB,GAAG,eAAe,CAAC;QAC7C,MAAM,iBAAiB,GAAG,CAAC,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrE,MAAM,sBAAsB,GAC1B,CAAC,WAAW,IAAI,kBAAkB,EAAE,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,QAAQ,GAAG,CAAC,GAAG,oBAAoB,EAAE,GAAG,iBAAiB,EAAE,GAAG,sBAAsB,CAAC,CAAC;QAC5F,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC;QACzC,8EAA8E;QAC9E,+EAA+E;QAC/E,MAAM,oBAAoB,GACxB,WAAW,EAAE,WAAW,IAAI,kBAAkB,EAAE,WAAW,IAAI,gBAAgB,EAAE,WAAW,CAAC;QAC/F,OAAO,oBAAoB,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,iCAAiC,CAAC;QACpE,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,GAAG,EAAE,gBAAgB;QACrB,OAAO;QACP,QAAQ;QACR,mBAAmB,EAAE,CAAC,gBAAgB,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACpE,wBAAwB;QACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,eAAe,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,yBAAyB,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;QAC5F,kBAAkB,EAAE,GAAG,EAAE,CAAC,wBAAwB,CAAC,OAAO,CAAC,SAAS,CAAC;QACrE,8BAA8B,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,8BAA8B;QACpF,uCAAuC,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,uCAAuC;KACvG,CAAC,CAAC;IAEH,uBAAuB;IACvB,iEAAiE;IAEjE,IAAI,CAAC;QACH,MAAM,eAAe,CAAC;YACpB,GAAG;YACH,eAAe;YACf,YAAY,EAAE,WAAW,CAAC,OAAO;YACjC,aAAa;YACb,OAAO;YACP,gBAAgB;YAChB,OAAO;YACP,aAAa;YACb,YAAY;YACZ,gBAAgB;YAChB,iBAAiB;YACjB,WAAW;YACX,kBAAkB;YAClB,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,UAAU,OAAO,CAAC,SAAS,kCAAkC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,KAAK,CAAC,oBAAoB,MAAM,CAAC,GAAG,CAAC,aAAa,aAAa,EAAE,KAAK,CAAC,CAAC;IACjF,CAAC;AACH,CAAC"}

package/src/messaging/inbound/media-resolver.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * Media resolution and payload building for inbound Feishu messages.
+ *
+ * Downloads media files based on ResourceDescriptors extracted during
+ * the content converter phase, and builds the payload object spread
+ * into the agent envelope.
+ */
+import type { ClawdbotConfig } from 'openclaw/plugin-sdk';
+import type { FeishuMediaInfo, ResourceDescriptor } from '../types';
+/**
+ * Download media files based on pre-extracted ResourceDescriptors from
+ * the converter phase.
+ */
+export declare function downloadResources(params: {
+    cfg: ClawdbotConfig;
+    messageId: string;
+    resources: ResourceDescriptor[];
+    maxBytes: number;
+    log?: (msg: string) => void;
+    accountId?: string;
+}): Promise<FeishuMediaInfo[]>;
+export declare function buildFeishuMediaPayload(mediaList: FeishuMediaInfo[]): {
+    MediaPath?: string;
+    MediaType?: string;
+    MediaUrl?: string;
+    MediaPaths?: string[];
+    MediaUrls?: string[];
+    MediaTypes?: string[];
+};
+//# sourceMappingURL=media-resolver.d.ts.map

package/src/messaging/inbound/media-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-resolver.d.ts","sourceRoot":"","sources":["../../../../src/messaging/inbound/media-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAQpE;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAAE;IAC9C,GAAG,EAAE,cAAc,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CA2C7B;AAqBD,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB,CAaA"}