@larksuite/openclaw-lark 2026.4.8 → 2026.4.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@larksuite/openclaw-lark",
-  "version": "2026.4.8",
+  "version": "2026.4.9",
   "description": "OpenClaw Lark/Feishu channel plugin",
   "exports": {
     ".": {
@@ -26,6 +26,7 @@
     "@larksuiteoapi/node-sdk": "^1.60.0",
     "@sinclair/typebox": "0.34.48",
     "image-size": "^2.0.2",
+    "undici-types": "^8.1.0",
     "zod": "^4.3.6"
   },
   "peerDependencies": {

package/skills/feishu-task/SKILL.md

@@ -8,7 +8,10 @@ description: |
   (2) 需要创建、管理任务清单
   (3) 需要查看任务列表或清单内的任务
   (4) 用户提到"任务"、"待办"、"to-do"、"清单"、"task"
-  (5) 需要设置任务负责人、关注人、截止时间
+  (5) 需要设置任务负责人、关注人、截止时间、添加成员
+  (6) 需要追加任务步骤记录（Task 的 steps）
+  (7) 需要上传任务附件（支持 task / task_delivery）
+  (8) 需要注册 Agent / 更新 Agent 信息（register / update_profile）
 ---
 
 # 飞书任务管理
@@ -16,11 +19,14 @@ description: |
 ## 🚨 执行前必读
 
 - ✅ **时间格式**：ISO 8601 / RFC 3339（带时区），例如 `2026-02-28T17:00:00+08:00`
+- ✅ **身份授权**：工具支持 `auth_type` 为 `user`（默认，用户身份）或 `tenant`（应用身份）。
+- ✅ **任务 Agent（feishu_task_agent）**：仅支持应用身份（tenant），不支持 user 身份
 - ✅ **current_user_id 强烈建议**：从消息上下文的 SenderId 获取（ou_...），工具会自动添加为 follower（如不在 members 中），确保创建者可以编辑任务
 - ✅ **patch/get 必须**：task_guid
 - ✅ **tasklist.tasks 必须**：tasklist_guid
 - ✅ **完成任务**：completed_at = "2026-02-26 15:00:00"
 - ✅ **反完成（恢复未完成）**：completed_at = "0"
+- ✅ **append_steps 的 task_steps[].timestamp**：秒级 Unix 时间戳（10 位），不要用毫秒（13 位）
 
 ---
 
@@ -28,52 +34,58 @@ description: |
 
 | 用户意图 | 工具 | action | 必填参数 | 强烈建议 | 常用可选 |
 |---------|------|--------|---------|---------|---------|
-| 新建待办 | feishu_task_task | create | summary | current_user_id（SenderId） | members, due, description |
-| 查未完成任务 | feishu_task_task | list | - | completed=false | page_size |
-| 获取任务详情 | feishu_task_task | get | task_guid | - | - |
-| 完成任务 | feishu_task_task | patch | task_guid, completed_at | - | - |
-| 反完成任务 | feishu_task_task | patch | task_guid, completed_at="0" | - | - |
-| 改截止时间 | feishu_task_task | patch | task_guid, due | - | - |
+| 新建待办 | feishu_task_task | create | summary | current_user_id（SenderId） | members, due, description, auth_type |
+| 查未完成任务 | feishu_task_task | list | - | completed=false | page_size, auth_type, agent_task_status |
+| 获取任务详情 | feishu_task_task | get | task_guid | - | auth_type |
+| 完成任务 | feishu_task_task | patch | task_guid, completed_at | - | auth_type |
+| 反完成任务 | feishu_task_task | patch | task_guid, completed_at="0" | - | auth_type |
+| 改截止时间 | feishu_task_task | patch | task_guid, due | - | auth_type |
+| 添加任务成员 | feishu_task_task | add_members | task_guid, members[] | - | auth_type |
+| 追加任务步骤记录 | feishu_task_task | append_steps | task_guid, idempotent_key, task_steps[] | task_steps[].timestamp 用秒级（10 位） | - |
 | 创建清单 | feishu_task_tasklist | create | name | - | members |
 | 查看清单任务 | feishu_task_tasklist | tasks | tasklist_guid | - | completed |
 | 添加清单成员 | feishu_task_tasklist | add_members | tasklist_guid, members[] | - | - |
+| 上传任务附件 | feishu_task_attachment | upload | resource_id, file(base64) | name | resource_type |
+| 注册任务 Agent | feishu_task_agent | register | - | 仅支持 tenant（应用身份） | - |
+| 更新任务 Agent Profile | feishu_task_agent | update_profile | profile_content | 仅支持 tenant（应用身份） | - |
 
 ---
 
 ## 🎯 核心约束（Schema 未透露的知识）
 
-### 1. 当前工具使用用户身份（已内置保护）
+### 1. 授权身份与可见性 (auth_type)
 
-**工具使用 `user_access_token`（用户身份）**
-
-这意味着：
-- ✅ 创建任务时可以指定任意成员（包括只分配给别人）
-- ⚠️ 只能查看和编辑**自己是成员的任务**
-- ⚠️ **如果创建时没把自己加入成员，后续无法编辑该任务**
+**工具支持两种调用身份 `auth_type`**：
+- **`user` (默认)**：用户身份（user_access_token）。用于需要严格代表用户操作或查询用户私有任务的场景。
+  - ⚠️ 使用 `user` 身份时，只能查看和编辑**自己是成员的任务**。
+  - ⚠️ **如果创建时没把自己加入成员，后续无法编辑该任务**。
+- **`tenant`**：应用身份（tenant_access_token）。当用户身份不满足要求时，使用应用身份。如果创建的任务没有把用户加入成员，用户可能看不见。
 
 **自动保护机制**：
 - 传入 `current_user_id` 参数（从 SenderId 获取）
 - 如果 `members` 中不包含 `current_user_id`，工具会**自动添加为 follower**
-- 确保创建者始终可以编辑任务
-
-**推荐用法**：创建任务时始终传 `current_user_id`，工具会自动处理成员关系。
+- 确保创建者始终可以编辑和查看任务
 
-### 2. 任务成员的角色说明
+### 2. 任务成员的角色与类型
 
-- **assignee（负责人）**：负责完成任务，可以编辑任务
-- **follower（关注人）**：关注任务进展，接收通知
+- **角色 (role)**：
+  - **assignee（负责人）**：负责完成任务，可以编辑任务
+  - **follower（关注人）**：关注任务进展，接收通知
+- **类型 (type)**：
+  - **user（默认，用户）**：普通的飞书用户
+  - **app（应用/机器人）**：如果是把机器人自己或者其他应用加入任务，必须指定 `type: "app"`
 
 **添加成员示例**：
 ```json
 {
   "members": [
-    {"id": "ou_xxx", "role": "assignee"},  // 负责人
-    {"id": "ou_yyy", "role": "follower"}   // 关注人
+    {"id": "ou_xxx", "role": "assignee", "type": "user"},  // 负责人（用户）
+    {"id": "cli_yyy", "role": "follower", "type": "app"}   // 关注人（机器人/应用）
   ]
 }
 ```
 
-**说明**：`id` 使用用户的 `open_id`（从消息上下文的 SenderId 获取）
+**说明**：`id` 默认使用 `open_id`。
 
 ### 3. 任务清单角色冲突
 
@@ -133,12 +145,13 @@ description: |
   "summary": "准备周会材料",
   "description": "整理本周工作进展和下周计划",
   "current_user_id": "ou_发送者的open_id",
+  "auth_type": "tenant",
   "due": {
     "timestamp": "2026-02-28 17:00:00",
     "is_all_day": false
   },
   "members": [
-    {"id": "ou_协作者的open_id", "role": "assignee"}
+    {"id": "ou_协作者的open_id", "role": "assignee", "type": "user"}
   ]
 }
 ```
@@ -147,7 +160,7 @@ description: |
 - `summary` 是必填字段
 - `current_user_id` 强烈建议传入（从 SenderId 获取），工具会自动添加为 follower
 - `members` 可以只包含其他协作者，当前用户会被自动添加
-- 时间使用北京时间字符串格式
+- 时间使用带时区的 ISO 8601 格式
 
 ### 场景 2: 查询我负责的未完成任务
 
@@ -155,11 +168,25 @@ description: |
 {
   "action": "list",
   "completed": false,
-  "page_size": 20
+  "page_size": 20,
+  "auth_type": "user"
+}
+```
+
+### 场景 3: 为现有任务添加机器人或成员
+
+```json
+{
+  "action": "add_members",
+  "task_guid": "任务的guid",
+  "auth_type": "tenant",
+  "members": [
+    {"id": "cli_机器人的app_id", "role": "follower", "type": "app"}
+  ]
 }
 ```
 
-### 场景 3: 完成任务
+### 场景 4: 完成任务
 
 ```json
 {
@@ -169,7 +196,7 @@ description: |
 }
 ```
 
-### 场景 4: 反完成任务（恢复未完成状态）
+### 场景 5: 反完成任务（恢复未完成状态）
 
 ```json
 {
@@ -179,7 +206,7 @@ description: |
 }
 ```
 
-### 场景 5: 创建清单并添加协作者
+### 场景 6: 创建清单并添加协作者
 
 ```json
 {
@@ -192,7 +219,7 @@ description: |
 }
 ```
 
-### 场景 6: 查看清单内的未完成任务
+### 场景 7: 查看清单内的未完成任务
 
 ```json
 {
@@ -202,7 +229,7 @@ description: |
 }
 ```
 
-### 场景 7: 全天任务
+### 场景 8: 全天任务
 
 ```json
 {
@@ -215,6 +242,25 @@ description: |
 }
 ```
 
+### 场景 9: 注册任务 Agent（仅应用身份）
+
+```json
+{
+  "action": "register",
+  "auth_type": "tenant"
+}
+```
+
+### 场景 10: 更新任务 Agent Profile（仅应用身份）
+
+```json
+{
+  "action": "update_profile",
+  "auth_type": "tenant",
+  "profile_content": "some profile content"
+}
+```
+
 ---
 
 ## 🔍 常见错误与排查
@@ -222,10 +268,11 @@ description: |
 | 错误现象 | 根本原因 | 解决方案 |
 |---------|---------|---------|
 | **创建后无法编辑任务** | 创建时未将自己加入 members | 创建时至少将当前用户（SenderId）加为 assignee 或 follower |
-| **patch 失败提示 task_guid 缺失** | 未传 task_guid 参数 | patch/get 必须传 task_guid |
+| **patch 失败提示 task_guid 缺失** | 未传 task_guid 参数 | patch/get/add_members 必须传 task_guid |
 | **tasks 失败提示 tasklist_guid 缺失** | 未传 tasklist_guid 参数 | tasklist.tasks action 必须传 tasklist_guid |
 | **反完成失败** | completed_at 格式错误 | 使用 `"0"` 字符串，不是数字 0 |
 | **时间不对** | 使用了 Unix 时间戳 | 改用 ISO 8601 格式（带时区）：`2024-01-01T00:00:00+08:00` |
+| **添加机器人失败** | 未指定成员 type 为 app | 将机器人的 type 指定为 `"app"` |
 
 ---
 

package/src/channel/event-handlers.d.ts

@@ -12,5 +12,6 @@ import type { MonitorContext } from './types';
 export declare function handleMessageEvent(ctx: MonitorContext, data: unknown): Promise<void>;
 export declare function handleReactionEvent(ctx: MonitorContext, data: unknown): Promise<void>;
 export declare function handleBotMembershipEvent(ctx: MonitorContext, data: unknown, action: 'added' | 'removed'): Promise<void>;
+export declare function handleVcMeetingInvitedEvent(ctx: MonitorContext, data: unknown): Promise<void>;
 export declare function handleCommentEvent(ctx: MonitorContext, data: unknown): Promise<void>;
 export declare function handleCardActionEvent(ctx: MonitorContext, data: unknown): Promise<unknown>;

package/src/channel/event-handlers.js

@@ -13,11 +13,14 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.handleMessageEvent = handleMessageEvent;
 exports.handleReactionEvent = handleReactionEvent;
 exports.handleBotMembershipEvent = handleBotMembershipEvent;
+exports.handleVcMeetingInvitedEvent = handleVcMeetingInvitedEvent;
 exports.handleCommentEvent = handleCommentEvent;
 exports.handleCardActionEvent = handleCardActionEvent;
 const handler_1 = require("../messaging/inbound/handler.js");
 const reaction_handler_1 = require("../messaging/inbound/reaction-handler.js");
 const comment_handler_1 = require("../messaging/inbound/comment-handler.js");
+const vc_meeting_invited_handler_1 = require("../messaging/inbound/vc-meeting-invited-handler.js");
+const vc_sender_1 = require("../messaging/inbound/vc-sender.js");
 const comment_context_1 = require("../messaging/inbound/comment-context.js");
 const dedup_1 = require("../messaging/inbound/dedup.js");
 const lark_ticket_1 = require("../core/lark-ticket.js");
@@ -223,6 +226,76 @@ async function handleBotMembershipEvent(ctx, data, action) {
     }
 }
 // ---------------------------------------------------------------------------
+// VC meeting invited handler
+// ---------------------------------------------------------------------------
+async function handleVcMeetingInvitedEvent(ctx, data) {
+    if (!isEventOwnershipValid(ctx, data))
+        return;
+    const { accountId, log, error } = ctx;
+    try {
+        const event = data;
+        const meetingNo = event.meeting?.meeting_no?.trim() ?? '';
+        const eventId = event.event_id?.trim() ?? '';
+        // Resolve the inviter identity through the shared helper so the
+        // diagnostics log and the dispatch handler always agree on the
+        // same sender semantics.
+        const sender = (0, vc_sender_1.resolveVcSender)(event);
+        const senderId = sender.senderId;
+        const invitedBotOpenId = event.bot?.id?.open_id?.trim() ?? '';
+        // VC invited origin/ownership diagnostics:
+        // - This handler is only reachable from the WebSocket monitor path.
+        // - We still log app_id/bot_open_id so operators can confirm the event
+        //   is delivered to the expected bot/account, and see which required
+        //   fields are missing when we skip.
+        const expectedAppId = ctx.lark.account.appId ?? '';
+        const eventAppId = event.app_id?.trim() ?? '';
+        log(`feishu[${accountId}]: vc invited event received (ingress=websocket)` +
+            `${eventId ? ` event_id=${eventId}` : ''}` +
+            `${eventAppId ? ` app_id=${eventAppId}` : ' app_id=<missing>'}` +
+            `${expectedAppId ? ` expected_app_id=${expectedAppId}` : ''}` +
+            `${invitedBotOpenId ? ` bot_open_id=${invitedBotOpenId}` : ' bot_open_id=<missing>'}` +
+            `${ctx.lark.botOpenId ? ` expected_bot_open_id=${ctx.lark.botOpenId}` : ''}` +
+            `${event.invite_time ? ` invite_time=${event.invite_time}` : ''}` +
+            ` meeting_no_present=${meetingNo ? 'true' : 'false'}` +
+            ` sender_present=${senderId ? 'true' : 'false'}` +
+            ` sender_from=${sender.fromFallback}`);
+        if (!meetingNo) {
+            log(`feishu[${accountId}]: vc invited event missing meeting_no, skipping`);
+            return;
+        }
+        if (!senderId) {
+            log(`feishu[${accountId}]: vc invited event missing inviter identity, skipping`);
+            return;
+        }
+        if (ctx.lark.botOpenId && invitedBotOpenId && invitedBotOpenId !== ctx.lark.botOpenId) {
+            log(`feishu[${accountId}]: vc invited event for another bot, expected=${ctx.lark.botOpenId}, got=${invitedBotOpenId}, skipping`);
+            return;
+        }
+        // Prefer event_id when the SDK exposes it: historical raw payload logs
+        // show WebSocket reconnect replays reuse the same event_id, while a real
+        // second invitation yields a new event_id even for the same meeting/bot.
+        // Fallback to (meeting_no, bot) only when event_id is absent so older
+        // payload shapes still remain deduplicated.
+        const dedupBotKey = ctx.lark.botOpenId ?? invitedBotOpenId ?? 'no-bot';
+        const dedupKey = eventId ? `vc-invited:by-event:${eventId}` : `vc-invited:by-meeting:${meetingNo}:${dedupBotKey}`;
+        if (!ctx.messageDedup.tryRecord(dedupKey, accountId)) {
+            log(`feishu[${accountId}]: duplicate vc invited event detected, skipping`);
+            return;
+        }
+        log(`feishu[${accountId}]: vc invited event accepted for synthetic dispatch`);
+        await (0, vc_meeting_invited_handler_1.handleFeishuVcMeetingInvited)({
+            cfg: ctx.cfg,
+            event,
+            runtime: ctx.runtime,
+            chatHistories: ctx.chatHistories,
+            accountId,
+        });
+    }
+    catch (err) {
+        error(`feishu[${accountId}]: error handling vc invited event: ${String(err)}`);
+    }
+}
+// ---------------------------------------------------------------------------
 // Drive comment handler
 // ---------------------------------------------------------------------------
 async function handleCommentEvent(ctx, data) {

package/src/channel/monitor.js

@@ -77,6 +77,7 @@ async function monitorSingleAccount(params) {
             'im.chat.access_event.bot_p2p_chat_entered_v1': async () => { },
             'im.chat.member.bot.added_v1': (data) => (0, event_handlers_1.handleBotMembershipEvent)(ctx, data, 'added'),
             'im.chat.member.bot.deleted_v1': (data) => (0, event_handlers_1.handleBotMembershipEvent)(ctx, data, 'removed'),
+            'vc.bot.meeting_invited_v1': (data) => (0, event_handlers_1.handleVcMeetingInvitedEvent)(ctx, data),
             // Drive comment event — fires when a user adds a comment or reply on a document.
             'drive.notice.comment_add_v1': (data) => (0, event_handlers_1.handleCommentEvent)(ctx, data),
             // 飞书 SDK EventDispatcher.register 不支持带返回值的处理器，此处 as any 是 SDK 类型限制的变通

package/src/core/raw-request.js

@@ -11,6 +11,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveDomainUrl = resolveDomainUrl;
 exports.rawLarkRequest = rawLarkRequest;
+const node_url_1 = require("node:url");
 const feishu_fetch_1 = require("./feishu-fetch.js");
 // ---------------------------------------------------------------------------
 // Domain URL resolution
@@ -23,6 +24,24 @@ function resolveDomainUrl(brand) {
     };
     return map[brand] ?? `https://${brand}`;
 }
+function isFormDataBody(body) {
+    return (typeof body === 'object' &&
+        body !== null &&
+        typeof body.append === 'function' &&
+        typeof body.entries === 'function');
+}
+function isBinaryBody(body) {
+    return body instanceof ArrayBuffer || ArrayBuffer.isView(body);
+}
+function buildRequestBody(body) {
+    if (typeof body === 'string' || body instanceof node_url_1.URLSearchParams || isFormDataBody(body) || isBinaryBody(body)) {
+        return { body: body };
+    }
+    return {
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify(body),
+    };
+}
 /**
  * 发起 raw HTTP 请求到飞书 API，自动处理域名解析、header 注入和错误检测。
  *
@@ -37,11 +56,16 @@ async function rawLarkRequest(options) {
         }
     }
     const headers = {};
+    let requestBody;
     if (options.accessToken) {
         headers['Authorization'] = `Bearer ${options.accessToken}`;
     }
     if (options.body !== undefined) {
-        headers['Content-Type'] = 'application/json';
+        const prepared = buildRequestBody(options.body);
+        requestBody = prepared.body;
+        if (prepared.headers) {
+            Object.assign(headers, prepared.headers);
+        }
     }
     if (options.headers) {
         Object.assign(headers, options.headers);
@@ -49,7 +73,7 @@ async function rawLarkRequest(options) {
     const resp = await (0, feishu_fetch_1.feishuFetch)(url.toString(), {
         method: options.method ?? 'GET',
         headers,
-        ...(options.body !== undefined ? { body: JSON.stringify(options.body) } : {}),
+        ...(requestBody !== undefined ? { body: requestBody } : {}),
     });
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
     const data = (await resp.json());

package/src/core/synthetic-target.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * Synthetic IM target utilities.
+ *
+ * Some inbound flows (VC meeting-invited, other service-triggered events)
+ * do not map to a real IM chat — there is no chat_id / open_id the agent
+ * should send messages into. To keep the dispatch pipeline uniform we give
+ * these flows a sentinel chatId ("synthetic:<kind>") and teach outbound
+ * deliverers to short-circuit whenever they see this prefix. This is the
+ * same pattern used by `core/comment-target.ts` for Drive comment threads.
+ */
+/** Sentinel chatId for VC `vc.bot.meeting_invited_v1` synthetic inbound. */
+export declare const SYNTHETIC_VC_CHAT_ID = "synthetic:vc-invited";
+/**
+ * The `chatType` stamped on synthetic VC contexts.
+ *
+ * `MessageContext.chatType` is currently typed as `'p2p' | 'group'` across
+ * the plugin and widening that union touches every downstream signature.
+ * 'p2p' is the closest match (single-peer, non-group) and the outbound
+ * short-circuit gates on the sentinel chatId — not the chatType — so this
+ * choice does not produce any DMs on its own.
+ *
+ * TODO(synthetic-target): widen MessageContext.chatType to include
+ * `synthetic` once downstream signatures are audited.
+ */
+export declare const SYNTHETIC_VC_CHAT_TYPE: "p2p";
+/**
+ * Return `true` when `target` is a synthetic sentinel that outbound
+ * deliverers should not try to send an IM message to.
+ */
+export declare function isSyntheticTarget(target: string | undefined | null): boolean;

package/src/core/synthetic-target.js

@@ -0,0 +1,40 @@
+"use strict";
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * Synthetic IM target utilities.
+ *
+ * Some inbound flows (VC meeting-invited, other service-triggered events)
+ * do not map to a real IM chat — there is no chat_id / open_id the agent
+ * should send messages into. To keep the dispatch pipeline uniform we give
+ * these flows a sentinel chatId ("synthetic:<kind>") and teach outbound
+ * deliverers to short-circuit whenever they see this prefix. This is the
+ * same pattern used by `core/comment-target.ts` for Drive comment threads.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SYNTHETIC_VC_CHAT_TYPE = exports.SYNTHETIC_VC_CHAT_ID = void 0;
+exports.isSyntheticTarget = isSyntheticTarget;
+const SYNTHETIC_PREFIX = 'synthetic:';
+/** Sentinel chatId for VC `vc.bot.meeting_invited_v1` synthetic inbound. */
+exports.SYNTHETIC_VC_CHAT_ID = 'synthetic:vc-invited';
+/**
+ * The `chatType` stamped on synthetic VC contexts.
+ *
+ * `MessageContext.chatType` is currently typed as `'p2p' | 'group'` across
+ * the plugin and widening that union touches every downstream signature.
+ * 'p2p' is the closest match (single-peer, non-group) and the outbound
+ * short-circuit gates on the sentinel chatId — not the chatType — so this
+ * choice does not produce any DMs on its own.
+ *
+ * TODO(synthetic-target): widen MessageContext.chatType to include
+ * `synthetic` once downstream signatures are audited.
+ */
+exports.SYNTHETIC_VC_CHAT_TYPE = 'p2p';
+/**
+ * Return `true` when `target` is a synthetic sentinel that outbound
+ * deliverers should not try to send an IM message to.
+ */
+function isSyntheticTarget(target) {
+    return Boolean(target && target.startsWith(SYNTHETIC_PREFIX));
+}

package/src/core/targets.js

@@ -145,7 +145,6 @@ function resolveReceiveIdType(id) {
         return 'chat_id';
     if (id.startsWith(OPEN_ID_PREFIX))
         return 'open_id';
-    // Default to open_id for any other pattern (safer for outbound API calls).
     return 'open_id';
 }
 function normalizeMessageId(messageId) {

package/src/core/tool-scopes.d.ts

@@ -53,7 +53,7 @@
  *
  * 总计：96 个工具动作
  */
-export type ToolActionKey = 'feishu_bitable_app.copy' | 'feishu_bitable_app.create' | 'feishu_bitable_app.get' | 'feishu_bitable_app.list' | 'feishu_bitable_app.patch' | 'feishu_bitable_app_table.batch_create' | 'feishu_bitable_app_table.create' | 'feishu_bitable_app_table.list' | 'feishu_bitable_app_table.patch' | 'feishu_bitable_app_table_field.create' | 'feishu_bitable_app_table_field.delete' | 'feishu_bitable_app_table_field.list' | 'feishu_bitable_app_table_field.update' | 'feishu_bitable_app_table_record.batch_create' | 'feishu_bitable_app_table_record.batch_delete' | 'feishu_bitable_app_table_record.batch_update' | 'feishu_bitable_app_table_record.create' | 'feishu_bitable_app_table_record.delete' | 'feishu_bitable_app_table_record.list' | 'feishu_bitable_app_table_record.update' | 'feishu_bitable_app_table_view.create' | 'feishu_bitable_app_table_view.get' | 'feishu_bitable_app_table_view.list' | 'feishu_bitable_app_table_view.patch' | 'feishu_calendar_calendar.get' | 'feishu_calendar_calendar.list' | 'feishu_calendar_calendar.primary' | 'feishu_calendar_event.create' | 'feishu_calendar_event.delete' | 'feishu_calendar_event.get' | 'feishu_calendar_event.instance_view' | 'feishu_calendar_event.instances' | 'feishu_calendar_event.list' | 'feishu_calendar_event.patch' | 'feishu_calendar_event.reply' | 'feishu_calendar_event.search' | 'feishu_calendar_event_attendee.create' | 'feishu_calendar_event_attendee.list' | 'feishu_calendar_freebusy.list' | 'feishu_chat.get' | 'feishu_chat.search' | 'feishu_chat_members.default' | 'feishu_create_doc.default' | 'feishu_doc_comments.create' | 'feishu_doc_comments.list' | 'feishu_doc_comments.list_replies' | 'feishu_doc_comments.patch' | 'feishu_doc_comments.reply' | 'feishu_doc_media.download' | 'feishu_doc_media.insert' | 'feishu_drive_file.copy' | 'feishu_drive_file.delete' | 'feishu_drive_file.download' | 'feishu_drive_file.get_meta' | 'feishu_drive_file.list' | 'feishu_drive_file.move' | 'feishu_drive_file.upload' | 'feishu_fetch_doc.default' | 'feishu_get_user.basic_batch' | 'feishu_get_user.default' | 'feishu_im_user_fetch_resource.default' | 'feishu_im_user_get_messages.default' | 'feishu_im_user_message.reply' | 'feishu_im_user_message.send' | 'feishu_im_user_search_messages.default' | 'feishu_search_doc_wiki.search' | 'feishu_search_user.default' | 'feishu_task_comment.create' | 'feishu_task_comment.get' | 'feishu_task_comment.list' | 'feishu_task_section.create' | 'feishu_task_section.get' | 'feishu_task_section.list' | 'feishu_task_section.patch' | 'feishu_task_section.tasks' | 'feishu_task_subtask.create' | 'feishu_task_subtask.list' | 'feishu_task_task.create' | 'feishu_task_task.get' | 'feishu_task_task.list' | 'feishu_task_task.patch' | 'feishu_task_tasklist.add_members' | 'feishu_task_tasklist.create' | 'feishu_task_tasklist.get' | 'feishu_task_tasklist.list' | 'feishu_task_tasklist.patch' | 'feishu_task_tasklist.tasks' | 'feishu_update_doc.default' | 'feishu_wiki_space.create' | 'feishu_wiki_space.get' | 'feishu_wiki_space.list' | 'feishu_wiki_space_node.copy' | 'feishu_wiki_space_node.create' | 'feishu_wiki_space_node.get' | 'feishu_wiki_space_node.list' | 'feishu_wiki_space_node.move' | 'feishu_sheet.info' | 'feishu_sheet.read' | 'feishu_sheet.write' | 'feishu_sheet.append' | 'feishu_sheet.find' | 'feishu_sheet.create' | 'feishu_sheet.export';
+export type ToolActionKey = 'feishu_bitable_app.copy' | 'feishu_bitable_app.create' | 'feishu_bitable_app.get' | 'feishu_bitable_app.list' | 'feishu_bitable_app.patch' | 'feishu_bitable_app_table.batch_create' | 'feishu_bitable_app_table.create' | 'feishu_bitable_app_table.list' | 'feishu_bitable_app_table.patch' | 'feishu_bitable_app_table_field.create' | 'feishu_bitable_app_table_field.delete' | 'feishu_bitable_app_table_field.list' | 'feishu_bitable_app_table_field.update' | 'feishu_bitable_app_table_record.batch_create' | 'feishu_bitable_app_table_record.batch_delete' | 'feishu_bitable_app_table_record.batch_update' | 'feishu_bitable_app_table_record.create' | 'feishu_bitable_app_table_record.delete' | 'feishu_bitable_app_table_record.list' | 'feishu_bitable_app_table_record.update' | 'feishu_bitable_app_table_view.create' | 'feishu_bitable_app_table_view.get' | 'feishu_bitable_app_table_view.list' | 'feishu_bitable_app_table_view.patch' | 'feishu_calendar_calendar.get' | 'feishu_calendar_calendar.list' | 'feishu_calendar_calendar.primary' | 'feishu_calendar_event.create' | 'feishu_calendar_event.delete' | 'feishu_calendar_event.get' | 'feishu_calendar_event.instance_view' | 'feishu_calendar_event.instances' | 'feishu_calendar_event.list' | 'feishu_calendar_event.patch' | 'feishu_calendar_event.reply' | 'feishu_calendar_event.search' | 'feishu_calendar_event_attendee.create' | 'feishu_calendar_event_attendee.list' | 'feishu_calendar_freebusy.list' | 'feishu_chat.get' | 'feishu_chat.search' | 'feishu_chat_members.default' | 'feishu_create_doc.default' | 'feishu_doc_comments.create' | 'feishu_doc_comments.list' | 'feishu_doc_comments.list_replies' | 'feishu_doc_comments.patch' | 'feishu_doc_comments.reply' | 'feishu_doc_media.download' | 'feishu_doc_media.insert' | 'feishu_drive_file.copy' | 'feishu_drive_file.delete' | 'feishu_drive_file.download' | 'feishu_drive_file.get_meta' | 'feishu_drive_file.list' | 'feishu_drive_file.move' | 'feishu_drive_file.upload' | 'feishu_fetch_doc.default' | 'feishu_get_user.basic_batch' | 'feishu_get_user.default' | 'feishu_im_user_fetch_resource.default' | 'feishu_im_user_get_messages.default' | 'feishu_im_user_message.reply' | 'feishu_im_user_message.send' | 'feishu_im_user_search_messages.default' | 'feishu_search_doc_wiki.search' | 'feishu_search_user.default' | 'feishu_task_attachment.upload' | 'feishu_task_comment.create' | 'feishu_task_comment.get' | 'feishu_task_comment.list' | 'feishu_task_section.create' | 'feishu_task_section.get' | 'feishu_task_section.list' | 'feishu_task_section.patch' | 'feishu_task_section.tasks' | 'feishu_task_subtask.create' | 'feishu_task_subtask.list' | 'feishu_task_task.create' | 'feishu_task_task.get' | 'feishu_task_task.list' | 'feishu_task_task.patch' | 'feishu_task_task.add_members' | 'feishu_task_task.append_steps' | 'feishu_task_tasklist.add_members' | 'feishu_task_tasklist.create' | 'feishu_task_tasklist.get' | 'feishu_task_tasklist.list' | 'feishu_task_tasklist.patch' | 'feishu_task_tasklist.tasks' | 'feishu_task_agent.register' | 'feishu_task_agent.update_profile' | 'feishu_update_doc.default' | 'feishu_wiki_space.create' | 'feishu_wiki_space.get' | 'feishu_wiki_space.list' | 'feishu_wiki_space_node.copy' | 'feishu_wiki_space_node.create' | 'feishu_wiki_space_node.get' | 'feishu_wiki_space_node.list' | 'feishu_wiki_space_node.move' | 'feishu_sheet.info' | 'feishu_sheet.read' | 'feishu_sheet.write' | 'feishu_sheet.append' | 'feishu_sheet.find' | 'feishu_sheet.create' | 'feishu_sheet.export';
 /**
  * Tool Scope 映射类型
  *
@@ -153,4 +153,4 @@ export declare function filterSensitiveScopes(scopes: string[]): string[];
  * 唯一 scope 总数: 74
  * 必需应用权限总数: 20
  * 高敏感权限总数: 4
- */
+ */ 

package/src/core/tool-scopes.js

@@ -107,10 +107,13 @@ exports.TOOL_SCOPES = {
     'feishu_calendar_event_attendee.create': ['calendar:calendar.event:update'],
     'feishu_calendar_event_attendee.list': ['calendar:calendar.event:read'],
     'feishu_calendar_freebusy.list': ['calendar:calendar.free_busy:read'],
+    'feishu_task_attachment.upload': ['task:attachment:write'],
     'feishu_task_task.create': ['task:task:write', 'task:task:writeonly'],
     'feishu_task_task.get': ['task:task:read', 'task:task:write'],
     'feishu_task_task.list': ['task:task:read', 'task:task:write'],
     'feishu_task_task.patch': ['task:task:write', 'task:task:writeonly'],
+    'feishu_task_task.add_members': ['task:task:write', 'task:task:writeonly'],
+    'feishu_task_task.append_steps': ['task:task:write', 'task:task:writeonly'],
     'feishu_task_tasklist.create': ['task:tasklist:write'],
     'feishu_task_tasklist.get': ['task:tasklist:read', 'task:tasklist:write'],
     'feishu_task_tasklist.list': ['task:tasklist:read', 'task:tasklist:write'],
@@ -127,6 +130,8 @@ exports.TOOL_SCOPES = {
     'feishu_task_section.tasks': ['task:task'],
     'feishu_task_subtask.create': ['task:task:write'],
     'feishu_task_subtask.list': ['task:task:read', 'task:task:write'],
+    'feishu_task_agent.register': ['task:task:write'],
+    'feishu_task_agent.update_profile': ['task:task:write', 'task:task:writeonly'],
     'feishu_chat.search': ['im:chat:read'],
     'feishu_chat.get': ['im:chat:read'],
     'feishu_chat_members.default': ['im:chat.members:read'],
@@ -336,4 +341,4 @@ function filterSensitiveScopes(scopes) {
  * 唯一 scope 总数: 74
  * 必需应用权限总数: 20
  * 高敏感权限总数: 4
- */
+ */ 

package/src/messaging/inbound/dispatch.d.ts

@@ -22,6 +22,8 @@ export declare function dispatchToAgent(params: {
     ctx: MessageContext;
     permissionError?: PermissionError;
     mediaPayload: Record<string, unknown>;
+    /** Additional structured metadata for synthetic or event-driven inbound flows. */
+    extraInboundFields?: Record<string, unknown>;
     quotedContent?: string;
     account: LarkAccount;
     /** account 级别的 ClawdbotConfig（channels.feishu 已替换为 per-account 合并后的配置） */