@modesto_ma/dsh-channels 0.3.0 → 0.5.0-beta.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modesto_ma/dsh-channels",
-  "version": "0.3.0",
+  "version": "0.5.0-beta.1",
   "description": "DeepSeek Harness (DSH) 飞书渠道插件：一个 dsh 实例对应一个飞书机器人，私聊/群聊/话题群 @ 触发会话，话题绑定 session，卡片 2.0 流式回复；Web 设置里提供「飞书渠道」状态与常用配置面板",
   "repository": {
     "type": "git",

package/src/access/cards.ts

@@ -25,8 +25,8 @@ export interface GroupInfoCardInput {
   memberCount?: number
   /** Group owner `open_id`, when available. */
   ownerId?: string
-  /** `open_id` of whoever invited/triggered the bot. */
-  inviterOpenId?: string
+  /** `user_id` of whoever invited/triggered the bot. */
+  inviterUserId?: string
   /** Whether the group already passed the first admission gate. */
   authorized: boolean
   /** Opaque request token; only present for a *pending* group request. */
@@ -37,8 +37,8 @@ export interface GroupInfoCardInput {
 
 /** Inputs of the user-authorization request card sent to the administrator. */
 export interface UserRequestCardInput {
-  /** `open_id` of the user asking for access. */
-  openId: string
+  /** `user_id` of the user asking for access. */
+  userId: string
   /** Display name of that user, when known. */
   name?: string
   /** Chat the request originated from. */
@@ -57,7 +57,7 @@ export interface UserRequestCardInput {
 export interface RequestSettledCardInput {
   /** What kind of grant the request was about. */
   kind: 'group' | 'user'
-  /** `chat_id` (group) or `open_id` (user) the request targeted. */
+  /** `chat_id` (group) or `user_id` (user) the request targeted. */
   targetId: string
   /** Human-readable target name, when known. */
   targetName?: string
@@ -121,8 +121,8 @@ export function buildGroupInfoCard(input: GroupInfoCardInput): object {
   if (input.ownerId !== undefined && input.ownerId !== '') {
     elements.push(field('群主', `\`${input.ownerId}\``))
   }
-  if (input.inviterOpenId !== undefined && input.inviterOpenId !== '') {
-    elements.push(field('邀请人', `\`${input.inviterOpenId}\``))
+  if (input.inviterUserId !== undefined && input.inviterUserId !== '') {
+    elements.push(field('邀请人', `\`${input.inviterUserId}\``))
   }
   elements.push(field('加入时间', formatTime(input.now)))
   elements.push(divider())
@@ -140,7 +140,7 @@ export function buildGroupInfoCard(input: GroupInfoCardInput): object {
 
 /**
  * The user-authorization request card: an unauthorized user mentioned the bot
- * inside an authorized group, so the administrator can grant that `open_id`
+ * inside an authorized group, so the administrator can grant that `user_id`
  * from the DM card.
  */
 export function buildUserRequestCard(input: UserRequestCardInput): object {
@@ -148,7 +148,7 @@ export function buildUserRequestCard(input: UserRequestCardInput): object {
   const groupName = input.groupName === undefined ? undefined : clip(input.groupName)
   const elements: object[] = [
     field('用户', display === '' ? '（未知昵称）' : display),
-    field('open_id', `\`${input.openId}\``),
+    field('user_id', `\`${input.userId}\``),
   ]
   if (groupName !== undefined && groupName !== '') {
     const group = input.chatId === undefined ? groupName : `${groupName}（\`${input.chatId}\`）`

package/src/access/controller.ts

@@ -23,15 +23,15 @@
 import type { FeishuConfig } from '../config.ts'
 import type { RouteRecord } from '../domain.ts'
 import type { FeishuChannel, NormalizedMessage } from '../feishu-channel.ts'
-import { decideAccess, isAdminOpenId } from './policy.ts'
+import { decideAccess, isAdminUserId } from './policy.ts'
 import type { AccessDecision } from './policy.ts'
 import type { AccessStore, AccessStoreSnapshot } from './store.ts'
 
 /** Fixed private-chat notice for non-administrators (no model call). */
-export const DM_DENY_TEXT = '非管理员禁用私聊功能哦～如需使用，请在管理员授权的群里 @ 我；或联系管理员把你的 open_id 加入白名单。'
+export const DM_DENY_TEXT = '非管理员禁用私聊功能哦～如需使用，请在管理员授权的群里 @ 我；或联系管理员把你的 user_id 加入白名单。'
 
 /** Fixed private-chat notice while no administrator is configured. */
-export const DM_UNCONFIGURED_TEXT = '机器人尚未配置管理员。发送 /userid 可查看你的 open_id，交给部署者配置后即可启用。'
+export const DM_UNCONFIGURED_TEXT = '机器人尚未配置管理员。发送 /userid 可查看你的 user_id，交给部署者配置后即可启用。'
 
 /** Per-sender cooldown for the repeated private-chat notice (10 s). */
 const DM_NOTICE_COOLDOWN_MS = 10_000
@@ -55,7 +55,7 @@ export interface AccessControllerDeps {
 }
 
 export class AccessController {
-  /** sender open_id → last fixed-notice delivery instant (DM spam guard). */
+  /** sender user_id → last fixed-notice delivery instant (DM spam guard). */
   private readonly dmNoticeAt = new Map<string, number>()
 
   constructor(private readonly deps: AccessControllerDeps) {}
@@ -68,9 +68,9 @@ export class AccessController {
     return this.deps.now?.() ?? Date.now()
   }
 
-  /** True when `openId` is exactly the configured administrator. */
-  isAdmin(openId?: string): boolean {
-    return isAdminOpenId(this.config(), openId)
+  /** True when `userId` is exactly the configured administrator. */
+  isAdmin(userId?: string): boolean {
+    return isAdminUserId(this.config(), userId)
   }
 
   /** Current whitelist snapshot used by the pure policy. */
@@ -134,7 +134,7 @@ export class AccessController {
     try {
       if (msg.chatType === 'p2p') {
         // `/userid` is the bootstrap entry for everyone: it only echoes the
-        // sender's own open_id and has no storage/model side effect.
+        // sender's own user_id and has no storage/model side effect.
         if (commandName === 'userid') return true
         if (this.isAdmin(msg.senderId)) return true
         await this.noticeDeniedDm(msg)
@@ -156,7 +156,7 @@ export class AccessController {
    * execution inside someone else's topic.
    */
   ownsRoute(msg: NormalizedMessage, record: RouteRecord): boolean {
-    return record.senderOpenId === msg.senderId && record.chatId === msg.chatId
+    return record.senderUserId === msg.senderId && record.chatId === msg.chatId
   }
 
   /** Drop in-memory notices (shutdown; durable state lives in the store). */
@@ -176,7 +176,7 @@ export class AccessController {
     const last = this.dmNoticeAt.get(msg.senderId)
     if (last !== undefined && now - last < DM_NOTICE_COOLDOWN_MS) return
     this.dmNoticeAt.set(msg.senderId, now)
-    const text = this.config().adminOpenId === undefined ? DM_UNCONFIGURED_TEXT : DM_DENY_TEXT
+    const text = this.config().adminUserId === undefined ? DM_UNCONFIGURED_TEXT : DM_DENY_TEXT
     await this.sendText(msg.chatId, text, msg.messageId)
   }
 

package/src/access/index.ts

@@ -11,3 +11,4 @@ export * from './store.ts'
 export * from './controller.ts'
 export * from './requests.ts'
 export * from './cards.ts'
+export * from './targets.ts'

package/src/access/policy.ts

@@ -13,7 +13,7 @@
  *    or any group, regardless of the whitelists;
  *  - private chats: non-administrators are refused;
  *  - group chats: non-administrators need the group to be authorized AND
- *    their open_id to be on the global user whitelist.
+ *    their user_id to be on the global user whitelist.
  *
  * @module dsh-channels/access/policy
  */
@@ -34,7 +34,7 @@ export interface AccessSubject {
 export interface AccessSnapshot {
   /** Authorized group `chat_id`s. */
   groups: ReadonlySet<string>
-  /** Authorized user `open_id`s (global, across authorized groups). */
+  /** Authorized user `user_id`s (global, across authorized groups). */
   users: ReadonlySet<string>
 }
 
@@ -56,16 +56,16 @@ export type AccessDecision =
   }
 
 /** The configuration slice admission reads (allows easy fakes in tests). */
-export type AccessPolicyConfig = Pick<FeishuConfig, 'accessMode' | 'adminOpenId'>
+export type AccessPolicyConfig = Pick<FeishuConfig, 'accessMode' | 'adminUserId'>
 
-/** True when `openId` is exactly the configured administrator. */
-export function isAdminOpenId(
-  config: Pick<FeishuConfig, 'adminOpenId'>,
-  openId: string | undefined,
+/** True when `userId` is exactly the configured administrator. */
+export function isAdminUserId(
+  config: Pick<FeishuConfig, 'adminUserId'>,
+  userId: string | undefined,
 ): boolean {
-  const admin = config.adminOpenId?.trim()
+  const admin = config.adminUserId?.trim()
   if (admin === undefined || admin === '') return false
-  return openId !== undefined && openId.trim() === admin
+  return userId !== undefined && userId.trim() === admin
 }
 
 /**
@@ -81,7 +81,7 @@ export function decideAccess(
 ): AccessDecision {
   if (config.accessMode === 'open') return { kind: 'allow', reason: 'open' }
 
-  const admin = config.adminOpenId?.trim()
+  const admin = config.adminUserId?.trim()
   if (admin === undefined || admin === '') return { kind: 'deny', reason: 'admin-missing' }
 
   // The administrator is never constrained by the whitelists: they may start

package/src/access/requests.ts

@@ -25,7 +25,7 @@ import type {
 } from '../feishu-channel.ts'
 import { buildGroupInfoCard, buildRequestSettledCard, buildUserRequestCard } from './cards.ts'
 import type { SettledRequestStatus } from './cards.ts'
-import { isAdminOpenId } from './policy.ts'
+import { isAdminUserId } from './policy.ts'
 import type { AccessStore } from './store.ts'
 
 /** Same-target re-notification cooldown after a request was denied (24 h). */
@@ -94,7 +94,7 @@ function addressedToBot(msg: NormalizedMessage): boolean {
 export class AccessRequests {
   /** Targets with an in-flight create/deliver pass (avoids duplicate cards). */
   private readonly creating = new Set<string>()
-  /** `${messageId}:${openId}` of non-administrator card clicks already answered. */
+  /** `${messageId}:${userId}` of non-administrator card clicks already answered. */
   private readonly unauthorizedNotified = new Set<string>()
 
   constructor(private readonly deps: AccessRequestsDeps) {}
@@ -107,8 +107,8 @@ export class AccessRequests {
     return this.deps.config()
   }
 
-  private adminOpenId(): string | undefined {
-    const admin = this.config().adminOpenId?.trim()
+  private adminUserId(): string | undefined {
+    const admin = this.config().adminUserId?.trim()
     return admin === undefined || admin === '' ? undefined : admin
   }
 
@@ -124,10 +124,10 @@ export class AccessRequests {
    */
   async handleBotAdded(event: BotAddedEvent): Promise<void> {
     try {
-      const admin = this.adminOpenId()
+      const admin = this.adminUserId()
       if (admin === undefined) {
         this.deps.warn(
-          'dsh-channels: bot added to %s but no administrator open_id is configured; group card skipped',
+          'dsh-channels: bot added to %s but no administrator user_id is configured; group card skipped',
           event.chatId,
         )
         return
@@ -140,13 +140,13 @@ export class AccessRequests {
           ...(info?.name === undefined ? {} : { name: info.name }),
           ...(info?.memberCount === undefined ? {} : { memberCount: info.memberCount }),
           ...(info?.ownerId === undefined ? {} : { ownerId: info.ownerId }),
-          inviterOpenId: event.operator.openId,
+          ...(event.operator.userId === undefined ? {} : { inviterUserId: event.operator.userId }),
           authorized: true,
           now,
         }))
         return
       }
-      if (!(await this.beginGroupRequest(event.chatId, event.operator.openId, now))) return
+      if (!(await this.beginGroupRequest(event.chatId, event.operator.userId, now))) return
     } catch (error) {
       this.deps.warn('dsh-channels: bot-added group notice failed: %s', String(error))
     }
@@ -160,10 +160,10 @@ export class AccessRequests {
   async ensureGroupRequest(msg: NormalizedMessage): Promise<void> {
     if (!addressedToBot(msg) || msg.chatType !== 'group') return
     try {
-      const admin = this.adminOpenId()
+      const admin = this.adminUserId()
       if (admin === undefined) {
         this.deps.warn(
-          'dsh-channels: group %s needs authorization but no administrator open_id is configured',
+          'dsh-channels: group %s needs authorization but no administrator user_id is configured',
           msg.chatId,
         )
         return
@@ -183,10 +183,10 @@ export class AccessRequests {
   async ensureUserRequest(msg: NormalizedMessage): Promise<void> {
     if (!addressedToBot(msg) || msg.chatType !== 'group') return
     try {
-      const admin = this.adminOpenId()
+      const admin = this.adminUserId()
       if (admin === undefined) {
         this.deps.warn(
-          'dsh-channels: user %s needs authorization but no administrator open_id is configured',
+          'dsh-channels: user %s needs authorization but no administrator user_id is configured',
           msg.senderId,
         )
         return
@@ -211,7 +211,8 @@ export class AccessRequests {
       if (decision === undefined) return
       const record = this.deps.store.getRequest(decision.token)
       if (record === undefined) return
-      if (!isAdminOpenId(this.config(), event.operator.openId)) {
+      const actor = event.operator.userId
+      if (actor === undefined || !isAdminUserId(this.config(), actor)) {
         await this.notifyUnauthorized(event)
         return
       }
@@ -223,7 +224,7 @@ export class AccessRequests {
         await this.settleExpired(record)
         return
       }
-      const result = await this.resolve(decision.token, decision.action, event.operator.openId)
+      const result = await this.resolve(decision.token, decision.action, actor)
       if (!result.ok) {
         this.deps.warn('dsh-channels: settling access request %s failed: %s', decision.token, result.error)
       }
@@ -240,9 +241,9 @@ export class AccessRequests {
   async resolve(
     token: string,
     decision: 'allow' | 'deny',
-    actorOpenId: string,
+    actorUserId: string,
   ): Promise<{ ok: true } | { ok: false; error: string }> {
-    if (!isAdminOpenId(this.config(), actorOpenId)) return { ok: false, error: '仅管理员可处理授权申请' }
+    if (!isAdminUserId(this.config(), actorUserId)) return { ok: false, error: '仅管理员可处理授权申请' }
     const record = this.deps.store.getRequest(token)
     if (record === undefined) return { ok: false, error: '授权申请不存在' }
     if (record.status !== 'pending') {
@@ -255,7 +256,7 @@ export class AccessRequests {
     }
     const status = decision === 'allow' ? 'approved' : 'denied'
     try {
-      if (decision === 'allow') await this.grant(record, actorOpenId, now)
+      if (decision === 'allow') await this.grant(record, actorUserId, now)
       await this.deps.store.putRequest({ ...record, status })
     } catch (error) {
       this.deps.warn('dsh-channels: persisting access request %s settlement failed: %s', token, String(error))
@@ -289,8 +290,8 @@ export class AccessRequests {
   // ---- internals -------------------------------------------------------
 
   /** Create + DM one group request unless deduplicated/cooling down. */
-  private async beginGroupRequest(chatId: string, inviterOpenId: string, now: number): Promise<boolean> {
-    const admin = this.adminOpenId()
+  private async beginGroupRequest(chatId: string, inviterUserId: string | undefined, now: number): Promise<boolean> {
+    const admin = this.adminUserId()
     if (admin === undefined) return false
     if (await this.hasLivePending('group', chatId, now)) return false
     if (this.deps.store.recentlyDenied('group', chatId, DENIED_COOLDOWN_MS, now)) return false
@@ -304,7 +305,7 @@ export class AccessRequests {
         targetId: chatId,
         chatId,
         ...(info?.name === undefined ? {} : { groupName: info.name }),
-        requesterOpenId: inviterOpenId,
+        ...(inviterUserId === undefined ? {} : { requesterUserId: inviterUserId }),
       })
       if (!(await this.persist(record))) return false
       await this.sendCard(admin, buildGroupInfoCard({
@@ -312,7 +313,7 @@ export class AccessRequests {
         ...(info?.name === undefined ? {} : { name: info.name }),
         ...(info?.memberCount === undefined ? {} : { memberCount: info.memberCount }),
         ...(info?.ownerId === undefined ? {} : { ownerId: info.ownerId }),
-        inviterOpenId,
+        ...(inviterUserId === undefined ? {} : { inviterUserId }),
         authorized: false,
         token: record.token,
         now,
@@ -325,7 +326,7 @@ export class AccessRequests {
 
   /** Create + DM one user request unless deduplicated/cooling down. */
   private async beginUserRequest(msg: NormalizedMessage, groupName: string | undefined, now: number): Promise<boolean> {
-    const admin = this.adminOpenId()
+    const admin = this.adminUserId()
     if (admin === undefined) return false
     if (await this.hasLivePending('user', msg.senderId, now)) return false
     if (this.deps.store.recentlyDenied('user', msg.senderId, DENIED_COOLDOWN_MS, now)) return false
@@ -338,12 +339,12 @@ export class AccessRequests {
         targetId: msg.senderId,
         chatId: msg.chatId,
         ...(groupName === undefined ? {} : { groupName }),
-        requesterOpenId: msg.senderId,
+        requesterUserId: msg.senderId,
         ...(msg.senderName === undefined ? {} : { requesterName: msg.senderName }),
       })
       if (!(await this.persist(record))) return false
       await this.sendCard(admin, buildUserRequestCard({
-        openId: msg.senderId,
+        userId: msg.senderId,
         ...(msg.senderName === undefined ? {} : { name: msg.senderName }),
         chatId: msg.chatId,
         ...(groupName === undefined ? {} : { groupName }),
@@ -380,7 +381,7 @@ export class AccessRequests {
     targetId: string
     chatId?: string
     groupName?: string
-    requesterOpenId?: string
+    requesterUserId?: string
     requesterName?: string
   }): AccessRequestRecord {
     const now = this.now()
@@ -390,7 +391,7 @@ export class AccessRequests {
       targetId: input.targetId,
       ...(input.chatId === undefined ? {} : { chatId: input.chatId }),
       ...(input.groupName === undefined || input.groupName === '' ? {} : { groupName: input.groupName }),
-      ...(input.requesterOpenId === undefined ? {} : { requesterOpenId: input.requesterOpenId }),
+      ...(input.requesterUserId === undefined ? {} : { requesterUserId: input.requesterUserId }),
       ...(input.requesterName === undefined || input.requesterName === '' ? {} : { requesterName: input.requesterName }),
       status: 'pending',
       createdAt: now,
@@ -445,22 +446,22 @@ export class AccessRequests {
   }
 
   /** Write the actual grant; throws so `resolve()` can report the failure. */
-  private async grant(record: AccessRequestRecord, actorOpenId: string, now: number): Promise<void> {
+  private async grant(record: AccessRequestRecord, actorUserId: string, now: number): Promise<void> {
     if (record.kind === 'group') {
       await this.deps.store.addGroup({
         chatId: record.targetId,
         ...(record.groupName === undefined ? {} : { name: record.groupName }),
         source: 'card',
-        addedBy: actorOpenId,
+        addedBy: actorUserId,
         addedAt: now,
       })
       return
     }
     await this.deps.store.addUser({
-      openId: record.targetId,
+      userId: record.targetId,
       ...(record.requesterName === undefined ? {} : { name: record.requesterName }),
       source: 'card',
-      addedBy: actorOpenId,
+      addedBy: actorUserId,
       addedAt: now,
     })
   }
@@ -498,7 +499,7 @@ export class AccessRequests {
 
   /** One control card is delivered once; non-administrator clicks get one notice. */
   private async notifyUnauthorized(event: CardActionEvent): Promise<void> {
-    const key = `${event.messageId}:${event.operator.openId}`
+    const key = `${event.messageId}:${event.operator.userId ?? event.operator.openId}`
     if (this.unauthorizedNotified.has(key)) return
     this.unauthorizedNotified.add(key)
     const channel = this.deps.channel()

package/src/access/store.ts

@@ -84,16 +84,16 @@ export class AccessStore {
     return this.groupKeys.has(chatId)
   }
 
-  hasUser(openId: string): boolean {
-    return this.userKeys.has(openId)
+  hasUser(userId: string): boolean {
+    return this.userKeys.has(userId)
   }
 
   getGroup(chatId: string): AccessGroupRecord | undefined {
     return this.groups.get(chatId)
   }
 
-  getUser(openId: string): AccessUserRecord | undefined {
-    return this.users.get(openId)
+  getUser(userId: string): AccessUserRecord | undefined {
+    return this.users.get(userId)
   }
 
   /** Every authorized group, oldest first. */
@@ -122,17 +122,17 @@ export class AccessStore {
   }
 
   async addUser(record: AccessUserRecord): Promise<AccessUserRecord> {
-    await this.requireDomain('add access user').accessUsers.put(record.openId, record)
-    this.users.set(record.openId, record)
-    this.userKeys.add(record.openId)
+    await this.requireDomain('add access user').accessUsers.put(record.userId, record)
+    this.users.set(record.userId, record)
+    this.userKeys.add(record.userId)
     return record
   }
 
-  async removeUser(openId: string): Promise<boolean> {
-    if (!this.users.has(openId)) return false
-    await this.requireDomain('remove access user').accessUsers.delete(openId)
-    this.users.delete(openId)
-    this.userKeys.delete(openId)
+  async removeUser(userId: string): Promise<boolean> {
+    if (!this.users.has(userId)) return false
+    await this.requireDomain('remove access user').accessUsers.delete(userId)
+    this.users.delete(userId)
+    this.userKeys.delete(userId)
     return true
   }
 

package/src/access/targets.ts

@@ -0,0 +1,56 @@
+/**
+ * Target resolution for `/auth user add|remove`: the administrator names the
+ * user either by a pasted `user_id` or by @-mentioning them in the command.
+ *
+ * Feishu replaces each mention in the text with `@<name>`, so the mentioned
+ * user's `user_id` comes from the message's mention list, never from the text.
+ *
+ * @module dsh-channels/access/targets
+ */
+
+import type { NormalizedMessage } from '@larksuiteoapi/node-sdk'
+import { FEISHU_USER_ID_PATTERN } from '../domain.ts'
+
+/** Outcome of resolving one `/auth user` target. */
+export type AuthUserTarget =
+  | { ok: true; userId: string; name?: string }
+  | { ok: false; reason: 'usage' | 'mention-missing' | 'mention-multiple' | 'mention-no-user-id' }
+
+/** Input-error card text for each unresolved `/auth user` target. */
+export const AUTH_USER_TARGET_ERRORS: Record<Extract<AuthUserTarget, { ok: false }>['reason'], string> = {
+  'usage': '用法：/auth user add <@用户|user_id> 或 /auth user remove <@用户|user_id>（可用 /userid 查看 user_id）。',
+  'mention-missing': '没有识别到被 @ 的用户。请在群里用 @ 选择成员，或改用 /auth user add <user_id>。',
+  'mention-multiple': '一次只能 @ 一个用户，请分开发送。',
+  'mention-no-user-id': '被 @ 的用户没有 user_id（外部用户、机器人，或应用缺少 contact:user.employee_id:readonly 权限），无法授权。',
+}
+
+/**
+ * Resolve the user an `/auth user add|remove` command addresses.
+ *
+ * An argument starting with `@` selects the message's single non-bot mention
+ * (the bot's own mention and `@所有人` never count); otherwise the first word
+ * must be a valid `user_id`.
+ *
+ * @param argument Command text after `user add` / `user remove`.
+ * @param mentions The message's mentions (`NormalizedMessage.mentions`).
+ * @param botOpenId The bot's open_id, when known, to exclude its mention.
+ * @returns the resolved user, or the reason it could not be resolved.
+ */
+export function resolveAuthUserTarget(
+  argument: string,
+  mentions: NormalizedMessage['mentions'],
+  botOpenId?: string,
+): AuthUserTarget {
+  const text = argument.trim()
+  if (text.startsWith('@')) {
+    const users = mentions.filter(mention => mention.isBot !== true
+      && (botOpenId === undefined || mention.openId !== botOpenId))
+    if (users.length === 0) return { ok: false, reason: 'mention-missing' }
+    if (users.length > 1) return { ok: false, reason: 'mention-multiple' }
+    const [user] = users as [NormalizedMessage['mentions'][number]]
+    if (user.userId === undefined || user.userId === '') return { ok: false, reason: 'mention-no-user-id' }
+    return { ok: true, userId: user.userId, ...(user.name === undefined || user.name === '' ? {} : { name: user.name }) }
+  }
+  const userId = text.split(/\s+/u)[0] ?? ''
+  return FEISHU_USER_ID_PATTERN.test(userId) ? { ok: true, userId } : { ok: false, reason: 'usage' }
+}