@openclaw/feishu 2026.7.2-beta.2 → 2026.7.2-beta.3

package/dist/{secret-contract-DnlMcrn5.js → secret-contract-BCpDLdg9.js}

@@ -1,4 +1,5 @@
-import { collectConditionalChannelFieldAssignments, collectSecretInputAssignment, createChannelSecretTargetRegistryEntries, getChannelSurface, hasConfiguredSecretInputValue, hasOwnProperty, isBaseFieldActiveForChannelSurface, normalizeSecretStringValue } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
+import { DEFAULT_ACCOUNT_ID, normalizeAccountId } from "openclaw/plugin-sdk/account-id";
+import { collectConditionalChannelFieldAssignments, createChannelSecretTargetRegistryEntries, getChannelSurface, hasConfiguredSecretInputValue, hasOwnProperty, normalizeSecretStringValue } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
 //#region extensions/feishu/src/secret-contract.ts
 const secretTargetRegistryEntries = createChannelSecretTargetRegistryEntries({
 	channelKey: "feishu",
@@ -17,34 +18,24 @@ function collectRuntimeConfigAssignments(params) {
 	const resolved = getChannelSurface(params.config, "feishu");
 	if (!resolved) return;
 	const { channel: feishu, surface } = resolved;
-	const topLevelAppSecretActive = surface.channelEnabled && hasConfiguredSecretInputValue(feishu.appId, params.defaults) && hasConfiguredSecretInputValue(feishu.appSecret, params.defaults) || isBaseFieldActiveForChannelSurface(surface, "appSecret");
-	collectSecretInputAssignment({
-		value: feishu.appSecret,
-		path: "channels.feishu.appSecret",
-		expected: "string",
+	if (surface.channelEnabled && hasConfiguredSecretInputValue(feishu.appId, params.defaults) && hasConfiguredSecretInputValue(feishu.appSecret, params.defaults) && surface.hasExplicitAccounts && !surface.accounts.some(({ accountId }) => normalizeAccountId(accountId) === DEFAULT_ACCOUNT_ID)) surface.accounts.push({
+		accountId: "default",
+		account: {},
+		enabled: true
+	});
+	collectConditionalChannelFieldAssignments({
+		channelKey: "feishu",
+		field: "appSecret",
+		channel: feishu,
+		surface,
 		defaults: params.defaults,
 		context: params.context,
-		active: topLevelAppSecretActive,
-		inactiveReason: "no enabled account inherits this top-level Feishu appSecret.",
-		apply: (value) => {
-			feishu.appSecret = value;
-		}
+		topLevelActiveWithoutAccounts: surface.channelEnabled,
+		topLevelInheritedAccountActive: ({ account, enabled }) => enabled && !hasOwnProperty(account, "appSecret"),
+		accountActive: ({ enabled }) => enabled,
+		topInactiveReason: "no enabled account inherits this top-level Feishu appSecret.",
+		accountInactiveReason: "Feishu account is disabled."
 	});
-	if (surface.hasExplicitAccounts) for (const { accountId, account, enabled } of surface.accounts) {
-		if (!hasOwnProperty(account, "appSecret")) continue;
-		collectSecretInputAssignment({
-			value: account.appSecret,
-			path: `channels.feishu.accounts.${accountId}.appSecret`,
-			expected: "string",
-			defaults: params.defaults,
-			context: params.context,
-			active: enabled,
-			inactiveReason: "Feishu account is disabled.",
-			apply: (value) => {
-				account.appSecret = value;
-			}
-		});
-	}
 	const baseConnectionMode = normalizeSecretStringValue(feishu.connectionMode) === "webhook" ? "webhook" : "websocket";
 	const resolveAccountMode = (account) => hasOwnProperty(account, "connectionMode") ? normalizeSecretStringValue(account.connectionMode) : baseConnectionMode;
 	collectConditionalChannelFieldAssignments({

package/dist/secret-contract-api.js

@@ -1,2 +1,2 @@
-import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./secret-contract-DnlMcrn5.js";
+import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./secret-contract-BCpDLdg9.js";
 export { channelSecrets, collectRuntimeConfigAssignments, secretTargetRegistryEntries };

package/dist/{send-DrWM_Ilf.js → send-DcrXbqqA.js}

@@ -1,6 +1,6 @@
 import { d as isRecord$1, h as requestFeishuApi, s as resolveFeishuRuntimeAccount } from "./accounts-BDoGHJDk.js";
 import { i as resolveReceiveIdType, r as normalizeFeishuTarget } from "./targets-BUjQ1TcA.js";
-import { c as assertFeishuPostWithinEnvelope, f as materializeFeishuPostMarkdownSoftBreaks, i as toFeishuSendResult, l as buildFeishuPostMessageContent, o as resolveFeishuCardTemplate, r as resolveFeishuReceiptKind, t as assertFeishuMessageApiSuccess } from "./send-result-DsqTk27v.js";
+import { c as assertFeishuPostWithinEnvelope, f as materializeFeishuPostMarkdownSoftBreaks, i as toFeishuSendResult, l as buildFeishuPostMessageContent, o as resolveFeishuCardTemplate, r as resolveFeishuReceiptKind, t as assertFeishuMessageApiSuccess } from "./send-result-DfE5Fhz6.js";
 import { r as createFeishuClient } from "./client-87BmeMpj.js";
 import { t as getFeishuRuntime } from "./runtime-C5JxBWZp.js";
 import { parseStrictNonNegativeInteger } from "openclaw/plugin-sdk/number-runtime";
@@ -9,6 +9,7 @@ import { convertMarkdownTables } from "openclaw/plugin-sdk/text-chunking";
 import fs from "node:fs";
 import path from "node:path";
 import { MEDIA_FFMPEG_MAX_AUDIO_DURATION_SECS, runFfmpeg, runFfprobe } from "openclaw/plugin-sdk/media-runtime";
+import { isBlockedHostnameOrIp, resolvePinnedHostnameWithPolicy } from "openclaw/plugin-sdk/ssrf-runtime";
 import { resolveMarkdownTableMode } from "openclaw/plugin-sdk/markdown-table-runtime";
 import { readRegularFile, writeExternalFileWithinRoot } from "openclaw/plugin-sdk/security-runtime";
 import { Readable } from "node:stream";
@@ -38,6 +39,33 @@ function resolveFeishuIdentityHeaderTitle(identity) {
 	return (emoji ? `${emoji} ${name}` : name).trim();
 }
 //#endregion
+//#region extensions/feishu/src/media-fallback.ts
+const FEISHU_MEDIA_UPLOAD_FAILURE_FALLBACK_TEXT = "Media upload failed. Please try again.";
+function hasAsciiControlCharacter(value) {
+	return Array.from(value).some((character) => {
+		const code = character.charCodeAt(0);
+		return code <= 31 || code === 127;
+	});
+}
+async function resolvePublicFeishuMediaReference(value) {
+	const raw = value?.trim();
+	if (!raw || hasAsciiControlCharacter(raw)) return;
+	try {
+		const parsed = new URL(raw);
+		if (parsed.protocol !== "https:" && parsed.protocol !== "http:") return;
+		if (parsed.username || parsed.password || isBlockedHostnameOrIp(parsed.hostname)) return;
+		await resolvePinnedHostnameWithPolicy(parsed.hostname);
+		return parsed.href;
+	} catch {
+		return;
+	}
+}
+async function buildFeishuMediaFallbackText(params) {
+	const mediaUrl = await resolvePublicFeishuMediaReference(params.mediaUrl);
+	const attachmentText = mediaUrl ? `${params.mediaLinkStyle === "plain" ? "" : "📎 "}${mediaUrl}` : FEISHU_MEDIA_UPLOAD_FAILURE_FALLBACK_TEXT;
+	return [params.text?.trim(), attachmentText].filter(Boolean).join("\n\n");
+}
+//#endregion
 //#region extensions/feishu/src/external-keys.ts
 const CONTROL_CHARS_RE = /\p{Cc}/u;
 const MAX_EXTERNAL_KEY_LENGTH = 512;
@@ -480,6 +508,7 @@ function normalizeMediaNameForExtension(raw) {
 	}
 }
 function shouldSuppressFeishuTextForVoiceMedia(params) {
+	if (params.ttsSupplement) return params.ttsSupplement.visibleTextAlreadyDelivered === true;
 	if (params.audioAsVoice === true) return true;
 	if (params.fileName && isFeishuNativeVoiceAudio({
 		fileName: params.fileName,
@@ -1285,4 +1314,4 @@ async function sendMarkdownCardFeishu(params) {
 	});
 }
 //#endregion
-export { resolveFeishuIdentityEmoji as _, sendMarkdownCardFeishu as a, parsePostContent as c, isMentionForwardRequest as d, isFeishuGroupChatType as f, normalizeFeishuExternalKey as g, shouldSuppressFeishuTextForVoiceMedia as h, sendCardFeishu as i, extractMentionTargets as l, sendMediaFeishu as m, getMessageFeishu as n, sendMessageFeishu as o, saveMessageResourceFeishu as p, listFeishuThreadMessages as r, sendStructuredCardFeishu as s, editMessageFeishu as t, isFeishuBroadcastMention as u, resolveFeishuIdentityHeaderTitle as v };
+export { buildFeishuMediaFallbackText as _, sendMarkdownCardFeishu as a, parsePostContent as c, isMentionForwardRequest as d, isFeishuGroupChatType as f, normalizeFeishuExternalKey as g, shouldSuppressFeishuTextForVoiceMedia as h, sendCardFeishu as i, extractMentionTargets as l, sendMediaFeishu as m, getMessageFeishu as n, sendMessageFeishu as o, saveMessageResourceFeishu as p, listFeishuThreadMessages as r, sendStructuredCardFeishu as s, editMessageFeishu as t, isFeishuBroadcastMention as u, resolveFeishuIdentityEmoji as v, resolveFeishuIdentityHeaderTitle as y };

package/dist/{send-result-DsqTk27v.js → send-result-DfE5Fhz6.js}

@@ -1,5 +1,6 @@
 import { d as isRecord$1 } from "./accounts-BDoGHJDk.js";
 import { r as normalizeFeishuTarget, t as detectIdType } from "./targets-BUjQ1TcA.js";
+import { compileAllowlist, resolveAllowlistMatchByCandidates } from "openclaw/plugin-sdk/allow-from";
 import { ToolAuthorizationError } from "openclaw/plugin-sdk/channel-actions";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { resolveScopeKeyCaseInsensitive, resolveScopeToolsPolicy } from "openclaw/plugin-sdk/channel-policy";
@@ -307,6 +308,9 @@ function normalizeChatId(raw) {
 	if (!raw) return "";
 	return normalizeFeishuTarget(raw) ?? raw.trim();
 }
+function normalizeFeishuAllowlist(entries) {
+	return (entries ?? []).map((entry) => normalizeFeishuAllowEntry(String(entry))).filter(Boolean);
+}
 function readContextFields(ctx) {
 	if (isActionContext(ctx)) return {
 		accountId: normalizeOptionalString(ctx.accountId),
@@ -350,10 +354,13 @@ function isFeishuGroupReadAllowed(cfg, account, chatId, current) {
 		groupId: chatId
 	});
 	const normalizedChatId = normalizeFeishuAllowEntry(chatId);
-	return explicitlyConfigured || (account.config.groupAllowFrom ?? []).some((entry) => {
-		const normalized = normalizeFeishuAllowEntry(String(entry));
-		return normalized === "*" || normalized === normalizedChatId;
-	});
+	return explicitlyConfigured || resolveAllowlistMatchByCandidates({
+		allowList: normalizeFeishuAllowlist(account.config.groupAllowFrom),
+		candidates: [{
+			value: normalizedChatId,
+			source: "id"
+		}]
+	}).allowed;
 }
 function isFeishuGroupReadEnabled(cfg, account, chatId) {
 	if (resolveFeishuReadGroupPolicy(cfg, account) === "disabled") return false;
@@ -363,7 +370,7 @@ function isFeishuGroupReadEnabled(cfg, account, chatId) {
 	})?.enabled !== false;
 }
 function isDmUniversallyAllowed(account) {
-	return (account.config.allowFrom ?? []).some((entry) => normalizeFeishuAllowEntry(String(entry)) === "*");
+	return compileAllowlist(normalizeFeishuAllowlist(account.config.allowFrom)).wildcard;
 }
 function assertFeishuChatReadAllowed(params) {
 	const authorization = resolveFeishuChatReadPreliminaryAuthorization(params);
@@ -431,7 +438,7 @@ function authorizeFeishuChatMemberRead(params) {
 }
 function canEnumerateAllFeishuGroups(cfg, account) {
 	const policy = resolveFeishuReadGroupPolicy(cfg, account);
-	return policy === "open" || policy === "allowlist" && (account.config.groupAllowFrom ?? []).some((entry) => normalizeFeishuAllowEntry(String(entry)) === "*");
+	return policy === "open" || policy === "allowlist" && compileAllowlist(normalizeFeishuAllowlist(account.config.groupAllowFrom)).wildcard;
 }
 function canEnumerateAllFeishuPeers(account) {
 	return isDmUniversallyAllowed(account);
@@ -536,13 +543,17 @@ function postContentBytes(messageText, mentions) {
 * Markdown wrappers and first-chunk mentions count toward the byte budget.
 */
 function chunkFeishuPostMarkdown(params) {
-	const { text, firstChunkMentions } = params;
+	const { text, firstChunkMentions, chunkMentions } = params;
 	if (!text) return [];
 	const requestedLimit = Number.isFinite(params.limit) && params.limit > 0 ? Math.floor(params.limit) : text.length;
 	const initialChunks = params.initialChunks ?? chunkFeishuMarkdownWithMode(text, requestedLimit, params.mode ?? "length");
 	const output = [];
+	const resolveMentions = (isFirst) => {
+		const mentions = [...chunkMentions ?? [], ...isFirst ? firstChunkMentions ?? [] : []];
+		return mentions.length > 0 ? mentions : void 0;
+	};
 	for (const initialChunk of initialChunks) {
-		if (postContentBytes(initialChunk, output.length === 0 ? firstChunkMentions : void 0) <= FEISHU_POST_MAX_BYTES) {
+		if (postContentBytes(initialChunk, resolveMentions(output.length === 0)) <= FEISHU_POST_MAX_BYTES) {
 			output.push(initialChunk);
 			continue;
 		}
@@ -553,12 +564,12 @@ function chunkFeishuPostMarkdown(params) {
 			let oversizedChunk;
 			let oversizedMentions;
 			for (const [index, chunk] of chunks.entries()) {
-				const chunkMentions = output.length === 0 && index === 0 ? firstChunkMentions : void 0;
-				const contentBytes = postContentBytes(chunk, chunkMentions);
+				const mentionsForChunk = resolveMentions(output.length === 0 && index === 0);
+				const contentBytes = postContentBytes(chunk, mentionsForChunk);
 				largestContentBytes = Math.max(largestContentBytes, contentBytes);
 				if (contentBytes > FEISHU_POST_MAX_BYTES && oversizedChunk === void 0) {
 					oversizedChunk = chunk;
-					oversizedMentions = chunkMentions;
+					oversizedMentions = mentionsForChunk;
 				}
 			}
 			if (oversizedChunk === void 0) {

package/dist/setup-api.js

@@ -1,2 +1,2 @@
-import { i as feishuSetupAdapter, n as feishuSetupWizard, t as feishuPlugin } from "./channel-X30GQVwc.js";
+import { i as feishuSetupAdapter, n as feishuSetupWizard, t as feishuPlugin } from "./channel-BdnXYU6g.js";
 export { feishuPlugin, feishuSetupAdapter, feishuSetupWizard };

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@openclaw/feishu",
-  "version": "2026.7.2-beta.2",
+  "version": "2026.7.2-beta.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/feishu",
-      "version": "2026.7.2-beta.2",
+      "version": "2026.7.2-beta.3",
       "dependencies": {
         "@larksuiteoapi/node-sdk": "1.68.0",
         "mdast-util-from-markdown": "2.0.3",
@@ -16,7 +16,7 @@
         "zod": "4.4.3"
       },
       "peerDependencies": {
-        "openclaw": ">=2026.7.2-beta.2"
+        "openclaw": ">=2026.7.2-beta.3"
       },
       "peerDependenciesMeta": {
         "openclaw": {

package/openclaw.plugin.json

@@ -455,6 +455,12 @@
               "enabled"
             ]
           },
+          "allowBots": {
+            "type": "boolean"
+          },
+          "vcAutoJoin": {
+            "type": "boolean"
+          },
           "typingIndicator": {
             "type": "boolean"
           }
@@ -520,6 +526,12 @@
           "enabled"
         ]
       },
+      "allowBots": {
+        "type": "boolean"
+      },
+      "vcAutoJoin": {
+        "type": "boolean"
+      },
       "typingIndicator": {
         "type": "boolean"
       },
@@ -1178,6 +1190,12 @@
             "default": true,
             "type": "boolean"
           },
+          "allowBots": {
+            "type": "boolean"
+          },
+          "vcAutoJoin": {
+            "type": "boolean"
+          },
           "tts": {
             "type": "object",
             "properties": {
@@ -1936,6 +1954,12 @@
                 "resolveSenderNames": {
                   "type": "boolean"
                 },
+                "allowBots": {
+                  "type": "boolean"
+                },
+                "vcAutoJoin": {
+                  "type": "boolean"
+                },
                 "tts": {
                   "type": "object",
                   "properties": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/feishu",
-  "version": "2026.7.2-beta.2",
+  "version": "2026.7.2-beta.3",
   "description": "OpenClaw Feishu/Lark channel plugin for chats and workplace tools (community maintained by @m1heng).",
   "repository": {
     "type": "git",
@@ -16,7 +16,7 @@
     "zod": "4.4.3"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.7.2-beta.2"
+    "openclaw": ">=2026.7.2-beta.3"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -47,10 +47,10 @@
       "minHostVersion": ">=2026.5.29"
     },
     "compat": {
-      "pluginApi": ">=2026.7.2-beta.2"
+      "pluginApi": ">=2026.7.2-beta.3"
     },
     "build": {
-      "openclawVersion": "2026.7.2-beta.2"
+      "openclawVersion": "2026.7.2-beta.3"
     },
     "release": {
       "publishToClawHub": true,