@openclaw/feishu 2026.7.2-beta.7 → 2026.8.1-beta.2

package/dist/{monitor.account-BnTWCw55.js → monitor.account-DwdqexLU.js}

@@ -1,48 +1,50 @@
-import { _ as normalizeCommentFileType, c as encodeQuery, d as isRecord$2, f as normalizeString, g as buildFeishuCommentTarget, h as requestFeishuApi, l as extractReplyText, m as readString$1, o as resolveFeishuAccount, p as parseCommentContentElements, s as resolveFeishuRuntimeAccount } from "./accounts-u9X5Wsan.js";
+import { o as resolveFeishuAccount, s as resolveFeishuRuntimeAccount } from "./accounts-CCCdMen2.js";
 import { i as resolveReceiveIdType } from "./targets-BUjQ1TcA.js";
-import { A as resolveFeishuChatType, C as resolveFeishuDmIngressAccess, E as resolveFeishuGroupSenderActivationIngressAccess, M as buildFeishuCardActionTextFallback, N as createFeishuCardInteractionEnvelope, O as resolveFeishuReplyPolicy, P as decodeFeishuCardAction, S as normalizeFeishuAllowEntry, T as resolveFeishuGroupConversationIngressAccess, d as chunkFeishuPostMarkdown, f as materializeFeishuPostMarkdownSoftBreaks, k as normalizeFeishuChatType$2, o as resolveFeishuCardTemplate, w as resolveFeishuGroupConfig, x as hasExplicitFeishuGroupConfig } from "./send-result-B9_BpUPx.js";
-import { o as resolveConfiguredFeishuGroupSessionScope, t as buildFeishuConversationId } from "./conversation-id-BeJL-wq7.js";
-import { a as getFeishuUserAgent, i as createFeishuWSClient, n as createEventDispatcher, r as createFeishuClient, s as resolveConfiguredHttpTimeoutMs } from "./client-Dcbs6vml.js";
+import { A as resolveFeishuChatType, C as resolveFeishuDmIngressAccess, E as resolveFeishuGroupSenderActivationIngressAccess, M as buildFeishuCardActionTextFallback, N as createFeishuCardInteractionEnvelope, O as resolveFeishuReplyPolicy, P as decodeFeishuCardAction, S as normalizeFeishuAllowEntry, T as resolveFeishuGroupConversationIngressAccess, d as chunkFeishuPostMarkdown, f as materializeFeishuPostMarkdownSoftBreaks, k as normalizeFeishuChatType$2, o as resolveFeishuCardTemplate, w as resolveFeishuGroupConfig, x as hasExplicitFeishuGroupConfig } from "./send-result-DEAycmOk.js";
+import { i as normalizeFeishuWebhookPath } from "./doctor-contract-bEQXIXyP.js";
+import { o as resolveConfiguredFeishuGroupSessionScope, t as buildFeishuConversationId } from "./conversation-id-VYgGQ-GX.js";
+import { a as getFeishuUserAgent, i as createFeishuWSClient, n as createEventDispatcher, r as createFeishuClient, s as resolveConfiguredHttpTimeoutMs } from "./client-Hp7uo_cl.js";
 import { t as getFeishuRuntime } from "./runtime-C5JxBWZp.js";
-import { i as createCommentTypingReactionLifecycle, l as getChatInfo, t as deliverCommentThreadText } from "./drive-hSi_Utp0.js";
-import { t as createFeishuThreadBindingManager } from "./thread-bindings-N3wkgkIN.js";
-import { createReplyPrefixContext, evaluateSupplementalContextVisibility, getSessionEntry, normalizeAgentId as normalizeAgentId$2, resolveChannelContextVisibilityMode } from "./runtime-api.js";
+import { d as encodeQuery, f as extractReplyText, g as normalizeCommentFileType, h as buildFeishuCommentTarget, i as createCommentTypingReactionLifecycle, m as requestFeishuApi, p as parseCommentContentElements, s as getChatInfo, t as deliverCommentThreadText } from "./drive-B0JkoiRj.js";
+import { t as createFeishuThreadBindingManager } from "./thread-bindings-Itvfmx6_.js";
+import { createReplyPrefixContext, evaluateSupplementalContextVisibility, getSessionEntry, normalizeAgentId as normalizeAgentId$1, resolveChannelContextVisibilityMode } from "./runtime-api.js";
 import { t as readFeishuJsonResponse } from "./json-response-CheljwGr.js";
-import { _ as buildFeishuMediaFallbackText, a as getMessageFeishu, d as parsePostContent, f as extractMentionTargets, g as normalizeFeishuExternalKey, h as isFeishuGroupChatType, l as sendMessageFeishu, m as isMentionForwardRequest, n as sendMediaFeishu, o as listFeishuThreadMessages, p as isFeishuBroadcastMention, r as shouldSuppressFeishuTextForVoiceMedia, s as sendCardFeishu, t as saveMessageResourceFeishu, u as sendStructuredCardFeishu, v as resolveFeishuIdentityEmoji } from "./media-CEUraFOR.js";
-import { a as waitForAbortableDelay, i as raceWithTimeoutAndAbort } from "./probe-p3POS2RN.js";
-import { t as fetchBotIdentityForMonitor } from "./monitor.startup-CqH2tiJq.js";
+import { _ as normalizeFeishuExternalKey, a as getMessageFeishu, d as extractMentionTargets, f as isFeishuBroadcastMention, g as parsePostContent, h as parseInteractiveCardContent, l as sendMessageFeishu, m as isFeishuGroupChatType, n as sendMediaFeishu, o as listFeishuThreadMessages, p as isMentionForwardRequest, r as shouldSuppressFeishuTextForVoiceMedia, s as sendCardFeishu, t as saveMessageResourceFeishu, u as sendStructuredCardFeishu, v as buildFeishuMediaFallbackText, y as resolveFeishuIdentityEmoji } from "./media-BjSy8fiy.js";
+import { a as waitForAbortableDelay, i as raceWithTimeoutAndAbort } from "./probe-DVpy58s0.js";
+import { t as fetchBotIdentityForMonitor } from "./monitor.startup-BGErejNH.js";
 import { DEFAULT_INGRESS_ADOPTION_STALL_MS, bindIngressLifecycleToReplyOptions, createChannelIngressError, createChannelIngressMonitor, createChannelMessageReplyPipeline, createMessageReceiptFromOutboundResults, formatChannelProgressDraftLineForEntry, isChannelProgressDraftWorkToolName, resolveAgentOutboundIdentity, resolveChannelPreviewStreamMode, resolveChannelStreamingBlockEnabled } from "openclaw/plugin-sdk/channel-outbound";
 import { createChannelPairingController, createChannelPairingController as createChannelPairingController$1 } from "openclaw/plugin-sdk/channel-pairing";
 import { ensureConfiguredBindingRouteReady, resolveConfiguredBindingRoute, resolveRuntimeConversationBindingRoute } from "openclaw/plugin-sdk/conversation-runtime";
+import { collectErrorGraphCandidates, formatErrorMessage, toStringifiedError } from "openclaw/plugin-sdk/error-runtime";
 import { asDateTimestampMs, isFutureDateTimestampMs, parseStrictNonNegativeInteger, resolveDateTimestampMs, resolveExpiresAtMsFromDurationMs, resolveExpiresAtMsFromDurationSeconds, resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
-import { asBoolean, asNullableRecord, isRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeOptionalString, readStringValue, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { asBoolean, asNullableRecord, isRecord, normalizeLowercaseStringOrEmpty, normalizeNullableString, normalizeOptionalLowercaseString, normalizeOptionalString, readStringValue, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { stripReasoningTagsFromText } from "openclaw/plugin-sdk/text-chunking";
 import { resolveDefaultGroupPolicy, resolveOpenProviderRuntimeGroupPolicy, warnMissingProviderGroupPolicyFallbackOnce } from "openclaw/plugin-sdk/runtime-group-policy";
 import { fanInChannelIngressLifecycles } from "openclaw/plugin-sdk/channel-ingress-runtime";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import { normalizeAccountId, resolveAgentRoute, resolveInboundLastRouteSessionKey } from "openclaw/plugin-sdk/routing";
+import { normalizeAccountId, normalizeAgentId, resolveAgentRoute, resolveInboundLastRouteSessionKey } from "openclaw/plugin-sdk/routing";
 import { resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
 import { isRecord as isRecord$1 } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
-import { collectErrorGraphCandidates, formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
+import { createChannelPartialDeliveryError, formatAgentEnvelope, formatInboundMediaUnavailableText, isChannelPartialDeliveryError, recordChannelBotPairLoopAndCheckSuppression, resolveEnvelopeFormatOptions, toInboundMediaFactsWithMetadata } from "openclaw/plugin-sdk/channel-inbound";
 import * as Lark from "@larksuiteoapi/node-sdk";
-import { formatReasoningMessage, resolveHumanDelayConfig } from "openclaw/plugin-sdk/agent-runtime";
+import { resolvePinnedMainDmOwnerFromAllowlist, safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
 import { WEBHOOK_ANOMALY_COUNTER_DEFAULTS, WEBHOOK_RATE_LIMIT_DEFAULTS, applyBasicWebhookRequestGuards, createFixedWindowRateLimiter, createWebhookAnomalyTracker, resolveRequestClientIp } from "openclaw/plugin-sdk/webhook-ingress";
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
 import { getReplyPayloadTtsSupplement, resolveSendableOutboundReplyParts, resolveTextChunksWithFallback, sendMediaWithLeadingCaption } from "openclaw/plugin-sdk/reply-payload";
-import { resolvePinnedMainDmOwnerFromAllowlist, safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
 import * as crypto$1 from "node:crypto";
 import crypto, { createHash } from "node:crypto";
-import { buildChannelInboundEventContext, createChannelPartialDeliveryError, formatAgentEnvelope, formatInboundMediaUnavailableText, isChannelPartialDeliveryError, recordChannelBotPairLoopAndCheckSuppression, resolveEnvelopeFormatOptions, toInboundMediaFactsWithMetadata } from "openclaw/plugin-sdk/channel-inbound";
 import { DEFAULT_GROUP_HISTORY_LIMIT, createChannelHistoryWindow } from "openclaw/plugin-sdk/reply-history";
 import { sliceUtf16Safe, truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { pruneMapToMaxSize } from "openclaw/plugin-sdk/collection-runtime";
 import { createChannelReplayGuard } from "openclaw/plugin-sdk/persistent-dedupe";
 import { resolveChannelConfigWrites } from "openclaw/plugin-sdk/channel-config-writes";
+import { formatReasoningMessage, resolveHumanDelayConfig } from "openclaw/plugin-sdk/agent-runtime";
 import { logTypingFailure } from "openclaw/plugin-sdk/channel-feedback";
 import { getGlobalHookRunner } from "openclaw/plugin-sdk/plugin-runtime";
 import * as http from "node:http";
+import { channelBlockedPatch, channelReadyPatch } from "openclaw/plugin-sdk/gateway-runtime";
 import { installRequestBodyLimitGuard, readWebhookBodyOrReject } from "openclaw/plugin-sdk/webhook-request-guards";
 import { isAbortRequestText, isBtwRequestText } from "openclaw/plugin-sdk/command-primitives-runtime";
 //#region extensions/feishu/src/bot-agent-body.ts
@@ -321,6 +323,7 @@ function parseMessageContent(content, messageType) {
 			return "[Forwarded message]";
 		}
 		if (messageType === "merge_forward") return "[Merged and Forwarded Message - loading...]";
+		if (messageType === "interactive") return parseInteractiveCardContent(parsed);
 		return content;
 	} catch {
 		return FEISHU_MEDIA_MESSAGE_TYPES.has(messageType) ? "" : content;
@@ -345,6 +348,7 @@ function formatSubMessageContent(content, contentType) {
 		switch (contentType) {
 			case "text": return parsed.text || content;
 			case "post": return parsePostContent(content).textContent;
+			case "interactive": return parseInteractiveCardContent(parsed);
 			case "image": return "[Image]";
 			case "file": return `[File: ${parsed.file_name || "unknown"}]`;
 			case "audio": return "[Audio]";
@@ -369,7 +373,8 @@ function parseMergeForwardContent(params) {
 		return "[Merged and Forwarded Message - parse error]";
 	}
 	if (!Array.isArray(items) || items.length === 0) return "[Merged and Forwarded Message - no sub-messages]";
-	const subMessages = items.filter((item) => item.upper_message_id);
+	const container = items.find((item) => item.msg_type === "merge_forward" && !item.upper_message_id);
+	const subMessages = container ? items.filter((item) => item !== container) : items.filter((item) => item.upper_message_id);
 	if (subMessages.length === 0) return "[Merged and Forwarded Message - no sub-messages found]";
 	log?.(`feishu: merge_forward contains ${subMessages.length} sub-messages`);
 	subMessages.sort((a, b) => (parseStrictNonNegativeInteger(a.create_time) ?? 0) - (parseStrictNonNegativeInteger(b.create_time) ?? 0));
@@ -1133,13 +1138,9 @@ function resolveUserPath(p) {
 }
 //#endregion
 //#region extensions/feishu/src/agent-config.ts
-const DEFAULT_AGENT_ID = "main";
-function normalizeAgentId$1(value) {
-	return (value ?? "").trim().toLowerCase() || DEFAULT_AGENT_ID;
-}
 function resolveFeishuConfigReasoningDefault(cfg, agentId) {
-	const id = normalizeAgentId$1(agentId);
-	return cfg.agents?.list?.find((entry) => normalizeAgentId$1(entry?.id) === id)?.reasoningDefault ?? cfg.agents?.defaults?.reasoningDefault ?? "off";
+	const id = normalizeAgentId(agentId);
+	return cfg.agents?.list?.find((entry) => normalizeAgentId(entry?.id) === id)?.reasoningDefault ?? cfg.agents?.defaults?.reasoningDefault ?? "off";
 }
 //#endregion
 //#region extensions/feishu/src/reasoning-preview.ts
@@ -1242,8 +1243,14 @@ function resolveAllowedHostnames(domain) {
 	}
 	return ["open.feishu.cn"];
 }
+function cancelUnreadResponseBody(response) {
+	if (!response.bodyUsed) response.body?.cancel().catch(() => void 0);
+}
 async function assertSuccessfulCardKitResponse(response, auditContext, action) {
-	if (!response.ok) throw new Error(`${action} failed with HTTP ${response.status}`);
+	if (!response.ok) {
+		cancelUnreadResponseBody(response);
+		throw new Error(`${action} failed with HTTP ${response.status}`);
+	}
 	const data = await readFeishuJsonResponse(response, auditContext);
 	if (data.code !== 0) throw new Error(`${action} failed: ${data.msg ?? "unknown error"} (code=${String(data.code)})`);
 }
@@ -1276,7 +1283,10 @@ async function getToken(creds, deps) {
 	});
 	let data;
 	try {
-		if (!response.ok) throw new Error(`Token request failed with HTTP ${response.status}`);
+		if (!response.ok) {
+			cancelUnreadResponseBody(response);
+			throw new Error(`Token request failed with HTTP ${response.status}`);
+		}
 		data = await readFeishuJsonResponse(response, "feishu.streaming-card.token");
 	} finally {
 		await release();
@@ -1384,7 +1394,10 @@ var FeishuStreamingSession = class {
 		});
 		let createData;
 		try {
-			if (!createRes.ok) throw new Error(`Create card request failed with HTTP ${createRes.status}`);
+			if (!createRes.ok) {
+				cancelUnreadResponseBody(createRes);
+				throw new Error(`Create card request failed with HTTP ${createRes.status}`);
+			}
 			createData = await readFeishuJsonResponse(createRes, "feishu.streaming-card.create");
 		} finally {
 			await releaseCreate();
@@ -1821,9 +1834,6 @@ function mergeStreamingFinalText(previousText, nextText, appendError) {
 	if (previousText.endsWith(`\n\n${nextText}`)) return previousText;
 	return `${previousText}\n\n${nextText}`;
 }
-function toError(error) {
-	return error instanceof Error ? error : new Error(String(error));
-}
 /** Maximum age (ms) for a message to receive a typing indicator reaction.
 * Messages older than this are likely replays after context compaction (#30418). */
 const TYPING_INDICATOR_MAX_AGE_MS = 2 * 6e4;
@@ -2191,9 +2201,10 @@ function createFeishuReplyDispatcher(params) {
 	};
 	const updateStreamingStatusLine = (nextStatusLine, options) => {
 		statusLine = nextStatusLine;
-		if (!Boolean(streaming?.isActive() || streamingStartPromise) && (options?.startIfNeeded === false || renderMode !== "card")) return;
+		if (!Boolean(streaming?.isActive() || streamingStartPromise) && (options?.startIfNeeded === false || renderMode !== "card")) return false;
 		startStreaming();
 		flushStreamingCardUpdate(buildCombinedStreamText(reasoningText, streamText));
+		return false;
 	};
 	const sendChunkedTextReply = async (paramsLocal) => {
 		const chunkSource = paramsLocal.useCard ? paramsLocal.text : materializeFeishuPostMarkdownSoftBreaks(core.channel.text.convertMarkdownTables(paramsLocal.text, tableMode));
@@ -2220,6 +2231,7 @@ function createFeishuReplyDispatcher(params) {
 				acceptedChunks.push(chunk);
 				markVisibleReplySent();
 			} catch (error) {
+				if (isChannelPartialDeliveryError(error)) markVisibleReplySent();
 				throw createFeishuPartialReplyDeliveryError(error, createFeishuReplyDeliveryResult({
 					results,
 					visibleReplySent: results.length > 0,
@@ -2280,7 +2292,11 @@ function createFeishuReplyDispatcher(params) {
 					markVisibleReplySent();
 					if (result?.voiceIntentDegradedToFile && options?.fallbackText && !sentFallbackText) degradedVoiceFallbackText = options.fallbackText;
 				},
-				onError: options?.fallbackText === void 0 ? void 0 : async ({ mediaUrl }) => {
+				onError: options?.fallbackText === void 0 ? void 0 : async ({ error, mediaUrl }) => {
+					if (isChannelPartialDeliveryError(error)) {
+						markVisibleReplySent();
+						throw toStringifiedError(error);
+					}
 					const fallbackText = await buildFeishuMediaFallbackText({
 						text: sentFallbackText ? void 0 : options.fallbackText,
 						mediaUrl
@@ -2295,6 +2311,7 @@ function createFeishuReplyDispatcher(params) {
 			}
 		} catch (error) {
 			const partial = isChannelPartialDeliveryError(error) ? error.deliveryResult : void 0;
+			if (partial) markVisibleReplySent();
 			throw createFeishuPartialReplyDeliveryError(error, mergeFeishuReplyDeliveryResults([...results, ...partial ? [partial] : []]));
 		}
 		return mergeFeishuReplyDeliveryResults(results);
@@ -2396,7 +2413,7 @@ function createFeishuReplyDispatcher(params) {
 						if (deliveryError !== void 0) completion.reject(createFeishuPartialReplyDeliveryError(isChannelPartialDeliveryError(deliveryError) && deliveryError instanceof Error ? deliveryError.cause ?? deliveryError : deliveryError instanceof FeishuStreamingFinalizationError ? deliveryError.cause ?? deliveryError : deliveryError, settledResult));
 						else completion.resolve(settledResult);
 					}
-					if (closeOutcome.error !== void 0) throw toError(closeOutcome.error);
+					if (closeOutcome.error !== void 0) throw toStringifiedError(closeOutcome.error);
 				} while (pendingStreamingDeliveries.length > 0);
 			} finally {
 				typingCallbacks?.onIdle?.();
@@ -2486,6 +2503,7 @@ function createFeishuReplyDispatcher(params) {
 		}
 	};
 	const handleDeliveryError = async (error, info) => {
+		if (isChannelPartialDeliveryError(error)) markVisibleReplySent();
 		params.runtime.error?.(`feishu[${account.accountId}] ${info.kind} reply failed: ${String(error)}`);
 		await queueIdleSideEffects().catch((cleanupError) => params.runtime.error?.(`feishu[${account.accountId}] reply error cleanup failed: ${String(cleanupError)}`));
 	};
@@ -2524,7 +2542,7 @@ function createFeishuReplyDispatcher(params) {
 				const shouldDiscardStreamingPreview = info?.kind === "final" && (finalTextExceedsStreamingLimit || hasMedia && (hasVoiceMedia && !shouldDeliverText && !ttsTextAlreadyVisible || skipTextForDuplicateFinal));
 				const priorClosedStreamingSettlement = info?.kind === "final" && hasText && skipTextForDuplicateFinal ? claimClosedStreamingResult(void 0, text) : void 0;
 				if (!shouldDeliverText && !hasMedia) {
-					if (priorClosedStreamingSettlement?.error !== void 0) throw toError(priorClosedStreamingSettlement.error);
+					if (priorClosedStreamingSettlement?.error !== void 0) throw toStringifiedError(priorClosedStreamingSettlement.error);
 					return priorClosedStreamingSettlement?.result ?? noVisibleFeishuReplyDelivery;
 				}
 				const deliveredResults = priorClosedStreamingSettlement ? [priorClosedStreamingSettlement.result] : [];
@@ -2654,43 +2672,40 @@ function createFeishuReplyDispatcher(params) {
 			onModelSelected: prefixContext.onModelSelected,
 			disableBlockStreaming: typeof blockStreamingEnabled === "boolean" ? !blockStreamingEnabled : true,
 			onPartialReply: previewStreamingEnabled ? (payload) => {
-				if (!payload.text) return;
+				if (!payload.text) return false;
 				const cleaned = stripReasoningTagsFromText(payload.text, {
 					mode: "strict",
 					trim: "both"
 				});
-				if (!cleaned) return;
+				if (!cleaned) return false;
 				startStreaming();
 				queueStreamingUpdate(cleaned, {
 					dedupeWithLastPartial: true,
 					mode: "snapshot"
 				});
+				return false;
 			} : void 0,
 			onReasoningStream: reasoningPreviewEnabled ? (payload) => {
-				if (!payload.text) return;
+				if (!payload.text) return false;
 				startStreaming();
 				queueReasoningUpdate(formatReasoningMessage(payload.text));
+				return false;
 			} : void 0,
-			onReasoningEnd: reasoningPreviewEnabled ? () => {} : void 0,
+			onReasoningEnd: reasoningPreviewEnabled ? () => false : void 0,
 			onToolStart: previewStreamingEnabled ? (payload) => {
-				if (!isChannelProgressDraftWorkToolName(payload.name)) return;
+				if (!isChannelProgressDraftWorkToolName(payload.name)) return false;
 				const statusLineLocal = formatChannelProgressDraftLineForEntry(account.config, {
 					event: "tool",
 					name: payload.name,
 					phase: payload.phase,
 					args: payload.args
 				}, { detailMode: payload.detailMode });
-				if (statusLineLocal) updateStreamingStatusLine(statusLineLocal);
+				if (statusLineLocal) return updateStreamingStatusLine(statusLineLocal);
+				return false;
 			} : void 0,
-			onAssistantMessageStart: previewStreamingEnabled ? () => {
-				updateStreamingStatusLine("", { startIfNeeded: false });
-			} : void 0,
-			onCompactionStart: previewStreamingEnabled ? () => {
-				updateStreamingStatusLine("📦 **Compacting context...**");
-			} : void 0,
-			onCompactionEnd: previewStreamingEnabled ? () => {
-				updateStreamingStatusLine("");
-			} : void 0
+			onAssistantMessageStart: previewStreamingEnabled ? () => updateStreamingStatusLine("", { startIfNeeded: false }) : void 0,
+			onCompactionStart: previewStreamingEnabled ? () => updateStreamingStatusLine("📦 **Compacting context...**") : void 0,
+			onCompactionEnd: previewStreamingEnabled ? () => updateStreamingStatusLine("") : void 0
 		},
 		ensureNoVisibleReplyFallback,
 		getVisibleReplyState: () => ({
@@ -2892,7 +2907,10 @@ async function handleFeishuMessage(params) {
 	if (event.message.message_type === "merge_forward") {
 		log(`feishu[${account.accountId}]: processing merge_forward message, fetching full content via API`);
 		try {
-			const response = await createFeishuClient(account).im.message.get({ path: { message_id: event.message.message_id } });
+			const response = await createFeishuClient(account).im.message.get({
+				params: { card_msg_content_type: "user_card_content" },
+				path: { message_id: event.message.message_id }
+			});
 			if (response.code === 0 && response.data?.items && response.data.items.length > 0) {
 				log(`feishu[${account.accountId}]: merge_forward API returned ${response.data.items.length} items`);
 				const expandedContent = parseMergeForwardContent({
@@ -2963,22 +2981,25 @@ async function handleFeishuMessage(params) {
 		feishuCfg
 	}) : null;
 	let effectiveThreadId = ctx.threadId;
-	if (isGroup && ctx.chatType === "topic_group" && !effectiveThreadId && isFeishuTopicSessionScope(groupSessionScope ?? "group")) try {
-		const hydratedThreadId = (await getMessageFeishu({
-			cfg,
-			accountId: account.accountId,
-			messageId: ctx.messageId
-		}))?.threadId?.trim();
-		if (hydratedThreadId) {
-			ctx = {
-				...ctx,
-				threadId: hydratedThreadId
-			};
-			effectiveThreadId = hydratedThreadId;
-			log(`feishu[${account.accountId}]: hydrated topic thread_id=${hydratedThreadId} for message=${ctx.messageId}`);
+	if (isGroup && ctx.chatType === "topic_group" && !effectiveThreadId && isFeishuTopicSessionScope(groupSessionScope ?? "group")) {
+		const topicHydrationMessageId = ctx.replyTargetMessageId ?? ctx.messageId;
+		try {
+			const hydratedThreadId = (await getMessageFeishu({
+				cfg,
+				accountId: account.accountId,
+				messageId: topicHydrationMessageId
+			}))?.threadId?.trim();
+			if (hydratedThreadId) {
+				ctx = {
+					...ctx,
+					threadId: hydratedThreadId
+				};
+				effectiveThreadId = hydratedThreadId;
+				log(`feishu[${account.accountId}]: hydrated topic thread_id=${hydratedThreadId} for message=${topicHydrationMessageId}`);
+			}
+		} catch (err) {
+			log(`feishu[${account.accountId}]: failed to hydrate topic thread_id for message=${topicHydrationMessageId}: ${String(err)}`);
 		}
-	} catch (err) {
-		log(`feishu[${account.accountId}]: failed to hydrate topic thread_id for message=${ctx.messageId}: ${String(err)}`);
 	}
 	const effectiveGroupSenderAllowFrom = isGroup ? (groupConfig?.allowFrom?.length ?? 0) > 0 ? groupConfig?.allowFrom ?? [] : feishuCfg?.groupSenderAllowFrom ?? [] : [];
 	const groupSession = isGroup ? resolveFeishuGroupSession({
@@ -2995,7 +3016,7 @@ async function handleFeishuMessage(params) {
 	const dmPolicy = feishuCfg?.dmPolicy ?? "pairing";
 	const configAllowFrom = feishuCfg?.allowFrom ?? [];
 	const rawBroadcastAgents = isGroup ? resolveBroadcastAgents(cfg, ctx.chatId) : null;
-	const broadcastAgents = rawBroadcastAgents ? uniqueStrings(rawBroadcastAgents.map((id) => normalizeAgentId$2(id))) : null;
+	const broadcastAgents = rawBroadcastAgents ? uniqueStrings(rawBroadcastAgents.map((id) => normalizeAgentId$1(id))) : null;
 	const messageCreateTimeMs = parseStrictNonNegativeInteger(event.message.create_time) ?? Date.now();
 	let requireMention = false;
 	if (isGroup) {
@@ -3524,7 +3545,37 @@ async function handleFeishuMessage(params) {
 		const buildCtxPayloadForAgent = async (agentId, agentSessionKey, agentAccountId, wasMentioned) => {
 			const groupName = await resolveGroupNameForLabel();
 			const threadContext = await resolveThreadContextForAgent(agentId, agentSessionKey, groupName);
-			return buildChannelInboundEventContext({
+			const contextBinding = {
+				agentId,
+				sessionKey: agentSessionKey,
+				messageId: ctx.messageId,
+				inboundEventKind: "user_request"
+			};
+			const boundChannelIngress = isGroup ? await resolveFeishuGroupSenderActivationIngressAccess({
+				cfg: effectiveCfg,
+				accountId: account.accountId,
+				chatId: ctx.chatId,
+				allowFrom: effectiveGroupSenderAllowFrom,
+				senderOpenId: ctx.senderOpenId,
+				senderUserId,
+				requireMention,
+				mentionedBot: ctx.mentionedBot,
+				contextBinding,
+				threadId: ctx.rootId && isTopicSessionForThread ? ctx.rootId : void 0
+			}) : await resolveFeishuDmIngressAccess({
+				cfg: effectiveCfg,
+				accountId: account.accountId,
+				dmPolicy: effectiveDmPolicy,
+				allowFrom: effectiveConfigAllowFrom,
+				readAllowFromStore: pairing.readAllowFromStore,
+				senderOpenId: ctx.senderOpenId,
+				senderUserId,
+				conversationId: ctx.senderOpenId,
+				mayPair: false,
+				contextBinding
+			});
+			return core.channel.inbound.buildContext({
+				channelIngress: boundChannelIngress,
 				channel: "feishu",
 				supplemental: {
 					quote: quotedContent ? {
@@ -3651,8 +3702,8 @@ async function handleFeishuMessage(params) {
 				}
 			};
 			const strategy = cfg.broadcast?.strategy === "sequential" ? "sequential" : "parallel";
-			const activeAgentId = ctx.mentionedBot || !requireMention ? normalizeAgentId$2(route.agentId) : null;
-			const agentIds = (cfg.agents?.list ?? []).map((a) => normalizeAgentId$2(a.id));
+			const activeAgentId = ctx.mentionedBot || !requireMention ? normalizeAgentId$1(route.agentId) : null;
+			const agentIds = (cfg.agents?.list ?? []).map((a) => normalizeAgentId$1(a.id));
 			const hasKnownAgents = agentIds.length > 0;
 			log(`feishu[${account.accountId}]: broadcasting to ${broadcastAgents.length} agents (strategy=${strategy}, active=${activeAgentId ?? "none"})`);
 			const createBroadcastInboundAdapter = (paramsLocal) => ({
@@ -3692,7 +3743,7 @@ async function handleFeishuMessage(params) {
 				})
 			});
 			const dispatchForAgent = async (agentId) => {
-				const normalizedAgentId = normalizeAgentId$2(agentId);
+				const normalizedAgentId = normalizeAgentId$1(agentId);
 				if (hasKnownAgents && !agentIds.includes(normalizedAgentId)) {
 					log(`feishu[${account.accountId}]: broadcast agent ${agentId} not found in agents.list; skipping`);
 					return;
@@ -4293,9 +4344,6 @@ const FEISHU_INGRESS_PAYLOAD_VERSION = 1;
 const FEISHU_INGRESS_POLL_INTERVAL_MS = 500;
 const FEISHU_DURABLE_EVENT_TYPES = /* @__PURE__ */ new Set(["drive.notice.comment_add_v1", "im.message.receive_v1"]);
 const FeishuIngressPermanentError = createChannelIngressError("FeishuIngressPermanentError", { withReason: true });
-function readString(value) {
-	return typeof value === "string" && value.trim() ? value.trim() : null;
-}
 function parseRawEnvelope(rawEnvelope) {
 	let parsed;
 	try {
@@ -4307,7 +4355,7 @@ function parseRawEnvelope(rawEnvelope) {
 	return parsed;
 }
 function decryptEnvelope(envelope, encryptKey) {
-	const encrypted = readString(envelope.encrypt);
+	const encrypted = normalizeNullableString(envelope.encrypt);
 	if (!encrypted) return envelope;
 	const key = encryptKey?.trim();
 	if (!key) throw new FeishuIngressPermanentError("authentication-failed", "Feishu encrypted ingress envelope has no configured encrypt key.");
@@ -4322,13 +4370,13 @@ function inspectFeishuIngressEnvelope(rawEnvelope, encryptKey, allowInvalidLane
 	const envelope = decryptEnvelope(parseRawEnvelope(rawEnvelope), encryptKey);
 	const nestedHeader = isRecord$1(envelope.header) ? envelope.header : null;
 	const nestedEvent = isRecord$1(envelope.event) ? envelope.event : null;
-	const eventType = readString(nestedHeader?.event_type) ?? readString(envelope.event_type);
+	const eventType = normalizeNullableString(nestedHeader?.event_type) ?? normalizeNullableString(envelope.event_type);
 	if (!eventType || !FEISHU_DURABLE_EVENT_TYPES.has(eventType)) return null;
-	const eventId = readString(nestedHeader?.event_id) ?? readString(envelope.event_id);
+	const eventId = normalizeNullableString(nestedHeader?.event_id) ?? normalizeNullableString(envelope.event_id);
 	if (!eventId) throw new FeishuIngressPermanentError("invalid-event", `Feishu ${eventType} envelope is missing header.event_id.`);
 	const event = nestedEvent ?? envelope;
 	if (eventType === "im.message.receive_v1") {
-		const chatId = readString((isRecord$1(event.message) ? event.message : null)?.chat_id);
+		const chatId = normalizeNullableString((isRecord$1(event.message) ? event.message : null)?.chat_id);
 		if (!chatId) {
 			if (allowInvalidLane) return {
 				eventId,
@@ -4344,8 +4392,8 @@ function inspectFeishuIngressEnvelope(rawEnvelope, encryptKey, allowInvalidLane
 		};
 	}
 	const noticeMeta = isRecord$1(event.notice_meta) ? event.notice_meta : null;
-	const fileType = readString(noticeMeta?.file_type);
-	const documentId = readString(noticeMeta?.file_token);
+	const fileType = normalizeNullableString(noticeMeta?.file_type);
+	const documentId = normalizeNullableString(noticeMeta?.file_token);
 	if (!fileType || !documentId) {
 		if (allowInvalidLane) return {
 			eventId,
@@ -4580,7 +4628,7 @@ function createFeishuDurableIngress(options) {
 		invoke,
 		invokeWebhook,
 		resolveLifecycle: (data) => {
-			const eventId = isRecord$1(data) ? readString(data.event_id) : null;
+			const eventId = isRecord$1(data) ? normalizeNullableString(data.event_id) : null;
 			return eventId ? activeLifecycles.get(eventId) : void 0;
 		},
 		setSocketTerminator: (terminate) => {
@@ -4777,7 +4825,9 @@ function startBotIdentityRecovery(params) {
 	const log = runtime?.log ?? console.log;
 	log(`feishu[${accountId}]: bot open_id ${currentSource === "cache" ? "loaded from cache" : "unknown"}; starting background provider refresh (delays: ${BOT_IDENTITY_RETRY_DELAYS_MS.map((delay) => `${delay / 1e3}s`).join(", ")})`);
 	if (currentSource !== "cache") log(`feishu[${accountId}]: requireMention group messages stay gated until bot identity recovery succeeds`);
-	retryBotIdentityProbe(account, accountId, runtime, abortSignal);
+	retryBotIdentityProbe(account, accountId, runtime, abortSignal).catch((err) => {
+		(runtime?.error ?? console.error)(`feishu[${accountId}]: bot identity background retry failed unexpectedly: ${String(err)}`);
+	});
 }
 //#endregion
 //#region extensions/feishu/src/card-ux-launcher.ts
@@ -5094,7 +5144,7 @@ function safeJsonStringify(value) {
 	}
 }
 function truncatePromptText(text, maxLength = FEISHU_PROMPT_TEXT_LIMIT) {
-	const normalized = normalizeString(text);
+	const normalized = normalizeOptionalString(text);
 	if (!normalized) return "";
 	return normalized.length > maxLength ? `${sliceUtf16Safe(normalized, 0, maxLength - 1)}…` : normalized;
 }
@@ -5160,7 +5210,7 @@ async function resolveParsedCommentContent(params) {
 					return null;
 				}
 				const objType = normalizeCommentFileType(response.data?.node?.obj_type);
-				const objToken = normalizeString(response.data?.node?.obj_token);
+				const objToken = normalizeOptionalString(response.data?.node?.obj_token);
 				if (!objType || !objToken) return null;
 				return {
 					resolvedObjType: objType,
@@ -5229,18 +5279,18 @@ async function fetchDriveComments(params) {
 }
 async function requestFeishuOpenApi(params) {
 	const formatErrorDetails = (error) => {
-		if (!isRecord$2(error)) return typeof error === "string" ? error : JSON.stringify(error);
-		const response = isRecord$2(error.response) ? error.response : void 0;
-		const responseData = isRecord$2(response?.data) ? response?.data : void 0;
+		if (!isRecord(error)) return typeof error === "string" ? error : JSON.stringify(error);
+		const response = isRecord(error.response) ? error.response : void 0;
+		const responseData = isRecord(response?.data) ? response?.data : void 0;
 		return safeJsonStringify({
 			message: typeof error.message === "string" ? error.message : typeof error === "string" ? error : JSON.stringify(error),
-			code: readString$1(error.code),
-			method: readString$1(isRecord$2(error.config) ? error.config.method : void 0),
-			url: readString$1(isRecord$2(error.config) ? error.config.url : void 0),
+			code: readStringValue(error.code),
+			method: readStringValue(isRecord(error.config) ? error.config.method : void 0),
+			url: readStringValue(isRecord(error.config) ? error.config.url : void 0),
 			http_status: typeof response?.status === "number" ? response.status : void 0,
-			feishu_code: typeof responseData?.code === "number" ? responseData.code : readString$1(responseData?.code),
-			feishu_msg: readString$1(responseData?.msg),
-			feishu_log_id: readString$1(responseData?.log_id)
+			feishu_code: typeof responseData?.code === "number" ? responseData.code : readStringValue(responseData?.code),
+			feishu_msg: readStringValue(responseData?.msg),
+			feishu_log_id: readStringValue(responseData?.log_id)
 		});
 	};
 	const result = await raceWithTimeoutAndAbort(params.client.request({
@@ -5288,15 +5338,15 @@ async function fetchDriveCommentReplies(params) {
 	};
 }
 async function resolveCommentReplyContext(params) {
-	const userId = normalizeString(params.reply.user_id);
-	const normalizedBotOpenIds = new Set(Array.from(params.botOpenIds ?? []).map((botId) => normalizeString(botId)).filter((botId) => Boolean(botId)));
+	const userId = normalizeOptionalString(params.reply.user_id);
+	const normalizedBotOpenIds = new Set(Array.from(params.botOpenIds ?? []).map((botId) => normalizeOptionalString(botId)).filter((botId) => Boolean(botId)));
 	return {
-		replyId: normalizeString(params.reply.reply_id),
+		replyId: normalizeOptionalString(params.reply.reply_id),
 		userId,
 		createTime: typeof params.reply.create_time === "number" ? params.reply.create_time : void 0,
 		isBotAuthored: typeof userId === "string" && normalizedBotOpenIds.has(userId),
 		content: await resolveParsedCommentContent({
-			elements: isRecord$2(params.reply.content) ? params.reply.content.elements : void 0,
+			elements: isRecord(params.reply.content) ? params.reply.content.elements : void 0,
 			botOpenIds: params.botOpenIds,
 			currentDocument: params.currentDocument,
 			client: params.client,
@@ -5451,8 +5501,8 @@ async function fetchDriveCommentContext(params) {
 		createTime: right.createTime,
 		stableId: right.replyId
 	}));
-	const rootReplyContext = resolvedReplies.find((reply) => reply.replyId === normalizeString(rootReply?.reply_id)) ?? resolvedReplies[0];
-	const targetReplyContext = resolvedReplies.find((reply) => reply.replyId === normalizeString(targetReply?.reply_id)) ?? (params.replyId ? void 0 : resolvedReplies.at(-1) ?? rootReplyContext);
+	const rootReplyContext = resolvedReplies.find((reply) => reply.replyId === normalizeOptionalString(rootReply?.reply_id)) ?? resolvedReplies[0];
+	const targetReplyContext = resolvedReplies.find((reply) => reply.replyId === normalizeOptionalString(targetReply?.reply_id)) ?? (params.replyId ? void 0 : resolvedReplies.at(-1) ?? rootReplyContext);
 	let wholeCommentTimeline = [];
 	if (commentCard?.is_whole === true) {
 		const wholeComments = (await fetchDriveComments({
@@ -5466,9 +5516,9 @@ async function fetchDriveCommentContext(params) {
 		})).filter((comment) => comment.is_whole === true);
 		wholeCommentTimeline = await Promise.all(wholeComments.map(async (comment) => {
 			const rootWholeReply = comment.reply_list?.replies?.[0];
-			const normalizedBotOpenIds = new Set(Array.from(params.botOpenIds ?? []).map((botId) => normalizeString(botId)).filter((botId) => Boolean(botId)));
+			const normalizedBotOpenIds = new Set(Array.from(params.botOpenIds ?? []).map((botId) => normalizeOptionalString(botId)).filter((botId) => Boolean(botId)));
 			const content = await resolveParsedCommentContent({
-				elements: isRecord$2(rootWholeReply?.content) ? rootWholeReply.content.elements : void 0,
+				elements: isRecord(rootWholeReply?.content) ? rootWholeReply.content.elements : void 0,
 				botOpenIds: params.botOpenIds,
 				currentDocument,
 				client: params.client,
@@ -5476,12 +5526,12 @@ async function fetchDriveCommentContext(params) {
 				logger: params.logger,
 				accountId: params.accountId
 			});
-			const commentUserId = normalizeString(rootWholeReply?.user_id) || normalizeString(comment.user_id);
+			const commentUserId = normalizeOptionalString(rootWholeReply?.user_id) || normalizeOptionalString(comment.user_id);
 			return {
-				commentId: normalizeString(comment.comment_id) ?? "",
+				commentId: normalizeOptionalString(comment.comment_id) ?? "",
 				userId: commentUserId,
 				createTime: typeof comment.create_time === "number" ? comment.create_time : typeof rootWholeReply?.create_time === "number" ? rootWholeReply.create_time : void 0,
-				isCurrentComment: normalizeString(comment.comment_id) === params.commentId,
+				isCurrentComment: normalizeOptionalString(comment.comment_id) === params.commentId,
 				isBotAuthored: typeof commentUserId === "string" && normalizedBotOpenIds.has(commentUserId),
 				content
 			};
@@ -5496,10 +5546,10 @@ async function fetchDriveCommentContext(params) {
 	}
 	const currentWholeCommentIndex = wholeCommentTimeline.findIndex((entry) => entry.commentId === params.commentId);
 	return {
-		documentTitle: normalizeString(meta?.title),
-		documentUrl: normalizeString(meta?.url),
+		documentTitle: normalizeOptionalString(meta?.title),
+		documentUrl: normalizeOptionalString(meta?.url),
 		isWholeComment: commentCard?.is_whole,
-		quoteText: normalizeString(commentCard?.quote),
+		quoteText: normalizeOptionalString(commentCard?.quote),
 		rootCommentText: rootReplyContext?.content.semanticText ?? rootReplyContext?.content.plainText,
 		targetReplyText: targetReplyContext?.content.semanticText ?? targetReplyContext?.content.plainText,
 		rootCommentContent: rootReplyContext?.content,
@@ -5566,7 +5616,7 @@ async function resolveDriveCommentEventCore(params) {
 	const fileToken = event.notice_meta?.file_token?.trim();
 	const fileType = normalizeCommentFileType(event.notice_meta?.file_type);
 	const senderId = event.notice_meta?.from_user_id?.open_id?.trim();
-	const senderUserId = normalizeString(event.notice_meta?.from_user_id?.user_id);
+	const senderUserId = normalizeOptionalString(event.notice_meta?.from_user_id?.user_id);
 	if (!eventId || !commentId || !noticeType || !fileToken || !fileType || !senderId) {
 		logger?.(`feishu[${accountId}]: drive comment notice missing required fields event=${eventId ?? "unknown"} comment=${commentId ?? "unknown"}`);
 		return null;
@@ -5587,7 +5637,7 @@ async function resolveDriveCommentEventCore(params) {
 		return null;
 	}
 	const context = await fetchDriveCommentContext({
-		client: createClient ? createClient(account ?? { accountId }) : createFeishuClient((await import("./accounts-u9X5Wsan.js").then((n) => n.t)).resolveFeishuAccount({
+		client: createClient ? createClient(account ?? { accountId }) : createFeishuClient((await import("./accounts-CCCdMen2.js").then((n) => n.t)).resolveFeishuAccount({
 			cfg,
 			accountId
 		})),
@@ -5617,32 +5667,32 @@ async function resolveDriveCommentEventCore(params) {
 	};
 }
 function parseFeishuDriveCommentNoticeEventPayload(value) {
-	if (!isRecord$2(value) || !isRecord$2(value.notice_meta)) return null;
+	if (!isRecord(value) || !isRecord(value.notice_meta)) return null;
 	const noticeMeta = value.notice_meta;
-	const fromUserId = isRecord$2(noticeMeta.from_user_id) ? noticeMeta.from_user_id : void 0;
-	const toUserId = isRecord$2(noticeMeta.to_user_id) ? noticeMeta.to_user_id : void 0;
+	const fromUserId = isRecord(noticeMeta.from_user_id) ? noticeMeta.from_user_id : void 0;
+	const toUserId = isRecord(noticeMeta.to_user_id) ? noticeMeta.to_user_id : void 0;
 	return {
-		comment_id: readString$1(value.comment_id),
-		event_id: readString$1(value.event_id),
+		comment_id: readStringValue(value.comment_id),
+		event_id: readStringValue(value.event_id),
 		is_mentioned: asBoolean(value.is_mentioned),
 		notice_meta: {
-			file_token: readString$1(noticeMeta.file_token),
-			file_type: readString$1(noticeMeta.file_type),
+			file_token: readStringValue(noticeMeta.file_token),
+			file_type: readStringValue(noticeMeta.file_type),
 			from_user_id: fromUserId ? {
-				open_id: readString$1(fromUserId.open_id),
-				user_id: readString$1(fromUserId.user_id),
-				union_id: readString$1(fromUserId.union_id)
+				open_id: readStringValue(fromUserId.open_id),
+				user_id: readStringValue(fromUserId.user_id),
+				union_id: readStringValue(fromUserId.union_id)
 			} : void 0,
-			notice_type: readString$1(noticeMeta.notice_type),
+			notice_type: readStringValue(noticeMeta.notice_type),
 			to_user_id: toUserId ? {
-				open_id: readString$1(toUserId.open_id),
-				user_id: readString$1(toUserId.user_id),
-				union_id: readString$1(toUserId.union_id)
+				open_id: readStringValue(toUserId.open_id),
+				user_id: readStringValue(toUserId.user_id),
+				union_id: readStringValue(toUserId.union_id)
 			} : void 0
 		},
-		reply_id: readString$1(value.reply_id),
-		timestamp: readString$1(value.timestamp),
-		type: readString$1(value.type)
+		reply_id: readStringValue(value.reply_id),
+		timestamp: readStringValue(value.timestamp),
+		type: readStringValue(value.type)
 	};
 }
 async function resolveDriveCommentEventTurn(params) {
@@ -5742,7 +5792,7 @@ async function handleFeishuCommentEvent(params) {
 		channel: "feishu",
 		accountId: account.accountId
 	});
-	const resolveCommentAuthorization = async (candidateCfg, mayPair) => {
+	const resolveCommentAuthorization = async (candidateCfg, mayPair, contextBinding) => {
 		const candidateAccount = resolveFeishuRuntimeAccount({
 			cfg: candidateCfg,
 			accountId: account.accountId
@@ -5761,7 +5811,8 @@ async function handleFeishuCommentEvent(params) {
 				senderOpenId: turn.senderId,
 				senderUserId: turn.senderUserId,
 				conversationId: turn.senderId,
-				mayPair
+				mayPair,
+				...contextBinding ? { contextBinding } : {}
 			})
 		};
 	};
@@ -5853,7 +5904,14 @@ async function handleFeishuCommentEvent(params) {
 	const bodyForAgent = `[message_id: ${turn.messageId}]\n${turn.prompt}`;
 	const rawBody = turn.targetReplyText ?? turn.rootCommentText ?? turn.prompt;
 	const conversationLabel = turn.documentTitle ? `Feishu comment · ${turn.documentTitle}` : "Feishu comment";
-	const ctxPayload = buildChannelInboundEventContext({
+	const boundAuthorization = await resolveCommentAuthorization(effectiveCfg, false, {
+		agentId: route.agentId,
+		sessionKey: commentSessionKey,
+		messageId: turn.messageId,
+		inboundEventKind: "user_request"
+	});
+	const ctxPayload = core.channel.inbound.buildContext({
+		channelIngress: boundAuthorization.ingress,
 		channel: "feishu",
 		accountId: route.accountId,
 		surface: "feishu-comment",
@@ -6347,7 +6405,7 @@ const FEISHU_WS_LOG_ERROR_MAX_LENGTH = 500;
 const FEISHU_WS_RECONNECT_EXHAUSTED_RE = /^WebSocket reconnect exhausted after \d+ attempts?/;
 const FEISHU_WS_AUTORECONNECT_DISABLED_ERROR = "WebSocket connect failed and autoReconnect is disabled";
 function isFeishuWebhookPayload(value) {
-	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+	return isRecord(value);
 }
 const BLOCKED_FEISHU_WEBHOOK_PAYLOAD_KEYS = /* @__PURE__ */ new Set([
 	"__proto__",
@@ -6452,16 +6510,15 @@ async function monitorWebSocket({ account, accountId, runtime, abortSignal, even
 			};
 			const publishWsConnected = () => {
 				const connectedAt = Date.now();
-				statusSink?.({
-					connected: true,
+				statusSink?.(channelReadyPatch({
 					lastConnectedAt: connectedAt,
-					lastEventAt: connectedAt,
-					lastError: null
-				});
+					lastEventAt: connectedAt
+				}));
 			};
 			const publishWsReconnecting = () => {
 				statusSink?.({
 					connected: false,
+					lifecycle: "recovering",
 					lastEventAt: Date.now()
 				});
 			};
@@ -6509,10 +6566,11 @@ async function monitorWebSocket({ account, accountId, runtime, abortSignal, even
 			});
 			setSocketTerminator?.(void 0);
 			if (abortSignal?.aborted) break;
-			statusSink?.({
+			const disconnectedAt = Date.now();
+			statusSink?.(channelBlockedPatch(formatFeishuWsErrorForLog(cycleEnd), {
 				connected: false,
-				lastEventAt: Date.now()
-			});
+				lastEventAt: disconnectedAt
+			}));
 			attempt += 1;
 			const delayMs = getFeishuWsReconnectDelayMs(attempt);
 			error(`feishu[${accountId}]: WebSocket connection ended, recreating client in ${delayMs}ms: ${formatFeishuWsErrorForLog(cycleEnd)}`);
@@ -6526,9 +6584,14 @@ async function monitorWebSocket({ account, accountId, runtime, abortSignal, even
 			});
 			setSocketTerminator?.(void 0);
 			if (abortSignal?.aborted) break;
+			const failedAt = Date.now();
+			const terminal = err instanceof Error && isFeishuWsTerminalError(err);
 			statusSink?.({
 				connected: false,
-				lastEventAt: Date.now()
+				lifecycle: terminal ? "blocked" : "recovering",
+				...terminal ? { terminalDisconnect: true } : {},
+				lastEventAt: failedAt,
+				lastError: formatFeishuWsErrorForLog(err)
 			});
 			attempt += 1;
 			const delayMs = getFeishuWsReconnectDelayMs(attempt);
@@ -6551,10 +6614,18 @@ async function monitorWebhook({ account, accountId, runtime, abortSignal, eventD
 	if (!encryptKey) throw new Error(`Feishu account "${accountId}" webhook mode requires encryptKey`);
 	const port = account.config.webhookPort ?? 3e3;
 	const path = account.config.webhookPath ?? "/feishu/events";
+	if (normalizeFeishuWebhookPath(path) !== path) throw new Error(`Feishu account "${accountId}" webhookPath must be a canonical HTTP request path; run "openclaw doctor --fix" to repair it`);
 	const host = account.config.webhookHost ?? "127.0.0.1";
 	log(`feishu[${accountId}]: starting Webhook server on ${host}:${port}, path ${path}...`);
 	const server = http.createServer();
 	server.on("request", (req, res) => {
+		const requestUrl = req.url ?? "/";
+		const requestPath = requestUrl.split("?", 1)[0];
+		const requestRoute = path.includes("?") ? requestUrl : requestPath;
+		if (!requestPath?.startsWith("/") || requestUrl.includes("#") || requestRoute !== path) {
+			respondText(res, 404, "Not Found");
+			return;
+		}
 		res.on("finish", () => {
 			recordWebhookStatus(runtime, accountId, path, res.statusCode);
 			if (res.statusCode >= 200 && res.statusCode < 300) {
@@ -6568,6 +6639,7 @@ async function monitorWebhook({ account, accountId, runtime, abortSignal, eventD
 		if (!applyBasicWebhookRequestGuards({
 			req,
 			res,
+			allowMethods: ["POST"],
 			rateLimiter: feishuWebhookRateLimiter,
 			rateLimitKey: buildFeishuWebhookRateLimitKey({
 				accountId,
@@ -6654,15 +6726,18 @@ async function monitorWebhook({ account, accountId, runtime, abortSignal, eventD
 		server.listen(port, host, () => {
 			log(`feishu[${accountId}]: Webhook server listening on ${host}:${port}`);
 			const webhookConnectedAt = Date.now();
-			statusSink?.({
-				connected: true,
+			statusSink?.(channelReadyPatch({
 				lastConnectedAt: webhookConnectedAt,
-				lastEventAt: webhookConnectedAt,
-				lastError: null
-			});
+				lastEventAt: webhookConnectedAt
+			}));
 		});
 		server.on("error", (err) => {
 			error(`feishu[${accountId}]: Webhook server error: ${err}`);
+			statusSink?.({
+				connected: false,
+				lifecycle: "recovering",
+				lastError: formatFeishuWsErrorForLog(err)
+			});
 			abortSignal?.removeEventListener("abort", handleAbort);
 			reject(err);
 		});
@@ -6799,10 +6874,11 @@ async function resolveReactionSyntheticEvent(params) {
 	const { cfg, accountId, event, botOpenId, fetchMessage = getMessageFeishu, verificationTimeoutMs = FEISHU_REACTION_VERIFY_TIMEOUT_MS, logger, uuid = () => crypto$1.randomUUID(), action = "created" } = params;
 	const emoji = event.reaction_type?.emoji_type;
 	const messageId = event.message_id;
-	const senderId = event.user_id?.open_id;
-	const senderUserId = event.user_id?.user_id;
+	const senderOpenId = event.user_id?.open_id?.trim();
+	const senderUserId = event.user_id?.user_id?.trim();
+	const senderId = senderOpenId || senderUserId;
 	if (!emoji || !messageId || !senderId) return null;
-	const { resolveFeishuAccount } = await import("./accounts-u9X5Wsan.js").then((n) => n.t);
+	const { resolveFeishuAccount } = await import("./accounts-CCCdMen2.js").then((n) => n.t);
 	const reactionNotifications = resolveFeishuAccount({
 		cfg,
 		accountId
@@ -6836,14 +6912,17 @@ async function resolveReactionSyntheticEvent(params) {
 	return {
 		sender: {
 			sender_id: {
-				open_id: senderId,
+				...senderOpenId ? { open_id: senderOpenId } : {},
 				...senderUserId ? { user_id: senderUserId } : {}
 			},
 			sender_type: "user"
 		},
 		message: {
 			message_id: `${messageId}:reaction:${emoji}:${uuid()}`,
+			reply_target_message_id: messageId,
 			typing_target_message_id: messageId,
+			...reactedMsg.rootId ? { root_id: reactedMsg.rootId } : {},
+			...reactedMsg.threadId ? { thread_id: reactedMsg.threadId } : {},
 			chat_id: syntheticChatId,
 			chat_type: syntheticChatType,
 			message_type: "text",
@@ -6855,41 +6934,41 @@ function normalizeFeishuChatType(value) {
 	return value === "group" || value === "topic_group" || value === "private" || value === "p2p" ? value : void 0;
 }
 function parseFeishuBotAddedEventPayload(value) {
-	if (!isRecord$2(value) || !readString$1(value.chat_id) || !isRecord$2(value.operator_id)) return null;
+	if (!isRecord(value) || !readStringValue(value.chat_id) || !isRecord(value.operator_id)) return null;
 	return value;
 }
 function parseFeishuBotRemovedChatId(value) {
-	if (!isRecord$2(value)) return null;
-	return readString$1(value.chat_id) ?? null;
+	if (!isRecord(value)) return null;
+	return readStringValue(value.chat_id) ?? null;
 }
 function firstString(...values) {
 	for (const value of values) {
-		const trimmed = readString$1(value)?.trim();
+		const trimmed = readStringValue(value)?.trim();
 		if (trimmed) return trimmed;
 	}
 }
 function readFeishuIdentityField(value, field) {
-	if (!isRecord$2(value)) return;
+	if (!isRecord(value)) return;
 	return firstString(value[field]);
 }
 function parseFeishuCardActionEventPayload(value) {
-	if (!isRecord$2(value)) return null;
-	const operator = isRecord$2(value.operator) ? value.operator : {};
+	if (!isRecord(value)) return null;
+	const operator = isRecord(value.operator) ? value.operator : {};
 	const action = value.action;
-	const context = isRecord$2(value.context) ? value.context : {};
-	if (!isRecord$2(action)) return null;
+	const context = isRecord(value.context) ? value.context : {};
+	if (!isRecord(action)) return null;
 	const operatorUserId = operator.user_id;
-	const token = readString$1(value.token);
+	const token = readStringValue(value.token);
 	const openId = firstString(operator.open_id, readFeishuIdentityField(operatorUserId, "open_id"), value.open_id, context.open_id);
 	const userId = firstString(operator.user_id, readFeishuIdentityField(operatorUserId, "user_id"), value.user_id, context.user_id);
 	const unionId = firstString(operator.union_id, readFeishuIdentityField(operatorUserId, "union_id"));
-	const tag = readString$1(action.tag);
+	const tag = readStringValue(action.tag);
 	const actionValue = action.value;
 	const openMessageId = firstString(context.open_message_id, value.open_message_id);
 	const contextOpenId = firstString(context.open_id, openId);
 	const contextUserId = firstString(context.user_id, userId);
 	const chatId = firstString(context.chat_id, context.open_chat_id);
-	if (!token || !openId || !tag || !isRecord$2(actionValue)) return null;
+	if (!token || !openId || !tag || !isRecord(actionValue)) return null;
 	return {
 		operator: {
 			open_id: openId,