@openclaw/feishu 2026.7.2-beta.7 → 2026.8.1-beta.3

package/dist/{channel-CScE82zY.js → channel-Ceq80_zP.js}

@@ -1,23 +1,25 @@
-import { a as resolveDefaultFeishuAccountId, d as isRecord$1, i as listFeishuAccountIds, n as inspectFeishuCredentials, o as resolveFeishuAccount, r as listEnabledFeishuAccounts, s as resolveFeishuRuntimeAccount } from "./accounts-u9X5Wsan.js";
+import { a as resolveDefaultFeishuAccountId, i as listFeishuAccountIds, n as inspectFeishuCredentials, o as resolveFeishuAccount, r as listEnabledFeishuAccounts, s as resolveFeishuRuntimeAccount } from "./accounts-CCCdMen2.js";
 import { i as resolveReceiveIdType, n as looksLikeFeishuId, r as normalizeFeishuTarget } from "./targets-BUjQ1TcA.js";
-import { A as resolveFeishuChatType, D as resolveFeishuGroupToolPolicy, N as createFeishuCardInteractionEnvelope, _ as canEnumerateAllFeishuPeers, a as readNativeFeishuCardJson, b as resolveFeishuChatReadPreliminaryAuthorization, g as canEnumerateAllFeishuGroups, h as authorizeFeishuChatMemberRead, k as normalizeFeishuChatType, m as assertFeishuChatReadAllowed, n as createFeishuSendReceipt, u as chunkFeishuMarkdown, v as isFeishuGroupReadAllowed, w as resolveFeishuGroupConfig, y as isFeishuGroupReadEnabled } from "./send-result-B9_BpUPx.js";
-import { a as parseFeishuTargetId, i as parseFeishuDirectConversationId, n as buildFeishuModelOverrideParentCandidates, o as resolveConfiguredFeishuGroupSessionScope, r as parseFeishuConversationId, t as buildFeishuConversationId } from "./conversation-id-BeJL-wq7.js";
-import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-BiD9tyIv.js";
-import { t as messageActionTargetAliases } from "./security-audit-D7WK_BHh.js";
+import { A as resolveFeishuChatType, D as resolveFeishuGroupToolPolicy, N as createFeishuCardInteractionEnvelope, _ as canEnumerateAllFeishuPeers, a as readNativeFeishuCardJson, b as resolveFeishuChatReadPreliminaryAuthorization, g as canEnumerateAllFeishuGroups, h as authorizeFeishuChatMemberRead, k as normalizeFeishuChatType, m as assertFeishuChatReadAllowed, n as createFeishuSendReceipt, u as chunkFeishuMarkdown, v as isFeishuGroupReadAllowed, w as resolveFeishuGroupConfig, y as isFeishuGroupReadEnabled } from "./send-result-DEAycmOk.js";
+import { i as normalizeFeishuWebhookPath, n as normalizeCompatibilityConfig, r as DEFAULT_FEISHU_WEBHOOK_PATH, t as legacyConfigRules } from "./doctor-contract-bEQXIXyP.js";
+import { a as parseFeishuTargetId, i as parseFeishuDirectConversationId, n as buildFeishuModelOverrideParentCandidates, o as resolveConfiguredFeishuGroupSessionScope, r as parseFeishuConversationId, t as buildFeishuConversationId } from "./conversation-id-VYgGQ-GX.js";
+import { t as messageActionTargetAliases } from "./security-audit-D6Fz2h6p.js";
 import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./secret-contract-BCpDLdg9.js";
 import { t as collectFeishuSecurityAuditFindings } from "./security-audit-shared-BgpY7AiJ.js";
-import { t as resolveFeishuSessionConversation } from "./session-conversation-BksWrfzm.js";
+import { t as resolveFeishuSessionConversation } from "./session-conversation-DFCIvQK-.js";
 import { createLazyRuntimeModule, createLazyRuntimeNamedExport } from "openclaw/plugin-sdk/lazy-runtime";
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
+import { resolveAgentConfig } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { formatAllowFromLowercase } from "openclaw/plugin-sdk/allow-from";
 import { ToolAuthorizationError, createActionGate } from "openclaw/plugin-sdk/channel-actions";
 import { adaptScopedAccountAccessor, createHybridChannelConfigAdapter } from "openclaw/plugin-sdk/channel-config-helpers";
 import { buildChannelOutboundSessionRoute, createChatChannelPlugin, stripChannelTargetPrefix } from "openclaw/plugin-sdk/channel-core";
 import { createAccountStatusSink, createRuntimeOutboundDelegates, defineChannelMessageAdapter } from "openclaw/plugin-sdk/channel-outbound";
 import { createPairingPrefixStripper } from "openclaw/plugin-sdk/channel-pairing";
-import { createAllowlistProviderGroupPolicyWarningCollector, projectConfigAccountIdWarningCollector } from "openclaw/plugin-sdk/channel-policy";
+import { createAllowlistProviderGroupPolicyWarningCollector, createConditionalWarningCollector } from "openclaw/plugin-sdk/channel-policy";
 import { getSessionBindingService } from "openclaw/plugin-sdk/conversation-runtime";
 import { applyDirectoryQueryAndLimit, createChannelDirectoryAdapter, createRuntimeDirectoryLiveAdapter, listDirectoryGroupEntriesFromMapKeysAndAllowFrom, listDirectoryUserEntriesFromAllowFrom, listDirectoryUserEntriesFromAllowFromAndMapKeys } from "openclaw/plugin-sdk/directory-runtime";
+import { PlatformMessageNotDispatchedError } from "openclaw/plugin-sdk/error-runtime";
 import { legacyInteractiveReplyToPresentation, normalizeLegacyInteractiveReply, normalizeMessagePresentation, renderMessagePresentationChartFallbackText, renderMessagePresentationFallbackText, renderMessagePresentationTableFallbackText, resolveLegacyInteractiveTextFallback } from "openclaw/plugin-sdk/interactive-runtime";
 import { parseStrictPositiveInteger } from "openclaw/plugin-sdk/number-runtime";
 import { buildProbeChannelStatusSummary, createComputedAccountStatusAdapter, createDefaultChannelRuntimeState } from "openclaw/plugin-sdk/status-helpers";
@@ -33,6 +35,7 @@ import { buildSecretInputSchema, hasConfiguredSecretInput as hasConfiguredSecret
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
+import { isPathStrictlyInside } from "openclaw/plugin-sdk/file-access-runtime";
 import { normalizeAgentId } from "openclaw/plugin-sdk/routing";
 import { deleteSessionEntry, isValidAgentHarnessSessionStoreEntry, listSessionEntries, loadTranscriptEventsSync, resolveSessionStoreBackupPaths, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
 import { resolveStateDir } from "openclaw/plugin-sdk/state-paths";
@@ -60,6 +63,7 @@ const ChannelActionsSchema = z.object({ reactions: z.boolean().optional() }).str
 const FeishuGroupPolicySchema = z.union([GroupPolicySchema, z.literal("allowall").transform(() => "open")]);
 const FeishuDomainSchema = z.union([z.enum(["feishu", "lark"]), z.string().url().startsWith("https://")]);
 const FeishuConnectionModeSchema = z.enum(["websocket", "webhook"]);
+const FeishuWebhookPathSchema = z.string().refine((value) => normalizeFeishuWebhookPath(value) === value, { message: "webhookPath must be a canonical HTTP request path; run \"openclaw doctor --fix\" to repair it" });
 const TtsOverrideSchema = z.object({
 	auto: z.enum([
 		"off",
@@ -239,7 +243,7 @@ const FeishuAccountConfigSchema = z.object({
 	verificationToken: buildSecretInputSchema().optional(),
 	domain: FeishuDomainSchema.optional(),
 	connectionMode: FeishuConnectionModeSchema.optional(),
-	webhookPath: z.string().optional(),
+	webhookPath: FeishuWebhookPathSchema.optional(),
 	...FeishuSharedConfigShape,
 	groupSessionScope: GroupSessionScopeSchema,
 	topicSessionMode: TopicSessionModeSchema
@@ -253,7 +257,7 @@ const FeishuChannelConfigSchema = buildChannelConfigSchema(buildMultiAccountChan
 	verificationToken: buildSecretInputSchema().optional(),
 	domain: FeishuDomainSchema.optional().default("feishu"),
 	connectionMode: FeishuConnectionModeSchema.optional().default("websocket"),
-	webhookPath: z.string().optional().default("/feishu/events"),
+	webhookPath: FeishuWebhookPathSchema.optional().default(DEFAULT_FEISHU_WEBHOOK_PATH),
 	...FeishuSharedConfigShape,
 	dmPolicy: DmPolicySchema.optional().default("pairing"),
 	reactionNotifications: ReactionNotificationModeSchema.optional().default("own"),
@@ -428,12 +432,6 @@ function safeReadDir(dir) {
 		return [];
 	}
 }
-function isPathWithinRoot(targetPath, rootPath) {
-	const resolvedTarget = path.resolve(targetPath);
-	const resolvedRoot = path.resolve(rootPath);
-	const relative = path.relative(resolvedRoot, resolvedTarget);
-	return relative !== "" && !relative.startsWith("..") && !path.isAbsolute(relative);
-}
 function formatDisplayPath(filePath) {
 	const home = os.homedir();
 	const resolved = path.resolve(filePath);
@@ -455,21 +453,18 @@ function isFeishuSessionStoreKey(key) {
 function isFeishuAcpBindingSessionKey(key) {
 	return /^agent:[^:]+:acp:binding:feishu(?::|$)/.test(key.trim().toLowerCase());
 }
-function normalizeMetadataString(value) {
-	return typeof value === "string" ? value.trim().toLowerCase() : "";
-}
 function isFeishuSessionEntry(key, value) {
 	if (isFeishuAcpBindingSessionKey(key)) return false;
 	if (isFeishuSessionStoreKey(key)) return true;
 	if (!isRecord(value)) return false;
-	if (normalizeMetadataString(value.channel) === "feishu" || normalizeMetadataString(value.lastChannel) === "feishu") return true;
-	if (normalizeMetadataString((isRecord(value.route) ? value.route : null)?.channel) === "feishu") return true;
-	if (normalizeMetadataString((isRecord(value.deliveryContext) ? value.deliveryContext : null)?.channel) === "feishu") return true;
-	if (normalizeMetadataString((isRecord(value.pendingFinalDeliveryContext) ? value.pendingFinalDeliveryContext : null)?.channel) === "feishu") return true;
+	if (normalizeLowercaseStringOrEmpty(value.channel) === "feishu" || normalizeLowercaseStringOrEmpty(value.lastChannel) === "feishu") return true;
+	if (normalizeLowercaseStringOrEmpty((isRecord(value.route) ? value.route : null)?.channel) === "feishu") return true;
+	if (normalizeLowercaseStringOrEmpty((isRecord(value.deliveryContext) ? value.deliveryContext : null)?.channel) === "feishu") return true;
+	if (normalizeLowercaseStringOrEmpty((isRecord(value.pendingFinalDeliveryContext) ? value.pendingFinalDeliveryContext : null)?.channel) === "feishu") return true;
 	const origin = isRecord(value.origin) ? value.origin : null;
-	const originProvider = normalizeMetadataString(origin?.provider);
-	const originSurface = normalizeMetadataString(origin?.surface);
-	const originFrom = normalizeMetadataString(origin?.from);
+	const originProvider = normalizeLowercaseStringOrEmpty(origin?.provider);
+	const originSurface = normalizeLowercaseStringOrEmpty(origin?.surface);
+	const originFrom = normalizeLowercaseStringOrEmpty(origin?.from);
 	return originProvider === "feishu" || originSurface.startsWith("feishu") || originFrom.startsWith("feishu:");
 }
 function collectConfiguredAgentIds(cfg) {
@@ -547,8 +542,8 @@ function resolveSessionTranscriptCandidates(params) {
 	const agentSessionsDir = resolveFeishuAgentSessionsDir(params.agentId);
 	const addSafeCandidate = (candidate) => {
 		const resolved = path.isAbsolute(candidate) ? path.resolve(candidate) : path.resolve(sessionsDir, candidate);
-		const isStoreCandidate = isPathWithinRoot(resolved, sessionsDir);
-		const isAgentSessionCandidate = isPathWithinRoot(resolved, agentSessionsDir);
+		const isStoreCandidate = isPathStrictlyInside(sessionsDir, resolved);
+		const isAgentSessionCandidate = isPathStrictlyInside(agentSessionsDir, resolved);
 		if (resolved === sessionsDir || resolved === agentSessionsDir || !isStoreCandidate && !isAgentSessionCandidate) return false;
 		candidates.add(resolved);
 		return true;
@@ -1567,7 +1562,7 @@ const feishuSetupWizard = {
 			});
 			let probeResult = null;
 			if (configured && account.configured) try {
-				const { probeFeishu } = await import("./probe-p3POS2RN.js").then((n) => n.n);
+				const { probeFeishu } = await import("./probe-DVpy58s0.js").then((n) => n.n);
 				probeResult = await probeFeishu(account);
 			} catch {}
 			if (!configured) return [formatFeishuStatusLine("needs-credentials")];
@@ -1619,13 +1614,13 @@ function readBooleanParam(params, keys) {
 	}
 }
 function hasLegacyFeishuCardCommandValue(actionValue) {
-	return isRecord$1(actionValue) && actionValue.oc !== "ocf1" && (Boolean(typeof actionValue.command === "string" && actionValue.command.trim()) || Boolean(typeof actionValue.text === "string" && actionValue.text.trim()));
+	return isRecord(actionValue) && actionValue.oc !== "ocf1" && (Boolean(typeof actionValue.command === "string" && actionValue.command.trim()) || Boolean(typeof actionValue.text === "string" && actionValue.text.trim()));
 }
 function containsLegacyFeishuCardCommandValue(node) {
 	if (Array.isArray(node)) return node.some((item) => containsLegacyFeishuCardCommandValue(item));
-	if (!isRecord$1(node)) return false;
+	if (!isRecord(node)) return false;
 	if (node.tag === "button" && hasLegacyFeishuCardCommandValue(node.value)) return true;
-	if (node.tag === "button" && Array.isArray(node.behaviors) && node.behaviors.some((behavior) => isRecord$1(behavior) && hasLegacyFeishuCardCommandValue(behavior.value))) return true;
+	if (node.tag === "button" && Array.isArray(node.behaviors) && node.behaviors.some((behavior) => isRecord(behavior) && hasLegacyFeishuCardCommandValue(behavior.value))) return true;
 	return Object.values(node).some((value) => containsLegacyFeishuCardCommandValue(value));
 }
 const meta = {
@@ -1639,7 +1634,25 @@ const meta = {
 	order: 70,
 	preferSessionLookupForAnnounceTarget: true
 };
-const loadFeishuChannelRuntime = createLazyRuntimeNamedExport(() => import("./channel.runtime-B21e1E0r.js"), "feishuChannelRuntime");
+const loadFeishuChannelRuntime = createLazyRuntimeNamedExport(() => import("./channel.runtime-DnRyzGoU.js"), "feishuChannelRuntime");
+async function resolveFeishuMessageSender(params) {
+	try {
+		const sender = params.resolve(await loadFeishuChannelRuntime());
+		if (sender) return sender;
+		throw new Error(params.unavailableMessage);
+	} catch (error) {
+		if (error instanceof PlatformMessageNotDispatchedError) throw error;
+		throw new PlatformMessageNotDispatchedError(params.unavailableMessage, { cause: error });
+	}
+}
+const resolveFeishuTextSender = () => resolveFeishuMessageSender({
+	resolve: (runtime) => runtime.feishuOutbound.sendText,
+	unavailableMessage: "Feishu text sending is not available."
+});
+const resolveFeishuMediaSender = () => resolveFeishuMessageSender({
+	resolve: (runtime) => runtime.feishuOutbound.sendMedia,
+	unavailableMessage: "Feishu media sending is not available."
+});
 function toFeishuMessageSendResult(result, kind) {
 	const receipt = result.receipt ?? createFeishuSendReceipt({
 		messageId: result.messageId,
@@ -1658,9 +1671,12 @@ const feishuMessageAdapter = defineChannelMessageAdapter({
 		media: true
 	} },
 	send: {
+		lifecycle: { beforeSendAttempt: async (ctx) => {
+			if (ctx.kind === "text") await resolveFeishuTextSender();
+			else if (ctx.kind === "media") await resolveFeishuMediaSender();
+		} },
 		text: async (ctx) => {
-			const sendText = (await loadFeishuChannelRuntime()).feishuOutbound.sendText;
-			if (!sendText) throw new Error("Feishu text sending is not available.");
+			const sendText = await resolveFeishuTextSender();
 			const { onDeliveryResult, ...outboundCtx } = ctx;
 			return toFeishuMessageSendResult(await sendText({
 				...outboundCtx,
@@ -1670,8 +1686,7 @@ const feishuMessageAdapter = defineChannelMessageAdapter({
 			}), "text");
 		},
 		media: async (ctx) => {
-			const sendMedia = (await loadFeishuChannelRuntime()).feishuOutbound.sendMedia;
-			if (!sendMedia) throw new Error("Feishu media sending is not available.");
+			const sendMedia = await resolveFeishuMediaSender();
 			const { onDeliveryResult, ...outboundCtx } = ctx;
 			return toFeishuMessageSendResult(await sendMedia({
 				...outboundCtx,
@@ -1683,7 +1698,7 @@ const feishuMessageAdapter = defineChannelMessageAdapter({
 	}
 });
 async function createFeishuActionClient(account) {
-	const { createFeishuClient } = await import("./client-Dcbs6vml.js").then((n) => n.t);
+	const { createFeishuClient } = await import("./client-Hp7uo_cl.js").then((n) => n.t);
 	return createFeishuClient(account);
 }
 async function resolveFeishuChatTypeById(params) {
@@ -1713,6 +1728,12 @@ const collectFeishuSecurityWarnings = createAllowlistProviderGroupPolicyWarningC
 		}).accountId}] groups: groupPolicy="open" allows any member to trigger (mention-gated). Set channels.feishu.groupPolicy="allowlist" + channels.feishu.groupAllowFrom to restrict senders.`];
 	}
 });
+const collectFeishuOpenGroupFindings = createConditionalWarningCollector.findings({
+	collectWarnings: collectFeishuSecurityWarnings,
+	checkId: "channels.feishu.groups.open",
+	severity: "critical",
+	title: "Feishu security warning"
+});
 function describeFeishuMessageTool({ cfg, accountId }) {
 	const enabledAccounts = accountId ? [resolveFeishuAccount({
 		cfg,
@@ -1888,8 +1909,7 @@ function resolveFeishuMessageActionResponsePrefix(ctx) {
 	const channel = ctx.cfg.channels?.feishu;
 	const configured = (ctx.accountId ? channel?.accounts?.[ctx.accountId]?.responsePrefix : void 0) ?? channel?.responsePrefix ?? (channel === void 0 ? ctx.cfg.messages?.responsePrefix : void 0);
 	if (!configured) return;
-	const agentId = (ctx.agentId?.trim() || "main").toLowerCase();
-	const identityName = ctx.cfg.agents?.list?.find((agent) => agent.id.trim().toLowerCase() === agentId)?.identity?.name?.trim();
+	const identityName = resolveAgentConfig(ctx.cfg, ctx.agentId ?? "main")?.identity?.name?.trim();
 	const resolved = configured === "auto" ? identityName ? `[${identityName}]` : void 0 : configured.replace(/\{(?:identity\.name|identityname)\}/gi, identityName ?? "$&");
 	return resolved && !UNRESOLVED_RESPONSE_PREFIX_VAR_PATTERN.test(resolved) ? resolved : void 0;
 }
@@ -2093,6 +2113,7 @@ const feishuPlugin = createChatChannelPlugin({
 		] },
 		groups: { resolveToolPolicy: resolveFeishuGroupToolPolicy },
 		conversationBindings: {
+			bindingStore: "adapter",
 			defaultTopLevelPlacement: "current",
 			buildModelOverrideParentCandidates: ({ parentConversationId }) => buildFeishuModelOverrideParentCandidates(parentConversationId)
 		},
@@ -2141,6 +2162,7 @@ const feishuPlugin = createChatChannelPlugin({
 			collectRuntimeConfigAssignments
 		},
 		actions: {
+			providerOwnedReadGates: true,
 			messageActionTargetAliases,
 			describeMessageTool: describeFeishuMessageTool,
 			handleAction: async (ctx) => {
@@ -2196,7 +2218,9 @@ const feishuPlugin = createChatChannelPlugin({
 								...audioAsVoice === void 0 ? {} : { audioAsVoice }
 							},
 							accountId: ctx.accountId ?? void 0,
+							...ctx.mediaAccess ? { mediaAccess: ctx.mediaAccess } : {},
 							mediaLocalRoots: ctx.mediaLocalRoots,
+							...ctx.mediaReadFile ? { mediaReadFile: ctx.mediaReadFile } : {},
 							...replyInThread ? { threadId: replyToMessageId } : { replyToId: replyToMessageId },
 							...audioAsVoice === void 0 ? {} : { audioAsVoice }
 						});
@@ -2216,7 +2240,9 @@ const feishuPlugin = createChatChannelPlugin({
 						text: text ?? "",
 						mediaUrl,
 						accountId: ctx.accountId ?? void 0,
+						...ctx.mediaAccess ? { mediaAccess: ctx.mediaAccess } : {},
 						mediaLocalRoots: ctx.mediaLocalRoots,
+						...ctx.mediaReadFile ? { mediaReadFile: ctx.mediaReadFile } : {},
 						...replyInThread ? { threadId: replyToMessageId } : { replyToId: replyToMessageId },
 						...audioAsVoice === true ? { audioAsVoice: true } : {}
 					});
@@ -2626,12 +2652,12 @@ const feishuPlugin = createChatChannelPlugin({
 				afterWrite: { mode: "auto" }
 			});
 		} },
-		setup: feishuSetupAdapter,
 		setupContract: feishuSetupContract,
 		setupWizard: feishuSetupWizard,
 		messaging: {
 			targetPrefixes: ["feishu", "lark"],
 			normalizeTarget: (raw) => normalizeFeishuTarget(raw) ?? void 0,
+			inferTargetChatType: ({ to }) => resolveReceiveIdType(to) === "chat_id" ? "group" : "direct",
 			resolveDeliveryTarget: ({ conversationId, parentConversationId }) => {
 				const directId = parseFeishuDirectConversationId(conversationId);
 				if (directId) return { to: `user:${directId}` };
@@ -2698,7 +2724,7 @@ const feishuPlugin = createChatChannelPlugin({
 			})
 		}),
 		gateway: { startAccount: async (ctx) => {
-			const { monitorFeishuProvider } = await import("./monitor-DngbaA6a.js");
+			const { monitorFeishuProvider } = await import("./monitor-CZ8cDXrq.js");
 			const account = resolveFeishuRuntimeAccount({
 				cfg: ctx.cfg,
 				accountId: ctx.accountId
@@ -2725,7 +2751,10 @@ const feishuPlugin = createChatChannelPlugin({
 		message: feishuMessageAdapter
 	},
 	security: {
-		collectWarnings: projectConfigAccountIdWarningCollector(collectFeishuSecurityWarnings),
+		collectWarnings: ({ cfg, accountId }) => collectFeishuOpenGroupFindings({
+			cfg,
+			accountId
+		}),
 		collectAuditFindings: ({ cfg }) => collectFeishuSecurityAuditFindings({ cfg })
 	},
 	pairing: { text: {

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as feishuPlugin } from "./channel-CScE82zY.js";
+import { t as feishuPlugin } from "./channel-Ceq80_zP.js";
 export { feishuPlugin };