@openclaw/feishu 2026.9.1-beta.1 → 2026.9.2

package/dist/{security-audit-D6Fz2h6p.js → security-audit-DKfR4Cv3.js}

@@ -1,4 +1,4 @@
-import "./security-audit-shared-BgpY7AiJ.js";
+import "./security-audit-shared-CK5rVR-1.js";
 //#region extensions/feishu/src/message-action-contract.ts
 const FEISHU_NATIVE_CHAT_TARGET_ALIASES = [
 	"chatId",

package/dist/{security-audit-shared-BgpY7AiJ.js → security-audit-shared-CK5rVR-1.js}

@@ -2,7 +2,8 @@ import { asOptionalRecord, hasNonEmptyString } from "openclaw/plugin-sdk/string-
 import { hasConfiguredSecretInput } from "openclaw/plugin-sdk/secret-input";
 //#region extensions/feishu/src/security-audit-shared.ts
 function isFeishuDocToolEnabled(cfg) {
-	const feishu = asOptionalRecord(asOptionalRecord(cfg.channels)?.feishu);
+	const channels = asOptionalRecord(cfg.channels);
+	const feishu = asOptionalRecord(channels?.feishu);
 	if (!feishu || feishu.enabled === false) return false;
 	const baseTools = asOptionalRecord(feishu.tools);
 	const baseDocEnabled = baseTools?.doc !== false;

package/dist/security-contract-api.js

@@ -1,2 +1,2 @@
-import { t as collectFeishuSecurityAuditFindings } from "./security-audit-shared-BgpY7AiJ.js";
+import { t as collectFeishuSecurityAuditFindings } from "./security-audit-shared-CK5rVR-1.js";
 export { collectFeishuSecurityAuditFindings };

package/dist/session-binding-contract-api.js

@@ -1,2 +1,2 @@
-import { t as createFeishuThreadBindingManager } from "./thread-bindings-CptM_YU6.js";
+import { t as createFeishuThreadBindingManager } from "./thread-bindings-BiL1wGqK.js";
 export { createFeishuThreadBindingManager };

package/dist/setup-api.js

@@ -1,2 +1,2 @@
-import { i as feishuSetupAdapter, n as feishuSetupWizard, t as feishuPlugin } from "./channel-Dpgf8wLD.js";
+import { i as feishuSetupAdapter, n as feishuSetupWizard, t as feishuPlugin } from "./channel-VytDDz_B.js";
 export { feishuPlugin, feishuSetupAdapter, feishuSetupWizard };

package/dist/{subagent-hooks-KUi-7vUy.js → subagent-hooks-Buadpie_.js}

@@ -1,21 +1,18 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { r as normalizeFeishuTarget } from "./targets-BUjQ1TcA.js";
+import { a as stripFeishuProviderPrefix, r as normalizeFeishuTarget } from "./targets-BTQCYRZQ.js";
 import { r as parseFeishuConversationId, t as buildFeishuConversationId } from "./conversation-id-VYgGQ-GX.js";
-import { n as getFeishuThreadBindingManager } from "./thread-bindings-CptM_YU6.js";
+import { n as getFeishuThreadBindingManager } from "./thread-bindings-BiL1wGqK.js";
 import { normalizeOptionalLowercaseString, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/feishu/src/subagent-hooks.ts
 var subagent_hooks_exports = /* @__PURE__ */ __exportAll({
 	handleFeishuSubagentDeliveryTarget: () => handleFeishuSubagentDeliveryTarget,
 	handleFeishuSubagentEnded: () => handleFeishuSubagentEnded
 });
-function stripProviderPrefix(raw) {
-	return raw.replace(/^(feishu|lark):/i, "").trim();
-}
 function resolveFeishuRequesterConversation(params) {
 	const manager = getFeishuThreadBindingManager(params.accountId);
 	if (!manager) return null;
 	const rawTo = params.to?.trim();
-	const withoutProviderPrefix = rawTo ? stripProviderPrefix(rawTo) : "";
+	const withoutProviderPrefix = rawTo ? stripFeishuProviderPrefix(rawTo) : "";
 	const normalizedTarget = rawTo ? normalizeFeishuTarget(rawTo) : null;
 	const threadId = params.threadId != null && params.threadId !== "" ? String(params.threadId).trim() : "";
 	const isChatTarget = /^(chat|group|channel):/i.test(withoutProviderPrefix);

package/dist/subagent-hooks-api.js

@@ -1,6 +1,6 @@
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 //#region extensions/feishu/subagent-hooks-api.ts
-const loadFeishuSubagentHooksModule = createLazyRuntimeModule(() => import("./subagent-hooks-KUi-7vUy.js").then((n) => n.r));
+const loadFeishuSubagentHooksModule = createLazyRuntimeModule(() => import("./subagent-hooks-Buadpie_.js").then((n) => n.r));
 function registerFeishuSubagentHooks(api) {
 	api.on("subagent_delivery_target", async (event) => {
 		const { handleFeishuSubagentDeliveryTarget } = await loadFeishuSubagentHooksModule();

package/dist/{targets-BUjQ1TcA.js → targets-BTQCYRZQ.js}

@@ -3,7 +3,7 @@ import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/string-coer
 const CHAT_ID_PREFIX = "oc_";
 const OPEN_ID_PREFIX = "ou_";
 const USER_ID_REGEX = /^[a-zA-Z0-9_-]+$/;
-function stripProviderPrefix(raw) {
+function stripFeishuProviderPrefix(raw) {
 	return raw.replace(/^(feishu|lark):/i, "").trim();
 }
 function detectIdType(id) {
@@ -16,7 +16,7 @@ function detectIdType(id) {
 function normalizeFeishuTarget(raw) {
 	const trimmed = raw.trim();
 	if (!trimmed) return null;
-	const withoutProvider = stripProviderPrefix(trimmed);
+	const withoutProvider = stripFeishuProviderPrefix(trimmed);
 	const lowered = normalizeLowercaseStringOrEmpty(withoutProvider);
 	if (lowered.startsWith("chat:")) return withoutProvider.slice(5).trim() || null;
 	if (lowered.startsWith("group:")) return withoutProvider.slice(6).trim() || null;
@@ -37,7 +37,7 @@ function resolveReceiveIdType(id) {
 	return "user_id";
 }
 function looksLikeFeishuId(raw) {
-	const trimmed = stripProviderPrefix(raw.trim());
+	const trimmed = stripFeishuProviderPrefix(raw.trim());
 	if (!trimmed) return false;
 	if (/^(chat|group|channel|user|dm|open_id):/i.test(trimmed)) return true;
 	if (trimmed.startsWith(CHAT_ID_PREFIX)) return true;
@@ -45,4 +45,4 @@ function looksLikeFeishuId(raw) {
 	return false;
 }
 //#endregion
-export { resolveReceiveIdType as i, looksLikeFeishuId as n, normalizeFeishuTarget as r, detectIdType as t };
+export { stripFeishuProviderPrefix as a, resolveReceiveIdType as i, looksLikeFeishuId as n, normalizeFeishuTarget as r, detectIdType as t };

package/dist/{thread-bindings-CptM_YU6.js → thread-bindings-BiL1wGqK.js}

@@ -1,8 +1,9 @@
-import { resolveSessionAgentId } from "openclaw/plugin-sdk/agent-scope-runtime";
+import { resolveSessionAgentIdStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { registerSessionBindingAdapter, resolveThreadBindingConversationIdFromBindingId, resolveThreadBindingIdleTimeoutMsForChannel, resolveThreadBindingMaxAgeMsForChannel, unregisterSessionBindingAdapter } from "openclaw/plugin-sdk/conversation-runtime";
 import { isFutureDateTimestampMs } from "openclaw/plugin-sdk/number-runtime";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { normalizeAccountId } from "openclaw/plugin-sdk/routing";
+import { isPluginOwnedSessionBindingRecord } from "openclaw/plugin-sdk/conversation-binding-runtime";
 //#region extensions/feishu/src/thread-bindings.ts
 const FEISHU_THREAD_BINDINGS_STATE_KEY = Symbol.for("openclaw.feishuThreadBindingsState");
 let state;
@@ -47,6 +48,7 @@ function toSessionBindingRecord(record, defaults) {
 		boundAt: record.boundAt,
 		expiresAt,
 		metadata: {
+			...record.metadata,
 			agentId: record.agentId,
 			label: record.label,
 			boundBy: record.boundBy,
@@ -98,6 +100,12 @@ function createFeishuThreadBindingManager(params) {
 			const normalizedTargetSessionKey = targetSessionKey.trim();
 			if (!normalizedConversationId || !normalizedTargetSessionKey) return null;
 			const existingLocal = manager.getByConversationId(normalizedConversationId);
+			const storedTargetKind = toFeishuTargetKind(targetKind);
+			const previous = existingLocal?.targetSessionKey === normalizedTargetSessionKey && existingLocal.targetKind === storedTargetKind ? existingLocal : void 0;
+			const targetMetadata = {
+				...previous?.metadata,
+				...metadata
+			};
 			const now = Date.now();
 			const record = {
 				accountId,
@@ -105,16 +113,17 @@ function createFeishuThreadBindingManager(params) {
 				parentConversationId: normalizeOptionalString(parentConversationId) ?? existingLocal?.parentConversationId,
 				deliveryTo: typeof metadata?.deliveryTo === "string" && metadata.deliveryTo.trim() ? metadata.deliveryTo.trim() : existingLocal?.deliveryTo,
 				deliveryThreadId: typeof metadata?.deliveryThreadId === "string" && metadata.deliveryThreadId.trim() ? metadata.deliveryThreadId.trim() : existingLocal?.deliveryThreadId,
-				targetKind: toFeishuTargetKind(targetKind),
+				targetKind: storedTargetKind,
 				targetSessionKey: normalizedTargetSessionKey,
-				agentId: normalizeOptionalString(metadata?.agentId) ?? existingLocal?.agentId ?? resolveSessionAgentId({
+				agentId: normalizeOptionalString(metadata?.agentId) ?? previous?.agentId ?? (isPluginOwnedSessionBindingRecord({ metadata: targetMetadata }) ? void 0 : resolveSessionAgentIdStrict({
 					config: params.cfg,
 					sessionKey: normalizedTargetSessionKey
-				}),
-				label: typeof metadata?.label === "string" && metadata.label.trim() ? metadata.label.trim() : existingLocal?.label,
-				boundBy: typeof metadata?.boundBy === "string" && metadata.boundBy.trim() ? metadata.boundBy.trim() : existingLocal?.boundBy,
+				})),
+				label: normalizeOptionalString(metadata?.label) ?? previous?.label,
+				boundBy: normalizeOptionalString(metadata?.boundBy) ?? previous?.boundBy,
 				boundAt: now,
-				lastActivityAt: now
+				lastActivityAt: now,
+				metadata: targetMetadata
 			};
 			getState().bindingsByAccountConversation.set(resolveBindingKey({
 				accountId,
@@ -159,8 +168,10 @@ function createFeishuThreadBindingManager(params) {
 			return removed;
 		},
 		stop: () => {
-			for (const key of getState().bindingsByAccountConversation.keys()) if (key.startsWith(`${accountId}:`)) getState().bindingsByAccountConversation.delete(key);
-			getState().managersByAccountId.delete(accountId);
+			if (getState().managersByAccountId.get(accountId) === manager) {
+				for (const key of getState().bindingsByAccountConversation.keys()) if (key.startsWith(`${accountId}:`)) getState().bindingsByAccountConversation.delete(key);
+				getState().managersByAccountId.delete(accountId);
+			}
 			unregisterSessionBindingAdapter({
 				channel: "feishu",
 				accountId,

package/node_modules/@larksuiteoapi/node-sdk/node_modules/ws/lib/permessage-deflate.js

@@ -167,7 +167,9 @@ class PerMessageDeflate {
             (typeof opts.serverMaxWindowBits === 'number' &&
               opts.serverMaxWindowBits > params.server_max_window_bits))) ||
         (typeof opts.clientMaxWindowBits === 'number' &&
-          !params.client_max_window_bits)
+          (typeof params.client_max_window_bits === 'number'
+            ? opts.clientMaxWindowBits > params.client_max_window_bits
+            : !params.client_max_window_bits))
       ) {
         return false;
       }

package/node_modules/@larksuiteoapi/node-sdk/node_modules/ws/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ws",
-  "version": "8.21.1",
+  "version": "8.21.3",
   "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js",
   "keywords": [
     "HyBi",

package/node_modules/typebox/build/format/email.mjs

@@ -1,4 +1,4 @@
-const Email = /^(?:[a-z0-9!#$%&'*+/=?^_`{|}~-]+(?:\.[a-z0-9!#$%&'*+/=?^_`{|}~-]+)*|"(?:[^"\\]|\\.)*")@(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*|\[(?:IPv6:[a-f0-9:]+|(?:25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])(?:\.(?:25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])){3})\])$/i;
+const Email = /^(?:[a-z0-9!#$%&'*+/=?^_`{|}~-]+(?:\.[a-z0-9!#$%&'*+/=?^_`{|}~-]+)*|"(?:[^"\\]|\\[\x20-\x7e])*")@(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*|\[(?:IPv6:[a-f0-9:]+|(?:25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])(?:\.(?:25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])){3})\])$/i;
 /**
  * Returns true if the value is an Email
  * @specification https://datatracker.ietf.org/doc/html/rfc5322

package/node_modules/typebox/build/format/idna/idn-hostname.mjs

@@ -1,6 +1,9 @@
 import * as FormatBidi from './format/bidi.mjs';
 import * as LabelUnicode from './label/unicode.mjs';
 import * as LabelPuny from './label/puny.mjs';
+// ------------------------------------------------------------------
+// IsLabel
+// ------------------------------------------------------------------
 function IsValidLabelLength(value) {
     return value.length > 0 && value.length <= 63;
 }
@@ -8,9 +11,24 @@ function IsLabel(value) {
     return IsValidLabelLength(value) && (LabelPuny.IsPunyLabel(value) ||
         LabelUnicode.IsUnicodeLabel(value));
 }
+// ------------------------------------------------------------------
+// NormalizeHostname
+//
+// Normalizes a hostname for label validation. Normalizes for NFC
+// such that equivalent codepoint sequences can be uniformly
+// compared. It also removes codepoints that IDNA mapping ignores,
+// and converts full stop variants to ASCII '.' so the hostname can
+// be split into labels.
+// ------------------------------------------------------------------
 function NormalizeHostname(value) {
-    return value.normalize('NFC').replace(/[\u002E\u3002\uFF0E\uFF61]/g, '.');
+    return value
+        .normalize('NFC')
+        .replace(/[\u00ad\u034f\u180b-\u180d\u200b\ufe00-\ufe0f\u{e0100}-\u{e01ef}]/gu, '') // RE_IGNORED_MAPPING
+        .replace(/[\u002E\u3002\uFF0E\uFF61]/g, '.'); // RE_FULL_STOP_MAPPING
 }
+// ------------------------------------------------------------------
+// IsIdnHostname
+// ------------------------------------------------------------------
 export function IsIdnHostname(value) {
     if (value.length === 0 || value.includes(' '))
         return false;

package/node_modules/typebox/build/format/json_pointer.d.mts

@@ -1,6 +1,6 @@
 /**
  * Returns true if the value is a json pointer
- * @specification
- * @source ajv-formats
+ * @specification https://datatracker.ietf.org/doc/html/rfc6901
+ * @source https://github.com/ajv-validator/ajv-formats
  */
 export declare function IsJsonPointer(value: string): boolean;

package/node_modules/typebox/build/format/json_pointer.mjs

@@ -1,8 +1,8 @@
 const JsonPointer = /^(?:\/(?:[^~/]|~0|~1)*)*$/;
 /**
  * Returns true if the value is a json pointer
- * @specification
- * @source ajv-formats
+ * @specification https://datatracker.ietf.org/doc/html/rfc6901
+ * @source https://github.com/ajv-validator/ajv-formats
  */
 export function IsJsonPointer(value) {
     return JsonPointer.test(value);

package/node_modules/typebox/build/format/json_pointer_uri_fragment.d.mts

@@ -1,6 +1,6 @@
 /**
  * Returns true if the value is a json pointer uri fragment
- * @specification
- * @source ajv-formats
+ * @specification https://datatracker.ietf.org/doc/html/rfc6901
+ * @source https://github.com/ajv-validator/ajv-formats
  */
 export declare function IsJsonPointerUriFragment(value: string): boolean;

package/node_modules/typebox/build/format/json_pointer_uri_fragment.mjs

@@ -1,8 +1,8 @@
 const JsonPointerUriFragment = /^#(?:\/(?:[a-z0-9_\-.!$&'()*+,;:=@]|%[0-9a-f]{2}|~0|~1)*)*$/i;
 /**
  * Returns true if the value is a json pointer uri fragment
- * @specification
- * @source ajv-formats
+ * @specification https://datatracker.ietf.org/doc/html/rfc6901
+ * @source https://github.com/ajv-validator/ajv-formats
  */
 export function IsJsonPointerUriFragment(value) {
     return JsonPointerUriFragment.test(value);

package/node_modules/typebox/build/format/relative_json_pointer.d.mts

@@ -1,6 +1,6 @@
 /**
  * Returns true if the value is a relative json pointer
- * @specification
- * @source ajv-formats
+ * @specification https://datatracker.ietf.org/doc/html/rfc6901
+ * @source https://github.com/ajv-validator/ajv-formats
  */
 export declare function IsRelativeJsonPointer(value: string): boolean;

package/node_modules/typebox/build/format/relative_json_pointer.mjs

@@ -1,8 +1,8 @@
 const RelativeJsonPointer = /^(?:0|[1-9][0-9]*)(?:#|(?:\/(?:[^~/]|~0|~1)*)*)$/;
 /**
  * Returns true if the value is a relative json pointer
- * @specification
- * @source ajv-formats
+ * @specification https://datatracker.ietf.org/doc/html/rfc6901
+ * @source https://github.com/ajv-validator/ajv-formats
  */
 export function IsRelativeJsonPointer(value) {
     return RelativeJsonPointer.test(value);

package/node_modules/typebox/build/system/memory/assign.mjs

@@ -1,11 +1,12 @@
 // deno-lint-ignore-file ban-types no-explicit-any
 // deno-fmt-ignore-file
 import { Metrics } from './metrics.mjs';
+import { Freeze } from './freeze.mjs';
 /**
  * Performs an Object assign using the Left and Right object types. We track this operation as it
  * creates a new GC handle per assignment.
  */
 export function Assign(left, right) {
     Metrics.assign += 1;
-    return { ...left, ...right };
+    return Freeze({ ...left, ...right });
 }

package/node_modules/typebox/build/system/memory/create.mjs

@@ -1,7 +1,7 @@
 // deno-lint-ignore-file no-explicit-any
-// deno-fmt-ignore-file
 import { Settings } from '../settings/index.mjs';
 import { Metrics } from './metrics.mjs';
+import { Freeze } from './freeze.mjs';
 function MergeHidden(left, right) {
     for (const key of Object.keys(right)) {
         Object.defineProperty(left, key, {
@@ -23,8 +23,7 @@ function Merge(left, right) {
  */
 export function Create(hidden, enumerable, options = {}) {
     Metrics.create += 1;
-    const settings = Settings.Get();
     const withOptions = Merge(enumerable, options);
-    const withHidden = settings.enumerableKind ? Merge(withOptions, hidden) : MergeHidden(withOptions, hidden);
-    return settings.immutableTypes ? Object.freeze(withHidden) : withHidden;
+    const withHidden = Settings.Get().enumerableKind ? Merge(withOptions, hidden) : MergeHidden(withOptions, hidden);
+    return Freeze(withHidden);
 }

package/node_modules/typebox/build/system/memory/discard.mjs

@@ -1,7 +1,7 @@
 // deno-lint-ignore-file no-explicit-any
-// deno-fmt-ignore-file
 import { Guard } from '../../guard/index.mjs';
 import { Metrics } from './metrics.mjs';
+import { Freeze } from './freeze.mjs';
 import { Clone } from './clone.mjs';
 /** Discards multiple property keys from the given object value */
 export function Discard(value, propertyKeys) {
@@ -14,5 +14,5 @@ export function Discard(value, propertyKeys) {
         descriptor.value = Clone(descriptor.value);
         Object.defineProperty(result, key, descriptor);
     }
-    return result;
+    return Freeze(result);
 }

package/node_modules/typebox/build/system/memory/freeze.d.mts

@@ -0,0 +1,4 @@
+type ObjectLike = Record<PropertyKey, any>;
+/** Conditionally freezes the value if `immutableTypes` is true, otherwise no action. */
+export declare function Freeze(value: ObjectLike): ObjectLike;
+export {};

package/node_modules/typebox/build/system/memory/freeze.mjs

@@ -0,0 +1,6 @@
+// deno-lint-ignore-file no-explicit-any
+import { Settings } from '../settings/index.mjs';
+/** Conditionally freezes the value if `immutableTypes` is true, otherwise no action. */
+export function Freeze(value) {
+    return Settings.Get().immutableTypes ? Object.freeze(value) : value;
+}

package/node_modules/typebox/build/system/memory/update.mjs

@@ -1,6 +1,7 @@
-// deno-fmt-ignore-file
+// deno-lint-ignore-file no-explicit-any
 import { Settings } from '../settings/index.mjs';
 import { Metrics } from './metrics.mjs';
+import { Freeze } from './freeze.mjs';
 import { Clone } from './clone.mjs';
 /**
  * Updates a value with new properties while preserving property enumerability. Use this function to modify
@@ -28,5 +29,5 @@ export function Update(current, hidden, enumerable) {
             value: enumerable[key]
         });
     }
-    return result;
+    return Freeze(result);
 }

package/node_modules/typebox/package.json

@@ -1,7 +1,7 @@
 {
   "name": "typebox",
   "description": "Json Schema Type Builder with Static Type Resolution for TypeScript",
-  "version": "1.3.16",
+  "version": "1.3.18",
   "keywords": [
     "typescript",
     "jsonschema"