@openclaw/feishu 2026.9.3 → 2026.9.5

package/dist/{monitor.account-BRDUsS_q.js → .setup/monitor.account-zwHb3HKM.mjs}

@@ -1,16 +1,15 @@
-import { o as resolveFeishuAccount, s as resolveFeishuRuntimeAccount } from "./accounts-cCMNFBKg.js";
-import { i as resolveReceiveIdType } from "./targets-BTQCYRZQ.js";
-import { $ as encodeQuery, A as sendStructuredCardFeishu, B as buildFeishuMediaFallbackText, C as shouldSuppressFeishuTextForVoiceMedia, Ct as resolveFeishuGroupConfig, D as listFeishuThreadMessages, Dt as resolveFeishuReplyPolicy, E as getMessageFeishu, F as isFeishuGroupChatType, I as parseInteractiveCardContent, L as parsePostContent, M as extractMentionTargets, Mt as createFeishuCardInteractionEnvelope, N as isFeishuBroadcastMention, Nt as decodeFeishuCardAction, O as sendCardFeishu, Ot as normalizeFeishuChatType$2, P as isMentionForwardRequest, Q as createCommentTypingReactionLifecycle, St as resolveFeishuDmIngressAccess, Tt as resolveFeishuGroupSenderActivationIngressAccess, U as deliverCommentThreadText, V as resolveFeishuIdentityEmoji, _ as renderFeishuReplyPayload, at as normalizeCommentFileType, b as saveMessageResourceFeishu, bt as hasExplicitFeishuGroupConfig, ct as resolveFeishuCardTemplate, dt as materializeFeishuPostMarkdownSoftBreaks, et as extractReplyText, i as noVisibleFeishuReplyDelivery, it as buildFeishuCommentTarget, j as formatFeishuMediaContent, jt as buildFeishuCardActionTextFallback, k as sendMessageFeishu, kt as resolveFeishuChatType, l as buildFeishuPresentationFallback, n as createFeishuReplyDeliveryResult, nt as parseCommentContentElements, r as mergeFeishuReplyDeliveryResults, rt as requestFeishuApi, t as createFeishuPartialReplyDeliveryError, u as consumeFeishuPresentationFallbackMarker, ut as chunkFeishuPostMarkdown, v as resolveFeishuRichReply, w as chunkFeishuCardMarkdown, wt as resolveFeishuGroupConversationIngressAccess, x as sendMediaFeishu, xt as normalizeFeishuAllowEntry, y as withinCardTableLimit } from "./reply-delivery-result-BXEmtKpf.js";
-import { a as normalizeFeishuWebhookPath, o as normalizeFeishuExternalKey } from "./doctor-contract-w6FpMypv.js";
-import { o as resolveConfiguredFeishuGroupSessionScope, t as buildFeishuConversationId } from "./conversation-id-VYgGQ-GX.js";
-import { a as getFeishuUserAgent, i as createFeishuWSClient, n as createEventDispatcher, r as createFeishuClient, s as resolveConfiguredHttpTimeoutMs } from "./client-DMbIL3UH.js";
-import { t as getFeishuRuntime } from "./runtime-C5JxBWZp.js";
-import { r as getChatInfo } from "./chat-BZSnEtgb.js";
-import { t as createFeishuThreadBindingManager } from "./thread-bindings-BiL1wGqK.js";
-import { evaluateSupplementalContextVisibility, normalizeAgentId as normalizeAgentId$1, resolveChannelContextVisibilityMode } from "./runtime-api.js";
-import { t as readFeishuJsonResponse } from "./json-response-DXajw_FU.js";
-import { a as waitForAbortableDelay, i as raceWithTimeoutAndAbort } from "./probe-D_SatdZl.js";
-import { t as fetchBotIdentityForMonitor } from "./monitor-DSGtOPio.js";
+import { o as resolveFeishuAccount, s as resolveFeishuRuntimeAccount } from "./accounts-DmU0xYPx.mjs";
+import { o as resolveConfiguredFeishuGroupSessionScope, t as buildFeishuConversationId, u as resolveReceiveIdType } from "./conversation-id-H-lUayji.mjs";
+import { $ as createCommentTypingReactionLifecycle, A as sendStructuredCardFeishu, At as resolveFeishuChatType, C as shouldSuppressFeishuTextForVoiceMedia, Ct as resolveFeishuDmIngressAccess, D as listFeishuThreadMessages, E as getMessageFeishu, Et as resolveFeishuGroupSenderActivationIngressAccess, F as isMentionForwardRequest, H as resolveFeishuIdentityEmoji, I as isFeishuGroupChatType, L as normalizeFeishuEventChatType, M as formatFeishuMediaContent, Mt as buildFeishuCardActionTextFallback, N as extractMentionTargets, Nt as createFeishuCardInteractionEnvelope, O as sendCardFeishu, Ot as resolveFeishuReplyPolicy, P as isFeishuBroadcastMention, Pt as decodeFeishuCardAction, R as parseInteractiveCardContent, St as normalizeFeishuAllowEntry, Tt as resolveFeishuGroupConversationIngressAccess, V as buildFeishuMediaFallbackText, W as deliverCommentThreadText, _ as renderFeishuReplyPayload, at as buildFeishuCommentTarget, b as saveMessageResourceFeishu, dt as chunkFeishuPostMarkdown, et as encodeQuery, ft as materializeFeishuPostMarkdownSoftBreaks, i as noVisibleFeishuReplyDelivery, it as requestFeishuApi, k as sendMessageFeishu, kt as normalizeFeishuChatType, l as buildFeishuPresentationFallback, lt as resolveFeishuCardTemplate, n as createFeishuReplyDeliveryResult, ot as normalizeCommentFileType, r as mergeFeishuReplyDeliveryResults, rt as parseCommentContentElements, t as createFeishuPartialReplyDeliveryError, tt as extractReplyText, u as consumeFeishuPresentationFallbackMarker, v as resolveFeishuRichReply, w as chunkFeishuCardMarkdown, wt as resolveFeishuGroupConfig, x as sendMediaFeishu, xt as hasExplicitFeishuGroupConfig, y as withinCardTableLimit, z as parsePostContent } from "./reply-delivery-result-DFjxGLgX.mjs";
+import { a as normalizeFeishuWebhookPath, o as normalizeFeishuExternalKey } from "./doctor-contract-w6FpMypv.mjs";
+import { a as getFeishuUserAgent, f as resolveConfiguredHttpTimeoutMs, i as createFeishuWSClient, n as createEventDispatcher, r as createFeishuClient } from "./client-DCwNVFZg.mjs";
+import { t as getFeishuRuntime } from "./runtime-C5JxBWZp.mjs";
+import { r as getChatInfo } from "./chat-dWJYS63b.mjs";
+import { t as createFeishuThreadBindingManager } from "./thread-bindings-BiL1wGqK.mjs";
+import { evaluateSupplementalContextVisibility, normalizeAgentId as normalizeAgentId$1, resolveChannelContextVisibilityMode } from "../runtime-api.js";
+import { t as readFeishuJsonResponse } from "./json-response-DXajw_FU.mjs";
+import { a as waitForAbortableDelay, i as raceWithTimeoutAndAbort } from "./probe-bdidyhAn.mjs";
+import { t as fetchBotIdentityForMonitor } from "./monitor-C69OLzgO.mjs";
 import { resolveAgentConfig } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { DEFAULT_INGRESS_ADOPTION_STALL_MS, bindIngressLifecycleToReplyOptions, createChannelIngressError, createChannelIngressMonitor, createChannelMessageReplyPipeline, createReplyPrefixContext, formatChannelProgressDraftLineForEntry, isChannelProgressDraftWorkToolName, resolveAgentOutboundIdentity, resolveChannelPreviewStreamMode, resolveChannelStreamingBlockEnabled } from "openclaw/plugin-sdk/channel-outbound";
 import { createChannelPairingController } from "openclaw/plugin-sdk/channel-pairing";
@@ -46,7 +45,7 @@ import { getGlobalHookRunner } from "openclaw/plugin-sdk/plugin-runtime";
 import * as http from "node:http";
 import { createRuntimeConfigReader } from "openclaw/plugin-sdk/runtime-config-snapshot";
 import { channelBlockedPatch, channelReadyPatch } from "openclaw/plugin-sdk/gateway-runtime";
-import { installRequestBodyLimitGuard, readWebhookBodyOrReject } from "openclaw/plugin-sdk/webhook-request-guards";
+import { createWebhookInFlightLimiter, installRequestBodyLimitGuard, readWebhookBodyOrReject, sendHttpRequestRejection } from "openclaw/plugin-sdk/webhook-request-guards";
 import { isAbortRequestText, isBtwRequestText } from "openclaw/plugin-sdk/command-primitives-runtime";
 //#region extensions/feishu/src/bot-agent-body.ts
 const MAX_MENTION_CONTEXT_NAME_LENGTH = 80;
@@ -198,6 +197,7 @@ function createFeishuBroadcastIngressSettlement(params) {
 						defer();
 					},
 					onDeferredHeartbeat: () => params.lifecycle?.onDeferredHeartbeat?.(),
+					deferredHeartbeatIntervalMs: params.lifecycle?.deferredHeartbeatIntervalMs,
 					onAdoptionFinalizing: beginFinalizing,
 					onAbandoned: async () => {
 						if (lane.status === "completed" || lane.status === "failed" || lane.status === "abandoned") return;
@@ -2636,7 +2636,7 @@ async function resolveFeishuAudioTranscript(params) {
 	if (audioMedia.length === 0) return;
 	if (params.content.trim()) return params.content;
 	try {
-		const { transcribeFirstAudio } = await import("./audio-preflight.runtime-BBfC9elv.js");
+		const { transcribeFirstAudio } = await import("./audio-preflight.runtime-BBfC9elv.mjs");
 		return await transcribeFirstAudio({
 			ctx: {
 				media: audioMedia,
@@ -4052,7 +4052,7 @@ function cacheResolvedCardActionChatType(cacheKey, value, now) {
 	});
 }
 async function resolveCardActionChatType(params) {
-	const explicitChatType = normalizeFeishuChatType$2(params.chatType);
+	const explicitChatType = normalizeFeishuChatType(params.chatType);
 	if (explicitChatType) return explicitChatType;
 	const chatId = params.event.context.chat_id?.trim();
 	if (!chatId) return "p2p";
@@ -4396,6 +4396,7 @@ function buildFeishuFlushIngressLifecycle(sources, options) {
 				transportLifecycle.onDeferred();
 			},
 			onDeferredHeartbeat: () => transportLifecycle.onDeferredHeartbeat?.(),
+			deferredHeartbeatIntervalMs: transportLifecycle.deferredHeartbeatIntervalMs,
 			onAdoptionFinalizing: () => {
 				transportLifecycle.onAdoptionFinalizing();
 			},
@@ -5541,7 +5542,7 @@ async function resolveDriveCommentEventCore(params) {
 		return null;
 	}
 	const context = await fetchDriveCommentContext({
-		client: createClient ? createClient(account ?? { accountId }) : createFeishuClient((await import("./accounts-cCMNFBKg.js").then((n) => n.t)).resolveFeishuAccount({
+		client: createClient ? createClient(account ?? { accountId }) : createFeishuClient((await import("./accounts-DmU0xYPx.mjs").then((n) => n.t)).resolveFeishuAccount({
 			cfg,
 			accountId
 		})),
@@ -6016,9 +6017,6 @@ function createFeishuDriveCommentNoticeHandler(params) {
 }
 //#endregion
 //#region extensions/feishu/src/monitor.message-handler.ts
-function normalizeFeishuChatType$1(value) {
-	return value === "group" || value === "topic_group" || value === "private" || value === "p2p" ? value : void 0;
-}
 function parseFeishuMessageEventPayload(value) {
 	if (!isRecord(value)) return null;
 	const sender = value.sender;
@@ -6028,7 +6026,7 @@ function parseFeishuMessageEventPayload(value) {
 	if (!isRecord(senderId)) return null;
 	const messageId = readStringValue(message.message_id);
 	const chatId = readStringValue(message.chat_id);
-	const chatType = normalizeFeishuChatType$1(message.chat_type);
+	const chatType = normalizeFeishuEventChatType(message.chat_type);
 	const messageType = readStringValue(message.message_type);
 	if (!messageId || !chatId || !chatType || !messageType || typeof message.content !== "string") return null;
 	return value;
@@ -6050,7 +6048,7 @@ function dedupeFeishuDebounceEntriesByDedupeKey(entries) {
 	const seen = /* @__PURE__ */ new Set();
 	const deduped = [];
 	for (const entry of entries) {
-		const dedupeKey = resolveFeishuMessageDedupeKey(entry.event);
+		const dedupeKey = entry.messageDedupeKey;
 		if (!dedupeKey) {
 			deduped.push(entry);
 			continue;
@@ -6126,7 +6124,7 @@ function createFeishuMessageReceiveHandler({ cfg, channelRuntime, accountId, run
 	const recordSuppressedMessageIds = async (entries, dispatchDedupeKey) => {
 		const keepDedupeKey = dispatchDedupeKey?.trim();
 		const suppressedIds = new Set(entries.map((entry) => ({
-			id: resolveFeishuMessageDedupeKey(entry.event),
+			id: entry.messageDedupeKey,
 			claim: entry.processingClaim
 		})).filter(({ id }) => Boolean(id) && (!keepDedupeKey || id !== keepDedupeKey)));
 		for (const suppressed of suppressedIds) try {
@@ -6167,19 +6165,19 @@ function createFeishuMessageReceiveHandler({ cfg, channelRuntime, accountId, run
 					}
 					try {
 						if (activeEntries.length === 1) {
-							await dispatchFeishuMessage(last.event, resolveFeishuMessageDedupeKey(last.event), last.processingClaim, admissionLifecycle);
+							await dispatchFeishuMessage(last.event, last.messageDedupeKey, last.processingClaim, admissionLifecycle);
 							await settle();
 							return;
 						}
 						const dedupedEntries = dedupeFeishuDebounceEntriesByDedupeKey(activeEntries);
 						const freshEntries = [];
-						for (const entry of dedupedEntries) if (!await hasProcessedMessage(resolveFeishuMessageDedupeKey(entry.event), accountId, log)) freshEntries.push(entry);
+						for (const entry of dedupedEntries) if (!await hasProcessedMessage(entry.messageDedupeKey, accountId, log)) freshEntries.push(entry);
 						const dispatchEntry = freshEntries.at(-1);
 						if (!dispatchEntry) {
 							await settle();
 							return;
 						}
-						const dispatchDedupeKey = resolveFeishuMessageDedupeKey(dispatchEntry.event);
+						const dispatchDedupeKey = dispatchEntry.messageDedupeKey;
 						if (!lifecycle) await recordSuppressedMessageIds(dedupedEntries, dispatchDedupeKey);
 						const combinedText = freshEntries.map((entry) => resolveDebounceText(entry.event)).filter(Boolean).join("\n");
 						const mergedMentions = resolveFeishuDebounceMentions({
@@ -6237,8 +6235,9 @@ function createFeishuMessageReceiveHandler({ cfg, channelRuntime, accountId, run
 			await completeSuppressedIngress();
 			return;
 		}
+		const messageDedupeKey = resolveFeishuMessageDedupeKey(event);
 		const claim = await claimUnprocessedFeishuMessage({
-			messageId: resolveFeishuMessageDedupeKey(event),
+			messageId: messageDedupeKey,
 			namespace: accountId,
 			log
 		});
@@ -6249,6 +6248,7 @@ function createFeishuMessageReceiveHandler({ cfg, channelRuntime, accountId, run
 		}
 		const debounceEntry = {
 			event,
+			messageDedupeKey,
 			...claim.kind === "claimed" ? { processingClaim: claim.handle } : {},
 			...turnAdoptionLifecycle ? { turnAdoptionLifecycle } : {}
 		};
@@ -6298,6 +6298,8 @@ function buildFeishuWebhookRateLimitKey(params) {
 //#region extensions/feishu/src/monitor.transport.ts
 const FEISHU_WEBHOOK_ACCEPTED_HEADER = "x-openclaw-delivery-accepted";
 const FEISHU_WEBHOOK_ACCEPTED_VALUE = "durable";
+const FEISHU_PRE_AUTH_MAX_IN_FLIGHT = 64;
+const FEISHU_WEBHOOK_TIMESTAMP_MAX_SKEW_MS = 36e5;
 const FEISHU_WS_RECONNECT_INITIAL_DELAY_MS = 1e3;
 const FEISHU_WS_RECONNECT_MAX_DELAY_MS = 3e4;
 const FEISHU_WS_LOG_ERROR_MAX_LENGTH = 500;
@@ -6325,6 +6327,12 @@ function parseFeishuWebhookPayload(rawBody) {
 		return null;
 	}
 }
+function isFeishuWebhookTimestampFresh(timestamp) {
+	const parsed = Number.parseInt(timestamp, 10);
+	if (!Number.isFinite(parsed)) return false;
+	const timestampMs = parsed < 0xe8d4a51000 ? parsed * 1e3 : parsed;
+	return Math.abs(Date.now() - timestampMs) <= FEISHU_WEBHOOK_TIMESTAMP_MAX_SKEW_MS;
+}
 function isFeishuWebhookSignatureValid(params) {
 	const encryptKey = params.encryptKey?.trim();
 	if (!encryptKey) return false;
@@ -6335,6 +6343,7 @@ function isFeishuWebhookSignatureValid(params) {
 	const nonce = Array.isArray(nonceHeader) ? nonceHeader[0] : nonceHeader;
 	const signature = Array.isArray(signatureHeader) ? signatureHeader[0] : signatureHeader;
 	if (!timestamp || !nonce || !signature) return false;
+	if (!isFeishuWebhookTimestampFresh(timestamp)) return false;
 	const computedSignature = crypto.createHash("sha256").update(timestamp + nonce + encryptKey + params.rawBody).digest("hex");
 	return safeEqualSecret(computedSignature, signature);
 }
@@ -6516,6 +6525,11 @@ async function monitorWebhook({ account, accountId, runtime, abortSignal, eventD
 	const path = account.config.webhookPath ?? "/feishu/events";
 	if (normalizeFeishuWebhookPath(path) !== path) throw new Error(`Feishu account "${accountId}" webhookPath must be a canonical HTTP request path; run "openclaw doctor --fix" to repair it`);
 	const host = account.config.webhookHost ?? "127.0.0.1";
+	const preAuthInFlightLimiter = createWebhookInFlightLimiter({
+		maxInFlightPerKey: FEISHU_PRE_AUTH_MAX_IN_FLIGHT,
+		maxTrackedKeys: 1
+	});
+	const preAuthInFlightKey = `${accountId}:${path}`;
 	log(`feishu[${accountId}]: starting Webhook server on ${host}:${port}, path ${path}...`);
 	const server = http.createServer();
 	server.on("request", (req, res) => {
@@ -6552,31 +6566,46 @@ async function monitorWebhook({ account, accountId, runtime, abortSignal, eventD
 			nowMs: Date.now(),
 			requireJsonContentType: true
 		})) return;
+		if (!preAuthInFlightLimiter.tryAcquire(preAuthInFlightKey)) {
+			sendHttpRequestRejection(req, res, 429, "Rate limit exceeded", "text/plain; charset=utf-8").catch((err) => {
+				error(`feishu[${accountId}]: webhook concurrency rejection failed: ${String(err)}`);
+			});
+			return;
+		}
 		const guard = installRequestBodyLimitGuard(req, res, {
 			maxBytes: FEISHU_WEBHOOK_MAX_BODY_BYTES,
 			timeoutMs: FEISHU_WEBHOOK_BODY_TIMEOUT_MS,
 			responseFormat: "text"
 		});
-		if (guard.isTripped()) return;
+		if (guard.isTripped()) {
+			preAuthInFlightLimiter.release(preAuthInFlightKey);
+			return;
+		}
 		(async () => {
 			try {
-				const body = await readWebhookBodyOrReject({
-					req,
-					res,
-					maxBytes: FEISHU_WEBHOOK_MAX_BODY_BYTES,
-					timeoutMs: FEISHU_WEBHOOK_BODY_TIMEOUT_MS,
-					profile: "pre-auth"
-				});
-				if (!body.ok || res.writableEnded) return;
-				if (guard.isTripped()) return;
-				const rawBody = body.value;
-				if (!isFeishuWebhookSignatureValid({
-					headers: req.headers,
-					rawBody,
-					encryptKey
-				})) {
-					respondText(res, 401, "Invalid signature");
-					return;
+				let rawBody;
+				try {
+					const body = await readWebhookBodyOrReject({
+						req,
+						res,
+						maxBytes: FEISHU_WEBHOOK_MAX_BODY_BYTES,
+						timeoutMs: FEISHU_WEBHOOK_BODY_TIMEOUT_MS,
+						profile: "pre-auth"
+					});
+					if (!body.ok || res.writableEnded) return;
+					if (guard.isTripped()) return;
+					rawBody = body.value;
+					if (!isFeishuWebhookSignatureValid({
+						headers: req.headers,
+						rawBody,
+						encryptKey
+					})) {
+						respondText(res, 401, "Invalid signature");
+						return;
+					}
+				} finally {
+					guard.dispose();
+					preAuthInFlightLimiter.release(preAuthInFlightKey);
 				}
 				const payload = parseFeishuWebhookPayload(rawBody);
 				if (!payload) {
@@ -6604,8 +6633,6 @@ async function monitorWebhook({ account, accountId, runtime, abortSignal, eventD
 			} catch (err) {
 				error(`feishu[${accountId}]: webhook handler error: ${String(err)}`);
 				if (!res.headersSent) respondText(res, 500, "Internal Server Error");
-			} finally {
-				guard.dispose();
 			}
 		})();
 	});
@@ -6781,7 +6808,7 @@ async function resolveReactionSyntheticEvent(params) {
 	const senderUserId = event.user_id?.user_id?.trim();
 	const senderId = senderOpenId || senderUserId;
 	if (!emoji || !messageId || !senderId) return null;
-	const { resolveFeishuAccount } = await import("./accounts-cCMNFBKg.js").then((n) => n.t);
+	const { resolveFeishuAccount } = await import("./accounts-DmU0xYPx.mjs").then((n) => n.t);
 	const reactionNotifications = resolveFeishuAccount({
 		cfg,
 		accountId
@@ -6804,7 +6831,7 @@ async function resolveReactionSyntheticEvent(params) {
 		return null;
 	}
 	const fallbackChatType = reactedMsg.chatType;
-	const resolvedChatType = normalizeFeishuChatType(event.chat_type) ?? fallbackChatType;
+	const resolvedChatType = normalizeFeishuEventChatType(event.chat_type) ?? fallbackChatType;
 	if (!resolvedChatType) {
 		logger?.(`feishu[${accountId}]: skipping reaction ${emoji} on ${messageId} without chat type context`);
 		return null;
@@ -6833,9 +6860,6 @@ async function resolveReactionSyntheticEvent(params) {
 		}
 	};
 }
-function normalizeFeishuChatType(value) {
-	return value === "group" || value === "topic_group" || value === "private" || value === "p2p" ? value : void 0;
-}
 function parseFeishuBotAddedEventPayload(value) {
 	if (!isRecord(value) || !readStringValue(value.chat_id) || !isRecord(value.operator_id)) return null;
 	return value;

package/dist/{probe-D_SatdZl.js → .setup/probe-bdidyhAn.mjs}

@@ -1,5 +1,5 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { r as createFeishuClient } from "./client-DMbIL3UH.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+import { r as createFeishuClient } from "./client-DCwNVFZg.mjs";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { asDateTimestampMs, resolveExpiresAtMsFromDurationMs, resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { createHash } from "node:crypto";