@vibe-lark/larkpal 0.1.8

package/dist/lark-cli-provider-CdgwmqSz.mjs

@@ -0,0 +1,562 @@
+import { t as larkLogger } from "./lark-logger-D7_pEVQc.mjs";
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+import { execSync } from "node:child_process";
+import { createHash } from "node:crypto";
+//#region \0rolldown/runtime.js
+var __defProp = Object.defineProperty;
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+//#endregion
+//#region src/credentials/lark-cli-provider.ts
+/**
+* 飞书应用凭证提供者
+*
+* 凭证来源优先级：
+*   1. 环境变量 LARK_APP_ID / LARK_APP_SECRET（最高优先）
+*   2. LarkPal 自身凭证文件: ~/.larkpal/credentials.json（由 larkpal init 写入）
+*   3. 新版 lark-cli (≥1.0.x) 配置 + keychain
+*   4. 旧版 lark-cli 配置文件: ~/.config/lark/config.json
+*
+* lark-cli 是可插拔依赖——没有 lark-cli 也能通过环境变量启动。
+* 有 lark-cli 时可以额外获取 tenant_access_token。
+*
+* lark-cli 安装方式:
+*   npm install -g @larksuite/cli
+*   npx skills add larksuite/cli -y -g
+*   lark-cli config init
+*   lark-cli auth login --recommend
+*/
+var lark_cli_provider_exports = /* @__PURE__ */ __exportAll({ LarkCliCredentialProvider: () => LarkCliCredentialProvider });
+const log = larkLogger("credentials/lark-cli-provider");
+/**
+* 探测 lark-cli 可执行文件路径。
+*/
+function findLarkCli() {
+	try {
+		const cliPath = execSync("which lark-cli", {
+			encoding: "utf-8",
+			timeout: 5e3
+		}).trim();
+		if (!cliPath) return null;
+		let version = "unknown";
+		try {
+			version = execSync(`${cliPath} --version`, {
+				encoding: "utf-8",
+				timeout: 5e3
+			}).trim();
+		} catch {}
+		return {
+			path: cliPath,
+			version
+		};
+	} catch {
+		return null;
+	}
+}
+/**
+* 通过环境变量 + lark-cli 获取凭证的提供者实现。
+*
+* - 环境变量是主要凭证来源，确保 lark-cli 是可插拔的
+* - lark-cli 提供额外能力（token 缓存、刷新）
+* - lark-cli 版本和路径在启动时记录，方便排查
+*/
+var LarkCliCredentialProvider = class LarkCliCredentialProvider {
+	appId;
+	appSecret;
+	tenantAccessToken;
+	userAccessToken;
+	/** lark-cli 可执行文件路径，null 表示不可用 */
+	larkCliPath;
+	/** lark-cli 版本号 */
+	larkCliVersion;
+	/**
+	* 检查凭证是否已配置（不抛出异常）。
+	*
+	* 检测来源优先级：
+	*   1. 环境变量 LARK_APP_ID + LARK_APP_SECRET
+	*   2. LarkPal 凭证文件: ~/.larkpal/credentials.json
+	*   3. 旧版 lark-cli 配置: ~/.config/lark/config.json
+	*   4. 新版 lark-cli 配置: ~/.lark-cli/config.json（apps 数组 + keychain）
+	*
+	* 用于 CLI 入口在启动服务前判断是否需要先执行初始化流程。
+	*/
+	static isConfigured() {
+		if (process.env.LARK_APP_ID && process.env.LARK_APP_SECRET) return true;
+		const larkpalCredsPath = join(homedir(), ".larkpal", "credentials.json");
+		if (existsSync(larkpalCredsPath)) try {
+			const raw = readFileSync(larkpalCredsPath, "utf-8");
+			const creds = JSON.parse(raw);
+			if (creds.app_id && creds.app_secret) return true;
+		} catch {}
+		const legacyConfigPath = join(homedir(), ".config", "lark", "config.json");
+		if (existsSync(legacyConfigPath)) try {
+			const raw = readFileSync(legacyConfigPath, "utf-8");
+			const config = JSON.parse(raw);
+			if (config.app_id && (config.app_secret || config.app_secret_in_keyring)) return true;
+		} catch {}
+		const newConfigPath = join(homedir(), ".lark-cli", "config.json");
+		if (existsSync(newConfigPath)) try {
+			const raw = readFileSync(newConfigPath, "utf-8");
+			if (JSON.parse(raw).apps?.some((app) => app.appId && app.appSecret)) return true;
+		} catch {}
+		return false;
+	}
+	constructor() {
+		const cli = findLarkCli();
+		this.larkCliPath = cli?.path ?? null;
+		this.larkCliVersion = cli?.version ?? null;
+		if (cli) log.info("lark-cli 已探测到", {
+			path: cli.path,
+			version: cli.version
+		});
+		else log.warn("未找到 lark-cli（应由 preflight 检查保证安装）");
+		const envAppId = process.env.LARK_APP_ID;
+		const envAppSecret = process.env.LARK_APP_SECRET;
+		let cliConfig = {};
+		const larkpalCreds = this.loadFromLarkPalCredentials();
+		if (larkpalCreds?.appId && larkpalCreds?.appSecret) cliConfig = larkpalCreds;
+		else if (this.larkCliPath) try {
+			cliConfig = this.loadFromCli();
+		} catch (err) {
+			log.warn("从 lark-cli 读取配置失败，将使用环境变量", { error: err instanceof Error ? err.message : String(err) });
+		}
+		this.appId = envAppId ?? cliConfig.appId ?? "";
+		this.appSecret = envAppSecret ?? cliConfig.appSecret ?? "";
+		this.tenantAccessToken = cliConfig.tenant_access_token ?? "";
+		this.userAccessToken = cliConfig.user_access_token ?? "";
+		if (!this.appId) {
+			const msg = [
+				"无法获取飞书应用凭证 (app_id)",
+				"",
+				"请通过以下任一方式提供:",
+				"  方式 1: 设置环境变量 LARK_APP_ID + LARK_APP_SECRET",
+				"  方式 2: 安装并配置 lark-cli:",
+				"    npm install -g @larksuite/cli",
+				"    lark-cli config init"
+			].join("\n");
+			log.error(msg);
+			throw new Error(msg);
+		}
+		if (!this.appSecret) {
+			const msg = [
+				"无法获取飞书应用 Secret (app_secret)",
+				"",
+				"请通过以下任一方式提供:",
+				"  方式 1: 设置环境变量 LARK_APP_SECRET",
+				"  方式 2: 重新配置 lark-cli: lark-cli config init"
+			].join("\n");
+			log.error(msg);
+			throw new Error(msg);
+		}
+		log.info("凭证加载成功", {
+			appId: this.appId,
+			source: envAppId ? "env" : "lark-cli",
+			hasTenantToken: !!this.tenantAccessToken,
+			hasUserToken: !!this.userAccessToken,
+			larkCliAvailable: !!this.larkCliPath,
+			larkCliVersion: this.larkCliVersion
+		});
+	}
+	getAppId() {
+		return this.appId;
+	}
+	getAppSecret() {
+		return this.appSecret;
+	}
+	async getTenantAccessToken() {
+		if (!this.tenantAccessToken) log.warn("tenant_access_token 为空，Lark SDK 将自动获取");
+		return this.tenantAccessToken;
+	}
+	async getUserAccessToken() {
+		if (!this.userAccessToken) log.warn("user_access_token 为空");
+		return this.userAccessToken;
+	}
+	/**
+	* 刷新 token。
+	* 如果 lark-cli 可用，调用 `lark-cli auth tenant` 刷新。
+	* 否则跳过（Lark SDK 会用 appId+appSecret 自动获取）。
+	*/
+	async refreshTokens() {
+		if (!this.larkCliPath) {
+			log.info("lark-cli 不可用，跳过 token 刷新（Lark SDK 将自动管理）");
+			return;
+		}
+		log.info("通过 lark-cli 刷新 token");
+		try {
+			const result = execSync(`${this.larkCliPath} auth tenant --json --no-input`, {
+				encoding: "utf-8",
+				timeout: 3e4
+			});
+			log.info("lark-cli auth tenant 执行成功", { output: result.trim().substring(0, 200) });
+		} catch (err) {
+			log.warn("lark-cli auth tenant 刷新失败", { error: err instanceof Error ? err.message : String(err) });
+		}
+		try {
+			const config = this.loadFromCli();
+			this.tenantAccessToken = config.tenant_access_token ?? "";
+			this.userAccessToken = config.user_access_token ?? "";
+		} catch {}
+		log.info("token 刷新完成", {
+			hasTenantToken: !!this.tenantAccessToken,
+			hasUserToken: !!this.userAccessToken
+		});
+	}
+	/** 获取 lark-cli 版本号，null 表示不可用 */
+	getLarkCliVersion() {
+		return this.larkCliVersion;
+	}
+	/** lark-cli 是否可用 */
+	isLarkCliAvailable() {
+		return this.larkCliPath !== null;
+	}
+	/** LarkPal 自身凭证文件路径（由 larkpal init 写入） */
+	static LARKPAL_CREDENTIALS_PATH = join(homedir(), ".larkpal", "credentials.json");
+	/** 新版 lark-cli (≥1.0.x) 配置路径 */
+	static NEW_CONFIG_PATH = join(homedir(), ".lark-cli", "config.json");
+	/** 旧版 lark-cli 配置路径 */
+	static LEGACY_CONFIG_PATH = join(homedir(), ".config", "lark", "config.json");
+	/**
+	* 读取 LarkPal 自身凭证文件 ~/.larkpal/credentials.json
+	* 由 `larkpal init` 写入，格式：{ "app_id": "...", "app_secret": "..." }
+	*/
+	loadFromLarkPalCredentials() {
+		const credPath = LarkCliCredentialProvider.LARKPAL_CREDENTIALS_PATH;
+		if (!existsSync(credPath)) {
+			log.info("LarkPal 凭证文件不存在", { path: credPath });
+			return null;
+		}
+		try {
+			const raw = readFileSync(credPath, "utf-8");
+			const creds = JSON.parse(raw);
+			if (creds.app_id && creds.app_secret) {
+				log.info("从 LarkPal 凭证文件读取成功", {
+					path: credPath,
+					appId: creds.app_id
+				});
+				return {
+					appId: creds.app_id,
+					appSecret: creds.app_secret
+				};
+			}
+			log.warn("LarkPal 凭证文件内容不完整", { path: credPath });
+			return null;
+		} catch (err) {
+			log.warn("读取 LarkPal 凭证文件失败", {
+				path: credPath,
+				error: err instanceof Error ? err.message : String(err)
+			});
+			return null;
+		}
+	}
+	/**
+	* 从 lark-cli 读取配置。
+	*
+	* 按优先级尝试多种来源：
+	*   1. 新版配置文件 ~/.lark-cli/config.json + `lark-cli config show`
+	*   2. 旧版配置文件 ~/.config/lark/config.json（直接读取 + keyring）
+	*   3. 旧版命令 `lark-cli --json config info`
+	*/
+	loadFromCli() {
+		const showResult = this.loadFromConfigShow();
+		const newFileResult = this.loadFromNewConfigFile();
+		const appIdFromNew = showResult?.appId || newFileResult?.appId;
+		if (appIdFromNew) {
+			const legacyResult = this.loadFromLegacyConfigFile();
+			if (legacyResult?.appId === appIdFromNew && legacyResult?.appSecret) {
+				log.info("从旧版兼容路径获取到 appSecret", { appId: appIdFromNew });
+				return {
+					...legacyResult,
+					appId: appIdFromNew
+				};
+			}
+			const keychainSecret = this.resolveKeychainSecret(appIdFromNew);
+			if (keychainSecret) {
+				log.info("从系统 keychain 获取到 appSecret", { appId: appIdFromNew });
+				return {
+					appId: appIdFromNew,
+					appSecret: keychainSecret
+				};
+			}
+		}
+		if (!appIdFromNew) {
+			const legacyResult = this.loadFromLegacyConfigFile();
+			if (legacyResult?.appId && legacyResult?.appSecret) return legacyResult;
+		}
+		return this.loadFromLegacyCliCommand();
+	}
+	/**
+	* 通过 `lark-cli config show` 获取配置（新版 lark-cli）。
+	*
+	* 此命令输出 JSON，包含 appId、appSecret（脱敏）、brand 等。
+	* 注意：appSecret 在 show 输出中是 "****"，无法获取明文。
+	* 但旧版兼容路径 ~/.config/lark/config.json 通常有明文 secret。
+	*/
+	loadFromConfigShow() {
+		if (!this.larkCliPath) return null;
+		try {
+			log.info("通过 lark-cli config show 读取配置");
+			const jsonMatch = execSync(`${this.larkCliPath} config show`, {
+				encoding: "utf-8",
+				timeout: 1e4,
+				env: {
+					...process.env,
+					NO_COLOR: "1"
+				},
+				stdio: [
+					"pipe",
+					"pipe",
+					"pipe"
+				]
+			}).match(/\{[\s\S]*\}/);
+			if (!jsonMatch) {
+				log.warn("lark-cli config show 输出无法解析为 JSON");
+				return null;
+			}
+			const config = JSON.parse(jsonMatch[0]);
+			log.info("lark-cli config show 读取成功", {
+				appId: config.appId,
+				hasAppSecret: !!config.appSecret && config.appSecret !== "****",
+				brand: config.brand
+			});
+			const result = { appId: config.appId };
+			if (config.appSecret && config.appSecret !== "****") result.appSecret = config.appSecret;
+			return result;
+		} catch (err) {
+			log.info("lark-cli config show 失败，尝试其他方式", { error: err instanceof Error ? err.message : String(err) });
+			return null;
+		}
+	}
+	/**
+	* 读取新版 lark-cli 配置文件 ~/.lark-cli/config.json
+	*
+	* 新版配置结构：
+	*   {
+	*     "apps": [{
+	*       "appId": "cli_xxx",
+	*       "appSecret": { "source": "keychain", "id": "appsecret:cli_xxx" },
+	*       "brand": "feishu",
+	*       "lang": "zh"
+	*     }]
+	*   }
+	*
+	* appSecret 通过 keychain 存储，无法直接从此文件获取明文。
+	* 但旧版兼容路径通常有明文 secret（keyring file 后端）。
+	*/
+	loadFromNewConfigFile() {
+		const configPath = LarkCliCredentialProvider.NEW_CONFIG_PATH;
+		if (!existsSync(configPath)) {
+			log.info("新版 lark-cli 配置文件不存在", { path: configPath });
+			return null;
+		}
+		try {
+			const raw = readFileSync(configPath, "utf-8");
+			const app = JSON.parse(raw).apps?.[0];
+			if (!app?.appId) {
+				log.info("新版配置文件中无有效 app", { path: configPath });
+				return null;
+			}
+			log.info("读取新版 lark-cli 配置", {
+				path: configPath,
+				appId: app.appId,
+				secretType: typeof app.appSecret === "string" ? "string" : app.appSecret?.source
+			});
+			const result = { appId: app.appId };
+			if (typeof app.appSecret === "string") result.appSecret = app.appSecret;
+			return result;
+		} catch (err) {
+			log.warn("读取新版 lark-cli 配置文件失败", {
+				path: configPath,
+				error: err instanceof Error ? err.message : String(err)
+			});
+			return null;
+		}
+	}
+	/**
+	* 读取旧版 lark-cli 配置文件 ~/.config/lark/config.json
+	*
+	* 配置结构（snake_case）：
+	*   {
+	*     "app_id": "cli_xxx",
+	*     "app_secret": "明文（keyring_backend=file 时）",
+	*     "app_secret_in_keyring": false,
+	*     "base_url": "https://open.feishu.cn",
+	*     "tenant_access_token": "t-xxx",
+	*     "tenant_access_token_expires_at": 1234567890
+	*   }
+	*
+	* 注意：新版 lark-cli 使用 keyring file 后端时，也会在此路径存储明文 secret。
+	*/
+	loadFromLegacyConfigFile() {
+		const configPath = LarkCliCredentialProvider.LEGACY_CONFIG_PATH;
+		if (!existsSync(configPath)) {
+			log.info("旧版 lark-cli 配置文件不存在", { path: configPath });
+			return null;
+		}
+		try {
+			const raw = readFileSync(configPath, "utf-8");
+			const config = JSON.parse(raw);
+			log.info("读取旧版 lark-cli 配置文件", {
+				path: configPath,
+				appId: config.app_id,
+				hasAppSecret: !!config.app_secret,
+				secretInKeyring: !!config.app_secret_in_keyring
+			});
+			const result = { appId: config.app_id };
+			if (config.app_secret_in_keyring) {
+				const secret = this.resolveKeychainSecret(config.app_id, config.base_url);
+				if (secret) {
+					result.appSecret = secret;
+					log.info("从系统 keyring 获取 appSecret 成功");
+				} else log.warn("appSecret 存储在 keyring 中但无法获取，需通过环境变量 LARK_APP_SECRET 提供");
+			} else if (config.app_secret) result.appSecret = config.app_secret;
+			if (config.tenant_access_token) if ((config.tenant_access_token_expires_at ?? 0) > Date.now() / 1e3) result.tenant_access_token = config.tenant_access_token;
+			else log.info("旧版配置缓存的 tenant_access_token 已过期，忽略");
+			result.user_access_token = config.user_access_token;
+			log.info("旧版配置读取成功", {
+				source: "legacy-config-file",
+				hasAppId: !!result.appId,
+				hasAppSecret: !!result.appSecret,
+				hasTenantToken: !!result.tenant_access_token
+			});
+			return result;
+		} catch (err) {
+			log.warn("读取旧版 lark-cli 配置文件失败", {
+				path: configPath,
+				error: err instanceof Error ? err.message : String(err)
+			});
+			return null;
+		}
+	}
+	/**
+	* 通过旧版 `lark-cli --json config info` 获取配置（fallback 方案）
+	*/
+	loadFromLegacyCliCommand() {
+		if (!this.larkCliPath) return {};
+		const cmd = `${this.larkCliPath} --json config info`;
+		try {
+			log.info("通过旧版 lark-cli 命令读取配置", { cmd });
+			const output = execSync(cmd, {
+				encoding: "utf-8",
+				timeout: 1e4,
+				env: {
+					...process.env,
+					NO_COLOR: "1"
+				}
+			});
+			const config = JSON.parse(output);
+			const result = {
+				appId: config.app_id,
+				appSecret: config.app_secret || void 0,
+				tenant_access_token: config.tenant_access_token,
+				user_access_token: config.user_access_token
+			};
+			log.info("旧版 lark-cli 命令读取成功", {
+				source: "legacy-cli-command",
+				hasAppId: !!result.appId,
+				hasAppSecret: !!result.appSecret,
+				hasTenantToken: !!result.tenant_access_token
+			});
+			return result;
+		} catch (err) {
+			log.info("旧版 lark-cli --json config info 不可用", { error: err instanceof Error ? err.message : String(err) });
+			return {};
+		}
+	}
+	/**
+	* 从系统 keyring/keychain 获取 appSecret。
+	*
+	* 支持两种存储格式：
+	*
+	* 1. 新版 lark-cli (≥1.0.x) — 使用 zalando/go-keyring:
+	*    macOS Keychain: service="lark-cli", account="appsecret:{appId}"
+	*    Linux D-Bus: service="lark-cli", username="{bucketHash}:app-secret"
+	*
+	* 2. 旧版 lark-cli — 使用 D-Bus Secret Service:
+	*    service="lark-cli", username="{SHA256(profile\nbaseURL\nappID)}:app-secret"
+	*/
+	resolveKeychainSecret(appId, baseUrl) {
+		if (!appId) return null;
+		log.info("尝试从系统 keyring/keychain 获取 appSecret", { appId });
+		try {
+			const secret = execSync(`security find-generic-password -s "lark-cli" -a "appsecret:${appId}" -w 2>/dev/null`, {
+				encoding: "utf-8",
+				timeout: 5e3,
+				shell: "/bin/sh",
+				stdio: [
+					"pipe",
+					"pipe",
+					"pipe"
+				]
+			}).trim();
+			if (secret) {
+				log.info("从 macOS Keychain 获取 appSecret 成功（新版格式）");
+				return secret;
+			}
+		} catch {}
+		const seed = [
+			"default",
+			(baseUrl || "https://open.feishu.cn").toLowerCase().replace(/\/+$/, "").replace(/\/open-apis$/, ""),
+			appId.trim()
+		].join("\n");
+		const username = `${createHash("sha256").update(seed).digest("hex")}:app-secret`;
+		try {
+			const secret = execSync(`security find-generic-password -s "lark-cli" -a "${username}" -w 2>/dev/null`, {
+				encoding: "utf-8",
+				timeout: 5e3,
+				shell: "/bin/sh",
+				stdio: [
+					"pipe",
+					"pipe",
+					"pipe"
+				]
+			}).trim();
+			if (secret) {
+				log.info("从 macOS Keychain 获取 appSecret 成功（旧版格式）");
+				return secret;
+			}
+		} catch {}
+		try {
+			const secret = execSync(`secret-tool lookup service "lark-cli" username "${username}"`, {
+				encoding: "utf-8",
+				timeout: 5e3,
+				stdio: [
+					"pipe",
+					"pipe",
+					"pipe"
+				]
+			}).trim();
+			if (secret) {
+				log.info("从 Linux D-Bus Secret Service 获取 appSecret 成功");
+				return secret;
+			}
+		} catch {}
+		try {
+			const secret = execSync(`secret-tool lookup service "lark-cli" username "appsecret:${appId}"`, {
+				encoding: "utf-8",
+				timeout: 5e3,
+				stdio: [
+					"pipe",
+					"pipe",
+					"pipe"
+				]
+			}).trim();
+			if (secret) {
+				log.info("从 Linux D-Bus Secret Service 获取 appSecret 成功（新版格式）");
+				return secret;
+			}
+		} catch {}
+		log.warn("系统 keyring/keychain 获取 appSecret 失败");
+		return null;
+	}
+};
+//#endregion
+export { lark_cli_provider_exports as n, LarkCliCredentialProvider as t };

package/dist/lark-logger-D7_pEVQc.mjs

@@ -0,0 +1,143 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+//#region src/core/lark-ticket.ts
+/**
+* Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+* SPDX-License-Identifier: MIT
+*
+* Request-level ticket for the Feishu plugin.
+*
+* Uses Node.js AsyncLocalStorage to propagate a ticket (message_id,
+* chat_id, account_id) through the entire async call chain without passing
+* parameters explicitly.  Call {@link withTicket} at the event entry point
+* (monitor.ts) and use {@link getTicket} anywhere downstream.
+*/
+const store = new AsyncLocalStorage();
+/** Return the current ticket, or `undefined` if not inside withTicket. */
+function getTicket() {
+	return store.getStore();
+}
+//#endregion
+//#region src/core/runtime-store.ts
+const RUNTIME_NOT_INITIALIZED_ERROR = "Feishu plugin runtime has not been initialised. Ensure LarkClient.setRuntime() is called during plugin activation.";
+let runtime = null;
+function setLarkRuntime(nextRuntime) {
+	runtime = nextRuntime;
+}
+function tryGetLarkRuntime() {
+	return runtime;
+}
+function getLarkRuntime() {
+	if (!runtime) throw new Error(RUNTIME_NOT_INITIALIZED_ERROR);
+	return runtime;
+}
+//#endregion
+//#region src/core/lark-logger.ts
+const CYAN = "\x1B[36m";
+const YELLOW = "\x1B[33m";
+const RED = "\x1B[31m";
+const GRAY = "\x1B[90m";
+const RESET = "\x1B[0m";
+function consoleFallback(subsystem) {
+	const tag = `feishu/${subsystem}`;
+	return {
+		debug: (msg, meta) => console.debug(`${GRAY}[${tag}]${RESET}`, msg, ...meta ? [meta] : []),
+		info: (msg, meta) => console.log(`${CYAN}[${tag}]${RESET}`, msg, ...meta ? [meta] : []),
+		warn: (msg, meta) => console.warn(`${YELLOW}[${tag}]${RESET}`, msg, ...meta ? [meta] : []),
+		error: (msg, meta) => console.error(`${RED}[${tag}]${RESET}`, msg, ...meta ? [meta] : [])
+	};
+}
+function resolveRuntimeLogger(subsystem) {
+	try {
+		const runtime = tryGetLarkRuntime();
+		if (!runtime) return null;
+		return runtime.logging.getChildLogger({ subsystem: `feishu/${subsystem}` });
+	} catch {
+		return null;
+	}
+}
+function getTraceMeta() {
+	const ctx = getTicket();
+	if (!ctx) return null;
+	const trace = {
+		accountId: ctx.accountId,
+		messageId: ctx.messageId,
+		chatId: ctx.chatId
+	};
+	if (ctx.senderOpenId) trace.senderOpenId = ctx.senderOpenId;
+	return trace;
+}
+function enrichMeta(meta) {
+	const trace = getTraceMeta();
+	if (!trace) return meta ?? {};
+	return meta ? {
+		...trace,
+		...meta
+	} : trace;
+}
+/**
+* Build a trace-aware prefix like `feishu[default][msg:om_xxx]:`.
+*
+* Mirrors the format used by `trace.ts` so log lines are consistent
+* across the old and new logging systems.
+*/
+function buildTracePrefix() {
+	const ctx = getTicket();
+	if (!ctx) return "feishu:";
+	return `feishu[${ctx.accountId}][msg:${ctx.messageId}]:`;
+}
+/**
+* Format message with inline meta for text-based log output.
+*
+* RuntimeLogger implementations typically ignore the `meta` parameter in
+* their text output (gateway.log / console).  To ensure meta is always
+* visible, we serialize user-supplied meta into the message string and
+* prepend the trace context prefix (accountId + messageId).
+*
+* Example:
+*   formatMessage("card.create response", { code: 0, cardId: "c_xxx" })
+*   → "feishu[default][msg:om_xxx]: card.create response (code=0, cardId=c_xxx)"
+*/
+function formatMessage(message, meta) {
+	const prefix = buildTracePrefix();
+	if (!meta || Object.keys(meta).length === 0) return `${prefix} ${message}`;
+	const parts = Object.entries(meta).map(([k, v]) => {
+		if (v === void 0 || v == null) return null;
+		if (typeof v === "object") return `${k}=${JSON.stringify(v)}`;
+		return `${k}=${v}`;
+	}).filter(Boolean);
+	return parts.length > 0 ? `${prefix} ${message} (${parts.join(", ")})` : `${prefix} ${message}`;
+}
+function createLarkLogger(subsystem) {
+	let cachedLogger = null;
+	let resolved = false;
+	function getLogger() {
+		if (!resolved) {
+			cachedLogger = resolveRuntimeLogger(subsystem);
+			if (cachedLogger) resolved = true;
+		}
+		return cachedLogger ?? consoleFallback(subsystem);
+	}
+	return {
+		subsystem,
+		debug(message, meta) {
+			getLogger().debug?.(formatMessage(message, meta), enrichMeta(meta));
+		},
+		info(message, meta) {
+			getLogger().info(formatMessage(message, meta), enrichMeta(meta));
+		},
+		warn(message, meta) {
+			getLogger().warn(formatMessage(message, meta), enrichMeta(meta));
+		},
+		error(message, meta) {
+			getLogger().error(formatMessage(message, meta), enrichMeta(meta));
+		},
+		child(name) {
+			return createLarkLogger(`${subsystem}/${name}`);
+		}
+	};
+}
+function larkLogger(subsystem) {
+	return createLarkLogger(subsystem);
+}
+//#endregion
+export { getLarkRuntime as n, setLarkRuntime as r, larkLogger as t };