@xfey/tutti 0.1.106 → 0.1.107

package/README.md

@@ -26,6 +26,7 @@
 - `prepare-package-assets.mjs`：把 Web build output 和内部 runtime package 复制到 staging package 所需位置。
 - `pack-dry-run.mjs`：构建 staging package 并执行 `npm pack --dry-run --json` 文件列表校验。
 - `smoke-packed-cli.mjs`：安装并验证 packed CLI tarball 的本地 smoke，包括 CLI help / version、runtime deps 和 QR dependency。
+  - 发布时可将 `TUTTI_PACKED_CLI_ARTIFACT_DIR` 指向已存在的独立绝对目录；仅全部 smoke 成功后保留同一已测 `.tgz`，拒绝覆盖同名文件，输出 SHA-256 而不输出临时路径。默认仍清理临时产物。
 - `smoke-desktop-protocol.mjs`：在真实 `~/Applications` 下使用唯一临时 bundle / scheme 验证 macOS 图标点击与 LaunchServices URL event，并在结束时注销、清理。
 - `vitest.config.mjs`：默认快速 Server 测试入口，排除真实 Git、子进程、loopback Host 与 npm preview 集成套件。
 - `vitest.integration.config.mjs`：显式 Server integration 入口；完整保留上述慢套件的行为覆盖。

package/dist/control-plane/procedure-logging.d.ts

@@ -1,6 +1,7 @@
 import type { ActivityRef, WorkflowInvocationRef } from "@tutti/shared/ids";
 import type { WorkflowKind } from "@tutti/shared/domain";
 import type { ControlPlaneLogger } from "./types.js";
+export declare function procedureExecutionErrorFields(error: unknown): Record<string, unknown>;
 export declare function logProcedureExecutionError(input: {
     logger: ControlPlaneLogger | undefined;
     workflowKind: WorkflowKind;

package/dist/control-plane/procedure-logging.js

@@ -8,6 +8,12 @@ const SAFE_DETAIL_KEYS = [
     "notification_count",
     "server_request_methods",
     "notification_methods",
+    "output_parse_reason",
+    "agent_output_chars",
+    "json_candidate_count",
+    "agent_message_count",
+    "completed_tool_count",
+    "file_tool_count",
 ];
 function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -37,16 +43,21 @@ function errorCode(error) {
     }
     return error.code;
 }
+export function procedureExecutionErrorFields(error) {
+    const code = errorCode(error);
+    const details = errorDetails(error);
+    return {
+        error_name: error instanceof Error ? error.name : "NonError",
+        ...(code === undefined ? {} : { error_code: code }),
+        ...(details === undefined ? {} : { error_details: details }),
+    };
+}
 export function logProcedureExecutionError(input) {
     input.logger?.info({
         activity_ref: input.activityRef,
         workflow_ref: input.workflowRef,
         workflow_kind: input.workflowKind,
-        error_name: input.error instanceof Error ? input.error.name : "NonError",
-        ...(errorCode(input.error) === undefined ? {} : { error_code: errorCode(input.error) }),
-        ...(errorDetails(input.error) === undefined
-            ? {}
-            : { error_details: errorDetails(input.error) }),
+        ...procedureExecutionErrorFields(input.error),
     }, "Procedure execution error");
 }
 //# sourceMappingURL=procedure-logging.js.map

package/dist/control-plane/reference-summary-refresh.js

@@ -2,7 +2,7 @@ import { createWorkflowInvocationRef } from "@tutti/shared/ids";
 import { recordProjectTimelineEvent } from "../project-timeline/index.js";
 import { withHostStoreTransaction } from "../store/index.js";
 import { WorkspaceOpsError, readReferenceSummaryTargets, updateReferenceSummaries, } from "../workspace-ops/index.js";
-import { logProcedureExecutionError } from "./procedure-logging.js";
+import { logProcedureExecutionError, procedureExecutionErrorFields } from "./procedure-logging.js";
 import { enqueueControlPlaneIntent, readControlPlaneIntentByDedupeKey, settlePendingControlPlaneIntent, } from "./dispatch-intents.js";
 const REFERENCE_SUMMARY_CONCURRENCY = 1;
 const REFERENCE_SUMMARY_MAX_ATTEMPTS = 2;
@@ -255,7 +255,7 @@ async function summarizeReferenceTarget(options) {
                 path: options.target.path,
                 attempt,
                 retrying: attempt < REFERENCE_SUMMARY_MAX_ATTEMPTS,
-                error_name: error instanceof Error ? error.name : "UnknownError",
+                ...procedureExecutionErrorFields(error),
             }, attempt < REFERENCE_SUMMARY_MAX_ATTEMPTS
                 ? "Reference summary target retrying"
                 : "Reference summary target failed");

package/dist/control-plane/workflows/openai.js

@@ -447,6 +447,7 @@ export function createOpenAiProcedureWorkflowRunner(options) {
                     appServerCwd: workspace.cwd,
                     validateOutput: isReferenceFileSummaryStructuredOutput,
                     readablePaths: [workspace.cwd],
+                    requireFileToolUse: true,
                     networkAccess: false,
                     webSearchMode: "disabled",
                 });

package/dist/providers/openai/app-server/read-only-procedure.d.ts

@@ -11,6 +11,8 @@ export type CodexAppServerReadOnlyProcedureInput<TOutput> = {
     workspaceRoot: string;
     appServerCwd?: string;
     readablePaths?: string[];
+    /** File-only workflows must not accept an answer produced without a filesystem tool attempt. */
+    requireFileToolUse?: boolean;
     prompt: string;
     outputSchema: unknown;
     validateOutput: (value: unknown) => value is TOutput;
@@ -66,11 +68,17 @@ export type CodexAppServerReadOnlyProcedureErrorDetails = {
     notification_methods?: string[];
     agent_message_excerpt?: string;
     stderr_excerpt?: string;
+    output_parse_reason?: "no_json_object" | "malformed_json";
+    agent_output_chars?: number;
+    json_candidate_count?: number;
+    agent_message_count?: number;
+    completed_tool_count?: number;
+    file_tool_count?: number;
 };
 export declare class CodexAppServerReadOnlyProcedureError extends Error {
-    readonly code: "app_server_protocol_error" | "auth_failed" | "thread_start_failed" | "turn_failed" | "turn_timeout" | "unexpected_server_request" | "skill_selection_failed" | "output_parse_failed" | "output_validation_failed" | "write_detected" | "secret_leak_detected" | "process_lifecycle_failed" | "admission_unavailable";
+    readonly code: "app_server_protocol_error" | "auth_failed" | "thread_start_failed" | "turn_failed" | "turn_timeout" | "unexpected_server_request" | "skill_selection_failed" | "output_parse_failed" | "output_validation_failed" | "file_read_not_observed" | "write_detected" | "secret_leak_detected" | "process_lifecycle_failed" | "admission_unavailable";
     readonly details: CodexAppServerReadOnlyProcedureErrorDetails;
-    constructor(code: "app_server_protocol_error" | "auth_failed" | "thread_start_failed" | "turn_failed" | "turn_timeout" | "unexpected_server_request" | "skill_selection_failed" | "output_parse_failed" | "output_validation_failed" | "write_detected" | "secret_leak_detected" | "process_lifecycle_failed" | "admission_unavailable", message: string, details?: CodexAppServerReadOnlyProcedureErrorDetails);
+    constructor(code: "app_server_protocol_error" | "auth_failed" | "thread_start_failed" | "turn_failed" | "turn_timeout" | "unexpected_server_request" | "skill_selection_failed" | "output_parse_failed" | "output_validation_failed" | "file_read_not_observed" | "write_detected" | "secret_leak_detected" | "process_lifecycle_failed" | "admission_unavailable", message: string, details?: CodexAppServerReadOnlyProcedureErrorDetails);
 }
 export declare function resolveReadOnlyWebSearchMode(input: {
     networkAccess?: boolean;

package/dist/providers/openai/app-server/read-only-procedure.js

@@ -4,14 +4,14 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { buildCodexAppServerProcessPlan } from "../codex-app-server.js";
 import { DEFAULT_OPENAI_MODEL } from "../model-config.js";
-import { CodexAppServerJsonRpcClient, CodexAppServerProtocolError, } from "./json-rpc.js";
+import { CodexAppServerJsonRpcClient, CodexAppServerProtocolError } from "./json-rpc.js";
 import { CodexAppServerInvocation, CodexAppServerLifecycleError, createManagedProcess, } from "./invocation-lifecycle.js";
 import { CodexAppServerAdmissionError, } from "./invocation-coordinator.js";
 import { createCodexAppServerRuntimeObserver, } from "./runtime-telemetry.js";
 import { createReadOnlySandboxPolicy } from "./sandbox-policy.js";
 import { buildCodexAppServerProviderConfigOverrides, resolveCodexAppServerModelProvider, } from "./provider-config.js";
 import { buildCodexAppServerTurnInput, resolveCodexAppServerContextRuntimeHint, resolveCodexAppServerSkillInputs, CodexAppServerSkillSelectionError, } from "./skills.js";
-import { containsKnownSecret, createCodexSpawnEnv, extractAgentText, extractServerRequestMethod, findJsonObjectCandidates, isApiKeyAccount, readThreadId, readTurnError, readTurnStatus, redactWithKnownValues, compactText, } from "./runtime-helpers.js";
+import { containsKnownSecret, createCodexSpawnEnv, extractAgentText, extractServerRequestMethod, findJsonObjectCandidates, isRecord, isApiKeyAccount, readThreadId, readTurnError, readTurnStatus, redactWithKnownValues, compactText, } from "./runtime-helpers.js";
 import { extractCodexAppServerTokenUsage } from "../token-usage.js";
 const DEFAULT_REQUEST_TIMEOUT_MS = 60_000;
 const DEFAULT_TURN_TIMEOUT_MS = 600_000;
@@ -65,7 +65,11 @@ function readOnlyTimeoutDetails(input) {
 export function parseCodexAppServerStructuredJson(text) {
     const candidates = findJsonObjectCandidates(text);
     if (candidates.length === 0) {
-        throw new CodexAppServerReadOnlyProcedureError("output_parse_failed", "Codex app-server did not return a JSON object.");
+        throw new CodexAppServerReadOnlyProcedureError("output_parse_failed", "Codex app-server did not return a JSON object.", {
+            output_parse_reason: "no_json_object",
+            agent_output_chars: text.length,
+            json_candidate_count: 0,
+        });
     }
     for (const jsonText of candidates.toReversed()) {
         try {
@@ -75,7 +79,37 @@ export function parseCodexAppServerStructuredJson(text) {
             // Earlier app-server progress can contain brace-shaped text.
         }
     }
-    throw new CodexAppServerReadOnlyProcedureError("output_parse_failed", "Codex app-server returned malformed JSON.");
+    throw new CodexAppServerReadOnlyProcedureError("output_parse_failed", "Codex app-server returned malformed JSON.", {
+        output_parse_reason: "malformed_json",
+        agent_output_chars: text.length,
+        json_candidate_count: candidates.length,
+    });
+}
+/** Counts only; model text, tool arguments and stderr never enter structured diagnostics. */
+function structuredOutputDetails(client, text) {
+    const itemTypes = client.notifications.flatMap((notification) => {
+        const params = notification.params;
+        return notification.method === "item/completed" &&
+            isRecord(params) &&
+            isRecord(params.item) &&
+            typeof params.item.type === "string"
+            ? [params.item.type]
+            : [];
+    });
+    return {
+        turn_status: "completed",
+        notification_count: client.notifications.length,
+        notification_methods: client.notifications
+            .map((notification) => notification.method)
+            .slice(-20),
+        server_request_methods: client.serverRequests.map(extractServerRequestMethod),
+        agent_output_chars: text.length,
+        json_candidate_count: findJsonObjectCandidates(text).length,
+        agent_message_count: itemTypes.filter((type) => type === "agentMessage").length,
+        completed_tool_count: itemTypes.filter((type) => ["commandExecution", "mcpToolCall", "dynamicToolCall", "imageView", "webSearch"].includes(type)).length,
+        file_tool_count: itemTypes.filter((type) => ["commandExecution", "imageView"].includes(type))
+            .length,
+    };
 }
 export async function runCodexAppServerReadOnlyProcedure(options) {
     if (options.invocationCoordinator !== undefined && options.invocationLease === undefined) {
@@ -102,14 +136,18 @@ export async function runCodexAppServerReadOnlyProcedure(options) {
     let contextRuntimeHint;
     try {
         skillInputs = resolveCodexAppServerSkillInputs({
-            ...(options.skillSelectionName === undefined ? {} : { selectionName: options.skillSelectionName }),
+            ...(options.skillSelectionName === undefined
+                ? {}
+                : { selectionName: options.skillSelectionName }),
             ...(options.userSkillsRoot === undefined ? {} : { userSkillsRoot: options.userSkillsRoot }),
             ...(options.builtInSkillsRoot === undefined
                 ? {}
                 : { builtInSkillsRoot: options.builtInSkillsRoot }),
         });
         contextRuntimeHint = resolveCodexAppServerContextRuntimeHint({
-            ...(options.skillSelectionName === undefined ? {} : { selectionName: options.skillSelectionName }),
+            ...(options.skillSelectionName === undefined
+                ? {}
+                : { selectionName: options.skillSelectionName }),
             ...(options.agentContext === undefined ? {} : { agentContext: options.agentContext }),
         });
     }
@@ -184,10 +222,7 @@ export async function runCodexAppServerReadOnlyProcedure(options) {
         ...(contextRuntimeHint?.sensitiveValues ?? []),
         ...skillInputs.map((skill) => skill.path),
     ];
-    const strictLeakCheckValues = [
-        options.apiKey,
-        ...(contextRuntimeHint?.sensitiveValues ?? []),
-    ];
+    const strictLeakCheckValues = [options.apiKey, ...(contextRuntimeHint?.sensitiveValues ?? [])];
     let primaryError;
     let procedureResult;
     let lifecycleError;
@@ -249,9 +284,7 @@ export async function runCodexAppServerReadOnlyProcedure(options) {
             input: buildCodexAppServerTurnInput({
                 prompt: options.prompt,
                 skills: skillInputs,
-                ...(contextRuntimeHint === undefined
-                    ? {}
-                    : { runtimeHints: [contextRuntimeHint.text] }),
+                ...(contextRuntimeHint === undefined ? {} : { runtimeHints: [contextRuntimeHint.text] }),
             }),
             cwd: appServerCwd,
             approvalPolicy: "never",
@@ -314,9 +347,26 @@ export async function runCodexAppServerReadOnlyProcedure(options) {
         const agentText = client.notifications
             .map((notification) => extractAgentText(notification))
             .join("");
-        const parsed = parseCodexAppServerStructuredJson(agentText);
+        let parsed;
+        try {
+            parsed = parseCodexAppServerStructuredJson(agentText);
+        }
+        catch (error) {
+            if (!(error instanceof CodexAppServerReadOnlyProcedureError))
+                throw error;
+            throw new CodexAppServerReadOnlyProcedureError(error.code, error.message, {
+                ...structuredOutputDetails(client, agentText),
+                ...error.details,
+            });
+        }
         if (!options.validateOutput(parsed)) {
-            throw new CodexAppServerReadOnlyProcedureError("output_validation_failed", "Codex app-server structured output did not match the expected schema.");
+            throw new CodexAppServerReadOnlyProcedureError("output_validation_failed", "Codex app-server structured output did not match the expected schema.", structuredOutputDetails(client, agentText));
+        }
+        if (options.requireFileToolUse === true) {
+            const details = structuredOutputDetails(client, agentText);
+            if (details.file_tool_count === 0) {
+                throw new CodexAppServerReadOnlyProcedureError("file_read_not_observed", "Codex app-server did not attempt to inspect the summary source file.", details);
+            }
         }
         const gitStatusAfter = readGitStatus(options.workspaceRoot);
         if (gitStatusAfter !== gitStatusBefore) {

package/dist/server-shell/http/routes/project-api/reference-files-routes.js

@@ -4,8 +4,9 @@ import { REFERENCE_DIRECTORY_PATH } from "../../../../workspace-ops/index.js";
 import { decideCommandIdempotencyReplay, executeIdempotentCommand, readCommandIdempotencyRecord, } from "../../../command-idempotency/index.js";
 import { HOST_PROJECT_API_BASE_PATH } from "./constants.js";
 import { readReferenceFilesResponse, referenceSummaryProcedureInvalidates, } from "./reference-files.js";
-import { requireControlPlane, requireHostProjectSession, requireProjectStore, requireWorkspaceRoot, } from "./session-requirements.js";
+import { requireControlPlane, requireHostProjectSession, requireHostProjectOwnerSession, requireProjectStore, requireWorkspaceRoot, } from "./session-requirements.js";
 import { abortDownloadedStagedUpload, cleanupDownloadedStagedUpload, downloadStagedUpload, } from "./staged-uploads.js";
+import { HostProjectBadRequestError } from "./errors.js";
 export function registerReferenceFilesRoutes(app, { options, workspaceEvents, }) {
     app.get(`${HOST_PROJECT_API_BASE_PATH}/references/files`, {
         schema: {
@@ -90,7 +91,16 @@ export function registerReferenceFilesRoutes(app, { options, workspaceEvents, })
             },
         },
     }, (request) => {
-        requireHostProjectSession(request, options);
+        if (options.surfaceProfile?.kind === "feishu") {
+            requireHostProjectOwnerSession(request, options);
+            const paths = request.body.payload.paths;
+            if (paths?.length !== 1 || !paths[0]?.startsWith(`${REFERENCE_DIRECTORY_PATH}/`)) {
+                throw new HostProjectBadRequestError("Select one project Reference to retry its summary");
+            }
+        }
+        else {
+            requireHostProjectSession(request, options);
+        }
         const store = requireProjectStore(options);
         const execution = executeIdempotentCommand({
             db: store.db,
@@ -109,6 +119,13 @@ export function registerReferenceFilesRoutes(app, { options, workspaceEvents, })
         if (execution.result !== undefined) {
             response.result = execution.result;
         }
+        request.log.info({
+            command_id: execution.command_id,
+            disposition: execution.disposition.kind,
+            activity_ref: execution.result?.activity_ref,
+            workflow_ref: execution.result?.workflow_ref,
+            target_count: execution.result?.target_count,
+        }, "Reference summary refresh requested");
         return response;
     });
 }

package/node_modules/@tutti/shared/dist/schemas/api/feishu-documents.d.ts

@@ -0,0 +1,41 @@
+import { type Static } from "@sinclair/typebox";
+export declare const FEISHU_DOCUMENT_SOURCE_LIMIT = 100;
+export declare const FeishuDocumentSourceRefSchema: import("@sinclair/typebox").TString;
+export declare const ConnectFeishuDocumentBodySchema: import("@sinclair/typebox").TObject<{
+    document_url: import("@sinclair/typebox").TString;
+}>;
+export declare const RefreshFeishuDocumentBodySchema: import("@sinclair/typebox").TObject<{
+    expected_updated_at: import("@sinclair/typebox").TString;
+}>;
+export declare const FeishuDocumentSourceSchema: import("@sinclair/typebox").TObject<{
+    source_ref: import("@sinclair/typebox").TString;
+    reference_path: import("@sinclair/typebox").TString;
+    status: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"syncing">, import("@sinclair/typebox").TLiteral<"current">, import("@sinclair/typebox").TLiteral<"waiting_for_host">, import("@sinclair/typebox").TLiteral<"retrying">, import("@sinclair/typebox").TLiteral<"authorization_required">, import("@sinclair/typebox").TLiteral<"permission_denied">, import("@sinclair/typebox").TLiteral<"failed">]>;
+    revision: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+    last_checked_at: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+    last_synced_at: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+    next_attempt_at: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+    updated_at: import("@sinclair/typebox").TString;
+    reason_code: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+}>;
+export declare const FeishuDocumentSourcesSchema: import("@sinclair/typebox").TObject<{
+    can_manage: import("@sinclair/typebox").TBoolean;
+    items: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        source_ref: import("@sinclair/typebox").TString;
+        reference_path: import("@sinclair/typebox").TString;
+        status: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"syncing">, import("@sinclair/typebox").TLiteral<"current">, import("@sinclair/typebox").TLiteral<"waiting_for_host">, import("@sinclair/typebox").TLiteral<"retrying">, import("@sinclair/typebox").TLiteral<"authorization_required">, import("@sinclair/typebox").TLiteral<"permission_denied">, import("@sinclair/typebox").TLiteral<"failed">]>;
+        revision: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+        last_checked_at: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+        last_synced_at: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+        next_attempt_at: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+        updated_at: import("@sinclair/typebox").TString;
+        reason_code: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+    }>>;
+}>;
+export type FeishuDocumentSource = Static<typeof FeishuDocumentSourceSchema>;
+export type FeishuDocumentSources = Static<typeof FeishuDocumentSourcesSchema>;
+export type ConnectFeishuDocumentBody = Static<typeof ConnectFeishuDocumentBodySchema>;
+export type RefreshFeishuDocumentBody = Static<typeof RefreshFeishuDocumentBodySchema>;
+/** Parse a locator, never fetch a caller-controlled URL. Wiki requires a separate adapter. */
+export declare function parseFeishuDocxUrl(value: string): string | null;
+//# sourceMappingURL=feishu-documents.d.ts.map

package/node_modules/@tutti/shared/dist/schemas/api/feishu-documents.js

@@ -0,0 +1,40 @@
+import { Type } from "@sinclair/typebox";
+import { IsoDateTimeStringSchema } from "../domain/index.js";
+export const FEISHU_DOCUMENT_SOURCE_LIMIT = 100;
+export const FeishuDocumentSourceRefSchema = Type.String({
+    pattern: "^managed_ref_[a-f0-9]{32}$",
+    maxLength: 44,
+});
+export const ConnectFeishuDocumentBodySchema = Type.Object({ document_url: Type.String({ minLength: 1, maxLength: 2_048 }) }, { additionalProperties: false });
+export const RefreshFeishuDocumentBodySchema = Type.Object({ expected_updated_at: IsoDateTimeStringSchema }, { additionalProperties: false });
+export const FeishuDocumentSourceSchema = Type.Object({
+    source_ref: FeishuDocumentSourceRefSchema,
+    reference_path: Type.String({ pattern: "^docs/reference/feishu-docx-[a-f0-9]{12}\\.txt$" }),
+    status: Type.Union([
+        Type.Literal("syncing"),
+        Type.Literal("current"),
+        Type.Literal("waiting_for_host"),
+        Type.Literal("retrying"),
+        Type.Literal("authorization_required"),
+        Type.Literal("permission_denied"),
+        Type.Literal("failed"),
+    ]),
+    revision: Type.Union([Type.String({ maxLength: 512 }), Type.Null()]),
+    last_checked_at: Type.Union([IsoDateTimeStringSchema, Type.Null()]),
+    last_synced_at: Type.Union([IsoDateTimeStringSchema, Type.Null()]),
+    next_attempt_at: Type.Union([IsoDateTimeStringSchema, Type.Null()]),
+    updated_at: IsoDateTimeStringSchema,
+    reason_code: Type.Union([Type.String({ pattern: "^[a-z][a-z0-9_]{0,95}$" }), Type.Null()]),
+}, { additionalProperties: false });
+export const FeishuDocumentSourcesSchema = Type.Object({
+    can_manage: Type.Boolean(),
+    items: Type.Array(FeishuDocumentSourceSchema, { maxItems: FEISHU_DOCUMENT_SOURCE_LIMIT }),
+}, { additionalProperties: false });
+/** Parse a locator, never fetch a caller-controlled URL. Wiki requires a separate adapter. */
+export function parseFeishuDocxUrl(value) {
+    if (value.length > 2_048 ||
+        Array.from(value).some((char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127))
+        return null;
+    return (/^https:\/\/(?:[a-z0-9-]+\.)?(?:feishu\.cn|larksuite\.com)(?::443)?\/docx\/([a-z0-9]{27})\/?(?:[?#][^\s]*)?$/iu.exec(value.trim())?.[1] ?? null);
+}
+//# sourceMappingURL=feishu-documents.js.map

package/node_modules/@tutti/shared/dist/schemas/api/index.d.ts

@@ -5,7 +5,7 @@ export { CompleteDesktopEntryContinuationBodySchema, CompleteDesktopEntryContinu
 export type { CompleteDesktopEntryContinuationBody, CreateDesktopEntryContinuationResponse, GetDesktopEntryContinuationResponse, SealedDesktopEntryPayload, } from "./desktop-entry-continuations.js";
 export { LOCAL_CONSOLE_ACCOUNT_HANDOFF_TOKEN_MAX_LENGTH, LOCAL_CONSOLE_ACCOUNT_HANDOFF_TOKEN_MIN_LENGTH, RegisterLocalConsoleAccountHandoffBodySchema, RegisterLocalConsoleAccountHandoffResponseSchema, } from "./local-console-account-handoffs.js";
 export type { RegisterLocalConsoleAccountHandoffBody, RegisterLocalConsoleAccountHandoffResponse, } from "./local-console-account-handoffs.js";
-export { FEISHU_BROWSER_HANDOFF_TOKEN_LENGTH, FEISHU_DOCX_REQUIRED_USER_SCOPE, FEISHU_H5_AUTHORIZATION_CODE_MAX_LENGTH, FEISHU_H5_REQUIRED_USER_SCOPE, FEISHU_PLATFORM_STATE_LENGTH, FeishuPlatformSessionBootstrapBodySchema, FeishuPlatformSessionBootstrapResponseSchema, FeishuBrowserHandoffResponseSchema, FeishuBrowserHandoffTokenSchema, ConsumeFeishuBrowserHandoffBodySchema, FeishuDocumentAuthorizationBootstrapResponseSchema, FeishuDocumentAuthorizationExchangeBodySchema, FeishuDocumentAuthorizationProjectionSchema, FeishuPlatformSessionExchangeBodySchema, FeishuPlatformSessionProjectionSchema, FeishuPlatformStateSchema, } from "./platform-sessions.js";
+export { FEISHU_BROWSER_HANDOFF_TOKEN_LENGTH, FEISHU_DOCX_READWRITE_USER_SCOPE, FEISHU_DOCX_REQUIRED_USER_SCOPE, FEISHU_H5_AUTHORIZATION_CODE_MAX_LENGTH, FEISHU_H5_REQUIRED_USER_SCOPE, FEISHU_OFFLINE_ACCESS_SCOPE, FEISHU_PLATFORM_STATE_LENGTH, FeishuPlatformSessionBootstrapBodySchema, FeishuPlatformSessionBootstrapResponseSchema, FeishuBrowserHandoffResponseSchema, FeishuBrowserHandoffTokenSchema, ConsumeFeishuBrowserHandoffBodySchema, FeishuDocumentAuthorizationBootstrapResponseSchema, FeishuDocumentAuthorizationExchangeBodySchema, FeishuDocumentAuthorizationProjectionSchema, FeishuPlatformSessionExchangeBodySchema, FeishuPlatformSessionProjectionSchema, FeishuPlatformStateSchema, hasFeishuDocxReadCapability, } from "./platform-sessions.js";
 export type { FeishuPlatformSessionBootstrapBody, FeishuPlatformSessionBootstrapResponse, FeishuBrowserHandoffResponse, ConsumeFeishuBrowserHandoffBody, FeishuDocumentAuthorizationBootstrapResponse, FeishuDocumentAuthorizationExchangeBody, FeishuDocumentAuthorizationProjection, FeishuPlatformSessionExchangeBody, FeishuPlatformSessionProjection, } from "./platform-sessions.js";
 export { ApiErrorCodeSchema, ApiErrorResponseSchema, CommandDispositionBaseSchema, CursorPageRequestSchema, DEFAULT_SSE_REPLAY_WINDOW_POLICY, InterruptedCommandDispositionSchema, QueryInvalidationHintSchema, RelayInvalidationHintSchema, RelaySseEventTypeSchema, SseReplayWindowPolicySchema, WorkspaceSseEventTypeSchema, commandEnvelopeSchema, commandResponseSchema, commandResponseWithResultSchema, cursorPageSchema, relaySseEventSchema, timelineWindowSchema, workspaceSseEventSchema, } from "./primitives.js";
 export { GetProviderModelsResponseSchema, MAX_PROVIDER_MODEL_NAME_LENGTH, ProviderConfigInvalidReasonCodeSchema, ProviderConfigProjectionSchema, ProviderModelDiscoveryUnavailableReasonSchema, ProviderModelNameSchema, ProviderModelValidationFailureReasonSchema, ProviderUnavailableReasonCodeSchema, ProjectProviderUnavailableReasonSchema, UpdateProviderDefaultModelBodySchema, UpdateProviderDefaultModelDispositionSchema, UpdateProviderDefaultModelPayloadSchema, UpdateProviderDefaultModelResponseSchema, } from "./provider-config.js";
@@ -22,4 +22,5 @@ export { ArtifactKindSchema, ArtifactManifestSchema, ArtifactPreviewProjectionSc
 export { DeleteSkillBodySchema, DeleteSkillDispositionSchema, DeleteSkillPayloadSchema, DeleteSkillResponseSchema, GetSkillParamsSchema, GetSkillResponseSchema, GetSkillsResponseSchema, ImportSkillZipBodySchema, ImportSkillZipDispositionSchema, ImportSkillZipPayloadSchema, ImportSkillZipResponseSchema, ImportSkillZipResultSchema, SkillDetailProjectionSchema, SkillNameSchema, SkillProjectionSchema, } from "./skills.js";
 export { ActivityEventProjectionSchema, ActivityEventSsePayloadSchema, ApprovalChangedEventPayloadSchema, ActivityProjectionSchema, ConnectionReadyEventPayloadSchema, ExecutionActivitySummarySchema, ExecutionStatusChangedEventPayloadSchema, ExecutionStatusKindSchema, ExecutionStatusProjectionSchema, ProcedureLaneSchema, ProviderConfigChangedEventPayloadSchema, QueryInvalidateEventPayloadSchema, ScratchpadUpdatedEventPayloadSchema, TaskDetailUpdatedEventPayloadSchema, TaskUpdatedEventPayloadSchema, WorklistChangedEventPayloadSchema, WorkspaceRecoveredEventPayloadSchema, } from "./runtime-events.js";
 export { ContextSyncBodySchema, ContextSyncDispositionSchema, ContextSyncPayloadSchema, ContextSyncResponseSchema, ContextSyncResultSchema, InitializeProjectDocsBodySchema, InitializeProjectDocsDispositionSchema, InitializeProjectDocsPayloadSchema, InitializeProjectDocsResponseSchema, InitializeProjectDocsResultSchema, ProjectDocsProcedureStartResultSchema, RefreshScratchpadDispositionSchema, RefreshScratchpadResultSchema, RunSchedulerNowBodySchema, RunSchedulerNowDispositionSchema, RunSchedulerNowPayloadSchema, RunSchedulerNowResponseSchema, RetryTaskBodySchema, RetryTaskDispositionSchema, RetryTaskPayloadSchema, RetryTaskResponseSchema, SubmitWorklistBodySchema, SubmitWorklistDispositionSchema, SubmitWorklistPayloadSchema, SubmitWorklistResponseSchema, SubmitWorklistResultSchema, UpdateProjectDescriptionBodySchema, UpdateProjectDescriptionDispositionSchema, UpdateProjectDescriptionPayloadSchema, UpdateProjectDescriptionResponseSchema, UpdateProjectDescriptionResultSchema, UpdateProjectDisplayNameBodySchema, UpdateProjectDisplayNameDispositionSchema, UpdateProjectDisplayNamePayloadSchema, UpdateProjectDisplayNameResponseSchema, UpdateProjectDisplayNameResultSchema, } from "./workspace-commands.js";
+export * from "./feishu-documents.js";
 //# sourceMappingURL=index.d.ts.map

package/node_modules/@tutti/shared/dist/schemas/api/index.js

@@ -2,7 +2,7 @@ export * from "./openapi.js";
 export { ARTIFACT_FEEDBACK_MAX_ANNOTATIONS, ARTIFACT_FEEDBACK_MAX_AUTHORED_TEXT_LENGTH, ARTIFACT_FEEDBACK_MAX_COMMENT_LENGTH, ARTIFACT_FEEDBACK_MAX_SERIALIZED_BYTES, ARTIFACT_FEEDBACK_MAX_SUMMARY_LENGTH, ArtifactElementAnchorSchema, ArtifactElementKindSchema, ArtifactElementTargetSchema, ArtifactFeedbackAnnotationSchema, ArtifactFeedbackCommandSchema, ArtifactFeedbackRefSchema, ArtifactSemanticContextSchema, ArtifactSemanticSnapshotSchema, ArtifactSemanticStateSchema, } from "./artifact-feedback.js";
 export { CompleteDesktopEntryContinuationBodySchema, CompleteDesktopEntryContinuationResponseSchema, CreateDesktopEntryContinuationResponseSchema, DESKTOP_ENTRY_COMPLETION_TOKEN_LENGTH, DESKTOP_ENTRY_PAYLOAD_KEY_LENGTH, DESKTOP_ENTRY_SEALED_IV_LENGTH, DesktopEntryCompletionTokenSchema, DesktopEntryContinuationPendingProjectionSchema, DesktopEntryContinuationReadyProjectionSchema, DesktopEntryPayloadKeySchema, GetDesktopEntryContinuationResponseSchema, MAX_DESKTOP_ENTRY_SEALED_CIPHERTEXT_LENGTH, SealedDesktopEntryPayloadSchema, } from "./desktop-entry-continuations.js";
 export { LOCAL_CONSOLE_ACCOUNT_HANDOFF_TOKEN_MAX_LENGTH, LOCAL_CONSOLE_ACCOUNT_HANDOFF_TOKEN_MIN_LENGTH, RegisterLocalConsoleAccountHandoffBodySchema, RegisterLocalConsoleAccountHandoffResponseSchema, } from "./local-console-account-handoffs.js";
-export { FEISHU_BROWSER_HANDOFF_TOKEN_LENGTH, FEISHU_DOCX_REQUIRED_USER_SCOPE, FEISHU_H5_AUTHORIZATION_CODE_MAX_LENGTH, FEISHU_H5_REQUIRED_USER_SCOPE, FEISHU_PLATFORM_STATE_LENGTH, FeishuPlatformSessionBootstrapBodySchema, FeishuPlatformSessionBootstrapResponseSchema, FeishuBrowserHandoffResponseSchema, FeishuBrowserHandoffTokenSchema, ConsumeFeishuBrowserHandoffBodySchema, FeishuDocumentAuthorizationBootstrapResponseSchema, FeishuDocumentAuthorizationExchangeBodySchema, FeishuDocumentAuthorizationProjectionSchema, FeishuPlatformSessionExchangeBodySchema, FeishuPlatformSessionProjectionSchema, FeishuPlatformStateSchema, } from "./platform-sessions.js";
+export { FEISHU_BROWSER_HANDOFF_TOKEN_LENGTH, FEISHU_DOCX_READWRITE_USER_SCOPE, FEISHU_DOCX_REQUIRED_USER_SCOPE, FEISHU_H5_AUTHORIZATION_CODE_MAX_LENGTH, FEISHU_H5_REQUIRED_USER_SCOPE, FEISHU_OFFLINE_ACCESS_SCOPE, FEISHU_PLATFORM_STATE_LENGTH, FeishuPlatformSessionBootstrapBodySchema, FeishuPlatformSessionBootstrapResponseSchema, FeishuBrowserHandoffResponseSchema, FeishuBrowserHandoffTokenSchema, ConsumeFeishuBrowserHandoffBodySchema, FeishuDocumentAuthorizationBootstrapResponseSchema, FeishuDocumentAuthorizationExchangeBodySchema, FeishuDocumentAuthorizationProjectionSchema, FeishuPlatformSessionExchangeBodySchema, FeishuPlatformSessionProjectionSchema, FeishuPlatformStateSchema, hasFeishuDocxReadCapability, } from "./platform-sessions.js";
 export { ApiErrorCodeSchema, ApiErrorResponseSchema, CommandDispositionBaseSchema, CursorPageRequestSchema, DEFAULT_SSE_REPLAY_WINDOW_POLICY, InterruptedCommandDispositionSchema, QueryInvalidationHintSchema, RelayInvalidationHintSchema, RelaySseEventTypeSchema, SseReplayWindowPolicySchema, WorkspaceSseEventTypeSchema, commandEnvelopeSchema, commandResponseSchema, commandResponseWithResultSchema, cursorPageSchema, relaySseEventSchema, timelineWindowSchema, workspaceSseEventSchema, } from "./primitives.js";
 export { GetProviderModelsResponseSchema, MAX_PROVIDER_MODEL_NAME_LENGTH, ProviderConfigInvalidReasonCodeSchema, ProviderConfigProjectionSchema, ProviderModelDiscoveryUnavailableReasonSchema, ProviderModelNameSchema, ProviderModelValidationFailureReasonSchema, ProviderUnavailableReasonCodeSchema, ProjectProviderUnavailableReasonSchema, UpdateProviderDefaultModelBodySchema, UpdateProviderDefaultModelDispositionSchema, UpdateProviderDefaultModelPayloadSchema, UpdateProviderDefaultModelResponseSchema, } from "./provider-config.js";
 export { ProviderUsageBreakdownProjectionSchema, ProviderUsageCategorySchema, ProviderUsageModelSummaryProjectionSchema, ProviderUsageProjectionSchema, ProviderUsageSourceSummaryProjectionSchema, } from "./provider-usage.js";
@@ -18,4 +18,5 @@ export { ArtifactKindSchema, ArtifactManifestSchema, ArtifactPreviewProjectionSc
 export { DeleteSkillBodySchema, DeleteSkillDispositionSchema, DeleteSkillPayloadSchema, DeleteSkillResponseSchema, GetSkillParamsSchema, GetSkillResponseSchema, GetSkillsResponseSchema, ImportSkillZipBodySchema, ImportSkillZipDispositionSchema, ImportSkillZipPayloadSchema, ImportSkillZipResponseSchema, ImportSkillZipResultSchema, SkillDetailProjectionSchema, SkillNameSchema, SkillProjectionSchema, } from "./skills.js";
 export { ActivityEventProjectionSchema, ActivityEventSsePayloadSchema, ApprovalChangedEventPayloadSchema, ActivityProjectionSchema, ConnectionReadyEventPayloadSchema, ExecutionActivitySummarySchema, ExecutionStatusChangedEventPayloadSchema, ExecutionStatusKindSchema, ExecutionStatusProjectionSchema, ProcedureLaneSchema, ProviderConfigChangedEventPayloadSchema, QueryInvalidateEventPayloadSchema, ScratchpadUpdatedEventPayloadSchema, TaskDetailUpdatedEventPayloadSchema, TaskUpdatedEventPayloadSchema, WorklistChangedEventPayloadSchema, WorkspaceRecoveredEventPayloadSchema, } from "./runtime-events.js";
 export { ContextSyncBodySchema, ContextSyncDispositionSchema, ContextSyncPayloadSchema, ContextSyncResponseSchema, ContextSyncResultSchema, InitializeProjectDocsBodySchema, InitializeProjectDocsDispositionSchema, InitializeProjectDocsPayloadSchema, InitializeProjectDocsResponseSchema, InitializeProjectDocsResultSchema, ProjectDocsProcedureStartResultSchema, RefreshScratchpadDispositionSchema, RefreshScratchpadResultSchema, RunSchedulerNowBodySchema, RunSchedulerNowDispositionSchema, RunSchedulerNowPayloadSchema, RunSchedulerNowResponseSchema, RetryTaskBodySchema, RetryTaskDispositionSchema, RetryTaskPayloadSchema, RetryTaskResponseSchema, SubmitWorklistBodySchema, SubmitWorklistDispositionSchema, SubmitWorklistPayloadSchema, SubmitWorklistResponseSchema, SubmitWorklistResultSchema, UpdateProjectDescriptionBodySchema, UpdateProjectDescriptionDispositionSchema, UpdateProjectDescriptionPayloadSchema, UpdateProjectDescriptionResponseSchema, UpdateProjectDescriptionResultSchema, UpdateProjectDisplayNameBodySchema, UpdateProjectDisplayNameDispositionSchema, UpdateProjectDisplayNamePayloadSchema, UpdateProjectDisplayNameResponseSchema, UpdateProjectDisplayNameResultSchema, } from "./workspace-commands.js";
+export * from "./feishu-documents.js";
 //# sourceMappingURL=index.js.map

package/node_modules/@tutti/shared/dist/schemas/api/platform-sessions.d.ts

@@ -2,8 +2,11 @@ import type { Static } from "@sinclair/typebox";
 export declare const FEISHU_H5_AUTHORIZATION_CODE_MAX_LENGTH = 2048;
 export declare const FEISHU_H5_REQUIRED_USER_SCOPE = "im:chat.members:read";
 export declare const FEISHU_DOCX_REQUIRED_USER_SCOPE = "docx:document:readonly";
+export declare const FEISHU_DOCX_READWRITE_USER_SCOPE = "docx:document";
+export declare const FEISHU_OFFLINE_ACCESS_SCOPE = "offline_access";
 export declare const FEISHU_PLATFORM_STATE_LENGTH = 43;
 export declare const FEISHU_BROWSER_HANDOFF_TOKEN_LENGTH = 43;
+export declare function hasFeishuDocxReadCapability(scopes: readonly string[]): boolean;
 export declare const FeishuPlatformStateSchema: import("@sinclair/typebox").TString;
 export declare const FeishuBrowserHandoffTokenSchema: import("@sinclair/typebox").TString;
 export declare const FeishuPlatformSessionBootstrapBodySchema: import("@sinclair/typebox").TObject<{
@@ -43,7 +46,7 @@ export declare const FeishuDocumentAuthorizationBootstrapResponseSchema: import(
     platform: import("@sinclair/typebox").TLiteral<"feishu">;
     app_id: import("@sinclair/typebox").TString;
     state: import("@sinclair/typebox").TString;
-    authorization_scopes: import("@sinclair/typebox").TTuple<[import("@sinclair/typebox").TLiteral<"docx:document:readonly">]>;
+    authorization_scopes: import("@sinclair/typebox").TTuple<[import("@sinclair/typebox").TLiteral<"docx:document:readonly">, import("@sinclair/typebox").TLiteral<"offline_access">]>;
     expires_at: import("@sinclair/typebox").TString;
 }>;
 export declare const FeishuDocumentAuthorizationExchangeBodySchema: import("@sinclair/typebox").TObject<{

package/node_modules/@tutti/shared/dist/schemas/api/platform-sessions.js

@@ -3,8 +3,13 @@ import { IsoDateTimeStringSchema, RelayAccountRefSchema, RelayPlatformSessionRef
 export const FEISHU_H5_AUTHORIZATION_CODE_MAX_LENGTH = 2_048;
 export const FEISHU_H5_REQUIRED_USER_SCOPE = "im:chat.members:read";
 export const FEISHU_DOCX_REQUIRED_USER_SCOPE = "docx:document:readonly";
+export const FEISHU_DOCX_READWRITE_USER_SCOPE = "docx:document";
+export const FEISHU_OFFLINE_ACCESS_SCOPE = "offline_access";
 export const FEISHU_PLATFORM_STATE_LENGTH = 43;
 export const FEISHU_BROWSER_HANDOFF_TOKEN_LENGTH = 43;
+export function hasFeishuDocxReadCapability(scopes) {
+    return scopes.some((scope) => scope === FEISHU_DOCX_REQUIRED_USER_SCOPE || scope === FEISHU_DOCX_READWRITE_USER_SCOPE);
+}
 export const FeishuPlatformStateSchema = Type.String({
     minLength: FEISHU_PLATFORM_STATE_LENGTH,
     maxLength: FEISHU_PLATFORM_STATE_LENGTH,
@@ -52,7 +57,10 @@ export const FeishuDocumentAuthorizationBootstrapResponseSchema = Type.Object({
     platform: Type.Literal("feishu"),
     app_id: Type.String({ minLength: 1, maxLength: 128, pattern: "^cli_[A-Za-z0-9]+$" }),
     state: FeishuPlatformStateSchema,
-    authorization_scopes: Type.Tuple([Type.Literal(FEISHU_DOCX_REQUIRED_USER_SCOPE)]),
+    authorization_scopes: Type.Tuple([
+        Type.Literal(FEISHU_DOCX_REQUIRED_USER_SCOPE),
+        Type.Literal(FEISHU_OFFLINE_ACCESS_SCOPE),
+    ]),
     expires_at: IsoDateTimeStringSchema,
 }, { additionalProperties: false });
 export const FeishuDocumentAuthorizationExchangeBodySchema = Type.Object({

package/node_modules/@tutti/shared/dist/schemas/internal/feishu-documents.d.ts

@@ -0,0 +1,38 @@
+import { type Static } from "@sinclair/typebox";
+export declare const FEISHU_DOCUMENT_CONTROL_PATH = "/internal/v1/feishu-documents";
+export declare const FeishuDocumentControlRequestSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
+    action: import("@sinclair/typebox").TLiteral<"list">;
+    authority: import("@sinclair/typebox").TObject<{
+        project_ref: import("@sinclair/typebox").TString;
+        installation_ref: import("@sinclair/typebox").TString;
+        binding_ref: import("@sinclair/typebox").TString;
+        external_subject_ref: import("@sinclair/typebox").TString;
+        role: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"owner">, import("@sinclair/typebox").TLiteral<"member">]>;
+    }>;
+    diagnostic_id: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+}>, import("@sinclair/typebox").TObject<{
+    action: import("@sinclair/typebox").TLiteral<"connect">;
+    document_id: import("@sinclair/typebox").TString;
+    authority: import("@sinclair/typebox").TObject<{
+        project_ref: import("@sinclair/typebox").TString;
+        installation_ref: import("@sinclair/typebox").TString;
+        binding_ref: import("@sinclair/typebox").TString;
+        external_subject_ref: import("@sinclair/typebox").TString;
+        role: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"owner">, import("@sinclair/typebox").TLiteral<"member">]>;
+    }>;
+    diagnostic_id: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+}>, import("@sinclair/typebox").TObject<{
+    expected_updated_at: import("@sinclair/typebox").TString;
+    action: import("@sinclair/typebox").TLiteral<"refresh">;
+    source_ref: import("@sinclair/typebox").TString;
+    authority: import("@sinclair/typebox").TObject<{
+        project_ref: import("@sinclair/typebox").TString;
+        installation_ref: import("@sinclair/typebox").TString;
+        binding_ref: import("@sinclair/typebox").TString;
+        external_subject_ref: import("@sinclair/typebox").TString;
+        role: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"owner">, import("@sinclair/typebox").TLiteral<"member">]>;
+    }>;
+    diagnostic_id: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+}>]>;
+export type FeishuDocumentControlRequest = Static<typeof FeishuDocumentControlRequestSchema>;
+//# sourceMappingURL=feishu-documents.d.ts.map

package/node_modules/@tutti/shared/dist/schemas/internal/feishu-documents.js

@@ -0,0 +1,31 @@
+import { Type } from "@sinclair/typebox";
+import { FeishuDocumentSourceRefSchema, RefreshFeishuDocumentBodySchema, } from "../api/feishu-documents.js";
+import { RelayProjectRefSchema } from "../domain/index.js";
+export const FEISHU_DOCUMENT_CONTROL_PATH = "/internal/v1/feishu-documents";
+const authority = Type.Object({
+    project_ref: RelayProjectRefSchema,
+    installation_ref: Type.String({ minLength: 1, maxLength: 512 }),
+    binding_ref: Type.String({ minLength: 1, maxLength: 512 }),
+    external_subject_ref: Type.String({ pattern: "^open_id:[A-Za-z0-9_-]{1,500}$" }),
+    role: Type.Union([Type.Literal("owner"), Type.Literal("member")]),
+}, { additionalProperties: false });
+const common = {
+    authority,
+    diagnostic_id: Type.Optional(Type.String({ pattern: "^fdiag_[a-f0-9]{32}$" })),
+};
+// The private document locator travels only in this authenticated Relay -> Integration body.
+export const FeishuDocumentControlRequestSchema = Type.Union([
+    Type.Object({ ...common, action: Type.Literal("list") }, { additionalProperties: false }),
+    Type.Object({
+        ...common,
+        action: Type.Literal("connect"),
+        document_id: Type.String({ pattern: "^[A-Za-z0-9]{27}$" }),
+    }, { additionalProperties: false }),
+    Type.Object({
+        ...common,
+        action: Type.Literal("refresh"),
+        source_ref: FeishuDocumentSourceRefSchema,
+        ...RefreshFeishuDocumentBodySchema.properties,
+    }, { additionalProperties: false }),
+]);
+//# sourceMappingURL=feishu-documents.js.map

package/node_modules/@tutti/shared/dist/schemas/internal/index.d.ts

@@ -73,4 +73,5 @@ export declare function isFeishuPlatformSessionContext(value: unknown): value is
 export declare function parseFeishuPlatformSessionContext(value: unknown): FeishuPlatformSessionContext | null;
 export * from "./platform-integration.js";
 export * from "./feishu-user-credentials.js";
+export * from "./feishu-documents.js";
 //# sourceMappingURL=index.d.ts.map

package/node_modules/@tutti/shared/dist/schemas/internal/index.js

@@ -67,4 +67,5 @@ export function parseFeishuPlatformSessionContext(value) {
 }
 export * from "./platform-integration.js";
 export * from "./feishu-user-credentials.js";
+export * from "./feishu-documents.js";
 //# sourceMappingURL=index.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xfey/tutti",
-  "version": "0.1.106",
+  "version": "0.1.107",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",