@xmanrui/dsh-im 0.18.0 → 0.19.0

package/plugin-src/client/channels/feishu/styles.js

@@ -407,6 +407,50 @@ const CSS = String.raw`
 .bxf-metric dt { color: var(--dsw-alias-label-tertiary, #8f959e); font-size: 11px; line-height: 17px; }
 .bxf-metric dd { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; color: var(--dsw-alias-label-primary, #1f2329); font-size: 12px; line-height: 18px; font-weight: 550; margin: 3px 0 0; }
 
+.bxf-responseMode { min-width: 0; display: grid; grid-template-columns: minmax(0, 1fr) max-content; align-items: center; column-gap: 10px; row-gap: 5px; margin-top: 6px; padding: 8px 10px; border: 1px solid var(--dsw-alias-border-l1, #eef0f3); border-radius: 9px; background: var(--dsw-alias-bg-module-platform, #f7f8fa); }
+.bxf-responseModeHeader { display: contents; color: var(--dsw-alias-label-secondary, #646a73); font-size: 12px; line-height: normal; }
+.bxf-responseModeHeader > span:first-child { grid-column: 1; grid-row: 1; white-space: nowrap; }
+.bxf-responseModeStatus { grid-column: 2; grid-row: 1; color: var(--dsw-alias-label-tertiary, #8f959e); font-size: 12px; white-space: nowrap; }
+.bxf-responseModeSelect { min-width: 0; width: 100%; grid-column: 1 / -1; grid-row: 2; height: 32px; padding: 0 30px 0 9px; border: 1px solid var(--dsw-alias-border-l2, #dfe1e5); border-radius: 7px; color: var(--dsw-alias-label-primary, #1f2329); background-color: var(--dsw-alias-bg-layer-1, #fff); font: inherit; font-size: 12px; cursor: pointer; transition: border-color .16s ease, box-shadow .16s ease, background-color .16s ease; }
+.bxf-responseModeSelect:hover:not(:disabled) { border-color: color-mix(in srgb, var(--bxf-accent) 45%, var(--dsw-alias-border-l2, #dfe1e5)); }
+.bxf-responseModeSelect:focus-visible { outline: none; border-color: var(--bxf-accent); box-shadow: 0 0 0 2px color-mix(in srgb, var(--bxf-accent) 16%, transparent); }
+.bxf-responseModeSelect:disabled { cursor: not-allowed; opacity: .55; }
+.bxf-responseModeHelp { grid-column: 1 / -1; grid-row: 3; color: var(--dsw-alias-label-tertiary, #8f959e); font-size: 11px; line-height: 1.45; }
+.bxf-responseModePermissionAction { grid-column: 1 / -1; grid-row: 4; display: flex; justify-content: flex-start; margin-top: 2px; }
+.bxf-responseModePermissionButton { min-height: 28px; padding: 3px 9px; color: var(--bxf-accent); border-color: color-mix(in srgb, var(--bxf-accent) 30%, var(--dsw-alias-border-l2, #dfe1e5)); background: var(--dsw-alias-bg-layer-1, #fff); }
+.bxf-responseModePermissionButton:hover:not(:disabled) { background: color-mix(in srgb, var(--bxf-accent) 7%, transparent); }
+.bxf-responseModeError { grid-column: 1 / -1; grid-row: 5; color: var(--bxf-error); font-size: 12px; line-height: 1.4; margin: 0; }
+
+.bxf-botProvision {
+  position: relative;
+  margin-top: 14px;
+  scroll-margin-block: 20px;
+  animation: bxf-revealProvision .2s var(--ds-ease-out, ease-out) both;
+}
+.bxf-botProvision:focus { outline: none; }
+.bxf-botProvision:focus-visible {
+  outline: 2px solid color-mix(in srgb, var(--bxf-accent) 75%, transparent);
+  outline-offset: 3px;
+  border-radius: 12px;
+}
+.bxf-botProvision > .bxf-provisionCard {
+  border-radius: 11px;
+  box-shadow: none;
+  background: color-mix(in srgb, var(--bxf-accent) 2.5%, var(--dsw-alias-bg-layer-3, #fff));
+}
+.bxf-botProvision .bxf-cardBody { padding: 18px; }
+.bxf-botProvision .bxf-qrLayout {
+  grid-template-columns: 184px minmax(0, 1fr);
+  align-items: start;
+  gap: 24px;
+}
+.bxf-botProvision .bxf-qrFrame { width: 176px; height: 176px; padding: 10px; border-radius: 11px; }
+.bxf-botProvision .bxf-countdown { width: 176px; }
+.bxf-botProvision .bxf-qrCopy h3 { font-size: 18px; line-height: 26px; }
+.bxf-botProvision .bxf-steps { gap: 8px; margin-top: 14px; }
+.bxf-botProvision .bxf-actions { margin-top: 16px; }
+.bxf-botProvision .bxf-inlineError { min-height: 160px; padding: 22px; }
+
 .bxf-connectedFooter { display: flex; align-items: center; justify-content: space-between; gap: 15px; margin-top: 20px; padding-top: 16px; border-top: 1px solid var(--dsw-alias-border-l1, #eef0f3); }
 .bxf-healthSummary { min-width: 0; color: var(--dsw-alias-label-secondary, #646a73); font-size: 12px; line-height: 18px; }
 .bxf-healthSummary[data-error="true"] { color: var(--bxf-error); }
@@ -459,6 +503,7 @@ const CSS = String.raw`
 @keyframes bxf-rotate { to { transform: rotate(360deg); } }
 @keyframes bxf-pulse { 0%, 100% { transform: scale(.9); opacity: .45; } 50% { transform: scale(1.08); opacity: 1; } }
 @keyframes bxf-shimmer { to { background-position: -220% 0; } }
+@keyframes bxf-revealProvision { from { opacity: 0; transform: translateY(-5px); } }
 
 @container (max-width: 620px) {
   .bxf-headingTools { gap: 6px; }
@@ -470,6 +515,7 @@ const CSS = String.raw`
   .bxf-intro { grid-template-columns: minmax(0, 1fr); }
   .bxf-markStage { display: none; }
   .bxf-qrLayout { grid-template-columns: minmax(0, 1fr); justify-items: center; }
+  .bxf-botProvision .bxf-qrLayout { grid-template-columns: minmax(0, 1fr); }
   .bxf-qrCopy { width: 100%; }
   .bxf-statusGrid { grid-template-columns: minmax(0, 1fr); }
   .bxf-connectedTop { align-items: flex-start; flex-direction: column; }

package/plugin-src/client/i18n.js

@@ -68,6 +68,24 @@ const EN = Object.freeze({
   'WhatsApp账号': 'WhatsApp account',
   '微信设置': 'WeChat settings',
   '飞书机器人设置': 'Feishu bot settings',
+  '群聊响应方式': 'Group response mode',
+  '仅在 @机器人时响应（推荐）': 'Only respond when @mentioned (recommended)',
+  '响应所有群消息': 'Respond to all group messages',
+  '响应所有群消息（需飞书敏感权限）': 'Respond to all group messages (requires a sensitive Feishu scope)',
+  '重新授权': 'Reauthorize',
+  '去授权': 'Authorize',
+  '重新授权群消息权限': 'Reauthorize group-message permission',
+  '授权群消息权限': 'Authorize group-message permission',
+  '正在准备授权…': 'Preparing authorization…',
+  '正在准备…': 'Preparing…',
+  '私聊始终响应；群聊仅处理明确 @当前机器人的消息。群消息权限已开通，再次切换无需授权。': 'Direct messages always work; group chats require an explicit @mention of this bot. The group-message permission is already granted, so switching again needs no authorization.',
+  '私聊始终响应；群聊仅处理明确 @当前机器人的消息。选择全部消息后会打开飞书官方授权流程。': 'Direct messages always work; group chats require an explicit @mention of this bot. Selecting all messages opens the official Feishu authorization flow.',
+  '已开通“获取群组中所有消息”权限（im:message.group_msg）；机器人会处理群聊中的所有可见消息。': 'The “Read all messages in associated group chat” scope (im:message.group_msg) is granted; the bot processes every visible group message.',
+  '尚未确认“获取群组中所有消息”权限，请完成飞书授权。': 'The “Read all messages in associated group chat” scope has not been confirmed. Complete Feishu authorization.',
+  '私聊始终响应；群聊仅处理明确 @当前机器人的消息。': 'Direct messages always work; group chats require an explicit @mention of this bot.',
+  '需在飞书为该机器人开通“获取群组中所有消息”权限（im:message.group_msg）；开通后，机器人会处理群聊中的所有可见消息。': 'Grant this bot the “Read all messages in associated group chat” Feishu scope (im:message.group_msg); once granted, it will process every visible group message.',
+  '群聊响应方式修改失败，请重试。': 'Could not update the group response mode. Try again.',
+  '群消息权限授权失败，请重试。': 'Could not authorize group-message permission. Try again.',
   '钉钉设置': 'DingTalk settings',
   '企业微信设置': 'WeCom settings',
   '扫码接入机器人': 'Scan QR code',
@@ -190,6 +208,7 @@ const EN = Object.freeze({
   '生成 QQ 二维码': 'Generate QQ QR code',
   '正在生成二维码…': 'Generating QR code…',
   '正在准备授权二维码': 'Preparing authorization QR code',
+  '正在准备权限授权二维码': 'Preparing permission authorization QR code',
   '正在准备微信二维码': 'Preparing WeChat QR code',
   '正在添加新机器人': 'Adding a new bot',
   '正在申请钉钉授权二维码…': 'Requesting DingTalk authorization QR code…',
@@ -207,6 +226,16 @@ const EN = Object.freeze({
   '在飞书中打开': 'Open in Feishu',
   '取消添加': 'Cancel',
   '使用飞书扫码修复卡片按钮': 'Scan with Feishu to repair card buttons',
+  '使用飞书确认群消息权限': 'Confirm group-message permission with Feishu',
+  '扫码会更新现有飞书应用，只增量开通“获取群组中所有消息”权限；不会创建新应用。确认后会自动启用“响应所有群消息”，其他机器人不受影响。': 'Scanning updates the existing Feishu app with only the “Read all messages in associated group chat” scope. It does not create a new app. After confirmation, “Respond to all group messages” is enabled automatically; other bots are unaffected.',
+  '核对现有应用，并确认“获取群组中所有消息”权限': 'Review the existing app and confirm the “Read all messages in associated group chat” permission',
+  '保持本页打开，等待权限生效并自动切换响应方式': 'Keep this page open while the permission takes effect and the response mode switches automatically',
+  '取消授权': 'Cancel authorization',
+  '已确认，正在启用全部消息模式': 'Confirmed. Enabling all-message mode',
+  '权限配置已提交，正在保存设置并重连此机器人；此阶段无法取消，其他机器人不会中断。': 'The permission update was submitted. Saving the setting and reconnecting this bot. This stage cannot be cancelled; other bots will not be interrupted.',
+  '权限配置已提交，正在启用全部消息模式并重连此机器人；此阶段无法取消，其他机器人不会中断。': 'The permission update was submitted. Enabling all-message mode and reconnecting this bot. This stage cannot be cancelled; other bots will not be interrupted.',
+  '正在为现有飞书应用申请群消息权限二维码，请稍候。': 'Requesting a group-message permission QR code for the existing Feishu app…',
+  '群消息权限没有开通完成': 'Group-message permission was not granted',
   '扫码会更新现有飞书应用，只增量补充卡片按钮回调；不会创建新应用。确认后此机器人会短暂重连，其他机器人不受影响。': 'Scanning updates the existing Feishu app with only the card-button callback. It does not create a new app. This bot reconnects briefly after confirmation; other bots are not affected.',
   '核对现有应用名称，并确认只新增卡片回调': 'Review the existing app name and confirm that only the card callback is added',
   '保持本页打开，等待卡片按钮修复完成': 'Keep this page open until card-button repair finishes',
@@ -219,14 +248,25 @@ const EN = Object.freeze({
   '修复卡片按钮': 'Repair card buttons',
   '等待扫码…': 'Waiting for scan…',
   '飞书服务返回了不匹配的卡片修复二维码': 'Feishu returned a repair QR code for a different bot',
+  '飞书服务返回了不匹配的群消息权限二维码': 'Feishu returned a group-message permission QR code for a different bot',
   '飞书服务返回的修复信息缺少 botId': 'Feishu repair status is missing the bot ID',
+  '飞书服务返回的应用更新信息缺少 botId': 'Feishu app-update status is missing the bot ID',
   '飞书服务返回了不匹配的注册进度': 'Feishu returned registration progress for a different operation',
   '此机器人': 'this bot',
+  '用于为${botName}开通群消息权限的一次性授权二维码': 'One-time QR code for granting group-message permission to ${botName}',
+  '正在为「${botName}」开通群消息权限': 'Granting group-message permission to “${botName}”',
   '${botName ?? "机器人"}的修复二维码已生成，请使用飞书扫码。': 'Repair QR code generated for ${botName ?? "bot"}. Scan it with Feishu.',
+  '${botName ?? "机器人"}的群消息权限二维码已生成，请使用飞书确认。': 'Group-message permission QR code generated for ${botName ?? "bot"}. Confirm it with Feishu.',
+  '${targetBotName}已开通群消息权限，并启用“响应所有群消息”。': '${targetBotName} now has group-message permission and “Respond to all group messages” is enabled.',
+  '${targetBot.bot.name}已开通群消息权限，并启用“响应所有群消息”。': '${targetBot.bot.name} now has group-message permission and “Respond to all group messages” is enabled.',
   '${targetBot.bot.name}已连接，可以在飞书中开始聊天。': '${targetBot.bot.name} is connected and ready to chat in Feishu.',
   '已取消卡片按钮修复。': 'Card-button repair was cancelled.',
+  '已取消群消息权限授权。': 'Group-message permission authorization was cancelled.',
   '卡片按钮已更新，但暂时无法确认机器人连接状态': 'The card callback was updated, but the bot connection could not be confirmed yet',
+  '群消息权限已更新，但暂时无法确认机器人连接状态': 'The group-message permission was updated, but the bot connection could not be confirmed yet',
   '飞书卡片按钮修复失败': 'Could not repair the Feishu card buttons',
+  '飞书群消息权限开通失败': 'Could not grant the Feishu group-message permission',
+  '请先完成当前飞书授权操作，再开通群消息权限。': 'Finish the current Feishu authorization before granting group-message permission.',
   '已确认，正在连接新机器人': 'Confirmed. Connecting the new bot',
   '正在安全保存凭据并检查新机器人的消息通道，其他机器人不会中断。': 'Saving credentials and checking the new bot connection. Existing bots will not be interrupted.',
   '正在向飞书申请一次性授权二维码，请稍候。': 'Requesting a one-time authorization QR code from Feishu…',
@@ -525,16 +565,26 @@ function translateDynamic(text) {
   if (match) return `Remove “${match[1]}” from DeepSeek Harness?`;
   match = /^从 DeepSeek Harness 移除(.+)$/.exec(text);
   if (match) return `Remove ${match[1]} from DeepSeek Harness`;
+  match = /^(.+)的飞书授权流程$/.exec(text);
+  if (match) return `Feishu authorization flow for ${match[1]}`;
   match = /^用于修复(.+)卡片按钮的一次性授权二维码$/.exec(text);
   if (match) return `One-time QR code for repairing card buttons for ${match[1]}`;
+  match = /^用于为(.+)开通群消息权限的一次性授权二维码$/.exec(text);
+  if (match) return `One-time QR code for granting group-message permission to ${match[1]}`;
   match = /^正在修复「(.+)」$/.exec(text);
   if (match) return `Repairing “${match[1]}”`;
+  match = /^正在为「(.+)」开通群消息权限$/.exec(text);
+  if (match) return `Granting group-message permission to “${match[1]}”`;
   match = /^修复(.+)的卡片按钮$/.exec(text);
   if (match) return `Repair card buttons for ${match[1]}`;
   match = /^(.+)的修复二维码已生成，请使用飞书扫码。$/.exec(text);
   if (match) return `Repair QR code generated for ${match[1]}. Scan it with Feishu.`;
+  match = /^(.+)的群消息权限二维码已生成，请使用飞书确认。$/.exec(text);
+  if (match) return `Group-message permission QR code generated for ${match[1]}. Confirm it with Feishu.`;
   match = /^(.+)的卡片按钮已修复。$/.exec(text);
   if (match) return `Card buttons repaired for ${match[1]}.`;
+  match = /^(.+)已开通群消息权限，并启用“响应所有群消息”。$/.exec(text);
+  if (match) return `${match[1]} now has group-message permission and “Respond to all group messages” is enabled.`;
   match = /^(检查连接|重试连接)(.+)$/.exec(text);
   if (match) return `${localizeText(match[1])} ${match[2]}`;
   match = /^移除(.+)$/.exec(text);

package/plugin-src/host/channels/feishu/production.mjs

@@ -144,6 +144,8 @@ export async function createProductionController(ctx, config = {}, internals = {
         appId: botConfig.appId,
         appSecret,
         domain: botConfig.domain,
+        botOpenId: botConfig.botOpenId,
+        groupResponseMode: botConfig.groupResponseMode,
         ownerOpenIds: botConfig.ownerOpenIds ?? [botConfig.ownerOpenId],
         harness: workspaceScope.harness,
         state: workspaceScope.state,

package/plugin-src/host/channels/feishu/rpc.mjs

@@ -7,6 +7,10 @@ import { publicConnectionTestResult } from '../../../../src/channels/shared/conn
 import { resolveRpcAuthority } from '../../rpc-authority.mjs';
 import { publicWorkspaceError, validWorkspacePayload } from '../shared/workspace-rpc.mjs';
 import { validAgentPresetPayload } from '../shared/agent-preset-rpc.mjs';
+import {
+  isFeishuGroupResponseMode,
+  normalizeFeishuGroupResponseMode,
+} from '../../../../src/channels/feishu/group-response-mode.mjs';
 import {
   FEISHU_ENDPOINTS,
   FEISHU_RPC_CHANNEL,
@@ -26,8 +30,17 @@ const REGISTRATION_STATES = new Set([
   'idle', 'starting', 'qr_ready', 'polling', 'slow_down',
   'domain_switched', 'saving', 'succeeded', 'expired', 'cancelled', 'error',
 ]);
-const REGISTRATION_OPERATIONS = new Set(['provision', 'callback_repair']);
+const REGISTRATION_OPERATIONS = new Set([
+  'provision',
+  'callback_repair',
+  'group_message_permission',
+]);
 const CALLBACK_REPAIR_OPERATION = 'callback_repair';
+const GROUP_MESSAGE_PERMISSION_OPERATION = 'group_message_permission';
+const TARGETED_APP_UPDATE_OPERATIONS = new Set([
+  CALLBACK_REPAIR_OPERATION,
+  GROUP_MESSAGE_PERMISSION_OPERATION,
+]);
 const OFFICIAL_REGISTRATION_HOSTS = new Set([
   'accounts.feishu.cn',
   'accounts.larksuite.com',
@@ -59,6 +72,9 @@ const PUBLIC_ERROR_MESSAGES = Object.freeze({
   credential_update_failed: 'Unable to store the repaired Feishu credentials.',
   credential_state_unknown: 'The repaired Feishu credentials could not be confirmed after saving.',
   repair_connection_failed: 'The callback update was accepted, but the selected bot could not reconnect.',
+  group_message_permission_required: 'Authorize access to all group messages before enabling this mode.',
+  group_message_permission_save_failed: 'Feishu granted the permission, but all-message mode could not be saved.',
+  group_message_permission_connection_failed: 'Feishu granted the permission, but the selected bot could not reconnect.',
   card_action_probe_unavailable: 'The selected bot is not connected, so its card button cannot be verified.',
   card_action_probe_send_failed: 'The callback update was accepted, but the verification card could not be sent.',
   card_action_probe_timeout: 'Feishu accepted the update, but the card button was not verified in time. Start the repair again and click the test button within two minutes.',
@@ -138,7 +154,7 @@ function safeRegistrationUrl(value, operation, expectedHost) {
       || url.port
       || url.username
       || url.password) return undefined;
-    if (operation === CALLBACK_REPAIR_OPERATION) {
+    if (TARGETED_APP_UPDATE_OPERATIONS.has(operation)) {
       const clientIds = url.searchParams.getAll('clientID');
       const transportKinds = url.searchParams.getAll('tp');
       const addons = url.searchParams.getAll('addons');
@@ -240,7 +256,7 @@ async function publicProvisioning(registration, encodeQr, expectedHost) {
   // remote update is committed. Keep only the opaque attempt identity so a
   // browser reload can resume polling the non-cancellable verification phase.
   if (registration.state === 'saving'
-    && registration.operation === CALLBACK_REPAIR_OPERATION
+    && TARGETED_APP_UPDATE_OPERATIONS.has(registration.operation)
     && registration.botId) {
     return { ...projection, submitted: true };
   }
@@ -259,6 +275,8 @@ function publicBotEntry(entry) {
     connected,
     configured: source.configured === true,
     agentPreset: normalizeAgentPresetId(source.agentPreset),
+    groupResponseMode: normalizeFeishuGroupResponseMode(source.groupResponseMode),
+    groupMessagePermissionGranted: source.groupMessagePermissionGranted === true,
     bot: publicBot(source.bot),
     health: publicHealth(source, connected),
   };
@@ -274,12 +292,12 @@ export async function toPublicFeishuStatus(status, { encodeQr = qrCodeDataUrl }
   const registration = publicRegistration(source.registration);
   const facts = connectionFacts(source.connection);
   const connected = source.connected === true || facts.connected;
-  const repairTarget = registration.operation === CALLBACK_REPAIR_OPERATION
+  const appUpdateTarget = TARGETED_APP_UPDATE_OPERATIONS.has(registration.operation)
     && registration.botId
     && Array.isArray(source.bots)
     ? source.bots.find((entry) => entry?.botId === registration.botId)
     : undefined;
-  const expectedRegistrationHost = repairTarget?.bot?.domain === 'lark'
+  const expectedRegistrationHost = appUpdateTarget?.bot?.domain === 'lark'
     ? 'open.larksuite.com'
     : 'open.feishu.cn';
   const provisioning = await publicProvisioning(
@@ -345,6 +363,11 @@ function validPayload(endpoint, payload) {
       ? null
       : 'Callback repair requires a single valid botId.';
   }
+  if (endpoint === FEISHU_ENDPOINTS.beginGroupMessagePermission) {
+    return hasOnlyKeys(payload, new Set(['botId'])) && safeOpaqueId(payload.botId)
+      ? null
+      : 'Group message permission update requires a single valid botId.';
+  }
   if (endpoint === FEISHU_ENDPOINTS.bindCredentials) {
     return hasOnlyKeys(payload, new Set(['appId', 'appSecret']))
       && validCredential(payload.appId, 256)
@@ -389,6 +412,13 @@ function validPayload(endpoint, payload) {
     return validAgentPresetPayload(payload)
       ? null : '请选择 Agent Preset。';
   }
+  if (endpoint === FEISHU_ENDPOINTS.setGroupResponseMode) {
+    return hasOnlyKeys(payload, new Set(['botId', 'groupResponseMode']))
+      && safeOpaqueId(payload.botId)
+      && isFeishuGroupResponseMode(payload.groupResponseMode)
+      ? null
+      : '请选择群聊响应方式。';
+  }
   return 'Unknown Feishu endpoint.';
 }
 
@@ -508,6 +538,20 @@ export function createFeishuRpcHandler(controller, { encodeQr = qrCodeDataUrl }
           throw new Error('Callback repair did not produce a safe QR code.');
         }
         attemptQr.set(attemptId, value.verificationUrl);
+      } else if (endpoint === FEISHU_ENDPOINTS.beginGroupMessagePermission) {
+        if (typeof controller.startGroupMessagePermission !== 'function') {
+          throw new Error('Feishu group message permission update is unavailable.');
+        }
+        const started = await controller.startGroupMessagePermission(payload.botId);
+        const attemptId = String(publicRegistration(started?.registration).attempt);
+        const ready = await waitForQr(controller, started, attemptId, signal);
+        value = (await toPublicFeishuStatus(ready, { encodeQr: cachedEncodeQr })).provisioning;
+        if (!value
+          || value.operation !== GROUP_MESSAGE_PERMISSION_OPERATION
+          || value.botId !== payload.botId) {
+          throw new Error('Group message permission update did not produce a safe QR code.');
+        }
+        attemptQr.set(attemptId, value.verificationUrl);
       } else if (endpoint === FEISHU_ENDPOINTS.pollProvisioning) {
         const current = await statusForRegistration(controller, payload.attemptId);
         if (!current || !sameAttempt(current, payload.attemptId)) {
@@ -542,14 +586,16 @@ export function createFeishuRpcHandler(controller, { encodeQr = qrCodeDataUrl }
           after = await controller.cancelRegistration(payload.attemptId);
         }
         const afterRegistration = publicRegistration(after?.registration);
-        if (registration.operation === CALLBACK_REPAIR_OPERATION
+        if (TARGETED_APP_UPDATE_OPERATIONS.has(registration.operation)
           && registration.state === 'saving'
           && ['saving', 'succeeded'].includes(afterRegistration.state)) {
           value = {
             status: pollStatus(after),
             operation: afterRegistration.operation,
             ...(afterRegistration.botId ? { botId: afterRegistration.botId } : {}),
-            message: 'Callback repair was already submitted and is still being verified.',
+            message: registration.operation === GROUP_MESSAGE_PERMISSION_OPERATION
+              ? 'The permission update was already submitted and is still being applied.'
+              : 'Callback repair was already submitted and is still being verified.',
           };
         }
         if (value?.status !== 'connecting') {
@@ -623,6 +669,14 @@ export function createFeishuRpcHandler(controller, { encodeQr = qrCodeDataUrl }
           await controller.updateAgentPreset(payload.botId, payload.agentPreset),
           { encodeQr: cachedEncodeQr },
         );
+      } else if (endpoint === FEISHU_ENDPOINTS.setGroupResponseMode) {
+        if (typeof controller.updateGroupResponseMode !== 'function') {
+          throw new Error('Group response mode update is unavailable');
+        }
+        value = await toPublicFeishuStatus(
+          await controller.updateGroupResponseMode(payload.botId, payload.groupResponseMode),
+          { encodeQr: cachedEncodeQr },
+        );
       } else {
         if (typeof controller.deleteBot !== 'function') throw new Error('Multi-bot delete is unavailable');
         value = await toPublicFeishuStatus(await controller.deleteBot(payload.botId), { encodeQr: cachedEncodeQr });

package/src/channels/discord/discord-api.mjs

@@ -108,7 +108,7 @@ export class DiscordApi {
         headers: {
           authorization: `Bot ${this.#token}`,
           'content-type': 'application/json',
-          'user-agent': 'DeepSeek-Harness-dsh-im (https://github.com/xmanrui/dsh-im, 0.18.0)',
+          'user-agent': 'DeepSeek-Harness-dsh-im (https://github.com/xmanrui/dsh-im, 0.19.0)',
         },
         ...(body === undefined ? {} : { body: JSON.stringify(body) }),
         signal: requestSignal(signal, timeoutMs),

package/src/channels/feishu/bridge.mjs

@@ -40,6 +40,10 @@ import {
   workspaceListCard,
 } from './feishu-cards.mjs';
 import { MAX_WATCHES_PER_KEY } from './state-store.mjs';
+import {
+  FEISHU_GROUP_RESPONSE_MODES,
+  normalizeFeishuGroupResponseMode,
+} from './group-response-mode.mjs';
 
 const INTERACTION_RESOLVED_TEXT = '这个问题已在其他客户端处理，无需再次回答。';
 const RESOLVED_REPLY_TTL_MS = 30 * 60_000;
@@ -249,6 +253,8 @@ export class FeishuHarnessBridge {
   #signal;
   #botId;
   #appId;
+  #botOpenId;
+  #groupResponseMode;
   #repair;
   #repairOwnerOpenIds;
   #repairAttempt = null;
@@ -275,6 +281,8 @@ export class FeishuHarnessBridge {
     allowedSenderOpenIds = new Set(),
     botId,
     appId,
+    botOpenId,
+    groupResponseMode = FEISHU_GROUP_RESPONSE_MODES.ALL,
     repair,
     repairOwnerOpenIds,
     repairPollIntervalMs = REPAIR_POLL_INTERVAL_MS,
@@ -308,6 +316,8 @@ export class FeishuHarnessBridge {
     this.#allowedSenderOpenIds = allowedSenderOpenIds;
     this.#botId = nonEmptyString(botId);
     this.#appId = nonEmptyString(appId);
+    this.#botOpenId = nonEmptyString(botOpenId);
+    this.#groupResponseMode = normalizeFeishuGroupResponseMode(groupResponseMode);
     this.#repair = repair ?? null;
     const repairOwners = repairOwnerOpenIds ?? allowedSenderOpenIds;
     this.#repairOwnerOpenIds = new Set(
@@ -327,6 +337,18 @@ export class FeishuHarnessBridge {
     }
   }
 
+  setGroupResponseMode(value) {
+    this.#groupResponseMode = normalizeFeishuGroupResponseMode(value);
+  }
+
+  #isAddressed(event) {
+    if (event?.message?.chat_type === 'p2p') return true;
+    const mentions = Array.isArray(event?.message?.mentions) ? event.message.mentions : [];
+    if (!this.#botOpenId) return mentions.length > 0;
+    return mentions.some((mention) => mention?.id?.open_id === this.#botOpenId
+      || mention?.open_id === this.#botOpenId);
+  }
+
   accept(event) {
     if (this.#signal?.aborted) return Promise.resolve();
     const messageId = nonEmptyString(event?.message?.message_id);
@@ -337,6 +359,12 @@ export class FeishuHarnessBridge {
       this.#logger.warn?.('[dsh-feishu] ignored a message from a sender outside the allowlist');
       return Promise.resolve();
     }
+    const addressed = this.#isAddressed(event);
+    if (event?.message?.chat_type !== 'p2p'
+      && this.#groupResponseMode === FEISHU_GROUP_RESPONSE_MODES.MENTION
+      && !addressed) {
+      return Promise.resolve();
+    }
     if (this.#state.hasSeen(messageId) || this.#acceptedMessageIds.has(messageId)) {
       return Promise.resolve();
     }
@@ -362,8 +390,6 @@ export class FeishuHarnessBridge {
     const commandRunner = isControlCommand(commandText)
       ? runControlCommand
       : (isModelCommand(commandText) ? runModelCommand : null);
-    const addressed = event?.message?.chat_type === 'p2p'
-      || (Array.isArray(event?.message?.mentions) && event.message.mentions.length > 0);
     if (commandRunner && addressed) {
       const processing = this.#processFastCommand(
         event,
@@ -407,8 +433,7 @@ export class FeishuHarnessBridge {
       actor: senderOpenId(event),
       messageId,
       text: extractText(event) ?? '',
-      addressed: event?.message?.chat_type === 'p2p'
-        || (Array.isArray(event?.message?.mentions) && event.message.mentions.length > 0),
+      addressed,
       hasPendingQuestion: Boolean(pending),
       questionCompletion: pending?.submitting || pending?.claimedReplyMessageId
         ? pending.queue

package/src/channels/feishu/feishu-runtime.mjs

@@ -2,6 +2,7 @@ import { randomUUID } from 'node:crypto';
 import { FeishuHarnessBridge } from './bridge.mjs';
 import { cardActionProbeCard } from './feishu-cards.mjs';
 import { VerifiedFeishuChannel } from './feishu-channel.mjs';
+import { normalizeFeishuGroupResponseMode } from './group-response-mode.mjs';
 import {
   connectionTestTargetUnavailable,
   sendRememberedConnectionTest,
@@ -87,6 +88,8 @@ export class FeishuRuntime {
   #appId;
   #appSecret;
   #domain;
+  #botOpenId;
+  #groupResponseMode;
   #ownerOpenIds;
   #harness;
   #state;
@@ -109,6 +112,8 @@ export class FeishuRuntime {
     appId,
     appSecret,
     domain = 'feishu',
+    botOpenId,
+    groupResponseMode,
     ownerOpenId,
     ownerOpenIds,
     harness,
@@ -138,6 +143,8 @@ export class FeishuRuntime {
     this.#appId = appId;
     this.#appSecret = appSecret;
     this.#domain = domain;
+    this.#botOpenId = nonEmptyString(botOpenId);
+    this.#groupResponseMode = normalizeFeishuGroupResponseMode(groupResponseMode);
     this.#ownerOpenIds = normalizedOwners;
     this.#harness = harness;
     this.#state = state;
@@ -153,6 +160,11 @@ export class FeishuRuntime {
     return structuredClone(this.#status);
   }
 
+  setGroupResponseMode(value) {
+    this.#groupResponseMode = normalizeFeishuGroupResponseMode(value);
+    this.#bridge?.setGroupResponseMode(this.#groupResponseMode);
+  }
+
   async start() {
     if (this.#wsClient && this.#status.ready) return this.status;
     if (this.#starting) return this.#starting;
@@ -202,6 +214,8 @@ export class FeishuRuntime {
         allowedSenderOpenIds: new Set(this.#ownerOpenIds),
         botId: this.#botId,
         appId: this.#appId,
+        botOpenId: this.#botOpenId,
+        groupResponseMode: this.#groupResponseMode,
         repair: this.#repair,
         repairOwnerOpenIds: new Set(this.#ownerOpenIds.filter((value) => value !== '*')),
         replyTimeoutMs: this.#replyTimeoutMs,

package/src/channels/feishu/group-message-permission-manager.mjs

@@ -0,0 +1,71 @@
+import { RegistrationManager } from './registration-manager.mjs';
+import { assertTargetedAppUpdateUrl } from './repair-manager.mjs';
+
+export const FEISHU_GROUP_MESSAGE_SCOPE = 'im:message.group_msg';
+export const GROUP_MESSAGE_PERMISSION_OPERATION = 'group_message_permission';
+
+function accountsDomain(domain) {
+  return domain === 'lark' ? 'accounts.larksuite.com' : 'accounts.feishu.cn';
+}
+
+export function assertGroupMessagePermissionUrl(value, expectedAppId, domain = 'feishu') {
+  return assertTargetedAppUpdateUrl(
+    value,
+    expectedAppId,
+    domain,
+    'Feishu group message permission update',
+  );
+}
+
+/**
+ * Incrementally grants the one sensitive tenant scope needed by all-message
+ * mode to an existing app. The fixed manifest prevents this UI action from
+ * creating another app or silently adding unrelated capabilities.
+ */
+export class GroupMessagePermissionManager {
+  #manager;
+  #appId;
+  #domain;
+
+  constructor({ registerApp, onCredentials, appId, domain = 'feishu' } = {}) {
+    if (typeof registerApp !== 'function') throw new TypeError('registerApp is required');
+    if (typeof onCredentials !== 'function') throw new TypeError('onCredentials is required');
+    if (typeof appId !== 'string' || !appId.trim()) throw new TypeError('appId is required');
+    if (domain !== 'feishu' && domain !== 'lark') throw new TypeError('domain is invalid');
+
+    this.#appId = appId.trim();
+    this.#domain = domain;
+    this.#manager = new RegistrationManager({
+      registerApp: (options) => registerApp({
+        ...options,
+        onQRCodeReady: (info) => {
+          assertGroupMessagePermissionUrl(info?.url, this.#appId, this.#domain);
+          options.onQRCodeReady(info);
+        },
+      }),
+      onCredentials,
+    });
+  }
+
+  start() {
+    return this.#manager.start({
+      source: 'deepseek-harness-group-message-permission',
+      domain: accountsDomain(this.#domain),
+      appId: this.#appId,
+      addons: {
+        preset: false,
+        scopes: { tenant: [FEISHU_GROUP_MESSAGE_SCOPE] },
+      },
+    });
+  }
+
+  status() {
+    return this.#manager.status();
+  }
+
+  cancel() {
+    return this.#manager.cancel();
+  }
+}
+
+export default GroupMessagePermissionManager;

package/src/channels/feishu/group-response-mode.mjs

@@ -0,0 +1,15 @@
+export const FEISHU_GROUP_RESPONSE_MODES = Object.freeze({
+  MENTION: 'mention',
+  ALL: 'all',
+});
+
+export function normalizeFeishuGroupResponseMode(value) {
+  return value === FEISHU_GROUP_RESPONSE_MODES.ALL
+    ? FEISHU_GROUP_RESPONSE_MODES.ALL
+    : FEISHU_GROUP_RESPONSE_MODES.MENTION;
+}
+
+export function isFeishuGroupResponseMode(value) {
+  return value === FEISHU_GROUP_RESPONSE_MODES.MENTION
+    || value === FEISHU_GROUP_RESPONSE_MODES.ALL;
+}