@xopcai/xopc 0.0.15 → 0.0.16

package/dist/extensions/feishu/src/adapters/onboard-cli.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Feishu interactive onboarding (CLI onboard) — {@link ChannelOnboardAdapter}.
+ *
+ * This configures the single-account layout under `channels.feishu.*`.
+ */
+import type { ChannelOnboardAdapter } from '@xopcai/xopc/channels/plugins/types.adapters.js';
+export declare const feishuOnboardAdapter: ChannelOnboardAdapter;

package/dist/extensions/feishu/src/adapters/onboard-cli.js

@@ -0,0 +1,432 @@
+import { confirm, input, select } from "@inquirer/prompts";
+//#region extensions/feishu/src/adapters/onboard-cli.ts
+/**
+* Feishu interactive onboarding (CLI onboard) — {@link ChannelOnboardAdapter}.
+*
+* This configures the single-account layout under `channels.feishu.*`.
+*/
+const FEISHU_ACCOUNTS_URL = "https://accounts.feishu.cn";
+const LARK_ACCOUNTS_URL = "https://accounts.larksuite.com";
+const REGISTRATION_PATH = "/oauth/v1/app/registration";
+const REQUEST_TIMEOUT_MS = 1e4;
+function isFeishuConfigured(config) {
+	const feishu = config.channels?.feishu;
+	if (!feishu) return false;
+	const appId = typeof feishu.appId === "string" ? feishu.appId.trim() : "";
+	const appSecret = typeof feishu.appSecret === "string" ? feishu.appSecret.trim() : "";
+	return feishu.enabled === true && Boolean(appId && appSecret);
+}
+function parseAllowlistRaw(raw) {
+	if (!raw.trim()) return [];
+	return raw.split(/[,\s\n]+/).map((s) => s.trim()).filter(Boolean).map((e) => {
+		const num = parseInt(e, 10);
+		return !isNaN(num) && String(num) === e ? num : e;
+	});
+}
+function accountsBaseUrl(domain) {
+	return domain === "lark" ? LARK_ACCOUNTS_URL : FEISHU_ACCOUNTS_URL;
+}
+async function postRegistration(baseUrl, body) {
+	return await (await fetch(`${baseUrl}${REGISTRATION_PATH}`, {
+		method: "POST",
+		headers: { "Content-Type": "application/x-www-form-urlencoded" },
+		body: new URLSearchParams(body).toString(),
+		signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
+	})).json();
+}
+async function initAppRegistration(domain) {
+	try {
+		const res = await postRegistration(accountsBaseUrl(domain), { action: "init" });
+		return Boolean(res.supported_auth_methods?.includes("client_secret"));
+	} catch {
+		return false;
+	}
+}
+async function beginAppRegistration(domain) {
+	const res = await postRegistration(accountsBaseUrl(domain), {
+		action: "begin",
+		archetype: "PersonalAgent",
+		auth_method: "client_secret",
+		request_user_info: "open_id"
+	});
+	const qrUrl = new URL(res.verification_uri_complete);
+	qrUrl.searchParams.set("from", "xopc_onboard");
+	qrUrl.searchParams.set("tp", "ob_cli_app");
+	return {
+		deviceCode: res.device_code,
+		qrUrl: qrUrl.toString(),
+		intervalSec: res.interval || 5,
+		expireInSec: res.expire_in || 600
+	};
+}
+async function sleep(ms) {
+	await new Promise((r) => setTimeout(r, ms));
+}
+async function pollAppRegistration(params) {
+	let domain = params.initialDomain;
+	let intervalSec = params.intervalSec;
+	let domainSwitched = false;
+	const deadline = Date.now() + params.expireInSec * 1e3;
+	while (Date.now() < deadline) {
+		let pollRes;
+		try {
+			pollRes = await postRegistration(accountsBaseUrl(domain), {
+				action: "poll",
+				device_code: params.deviceCode,
+				tp: "ob_cli_app"
+			});
+		} catch {
+			await sleep(intervalSec * 1e3);
+			continue;
+		}
+		if (pollRes.user_info?.tenant_brand) {
+			const isLark = pollRes.user_info.tenant_brand === "lark";
+			if (!domainSwitched && isLark) {
+				domain = "lark";
+				domainSwitched = true;
+				continue;
+			}
+		}
+		if (pollRes.client_id && pollRes.client_secret) return {
+			status: "success",
+			result: {
+				appId: pollRes.client_id,
+				appSecret: pollRes.client_secret,
+				domain,
+				openId: pollRes.user_info?.open_id
+			}
+		};
+		if (pollRes.error) if (pollRes.error === "authorization_pending") {} else if (pollRes.error === "slow_down") intervalSec += 5;
+		else if (pollRes.error === "access_denied") return { status: "access_denied" };
+		else if (pollRes.error === "expired_token") return { status: "expired" };
+		else return {
+			status: "error",
+			message: `${pollRes.error}: ${pollRes.error_description ?? "unknown"}`
+		};
+		await sleep(intervalSec * 1e3);
+	}
+	return { status: "timeout" };
+}
+async function printQrCode(url) {
+	try {
+		const qrcodeTerminal = await import(
+			/* @vite-ignore */
+			"qrcode-terminal"
+);
+		await new Promise((resolve) => {
+			qrcodeTerminal.default.generate(url, { small: true }, (qr) => {
+				process.stdout.write(qr.endsWith("\n") ? qr : `${qr}\n`);
+				resolve();
+			});
+		});
+	} catch {
+		console.log("Open this URL in a browser to scan:\n");
+		console.log(url);
+	}
+}
+async function configureFeishu(config) {
+	console.log(`\n${"=".repeat(50)}`);
+	console.log("📱 Feishu / Lark setup");
+	console.log(`${"=".repeat(50)}\n`);
+	const existing = config.channels?.feishu;
+	const existingAppId = typeof existing?.appId === "string" ? existing.appId : "";
+	const existingDomain = typeof existing?.domain === "string" ? existing.domain : "";
+	if (existing?.enabled === true && existingAppId) {
+		if (!await confirm({
+			message: "A Feishu config already exists. Reconfigure it?",
+			default: false
+		})) return config;
+	}
+	const initialDomain = await select({
+		message: "Feishu/Lark domain:",
+		choices: [{
+			value: "feishu",
+			name: "feishu (open.feishu.cn)",
+			description: "China / Feishu"
+		}, {
+			value: "lark",
+			name: "lark (open.larksuite.com)",
+			description: "International / Lark"
+		}],
+		default: existingDomain === "lark" ? "lark" : "feishu"
+	});
+	const useScanToCreate = await initAppRegistration(initialDomain) ? await confirm({
+		message: "Create an app by scanning a QR code (recommended)?",
+		default: true
+	}) : false;
+	let appId = "";
+	let appSecret = "";
+	let domain = initialDomain;
+	let ownerOpenId;
+	if (useScanToCreate) {
+		console.log("\nScan this QR code with Feishu/Lark to create an app:\n");
+		const begin = await beginAppRegistration(initialDomain);
+		await printQrCode(begin.qrUrl);
+		console.log("\nWaiting for confirmation...\n");
+		const outcome = await pollAppRegistration({
+			deviceCode: begin.deviceCode,
+			intervalSec: begin.intervalSec,
+			expireInSec: begin.expireInSec,
+			initialDomain
+		});
+		if (outcome.status !== "success") console.log("Scan-to-create did not complete. Falling back to manual input.\n");
+		else {
+			appId = outcome.result.appId;
+			appSecret = outcome.result.appSecret;
+			domain = outcome.result.domain;
+			ownerOpenId = outcome.result.openId;
+			console.log(`✅ App created. Domain detected as "${domain}".\n`);
+		}
+	}
+	if (!appId || !appSecret) {
+		console.log("📝 Feishu app credentials (from Feishu Open Platform developer console):\n");
+		appId = (await input({
+			message: "App ID (cli_xxx):",
+			default: existingAppId || void 0,
+			validate: (v) => v.trim().length > 0 || "App ID cannot be empty"
+		})).trim();
+		appSecret = (await input({
+			message: "App Secret:",
+			validate: (v) => v.trim().length > 0 || "App Secret cannot be empty"
+		})).trim();
+		domain = initialDomain;
+	}
+	const connectionMode = await select({
+		message: "Connection mode:",
+		choices: [{
+			value: "websocket",
+			name: "websocket  [recommended]",
+			description: "Socket Mode (persistent connection)"
+		}, {
+			value: "webhook",
+			name: "webhook",
+			description: "Local HTTP server receives events"
+		}],
+		default: "websocket"
+	});
+	let verificationToken;
+	let encryptKey;
+	let webhookHost;
+	let webhookPort;
+	let webhookPath;
+	if (connectionMode === "webhook") {
+		console.log("\n🪝 Webhook secrets (from Feishu event subscription settings):\n");
+		verificationToken = (await input({
+			message: "Verification Token:",
+			validate: (v) => v.trim().length > 0 || "Verification Token cannot be empty"
+		})).trim();
+		encryptKey = (await input({
+			message: "Encrypt Key:",
+			validate: (v) => v.trim().length > 0 || "Encrypt Key cannot be empty"
+		})).trim();
+		webhookHost = (await input({
+			message: "Webhook host:",
+			default: typeof existing?.webhookHost === "string" ? existing.webhookHost : "127.0.0.1"
+		})).trim();
+		webhookPort = Number((await input({
+			message: "Webhook port:",
+			default: typeof existing?.webhookPort === "number" ? String(existing.webhookPort) : "3000"
+		})).trim());
+		webhookPath = (await input({
+			message: "Webhook path:",
+			default: typeof existing?.webhookPath === "string" ? existing.webhookPath : "/feishu/events"
+		})).trim();
+	}
+	const dmPolicy = await select({
+		message: "DM (private chat) policy:",
+		choices: [
+			{
+				value: "pairing",
+				name: "pairing  [recommended]",
+				description: "New users must /pair before chatting"
+			},
+			{
+				value: "allowlist",
+				name: "allowlist",
+				description: "Only allowlisted users can DM"
+			},
+			{
+				value: "open",
+				name: "open",
+				description: "Anyone can DM (not recommended)"
+			},
+			{
+				value: "disabled",
+				name: "disabled",
+				description: "Disable DMs"
+			}
+		],
+		default: "pairing"
+	});
+	let allowFrom;
+	if (dmPolicy === "allowlist") {
+		const defaultAllow = ownerOpenId && (existing?.allowFrom == null || Array.isArray(existing.allowFrom) && existing.allowFrom.length === 0) ? ownerOpenId : "";
+		allowFrom = parseAllowlistRaw(await input({
+			message: "Allowed user open_id / union_id / numeric ids (comma-separated):",
+			default: defaultAllow
+		}) || defaultAllow);
+	}
+	const groupPolicy = await select({
+		message: "Group chat policy:",
+		choices: [
+			{
+				value: "allowlist",
+				name: "allowlist  [recommended]",
+				description: "Only allowlisted groups can use the bot"
+			},
+			{
+				value: "open",
+				name: "open",
+				description: "All groups allowed"
+			},
+			{
+				value: "disabled",
+				name: "disabled",
+				description: "Disable groups"
+			}
+		],
+		default: "allowlist"
+	});
+	let groupAllowFrom;
+	if (groupPolicy === "allowlist") groupAllowFrom = parseAllowlistRaw(await input({
+		message: "Allowed group chat IDs (comma-separated, e.g. oc_xxx):",
+		default: ""
+	}));
+	const requireMention = await confirm({
+		message: "Require @mention in groups?",
+		default: true
+	});
+	const renderMode = await select({
+		message: "Default render mode:",
+		choices: [
+			{
+				value: "auto",
+				name: "auto",
+				description: "Let xopc decide (default)"
+			},
+			{
+				value: "raw",
+				name: "raw",
+				description: "Send plain text only"
+			},
+			{
+				value: "card",
+				name: "card",
+				description: "Prefer interactive cards (CardKit streaming)"
+			}
+		],
+		default: "auto"
+	});
+	const streaming = await confirm({
+		message: "Enable streaming updates (Thinking… + incremental output)?",
+		default: false
+	});
+	const reactionNotifications = await select({
+		message: "Reaction notifications:",
+		choices: [
+			{
+				value: "off",
+				name: "off",
+				description: "Disable reaction notifications"
+			},
+			{
+				value: "own",
+				name: "own  [recommended]",
+				description: "Only notify reactions to bot messages"
+			},
+			{
+				value: "all",
+				name: "all",
+				description: "Notify all reactions (noisy)"
+			}
+		],
+		default: "own"
+	});
+	const enableFeishuTools = await select({
+		message: "Enable Feishu tools (docs/wiki/drive/etc.)?",
+		choices: [
+			{
+				value: "minimal",
+				name: "minimal",
+				description: "No extra tools (chat only)"
+			},
+			{
+				value: "docs",
+				name: "docs",
+				description: "Enable doc/wiki/drive/scopes (common)"
+			},
+			{
+				value: "full",
+				name: "full",
+				description: "Enable doc/wiki/drive/bitable/perm/scopes"
+			}
+		],
+		default: "docs"
+	});
+	const tools = enableFeishuTools === "minimal" ? {
+		doc: false,
+		wiki: false,
+		drive: false,
+		perm: false,
+		bitable: false,
+		scopes: true
+	} : enableFeishuTools === "docs" ? {
+		doc: true,
+		wiki: true,
+		drive: true,
+		perm: false,
+		bitable: true,
+		scopes: true
+	} : {
+		doc: true,
+		wiki: true,
+		drive: true,
+		perm: true,
+		bitable: true,
+		scopes: true
+	};
+	const nextFeishu = {
+		...existing ?? {},
+		enabled: true,
+		appId,
+		appSecret,
+		domain,
+		connectionMode,
+		...connectionMode === "webhook" ? {
+			verificationToken,
+			encryptKey,
+			webhookHost,
+			webhookPort,
+			webhookPath
+		} : {},
+		dmPolicy,
+		groupPolicy,
+		allowFrom: allowFrom ?? existing?.allowFrom ?? [],
+		groupAllowFrom: groupAllowFrom ?? existing?.groupAllowFrom ?? [],
+		requireMention,
+		renderMode,
+		streaming,
+		reactionNotifications,
+		actions: { reactions: true },
+		tools,
+		historyLimit: typeof existing?.historyLimit === "number" ? existing.historyLimit : 50,
+		textChunkLimit: typeof existing?.textChunkLimit === "number" ? existing.textChunkLimit : 4e3
+	};
+	const newConfig = {
+		...config,
+		channels: {
+			...config.channels,
+			feishu: nextFeishu
+		}
+	};
+	console.log("\n✅ Feishu configuration complete\n");
+	return newConfig;
+}
+const feishuOnboardAdapter = {
+	isConfigured: isFeishuConfigured,
+	configure: configureFeishu
+};
+//#endregion
+export { feishuOnboardAdapter };
+
+//# sourceMappingURL=onboard-cli.js.map

package/dist/extensions/feishu/src/adapters/onboard-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboard-cli.js","names":[],"sources":["../../../../../extensions/feishu/src/adapters/onboard-cli.ts"],"sourcesContent":["/**\n * Feishu interactive onboarding (CLI onboard) — {@link ChannelOnboardAdapter}.\n *\n * This configures the single-account layout under `channels.feishu.*`.\n */\n\nimport { confirm, input, select } from '@inquirer/prompts';\n\nimport type { Config } from '@xopcai/xopc/config/schema.js';\nimport type { ChannelOnboardAdapter } from '@xopcai/xopc/channels/plugins/types.adapters.js';\n\ntype DmPolicy = 'pairing' | 'allowlist' | 'open' | 'disabled';\ntype GroupPolicy = 'open' | 'disabled' | 'allowlist';\ntype Domain = 'feishu' | 'lark';\ntype RenderMode = 'auto' | 'raw' | 'card';\ntype ConnectionMode = 'websocket' | 'webhook';\ntype ReactionNotifications = 'off' | 'own' | 'all';\n\ntype AppRegistrationResult = {\n  appId: string;\n  appSecret: string;\n  domain: Domain;\n  openId?: string;\n};\n\nconst FEISHU_ACCOUNTS_URL = 'https://accounts.feishu.cn';\nconst LARK_ACCOUNTS_URL = 'https://accounts.larksuite.com';\nconst REGISTRATION_PATH = '/oauth/v1/app/registration';\nconst REQUEST_TIMEOUT_MS = 10_000;\n\nfunction isFeishuConfigured(config: Config): boolean {\n  const feishu = config.channels?.feishu as Record<string, unknown> | undefined;\n  if (!feishu) return false;\n  const appId = typeof feishu.appId === 'string' ? feishu.appId.trim() : '';\n  const appSecret = typeof feishu.appSecret === 'string' ? feishu.appSecret.trim() : '';\n  const enabled = feishu.enabled === true;\n  return enabled && Boolean(appId && appSecret);\n}\n\nfunction parseAllowlistRaw(raw: string): Array<string | number> {\n  if (!raw.trim()) return [];\n  const entries = raw\n    .split(/[,\\s\\n]+/)\n    .map((s) => s.trim())\n    .filter(Boolean);\n  return entries.map((e) => {\n    const num = parseInt(e, 10);\n    return !isNaN(num) && String(num) === e ? num : e;\n  });\n}\n\nfunction accountsBaseUrl(domain: Domain): string {\n  return domain === 'lark' ? LARK_ACCOUNTS_URL : FEISHU_ACCOUNTS_URL;\n}\n\nasync function postRegistration<T>(baseUrl: string, body: Record<string, string>): Promise<T> {\n  const res = await fetch(`${baseUrl}${REGISTRATION_PATH}`, {\n    method: 'POST',\n    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\n    body: new URLSearchParams(body).toString(),\n    signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),\n  });\n  // Registration poll returns 4xx for pending/error states with a JSON body.\n  return (await res.json()) as T;\n}\n\nasync function initAppRegistration(domain: Domain): Promise<boolean> {\n  type InitResponse = { supported_auth_methods?: string[] };\n  try {\n    const res = await postRegistration<InitResponse>(accountsBaseUrl(domain), { action: 'init' });\n    return Boolean(res.supported_auth_methods?.includes('client_secret'));\n  } catch {\n    return false;\n  }\n}\n\nasync function beginAppRegistration(domain: Domain): Promise<{\n  deviceCode: string;\n  qrUrl: string;\n  intervalSec: number;\n  expireInSec: number;\n}> {\n  type RawBeginResponse = {\n    device_code: string;\n    verification_uri_complete: string;\n    interval?: number;\n    expire_in?: number;\n  };\n  const res = await postRegistration<RawBeginResponse>(accountsBaseUrl(domain), {\n    action: 'begin',\n    archetype: 'PersonalAgent',\n    auth_method: 'client_secret',\n    request_user_info: 'open_id',\n  });\n  const qrUrl = new URL(res.verification_uri_complete);\n  qrUrl.searchParams.set('from', 'xopc_onboard');\n  qrUrl.searchParams.set('tp', 'ob_cli_app');\n  return {\n    deviceCode: res.device_code,\n    qrUrl: qrUrl.toString(),\n    intervalSec: res.interval || 5,\n    expireInSec: res.expire_in || 600,\n  };\n}\n\nasync function sleep(ms: number): Promise<void> {\n  await new Promise<void>((r) => setTimeout(r, ms));\n}\n\nasync function pollAppRegistration(params: {\n  deviceCode: string;\n  intervalSec: number;\n  expireInSec: number;\n  initialDomain: Domain;\n}): Promise<\n  | { status: 'success'; result: AppRegistrationResult }\n  | { status: 'access_denied' | 'expired' | 'timeout'; message?: string }\n  | { status: 'error'; message: string }\n> {\n  type PollResponse = {\n    client_id?: string;\n    client_secret?: string;\n    user_info?: { open_id?: string; tenant_brand?: 'feishu' | 'lark' };\n    error?: string;\n    error_description?: string;\n  };\n\n  let domain: Domain = params.initialDomain;\n  let intervalSec = params.intervalSec;\n  let domainSwitched = false;\n  const deadline = Date.now() + params.expireInSec * 1000;\n\n  while (Date.now() < deadline) {\n    let pollRes: PollResponse;\n    try {\n      pollRes = await postRegistration<PollResponse>(accountsBaseUrl(domain), {\n        action: 'poll',\n        device_code: params.deviceCode,\n        tp: 'ob_cli_app',\n      });\n    } catch {\n      await sleep(intervalSec * 1000);\n      continue;\n    }\n\n    // Auto-detect domain based on tenant.\n    if (pollRes.user_info?.tenant_brand) {\n      const isLark = pollRes.user_info.tenant_brand === 'lark';\n      if (!domainSwitched && isLark) {\n        domain = 'lark';\n        domainSwitched = true;\n        continue;\n      }\n    }\n\n    if (pollRes.client_id && pollRes.client_secret) {\n      return {\n        status: 'success',\n        result: {\n          appId: pollRes.client_id,\n          appSecret: pollRes.client_secret,\n          domain,\n          openId: pollRes.user_info?.open_id,\n        },\n      };\n    }\n\n    if (pollRes.error) {\n      if (pollRes.error === 'authorization_pending') {\n        // keep waiting\n      } else if (pollRes.error === 'slow_down') {\n        intervalSec += 5;\n      } else if (pollRes.error === 'access_denied') {\n        return { status: 'access_denied' };\n      } else if (pollRes.error === 'expired_token') {\n        return { status: 'expired' };\n      } else {\n        return {\n          status: 'error',\n          message: `${pollRes.error}: ${pollRes.error_description ?? 'unknown'}`,\n        };\n      }\n    }\n\n    await sleep(intervalSec * 1000);\n  }\n\n  return { status: 'timeout' };\n}\n\nasync function printQrCode(url: string): Promise<void> {\n  try {\n    const qrcodeTerminal = await import(/* @vite-ignore */ 'qrcode-terminal');\n    await new Promise<void>((resolve) => {\n      qrcodeTerminal.default.generate(url, { small: true }, (qr: string) => {\n        process.stdout.write(qr.endsWith('\\n') ? qr : `${qr}\\n`);\n        resolve();\n      });\n    });\n  } catch {\n    console.log('Open this URL in a browser to scan:\\n');\n    console.log(url);\n  }\n}\n\nasync function configureFeishu(config: Config): Promise<Config> {\n  console.log(`\\n${'='.repeat(50)}`);\n  console.log('📱 Feishu / Lark setup');\n  console.log(`${'='.repeat(50)}\\n`);\n\n  const existing = config.channels?.feishu as Record<string, unknown> | undefined;\n  const existingAppId = typeof existing?.appId === 'string' ? existing.appId : '';\n  const existingDomain = typeof existing?.domain === 'string' ? existing.domain : '';\n\n  if (existing?.enabled === true && existingAppId) {\n    const keep = await confirm({\n      message: 'A Feishu config already exists. Reconfigure it?',\n      default: false,\n    });\n    if (!keep) return config;\n  }\n\n  const initialDomain = await select<Domain>({\n    message: 'Feishu/Lark domain:',\n    choices: [\n      { value: 'feishu', name: 'feishu (open.feishu.cn)', description: 'China / Feishu' },\n      { value: 'lark', name: 'lark (open.larksuite.com)', description: 'International / Lark' },\n    ],\n    default: existingDomain === 'lark' ? 'lark' : 'feishu',\n  });\n\n  const canScanToCreate = await initAppRegistration(initialDomain);\n  const useScanToCreate = canScanToCreate\n    ? await confirm({\n        message: 'Create an app by scanning a QR code (recommended)?',\n        default: true,\n      })\n    : false;\n\n  let appId = '';\n  let appSecret = '';\n  let domain: Domain = initialDomain;\n  let ownerOpenId: string | undefined;\n\n  if (useScanToCreate) {\n    console.log('\\nScan this QR code with Feishu/Lark to create an app:\\n');\n    const begin = await beginAppRegistration(initialDomain);\n    await printQrCode(begin.qrUrl);\n    console.log('\\nWaiting for confirmation...\\n');\n    const outcome = await pollAppRegistration({\n      deviceCode: begin.deviceCode,\n      intervalSec: begin.intervalSec,\n      expireInSec: begin.expireInSec,\n      initialDomain,\n    });\n    if (outcome.status !== 'success') {\n      console.log('Scan-to-create did not complete. Falling back to manual input.\\n');\n    } else {\n      appId = outcome.result.appId;\n      appSecret = outcome.result.appSecret;\n      domain = outcome.result.domain;\n      ownerOpenId = outcome.result.openId;\n      console.log(`✅ App created. Domain detected as \"${domain}\".\\n`);\n    }\n  }\n\n  if (!appId || !appSecret) {\n    console.log('📝 Feishu app credentials (from Feishu Open Platform developer console):\\n');\n\n    appId = (await input({\n      message: 'App ID (cli_xxx):',\n      default: existingAppId || undefined,\n      validate: (v) => v.trim().length > 0 || 'App ID cannot be empty',\n    })).trim();\n\n    appSecret = (await input({\n      message: 'App Secret:',\n      validate: (v) => v.trim().length > 0 || 'App Secret cannot be empty',\n    })).trim();\n\n    domain = initialDomain;\n  }\n\n  const connectionMode = await select<ConnectionMode>({\n    message: 'Connection mode:',\n    choices: [\n      { value: 'websocket', name: 'websocket  [recommended]', description: 'Socket Mode (persistent connection)' },\n      { value: 'webhook', name: 'webhook', description: 'Local HTTP server receives events' },\n    ],\n    default: 'websocket',\n  });\n\n  let verificationToken: string | undefined;\n  let encryptKey: string | undefined;\n  let webhookHost: string | undefined;\n  let webhookPort: number | undefined;\n  let webhookPath: string | undefined;\n  if (connectionMode === 'webhook') {\n    console.log('\\n🪝 Webhook secrets (from Feishu event subscription settings):\\n');\n    verificationToken = (await input({\n      message: 'Verification Token:',\n      validate: (v) => v.trim().length > 0 || 'Verification Token cannot be empty',\n    })).trim();\n    encryptKey = (await input({\n      message: 'Encrypt Key:',\n      validate: (v) => v.trim().length > 0 || 'Encrypt Key cannot be empty',\n    })).trim();\n    webhookHost = (await input({\n      message: 'Webhook host:',\n      default: typeof existing?.webhookHost === 'string' ? existing.webhookHost : '127.0.0.1',\n    })).trim();\n    webhookPort = Number(\n      (await input({\n        message: 'Webhook port:',\n        default: typeof existing?.webhookPort === 'number' ? String(existing.webhookPort) : '3000',\n      })).trim(),\n    );\n    webhookPath = (await input({\n      message: 'Webhook path:',\n      default: typeof existing?.webhookPath === 'string' ? existing.webhookPath : '/feishu/events',\n    })).trim();\n  }\n\n  const dmPolicy = await select<DmPolicy>({\n    message: 'DM (private chat) policy:',\n    choices: [\n      { value: 'pairing', name: 'pairing  [recommended]', description: 'New users must /pair before chatting' },\n      { value: 'allowlist', name: 'allowlist', description: 'Only allowlisted users can DM' },\n      { value: 'open', name: 'open', description: 'Anyone can DM (not recommended)' },\n      { value: 'disabled', name: 'disabled', description: 'Disable DMs' },\n    ],\n    default: 'pairing',\n  });\n\n  let allowFrom: Array<string | number> | undefined;\n  if (dmPolicy === 'allowlist') {\n    const defaultAllow =\n      ownerOpenId && (existing?.allowFrom == null || (Array.isArray(existing.allowFrom) && existing.allowFrom.length === 0))\n        ? ownerOpenId\n        : '';\n    const raw = await input({\n      message: 'Allowed user open_id / union_id / numeric ids (comma-separated):',\n      default: defaultAllow,\n    });\n    allowFrom = parseAllowlistRaw(raw || defaultAllow);\n  }\n\n  const groupPolicy = await select<GroupPolicy>({\n    message: 'Group chat policy:',\n    choices: [\n      { value: 'allowlist', name: 'allowlist  [recommended]', description: 'Only allowlisted groups can use the bot' },\n      { value: 'open', name: 'open', description: 'All groups allowed' },\n      { value: 'disabled', name: 'disabled', description: 'Disable groups' },\n    ],\n    default: 'allowlist',\n  });\n\n  let groupAllowFrom: Array<string | number> | undefined;\n  if (groupPolicy === 'allowlist') {\n    const raw = await input({\n      message: 'Allowed group chat IDs (comma-separated, e.g. oc_xxx):',\n      default: '',\n    });\n    groupAllowFrom = parseAllowlistRaw(raw);\n  }\n\n  const requireMention = await confirm({\n    message: 'Require @mention in groups?',\n    default: true,\n  });\n\n  const renderMode = await select<RenderMode>({\n    message: 'Default render mode:',\n    choices: [\n      { value: 'auto', name: 'auto', description: 'Let xopc decide (default)' },\n      { value: 'raw', name: 'raw', description: 'Send plain text only' },\n      { value: 'card', name: 'card', description: 'Prefer interactive cards (CardKit streaming)' },\n    ],\n    default: 'auto',\n  });\n\n  const streaming = await confirm({\n    message: 'Enable streaming updates (Thinking… + incremental output)?',\n    default: false,\n  });\n\n  const reactionNotifications = await select<ReactionNotifications>({\n    message: 'Reaction notifications:',\n    choices: [\n      { value: 'off', name: 'off', description: 'Disable reaction notifications' },\n      { value: 'own', name: 'own  [recommended]', description: 'Only notify reactions to bot messages' },\n      { value: 'all', name: 'all', description: 'Notify all reactions (noisy)' },\n    ],\n    default: 'own',\n  });\n\n  const enableFeishuTools = await select<'minimal' | 'docs' | 'full'>({\n    message: 'Enable Feishu tools (docs/wiki/drive/etc.)?',\n    choices: [\n      { value: 'minimal', name: 'minimal', description: 'No extra tools (chat only)' },\n      { value: 'docs', name: 'docs', description: 'Enable doc/wiki/drive/scopes (common)' },\n      { value: 'full', name: 'full', description: 'Enable doc/wiki/drive/bitable/perm/scopes' },\n    ],\n    default: 'docs',\n  });\n\n  const tools =\n    enableFeishuTools === 'minimal'\n      ? { doc: false, wiki: false, drive: false, perm: false, bitable: false, scopes: true }\n      : enableFeishuTools === 'docs'\n        ? { doc: true, wiki: true, drive: true, perm: false, bitable: true, scopes: true }\n        : { doc: true, wiki: true, drive: true, perm: true, bitable: true, scopes: true };\n\n  const nextFeishu: Record<string, unknown> = {\n    ...(existing ?? {}),\n    enabled: true,\n    appId,\n    appSecret,\n    domain,\n    connectionMode,\n    ...(connectionMode === 'webhook'\n      ? {\n          verificationToken,\n          encryptKey,\n          webhookHost,\n          webhookPort,\n          webhookPath,\n        }\n      : {}),\n    dmPolicy,\n    groupPolicy,\n    allowFrom: allowFrom ?? (existing?.allowFrom as any) ?? [],\n    groupAllowFrom: groupAllowFrom ?? (existing?.groupAllowFrom as any) ?? [],\n    requireMention,\n    renderMode,\n    streaming,\n    reactionNotifications,\n    actions: { reactions: true },\n    tools,\n    historyLimit: typeof existing?.historyLimit === 'number' ? existing.historyLimit : 50,\n    textChunkLimit: typeof existing?.textChunkLimit === 'number' ? existing.textChunkLimit : 4000,\n  };\n\n  const newConfig: Config = {\n    ...config,\n    channels: {\n      ...config.channels,\n      feishu: nextFeishu,\n    },\n  };\n\n  console.log('\\n✅ Feishu configuration complete\\n');\n  return newConfig;\n}\n\nexport const feishuOnboardAdapter: ChannelOnboardAdapter = {\n  isConfigured: isFeishuConfigured,\n  configure: configureFeishu,\n};\n\n"],"mappings":";;;;;;;AAyBA,MAAM,sBAAsB;AAC5B,MAAM,oBAAoB;AAC1B,MAAM,oBAAoB;AAC1B,MAAM,qBAAqB;AAE3B,SAAS,mBAAmB,QAAyB;CACnD,MAAM,SAAS,OAAO,UAAU;AAChC,KAAI,CAAC,OAAQ,QAAO;CACpB,MAAM,QAAQ,OAAO,OAAO,UAAU,WAAW,OAAO,MAAM,MAAM,GAAG;CACvE,MAAM,YAAY,OAAO,OAAO,cAAc,WAAW,OAAO,UAAU,MAAM,GAAG;AAEnF,QADgB,OAAO,YAAY,QACjB,QAAQ,SAAS,UAAU;;AAG/C,SAAS,kBAAkB,KAAqC;AAC9D,KAAI,CAAC,IAAI,MAAM,CAAE,QAAO,EAAE;AAK1B,QAJgB,IACb,MAAM,WAAW,CACjB,KAAK,MAAM,EAAE,MAAM,CAAC,CACpB,OAAO,QACI,CAAC,KAAK,MAAM;EACxB,MAAM,MAAM,SAAS,GAAG,GAAG;AAC3B,SAAO,CAAC,MAAM,IAAI,IAAI,OAAO,IAAI,KAAK,IAAI,MAAM;GAChD;;AAGJ,SAAS,gBAAgB,QAAwB;AAC/C,QAAO,WAAW,SAAS,oBAAoB;;AAGjD,eAAe,iBAAoB,SAAiB,MAA0C;AAQ5F,QAAQ,OAAM,MAPI,MAAM,GAAG,UAAU,qBAAqB;EACxD,QAAQ;EACR,SAAS,EAAE,gBAAgB,qCAAqC;EAChE,MAAM,IAAI,gBAAgB,KAAK,CAAC,UAAU;EAC1C,QAAQ,YAAY,QAAQ,mBAAmB;EAChD,CAAC,EAEgB,MAAM;;AAG1B,eAAe,oBAAoB,QAAkC;AAEnE,KAAI;EACF,MAAM,MAAM,MAAM,iBAA+B,gBAAgB,OAAO,EAAE,EAAE,QAAQ,QAAQ,CAAC;AAC7F,SAAO,QAAQ,IAAI,wBAAwB,SAAS,gBAAgB,CAAC;SAC/D;AACN,SAAO;;;AAIX,eAAe,qBAAqB,QAKjC;CAOD,MAAM,MAAM,MAAM,iBAAmC,gBAAgB,OAAO,EAAE;EAC5E,QAAQ;EACR,WAAW;EACX,aAAa;EACb,mBAAmB;EACpB,CAAC;CACF,MAAM,QAAQ,IAAI,IAAI,IAAI,0BAA0B;AACpD,OAAM,aAAa,IAAI,QAAQ,eAAe;AAC9C,OAAM,aAAa,IAAI,MAAM,aAAa;AAC1C,QAAO;EACL,YAAY,IAAI;EAChB,OAAO,MAAM,UAAU;EACvB,aAAa,IAAI,YAAY;EAC7B,aAAa,IAAI,aAAa;EAC/B;;AAGH,eAAe,MAAM,IAA2B;AAC9C,OAAM,IAAI,SAAe,MAAM,WAAW,GAAG,GAAG,CAAC;;AAGnD,eAAe,oBAAoB,QASjC;CASA,IAAI,SAAiB,OAAO;CAC5B,IAAI,cAAc,OAAO;CACzB,IAAI,iBAAiB;CACrB,MAAM,WAAW,KAAK,KAAK,GAAG,OAAO,cAAc;AAEnD,QAAO,KAAK,KAAK,GAAG,UAAU;EAC5B,IAAI;AACJ,MAAI;AACF,aAAU,MAAM,iBAA+B,gBAAgB,OAAO,EAAE;IACtE,QAAQ;IACR,aAAa,OAAO;IACpB,IAAI;IACL,CAAC;UACI;AACN,SAAM,MAAM,cAAc,IAAK;AAC/B;;AAIF,MAAI,QAAQ,WAAW,cAAc;GACnC,MAAM,SAAS,QAAQ,UAAU,iBAAiB;AAClD,OAAI,CAAC,kBAAkB,QAAQ;AAC7B,aAAS;AACT,qBAAiB;AACjB;;;AAIJ,MAAI,QAAQ,aAAa,QAAQ,cAC/B,QAAO;GACL,QAAQ;GACR,QAAQ;IACN,OAAO,QAAQ;IACf,WAAW,QAAQ;IACnB;IACA,QAAQ,QAAQ,WAAW;IAC5B;GACF;AAGH,MAAI,QAAQ,MACV,KAAI,QAAQ,UAAU,yBAAyB,YAEpC,QAAQ,UAAU,YAC3B,gBAAe;WACN,QAAQ,UAAU,gBAC3B,QAAO,EAAE,QAAQ,iBAAiB;WACzB,QAAQ,UAAU,gBAC3B,QAAO,EAAE,QAAQ,WAAW;MAE5B,QAAO;GACL,QAAQ;GACR,SAAS,GAAG,QAAQ,MAAM,IAAI,QAAQ,qBAAqB;GAC5D;AAIL,QAAM,MAAM,cAAc,IAAK;;AAGjC,QAAO,EAAE,QAAQ,WAAW;;AAG9B,eAAe,YAAY,KAA4B;AACrD,KAAI;EACF,MAAM,iBAAiB,MAAM;;GAA0B;;AACvD,QAAM,IAAI,SAAe,YAAY;AACnC,kBAAe,QAAQ,SAAS,KAAK,EAAE,OAAO,MAAM,GAAG,OAAe;AACpE,YAAQ,OAAO,MAAM,GAAG,SAAS,KAAK,GAAG,KAAK,GAAG,GAAG,IAAI;AACxD,aAAS;KACT;IACF;SACI;AACN,UAAQ,IAAI,wCAAwC;AACpD,UAAQ,IAAI,IAAI;;;AAIpB,eAAe,gBAAgB,QAAiC;AAC9D,SAAQ,IAAI,KAAK,IAAI,OAAO,GAAG,GAAG;AAClC,SAAQ,IAAI,yBAAyB;AACrC,SAAQ,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI;CAElC,MAAM,WAAW,OAAO,UAAU;CAClC,MAAM,gBAAgB,OAAO,UAAU,UAAU,WAAW,SAAS,QAAQ;CAC7E,MAAM,iBAAiB,OAAO,UAAU,WAAW,WAAW,SAAS,SAAS;AAEhF,KAAI,UAAU,YAAY,QAAQ;MAK5B,CAAC,MAJc,QAAQ;GACzB,SAAS;GACT,SAAS;GACV,CAAC,CACS,QAAO;;CAGpB,MAAM,gBAAgB,MAAM,OAAe;EACzC,SAAS;EACT,SAAS,CACP;GAAE,OAAO;GAAU,MAAM;GAA2B,aAAa;GAAkB,EACnF;GAAE,OAAO;GAAQ,MAAM;GAA6B,aAAa;GAAwB,CAC1F;EACD,SAAS,mBAAmB,SAAS,SAAS;EAC/C,CAAC;CAGF,MAAM,kBAAkB,MADM,oBAAoB,cAAc,GAE5D,MAAM,QAAQ;EACZ,SAAS;EACT,SAAS;EACV,CAAC,GACF;CAEJ,IAAI,QAAQ;CACZ,IAAI,YAAY;CAChB,IAAI,SAAiB;CACrB,IAAI;AAEJ,KAAI,iBAAiB;AACnB,UAAQ,IAAI,2DAA2D;EACvE,MAAM,QAAQ,MAAM,qBAAqB,cAAc;AACvD,QAAM,YAAY,MAAM,MAAM;AAC9B,UAAQ,IAAI,kCAAkC;EAC9C,MAAM,UAAU,MAAM,oBAAoB;GACxC,YAAY,MAAM;GAClB,aAAa,MAAM;GACnB,aAAa,MAAM;GACnB;GACD,CAAC;AACF,MAAI,QAAQ,WAAW,UACrB,SAAQ,IAAI,mEAAmE;OAC1E;AACL,WAAQ,QAAQ,OAAO;AACvB,eAAY,QAAQ,OAAO;AAC3B,YAAS,QAAQ,OAAO;AACxB,iBAAc,QAAQ,OAAO;AAC7B,WAAQ,IAAI,sCAAsC,OAAO,MAAM;;;AAInE,KAAI,CAAC,SAAS,CAAC,WAAW;AACxB,UAAQ,IAAI,6EAA6E;AAEzF,WAAS,MAAM,MAAM;GACnB,SAAS;GACT,SAAS,iBAAiB,KAAA;GAC1B,WAAW,MAAM,EAAE,MAAM,CAAC,SAAS,KAAK;GACzC,CAAC,EAAE,MAAM;AAEV,eAAa,MAAM,MAAM;GACvB,SAAS;GACT,WAAW,MAAM,EAAE,MAAM,CAAC,SAAS,KAAK;GACzC,CAAC,EAAE,MAAM;AAEV,WAAS;;CAGX,MAAM,iBAAiB,MAAM,OAAuB;EAClD,SAAS;EACT,SAAS,CACP;GAAE,OAAO;GAAa,MAAM;GAA4B,aAAa;GAAuC,EAC5G;GAAE,OAAO;GAAW,MAAM;GAAW,aAAa;GAAqC,CACxF;EACD,SAAS;EACV,CAAC;CAEF,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;AACJ,KAAI,mBAAmB,WAAW;AAChC,UAAQ,IAAI,oEAAoE;AAChF,uBAAqB,MAAM,MAAM;GAC/B,SAAS;GACT,WAAW,MAAM,EAAE,MAAM,CAAC,SAAS,KAAK;GACzC,CAAC,EAAE,MAAM;AACV,gBAAc,MAAM,MAAM;GACxB,SAAS;GACT,WAAW,MAAM,EAAE,MAAM,CAAC,SAAS,KAAK;GACzC,CAAC,EAAE,MAAM;AACV,iBAAe,MAAM,MAAM;GACzB,SAAS;GACT,SAAS,OAAO,UAAU,gBAAgB,WAAW,SAAS,cAAc;GAC7E,CAAC,EAAE,MAAM;AACV,gBAAc,QACX,MAAM,MAAM;GACX,SAAS;GACT,SAAS,OAAO,UAAU,gBAAgB,WAAW,OAAO,SAAS,YAAY,GAAG;GACrF,CAAC,EAAE,MAAM,CACX;AACD,iBAAe,MAAM,MAAM;GACzB,SAAS;GACT,SAAS,OAAO,UAAU,gBAAgB,WAAW,SAAS,cAAc;GAC7E,CAAC,EAAE,MAAM;;CAGZ,MAAM,WAAW,MAAM,OAAiB;EACtC,SAAS;EACT,SAAS;GACP;IAAE,OAAO;IAAW,MAAM;IAA0B,aAAa;IAAwC;GACzG;IAAE,OAAO;IAAa,MAAM;IAAa,aAAa;IAAiC;GACvF;IAAE,OAAO;IAAQ,MAAM;IAAQ,aAAa;IAAmC;GAC/E;IAAE,OAAO;IAAY,MAAM;IAAY,aAAa;IAAe;GACpE;EACD,SAAS;EACV,CAAC;CAEF,IAAI;AACJ,KAAI,aAAa,aAAa;EAC5B,MAAM,eACJ,gBAAgB,UAAU,aAAa,QAAS,MAAM,QAAQ,SAAS,UAAU,IAAI,SAAS,UAAU,WAAW,KAC/G,cACA;AAKN,cAAY,kBAAkB,MAJZ,MAAM;GACtB,SAAS;GACT,SAAS;GACV,CAAC,IACmC,aAAa;;CAGpD,MAAM,cAAc,MAAM,OAAoB;EAC5C,SAAS;EACT,SAAS;GACP;IAAE,OAAO;IAAa,MAAM;IAA4B,aAAa;IAA2C;GAChH;IAAE,OAAO;IAAQ,MAAM;IAAQ,aAAa;IAAsB;GAClE;IAAE,OAAO;IAAY,MAAM;IAAY,aAAa;IAAkB;GACvE;EACD,SAAS;EACV,CAAC;CAEF,IAAI;AACJ,KAAI,gBAAgB,YAKlB,kBAAiB,kBAAkB,MAJjB,MAAM;EACtB,SAAS;EACT,SAAS;EACV,CAAC,CACqC;CAGzC,MAAM,iBAAiB,MAAM,QAAQ;EACnC,SAAS;EACT,SAAS;EACV,CAAC;CAEF,MAAM,aAAa,MAAM,OAAmB;EAC1C,SAAS;EACT,SAAS;GACP;IAAE,OAAO;IAAQ,MAAM;IAAQ,aAAa;IAA6B;GACzE;IAAE,OAAO;IAAO,MAAM;IAAO,aAAa;IAAwB;GAClE;IAAE,OAAO;IAAQ,MAAM;IAAQ,aAAa;IAAgD;GAC7F;EACD,SAAS;EACV,CAAC;CAEF,MAAM,YAAY,MAAM,QAAQ;EAC9B,SAAS;EACT,SAAS;EACV,CAAC;CAEF,MAAM,wBAAwB,MAAM,OAA8B;EAChE,SAAS;EACT,SAAS;GACP;IAAE,OAAO;IAAO,MAAM;IAAO,aAAa;IAAkC;GAC5E;IAAE,OAAO;IAAO,MAAM;IAAsB,aAAa;IAAyC;GAClG;IAAE,OAAO;IAAO,MAAM;IAAO,aAAa;IAAgC;GAC3E;EACD,SAAS;EACV,CAAC;CAEF,MAAM,oBAAoB,MAAM,OAAoC;EAClE,SAAS;EACT,SAAS;GACP;IAAE,OAAO;IAAW,MAAM;IAAW,aAAa;IAA8B;GAChF;IAAE,OAAO;IAAQ,MAAM;IAAQ,aAAa;IAAyC;GACrF;IAAE,OAAO;IAAQ,MAAM;IAAQ,aAAa;IAA6C;GAC1F;EACD,SAAS;EACV,CAAC;CAEF,MAAM,QACJ,sBAAsB,YAClB;EAAE,KAAK;EAAO,MAAM;EAAO,OAAO;EAAO,MAAM;EAAO,SAAS;EAAO,QAAQ;EAAM,GACpF,sBAAsB,SACpB;EAAE,KAAK;EAAM,MAAM;EAAM,OAAO;EAAM,MAAM;EAAO,SAAS;EAAM,QAAQ;EAAM,GAChF;EAAE,KAAK;EAAM,MAAM;EAAM,OAAO;EAAM,MAAM;EAAM,SAAS;EAAM,QAAQ;EAAM;CAEvF,MAAM,aAAsC;EAC1C,GAAI,YAAY,EAAE;EAClB,SAAS;EACT;EACA;EACA;EACA;EACA,GAAI,mBAAmB,YACnB;GACE;GACA;GACA;GACA;GACA;GACD,GACD,EAAE;EACN;EACA;EACA,WAAW,aAAc,UAAU,aAAqB,EAAE;EAC1D,gBAAgB,kBAAmB,UAAU,kBAA0B,EAAE;EACzE;EACA;EACA;EACA;EACA,SAAS,EAAE,WAAW,MAAM;EAC5B;EACA,cAAc,OAAO,UAAU,iBAAiB,WAAW,SAAS,eAAe;EACnF,gBAAgB,OAAO,UAAU,mBAAmB,WAAW,SAAS,iBAAiB;EAC1F;CAED,MAAM,YAAoB;EACxB,GAAG;EACH,UAAU;GACR,GAAG,OAAO;GACV,QAAQ;GACT;EACF;AAED,SAAQ,IAAI,sCAAsC;AAClD,QAAO;;AAGT,MAAa,uBAA8C;CACzD,cAAc;CACd,WAAW;CACZ"}

package/dist/extensions/feishu/src/auth/pairing.d.ts

@@ -0,0 +1,7 @@
+export declare function readFrameworkAllowFromList(accountId: string): Array<string | number>;
+export declare function registerUserInFrameworkStore(params: {
+    accountId: string;
+    userId: string | number;
+}): Promise<{
+    changed: boolean;
+}>;

package/dist/extensions/feishu/src/auth/pairing.js

@@ -0,0 +1,45 @@
+import { resolveFeishuFrameworkAllowFromPath } from "./paths.js";
+import path from "node:path";
+import fsSync from "node:fs";
+//#region extensions/feishu/src/auth/pairing.ts
+function readFrameworkAllowFromList(accountId) {
+	const filePath = resolveFeishuFrameworkAllowFromPath(accountId);
+	try {
+		if (!fsSync.existsSync(filePath)) return [];
+		const raw = fsSync.readFileSync(filePath, "utf-8");
+		const parsed = JSON.parse(raw);
+		if (Array.isArray(parsed.allowFrom)) return parsed.allowFrom.filter((id) => typeof id === "string" && id.trim() !== "" || typeof id === "number" && Number.isFinite(id));
+	} catch {}
+	return [];
+}
+async function registerUserInFrameworkStore(params) {
+	const { accountId, userId } = params;
+	const normalized = typeof userId === "number" ? userId : userId.trim();
+	if (typeof normalized === "string" && !normalized) return { changed: false };
+	const filePath = resolveFeishuFrameworkAllowFromPath(accountId);
+	fsSync.mkdirSync(path.dirname(filePath), { recursive: true });
+	if (!fsSync.existsSync(filePath)) fsSync.writeFileSync(filePath, JSON.stringify({
+		version: 1,
+		allowFrom: []
+	}, null, 2), "utf-8");
+	let content = {
+		version: 1,
+		allowFrom: []
+	};
+	try {
+		const raw = fsSync.readFileSync(filePath, "utf-8");
+		const parsed = JSON.parse(raw);
+		if (Array.isArray(parsed.allowFrom)) content = parsed;
+	} catch {}
+	if (content.allowFrom.some((x) => String(x) === String(normalized))) return { changed: false };
+	content.allowFrom.push(normalized);
+	fsSync.writeFileSync(filePath, JSON.stringify(content, null, 2), "utf-8");
+	try {
+		fsSync.chmodSync(filePath, 384);
+	} catch {}
+	return { changed: true };
+}
+//#endregion
+export { readFrameworkAllowFromList, registerUserInFrameworkStore };
+
+//# sourceMappingURL=pairing.js.map

package/dist/extensions/feishu/src/auth/pairing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.js","names":["fs"],"sources":["../../../../../extensions/feishu/src/auth/pairing.ts"],"sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\n\nimport { resolveFeishuFrameworkAllowFromPath } from './paths.js';\n\ntype AllowFromFileContent = {\n  version: number;\n  allowFrom: Array<string | number>;\n};\n\nexport function readFrameworkAllowFromList(accountId: string): Array<string | number> {\n  const filePath = resolveFeishuFrameworkAllowFromPath(accountId);\n  try {\n    if (!fs.existsSync(filePath)) return [];\n    const raw = fs.readFileSync(filePath, 'utf-8');\n    const parsed = JSON.parse(raw) as AllowFromFileContent;\n    if (Array.isArray(parsed.allowFrom)) {\n      return parsed.allowFrom.filter(\n        (id): id is string | number =>\n          (typeof id === 'string' && id.trim() !== '') || (typeof id === 'number' && Number.isFinite(id)),\n      );\n    }\n  } catch {\n    // best-effort\n  }\n  return [];\n}\n\nexport async function registerUserInFrameworkStore(params: {\n  accountId: string;\n  userId: string | number;\n}): Promise<{ changed: boolean }> {\n  const { accountId, userId } = params;\n  const normalized = typeof userId === 'number' ? userId : userId.trim();\n  if (typeof normalized === 'string' && !normalized) return { changed: false };\n\n  const filePath = resolveFeishuFrameworkAllowFromPath(accountId);\n  fs.mkdirSync(path.dirname(filePath), { recursive: true });\n\n  if (!fs.existsSync(filePath)) {\n    const initial: AllowFromFileContent = { version: 1, allowFrom: [] };\n    fs.writeFileSync(filePath, JSON.stringify(initial, null, 2), 'utf-8');\n  }\n\n  let content: AllowFromFileContent = { version: 1, allowFrom: [] };\n  try {\n    const raw = fs.readFileSync(filePath, 'utf-8');\n    const parsed = JSON.parse(raw) as AllowFromFileContent;\n    if (Array.isArray(parsed.allowFrom)) {\n      content = parsed;\n    }\n  } catch {\n    // start fresh\n  }\n\n  if (content.allowFrom.some((x) => String(x) === String(normalized))) {\n    return { changed: false };\n  }\n\n  content.allowFrom.push(normalized);\n  fs.writeFileSync(filePath, JSON.stringify(content, null, 2), 'utf-8');\n  try {\n    fs.chmodSync(filePath, 0o600);\n  } catch {\n    // best-effort\n  }\n  return { changed: true };\n}\n\n"],"mappings":";;;;AAUA,SAAgB,2BAA2B,WAA2C;CACpF,MAAM,WAAW,oCAAoC,UAAU;AAC/D,KAAI;AACF,MAAI,CAACA,OAAG,WAAW,SAAS,CAAE,QAAO,EAAE;EACvC,MAAM,MAAMA,OAAG,aAAa,UAAU,QAAQ;EAC9C,MAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,MAAI,MAAM,QAAQ,OAAO,UAAU,CACjC,QAAO,OAAO,UAAU,QACrB,OACE,OAAO,OAAO,YAAY,GAAG,MAAM,KAAK,MAAQ,OAAO,OAAO,YAAY,OAAO,SAAS,GAAG,CACjG;SAEG;AAGR,QAAO,EAAE;;AAGX,eAAsB,6BAA6B,QAGjB;CAChC,MAAM,EAAE,WAAW,WAAW;CAC9B,MAAM,aAAa,OAAO,WAAW,WAAW,SAAS,OAAO,MAAM;AACtE,KAAI,OAAO,eAAe,YAAY,CAAC,WAAY,QAAO,EAAE,SAAS,OAAO;CAE5E,MAAM,WAAW,oCAAoC,UAAU;AAC/D,QAAG,UAAU,KAAK,QAAQ,SAAS,EAAE,EAAE,WAAW,MAAM,CAAC;AAEzD,KAAI,CAACA,OAAG,WAAW,SAAS,CAE1B,QAAG,cAAc,UAAU,KAAK,UAAU;EADF,SAAS;EAAG,WAAW,EAAE;EAChB,EAAE,MAAM,EAAE,EAAE,QAAQ;CAGvE,IAAI,UAAgC;EAAE,SAAS;EAAG,WAAW,EAAE;EAAE;AACjE,KAAI;EACF,MAAM,MAAMA,OAAG,aAAa,UAAU,QAAQ;EAC9C,MAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,MAAI,MAAM,QAAQ,OAAO,UAAU,CACjC,WAAU;SAEN;AAIR,KAAI,QAAQ,UAAU,MAAM,MAAM,OAAO,EAAE,KAAK,OAAO,WAAW,CAAC,CACjE,QAAO,EAAE,SAAS,OAAO;AAG3B,SAAQ,UAAU,KAAK,WAAW;AAClC,QAAG,cAAc,UAAU,KAAK,UAAU,SAAS,MAAM,EAAE,EAAE,QAAQ;AACrE,KAAI;AACF,SAAG,UAAU,UAAU,IAAM;SACvB;AAGR,QAAO,EAAE,SAAS,MAAM"}

package/dist/extensions/feishu/src/auth/paths.d.ts

@@ -0,0 +1,2 @@
+export declare function resolveFeishuCredentialsDir(): string;
+export declare function resolveFeishuFrameworkAllowFromPath(accountId: string): string;

package/dist/extensions/feishu/src/auth/paths.js

@@ -0,0 +1,18 @@
+import { ENV_VARS, init_paths_state, resolveStateDir } from "../../../../src/config/paths-state.js";
+import path from "node:path";
+//#region extensions/feishu/src/auth/paths.ts
+init_paths_state();
+function resolveFeishuCredentialsDir() {
+	const explicit = process.env[ENV_VARS.CREDENTIALS_DIR]?.trim();
+	if (explicit) return explicit;
+	return path.join(resolveStateDir(), "credentials");
+}
+function resolveFeishuFrameworkAllowFromPath(accountId) {
+	const base = "xopc-feishu".replace(/[\\/:*?"<>|]/g, "_");
+	const safeAccount = accountId.trim().toLowerCase().replace(/[\\/:*?"<>|]/g, "_").replace(/\.\./g, "_");
+	return path.join(resolveFeishuCredentialsDir(), `${base}-${safeAccount}-allowFrom.json`);
+}
+//#endregion
+export { resolveFeishuCredentialsDir, resolveFeishuFrameworkAllowFromPath };
+
+//# sourceMappingURL=paths.js.map

package/dist/extensions/feishu/src/auth/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","names":[],"sources":["../../../../../extensions/feishu/src/auth/paths.ts"],"sourcesContent":["import path from 'node:path';\n\nimport { resolveStateDir, ENV_VARS } from '@xopcai/xopc/config/paths-state.js';\n\nexport function resolveFeishuCredentialsDir(): string {\n  const explicit = process.env[ENV_VARS.CREDENTIALS_DIR]?.trim();\n  if (explicit) return explicit;\n  return path.join(resolveStateDir(), 'credentials');\n}\n\nexport function resolveFeishuFrameworkAllowFromPath(accountId: string): string {\n  const base = 'xopc-feishu'.replace(/[\\\\/:*?\"<>|]/g, '_');\n  const safeAccount = accountId\n    .trim()\n    .toLowerCase()\n    .replace(/[\\\\/:*?\"<>|]/g, '_')\n    .replace(/\\.\\./g, '_');\n  return path.join(resolveFeishuCredentialsDir(), `${base}-${safeAccount}-allowFrom.json`);\n}\n\n"],"mappings":";;;kBAE+E;AAE/E,SAAgB,8BAAsC;CACpD,MAAM,WAAW,QAAQ,IAAI,SAAS,kBAAkB,MAAM;AAC9D,KAAI,SAAU,QAAO;AACrB,QAAO,KAAK,KAAK,iBAAiB,EAAE,cAAc;;AAGpD,SAAgB,oCAAoC,WAA2B;CAC7E,MAAM,OAAO,cAAc,QAAQ,iBAAiB,IAAI;CACxD,MAAM,cAAc,UACjB,MAAM,CACN,aAAa,CACb,QAAQ,iBAAiB,IAAI,CAC7B,QAAQ,SAAS,IAAI;AACxB,QAAO,KAAK,KAAK,6BAA6B,EAAE,GAAG,KAAK,GAAG,YAAY,iBAAiB"}

package/dist/extensions/feishu/src/directory/directory-adapter.d.ts

@@ -0,0 +1,2 @@
+import type { ChannelDirectoryAdapter } from '@xopcai/xopc/channels/plugins/types.adapters.js';
+export declare function createFeishuDirectoryAdapter(): ChannelDirectoryAdapter;

package/dist/extensions/feishu/src/directory/directory-adapter.js

@@ -0,0 +1,27 @@
+import { resolveFeishuAccount } from "../state/accounts.js";
+import { createFeishuClient } from "../transport/client/client.js";
+//#region extensions/feishu/src/directory/directory-adapter.ts
+function createFeishuDirectoryAdapter() {
+	return { resolveDisplayName: async (params) => {
+		const id = params.id.trim();
+		if (!id) return void 0;
+		if (!id.startsWith("ou_") && !id.startsWith("on_")) return;
+		const account = resolveFeishuAccount(params.cfg, "default");
+		if (!account.configured) return void 0;
+		const { api } = createFeishuClient(account);
+		try {
+			const res = await api.contact.user.get({
+				path: { user_id: id },
+				params: { user_id_type: "open_id" }
+			});
+			const name = res?.data?.user?.name ?? res?.data?.name;
+			return typeof name === "string" && name.trim() ? name.trim() : void 0;
+		} catch {
+			return;
+		}
+	} };
+}
+//#endregion
+export { createFeishuDirectoryAdapter };
+
+//# sourceMappingURL=directory-adapter.js.map

package/dist/extensions/feishu/src/directory/directory-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"directory-adapter.js","names":[],"sources":["../../../../../extensions/feishu/src/directory/directory-adapter.ts"],"sourcesContent":["import type { ChannelDirectoryAdapter } from '@xopcai/xopc/channels/plugins/types.adapters.js';\nimport type { Config } from '@xopcai/xopc/config/schema.js';\n\nimport { resolveFeishuAccount } from '../state/accounts.js';\nimport { createFeishuClient } from '../transport/client/client.js';\n\nexport function createFeishuDirectoryAdapter(): ChannelDirectoryAdapter {\n  return {\n    resolveDisplayName: async (params: { cfg: Config; id: string }) => {\n      const id = params.id.trim();\n      if (!id) return undefined;\n\n      // Best-effort: if this looks like an open_id, try resolve user name.\n      if (!id.startsWith('ou_') && !id.startsWith('on_')) {\n        return undefined;\n      }\n\n      // Use default account for directory lookups for now.\n      const account = resolveFeishuAccount(params.cfg, 'default');\n      if (!account.configured) return undefined;\n\n      const { api } = createFeishuClient(account);\n      try {\n        const res = await (api as any).contact.user.get({\n          path: { user_id: id },\n          params: { user_id_type: 'open_id' },\n        });\n        const name = res?.data?.user?.name ?? res?.data?.name;\n        return typeof name === 'string' && name.trim() ? name.trim() : undefined;\n      } catch {\n        return undefined;\n      }\n    },\n  };\n}\n\n"],"mappings":";;;AAMA,SAAgB,+BAAwD;AACtE,QAAO,EACL,oBAAoB,OAAO,WAAwC;EACjE,MAAM,KAAK,OAAO,GAAG,MAAM;AAC3B,MAAI,CAAC,GAAI,QAAO,KAAA;AAGhB,MAAI,CAAC,GAAG,WAAW,MAAM,IAAI,CAAC,GAAG,WAAW,MAAM,CAChD;EAIF,MAAM,UAAU,qBAAqB,OAAO,KAAK,UAAU;AAC3D,MAAI,CAAC,QAAQ,WAAY,QAAO,KAAA;EAEhC,MAAM,EAAE,QAAQ,mBAAmB,QAAQ;AAC3C,MAAI;GACF,MAAM,MAAM,MAAO,IAAY,QAAQ,KAAK,IAAI;IAC9C,MAAM,EAAE,SAAS,IAAI;IACrB,QAAQ,EAAE,cAAc,WAAW;IACpC,CAAC;GACF,MAAM,OAAO,KAAK,MAAM,MAAM,QAAQ,KAAK,MAAM;AACjD,UAAO,OAAO,SAAS,YAAY,KAAK,MAAM,GAAG,KAAK,MAAM,GAAG,KAAA;UACzD;AACN;;IAGL"}

package/dist/extensions/feishu/src/format.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Feishu / Lark outbound text formatting.
+ *
+ * Agent output is often Markdown. Feishu card markdown (`tag: markdown`) expects
+ * Lark-flavored Markdown (bold/italic/strikethrough, links, code fences, etc.), not
+ * CommonMark-only constructs like `**bold**` left uninterpreted in plain `text`
+ * messages — and plain text messages do not render Markdown at all.
+ *
+ * Pipeline mirrors Telegram: Markdown → shared IR → channel-specific rendering.
+ */
+import type { MarkdownTableMode } from '@xopcai/xopc/config/types.base.js';
+export declare function renderFeishuCardMarkdown(markdown: string, options?: {
+    tableMode?: MarkdownTableMode;
+}): string;
+export declare function markdownToFeishuPlainText(markdown: string): string;
+export declare function formatFeishuOutboundText(input: {
+    text: string;
+    renderMode?: 'auto' | 'raw' | 'card';
+    /** When true, target is Feishu interactive markdown (card / card element). */
+    forCardMarkdown: boolean;
+}): string;