@xopcai/xopc 0.0.19 → 0.0.21

package/dist/extensions/feishu/src/adapters/cli-login.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Feishu CLI Login adapter — implements `ChannelCliLoginAdapter`.
+ *
+ * Provides `xopc channels login --channel feishu` interactive credential setup.
+ * Supports QR scan-to-create and manual credential input.
+ */
+import type { ChannelCliLoginAdapter } from '@xopcai/xopc/channels/plugins/types.adapters.js';
+export declare const feishuCliLoginAdapter: ChannelCliLoginAdapter;

package/dist/extensions/feishu/src/adapters/cli-login.js

@@ -0,0 +1,225 @@
+import { beginAppRegistration, initAppRegistration, pollAppRegistration, printQrCode } from "../auth/app-registration.js";
+import fsSync from "node:fs";
+import { confirm, input, select } from "@inquirer/prompts";
+//#region extensions/feishu/src/adapters/cli-login.ts
+/**
+* Feishu CLI Login adapter — implements `ChannelCliLoginAdapter`.
+*
+* Provides `xopc channels login --channel feishu` interactive credential setup.
+* Supports QR scan-to-create and manual credential input.
+*/
+function loadConfigFromPath(configPath) {
+	try {
+		const raw = fsSync.readFileSync(configPath, "utf8");
+		return JSON.parse(raw);
+	} catch {
+		return {};
+	}
+}
+function writeConfigToPath(configPath, config) {
+	fsSync.writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n", "utf8");
+}
+function isFeishuConfigured(config) {
+	const feishu = config.channels?.feishu;
+	if (!feishu) return false;
+	const appId = typeof feishu.appId === "string" ? feishu.appId.trim() : "";
+	const appSecret = typeof feishu.appSecret === "string" ? feishu.appSecret.trim() : "";
+	return Boolean(appId && appSecret);
+}
+function parseAllowlistRaw(raw) {
+	if (!raw.trim()) return [];
+	return raw.split(/[,\s\n]+/).map((entry) => entry.trim()).filter(Boolean).map((entry) => {
+		const asNumber = parseInt(entry, 10);
+		return !isNaN(asNumber) && String(asNumber) === entry ? asNumber : entry;
+	});
+}
+async function acquireCredentials(params) {
+	const domain = await select({
+		message: "Feishu/Lark domain:",
+		choices: [{
+			value: "feishu",
+			name: "feishu (open.feishu.cn)",
+			description: "China / Feishu"
+		}, {
+			value: "lark",
+			name: "lark (open.larksuite.com)",
+			description: "International / Lark"
+		}],
+		default: "feishu"
+	});
+	if (await initAppRegistration(domain) ? await confirm({
+		message: "Create an app by scanning a QR code (recommended)?",
+		default: true
+	}) : false) {
+		console.log("\nScan this QR code with Feishu/Lark to create an app:\n");
+		const begin = await beginAppRegistration(domain);
+		await printQrCode(begin.qrUrl);
+		console.log("\nWaiting for confirmation...\n");
+		const expireInSec = Math.min(begin.expireInSec, Math.floor(params.timeoutMs / 1e3));
+		const outcome = await pollAppRegistration({
+			deviceCode: begin.deviceCode,
+			intervalSec: begin.intervalSec,
+			expireInSec,
+			initialDomain: domain
+		});
+		if (outcome.status === "success") {
+			console.log(`✅ App created. Domain: "${outcome.result.domain}".\n`);
+			return {
+				appId: outcome.result.appId,
+				appSecret: outcome.result.appSecret,
+				domain: outcome.result.domain,
+				ownerOpenId: outcome.result.openId
+			};
+		}
+		const reason = outcome.status === "access_denied" ? "User denied authorization." : outcome.status === "expired" ? "Session expired." : outcome.status === "timeout" ? "Scan timed out." : `Error: ${"message" in outcome ? outcome.message : "unknown"}`;
+		console.log(`${reason} Falling back to manual input.\n`);
+	}
+	console.log("📝 Enter Feishu app credentials (from Feishu Open Platform developer console):\n");
+	return {
+		appId: (await input({
+			message: "App ID (cli_xxx):",
+			default: params.existingAppId || void 0,
+			validate: (value) => value.trim().length > 0 || "App ID cannot be empty"
+		})).trim(),
+		appSecret: (await input({
+			message: "App Secret:",
+			validate: (value) => value.trim().length > 0 || "App Secret cannot be empty"
+		})).trim(),
+		domain
+	};
+}
+async function promptSecurityPolicies(ownerOpenId) {
+	const dmPolicy = await select({
+		message: "DM (private chat) policy:",
+		choices: [
+			{
+				value: "pairing",
+				name: "pairing  [recommended]",
+				description: "New users must /pair"
+			},
+			{
+				value: "allowlist",
+				name: "allowlist",
+				description: "Only allowlisted users"
+			},
+			{
+				value: "open",
+				name: "open",
+				description: "Anyone can DM"
+			},
+			{
+				value: "disabled",
+				name: "disabled",
+				description: "Disable DMs"
+			}
+		],
+		default: "pairing"
+	});
+	let allowFrom = [];
+	if (dmPolicy === "allowlist") {
+		const defaultAllow = ownerOpenId ?? "";
+		allowFrom = parseAllowlistRaw(await input({
+			message: "Allowed user open_id / union_id (comma-separated):",
+			default: defaultAllow
+		}) || defaultAllow);
+	}
+	const groupPolicy = await select({
+		message: "Group chat policy:",
+		choices: [
+			{
+				value: "allowlist",
+				name: "allowlist  [recommended]",
+				description: "Only allowlisted groups"
+			},
+			{
+				value: "open",
+				name: "open",
+				description: "All groups allowed"
+			},
+			{
+				value: "disabled",
+				name: "disabled",
+				description: "Disable groups"
+			}
+		],
+		default: "allowlist"
+	});
+	let groupAllowFrom = [];
+	if (groupPolicy === "allowlist") groupAllowFrom = parseAllowlistRaw(await input({
+		message: "Allowed group chat IDs (comma-separated, e.g. oc_xxx):",
+		default: ""
+	}));
+	const requireMention = await confirm({
+		message: "Require @mention in groups?",
+		default: true
+	});
+	return {
+		dmPolicy,
+		groupPolicy,
+		allowFrom,
+		groupAllowFrom,
+		requireMention
+	};
+}
+const feishuCliLoginAdapter = { async runLogin(params) {
+	const { configPath, verbose, timeoutMs = 48e4, accountId, writeConfig = true } = params;
+	if (verbose) console.log(`[feishu-login] configPath=${configPath}, timeoutMs=${timeoutMs}`);
+	const config = loadConfigFromPath(configPath);
+	const existingFeishu = config.channels?.feishu;
+	const existingAppId = typeof existingFeishu?.appId === "string" ? existingFeishu.appId : "";
+	const alreadyConfigured = isFeishuConfigured(config);
+	console.log(`\n${"=".repeat(50)}`);
+	console.log("📱 Feishu / Lark login");
+	console.log(`${"=".repeat(50)}\n`);
+	if (alreadyConfigured) {
+		if (!await confirm({
+			message: `Feishu is already configured (App ID: ${existingAppId}). Reconfigure?`,
+			default: false
+		})) {
+			console.log("Keeping existing configuration.\n");
+			return {
+				ok: true,
+				message: "Existing configuration kept.",
+				accountId
+			};
+		}
+	}
+	const credentials = await acquireCredentials({
+		existingAppId,
+		timeoutMs
+	});
+	const policies = await promptSecurityPolicies(credentials.ownerOpenId);
+	const nextFeishu = {
+		...existingFeishu ?? {},
+		enabled: true,
+		appId: credentials.appId,
+		appSecret: credentials.appSecret,
+		domain: credentials.domain,
+		connectionMode: existingFeishu?.connectionMode || "websocket",
+		dmPolicy: policies.dmPolicy,
+		groupPolicy: policies.groupPolicy,
+		allowFrom: policies.allowFrom,
+		groupAllowFrom: policies.groupAllowFrom,
+		requireMention: policies.requireMention
+	};
+	const nextConfig = {
+		...config,
+		channels: {
+			...config.channels,
+			feishu: nextFeishu
+		}
+	};
+	if (writeConfig) {
+		writeConfigToPath(configPath, nextConfig);
+		console.log(`✅ Feishu configuration saved to ${configPath}\n`);
+	} else console.log("✅ Feishu credentials acquired (--credentials-only: config not updated).\n");
+	return {
+		ok: true,
+		message: `Feishu login complete (App ID: ${credentials.appId}).`,
+		accountId: accountId ?? void 0
+	};
+} };
+//#endregion
+export { feishuCliLoginAdapter };
+
+//# sourceMappingURL=cli-login.js.map

package/dist/extensions/feishu/src/adapters/cli-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-login.js","names":["fs"],"sources":["../../../../../extensions/feishu/src/adapters/cli-login.ts"],"sourcesContent":["/**\n * Feishu CLI Login adapter — implements `ChannelCliLoginAdapter`.\n *\n * Provides `xopc channels login --channel feishu` interactive credential setup.\n * Supports QR scan-to-create and manual credential input.\n */\n\nimport fs from 'node:fs';\n\nimport { confirm, input, select } from '@inquirer/prompts';\n\nimport type { Config } from '@xopcai/xopc/config/schema.js';\nimport type { ChannelCliLoginAdapter } from '@xopcai/xopc/channels/plugins/types.adapters.js';\n\nimport {\n  initAppRegistration,\n  beginAppRegistration,\n  pollAppRegistration,\n  printQrCode,\n  type FeishuDomain,\n} from '../auth/app-registration.js';\n\ntype DmPolicy = 'pairing' | 'allowlist' | 'open' | 'disabled';\ntype GroupPolicy = 'open' | 'disabled' | 'allowlist';\n\nfunction loadConfigFromPath(configPath: string): Config {\n  try {\n    const raw = fs.readFileSync(configPath, 'utf8');\n    return JSON.parse(raw) as Config;\n  } catch {\n    return {} as Config;\n  }\n}\n\nfunction writeConfigToPath(configPath: string, config: Config): void {\n  fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + '\\n', 'utf8');\n}\n\nfunction isFeishuConfigured(config: Config): boolean {\n  const feishu = config.channels?.feishu as Record<string, unknown> | undefined;\n  if (!feishu) return false;\n  const appId = typeof feishu.appId === 'string' ? feishu.appId.trim() : '';\n  const appSecret = typeof feishu.appSecret === 'string' ? feishu.appSecret.trim() : '';\n  return Boolean(appId && appSecret);\n}\n\nfunction parseAllowlistRaw(raw: string): Array<string | number> {\n  if (!raw.trim()) return [];\n  return raw\n    .split(/[,\\s\\n]+/)\n    .map((entry) => entry.trim())\n    .filter(Boolean)\n    .map((entry) => {\n      const asNumber = parseInt(entry, 10);\n      return !isNaN(asNumber) && String(asNumber) === entry ? asNumber : entry;\n    });\n}\n\nasync function acquireCredentials(params: {\n  existingAppId: string;\n  timeoutMs: number;\n}): Promise<{\n  appId: string;\n  appSecret: string;\n  domain: FeishuDomain;\n  ownerOpenId?: string;\n}> {\n  const domain = await select<FeishuDomain>({\n    message: 'Feishu/Lark domain:',\n    choices: [\n      { value: 'feishu', name: 'feishu (open.feishu.cn)', description: 'China / Feishu' },\n      { value: 'lark', name: 'lark (open.larksuite.com)', description: 'International / Lark' },\n    ],\n    default: 'feishu',\n  });\n\n  const canScan = await initAppRegistration(domain);\n  const useScan = canScan\n    ? await confirm({\n        message: 'Create an app by scanning a QR code (recommended)?',\n        default: true,\n      })\n    : false;\n\n  if (useScan) {\n    console.log('\\nScan this QR code with Feishu/Lark to create an app:\\n');\n    const begin = await beginAppRegistration(domain);\n    await printQrCode(begin.qrUrl);\n    console.log('\\nWaiting for confirmation...\\n');\n\n    const expireInSec = Math.min(begin.expireInSec, Math.floor(params.timeoutMs / 1000));\n    const outcome = await pollAppRegistration({\n      deviceCode: begin.deviceCode,\n      intervalSec: begin.intervalSec,\n      expireInSec,\n      initialDomain: domain,\n    });\n\n    if (outcome.status === 'success') {\n      console.log(`✅ App created. Domain: \"${outcome.result.domain}\".\\n`);\n      return {\n        appId: outcome.result.appId,\n        appSecret: outcome.result.appSecret,\n        domain: outcome.result.domain,\n        ownerOpenId: outcome.result.openId,\n      };\n    }\n\n    const reason =\n      outcome.status === 'access_denied'\n        ? 'User denied authorization.'\n        : outcome.status === 'expired'\n          ? 'Session expired.'\n          : outcome.status === 'timeout'\n            ? 'Scan timed out.'\n            : `Error: ${'message' in outcome ? outcome.message : 'unknown'}`;\n    console.log(`${reason} Falling back to manual input.\\n`);\n  }\n\n  console.log('📝 Enter Feishu app credentials (from Feishu Open Platform developer console):\\n');\n\n  const appId = (\n    await input({\n      message: 'App ID (cli_xxx):',\n      default: params.existingAppId || undefined,\n      validate: (value) => value.trim().length > 0 || 'App ID cannot be empty',\n    })\n  ).trim();\n\n  const appSecret = (\n    await input({\n      message: 'App Secret:',\n      validate: (value) => value.trim().length > 0 || 'App Secret cannot be empty',\n    })\n  ).trim();\n\n  return { appId, appSecret, domain };\n}\n\nasync function promptSecurityPolicies(ownerOpenId?: string): Promise<{\n  dmPolicy: DmPolicy;\n  groupPolicy: GroupPolicy;\n  allowFrom: Array<string | number>;\n  groupAllowFrom: Array<string | number>;\n  requireMention: boolean;\n}> {\n  const dmPolicy = await select<DmPolicy>({\n    message: 'DM (private chat) policy:',\n    choices: [\n      { value: 'pairing', name: 'pairing  [recommended]', description: 'New users must /pair' },\n      { value: 'allowlist', name: 'allowlist', description: 'Only allowlisted users' },\n      { value: 'open', name: 'open', description: 'Anyone can DM' },\n      { value: 'disabled', name: 'disabled', description: 'Disable DMs' },\n    ],\n    default: 'pairing',\n  });\n\n  let allowFrom: Array<string | number> = [];\n  if (dmPolicy === 'allowlist') {\n    const defaultAllow = ownerOpenId ?? '';\n    const raw = await input({\n      message: 'Allowed user open_id / union_id (comma-separated):',\n      default: defaultAllow,\n    });\n    allowFrom = parseAllowlistRaw(raw || defaultAllow);\n  }\n\n  const groupPolicy = await select<GroupPolicy>({\n    message: 'Group chat policy:',\n    choices: [\n      { value: 'allowlist', name: 'allowlist  [recommended]', description: 'Only allowlisted groups' },\n      { value: 'open', name: 'open', description: 'All groups allowed' },\n      { value: 'disabled', name: 'disabled', description: 'Disable groups' },\n    ],\n    default: 'allowlist',\n  });\n\n  let groupAllowFrom: Array<string | number> = [];\n  if (groupPolicy === 'allowlist') {\n    const raw = await input({\n      message: 'Allowed group chat IDs (comma-separated, e.g. oc_xxx):',\n      default: '',\n    });\n    groupAllowFrom = parseAllowlistRaw(raw);\n  }\n\n  const requireMention = await confirm({\n    message: 'Require @mention in groups?',\n    default: true,\n  });\n\n  return { dmPolicy, groupPolicy, allowFrom, groupAllowFrom, requireMention };\n}\n\nexport const feishuCliLoginAdapter: ChannelCliLoginAdapter = {\n  async runLogin(params) {\n    const { configPath, verbose, timeoutMs = 480_000, accountId, writeConfig = true } = params;\n\n    if (verbose) {\n      console.log(`[feishu-login] configPath=${configPath}, timeoutMs=${timeoutMs}`);\n    }\n\n    const config = loadConfigFromPath(configPath);\n    const existingFeishu = config.channels?.feishu as Record<string, unknown> | undefined;\n    const existingAppId = typeof existingFeishu?.appId === 'string' ? existingFeishu.appId : '';\n    const alreadyConfigured = isFeishuConfigured(config);\n\n    console.log(`\\n${'='.repeat(50)}`);\n    console.log('📱 Feishu / Lark login');\n    console.log(`${'='.repeat(50)}\\n`);\n\n    if (alreadyConfigured) {\n      const reconfigure = await confirm({\n        message: `Feishu is already configured (App ID: ${existingAppId}). Reconfigure?`,\n        default: false,\n      });\n      if (!reconfigure) {\n        console.log('Keeping existing configuration.\\n');\n        return { ok: true, message: 'Existing configuration kept.', accountId };\n      }\n    }\n\n    const credentials = await acquireCredentials({\n      existingAppId,\n      timeoutMs,\n    });\n\n    const policies = await promptSecurityPolicies(credentials.ownerOpenId);\n\n    const nextFeishu: Record<string, unknown> = {\n      ...(existingFeishu ?? {}),\n      enabled: true,\n      appId: credentials.appId,\n      appSecret: credentials.appSecret,\n      domain: credentials.domain,\n      connectionMode: (existingFeishu?.connectionMode as string) || 'websocket',\n      dmPolicy: policies.dmPolicy,\n      groupPolicy: policies.groupPolicy,\n      allowFrom: policies.allowFrom,\n      groupAllowFrom: policies.groupAllowFrom,\n      requireMention: policies.requireMention,\n    };\n\n    const nextConfig: Config = {\n      ...config,\n      channels: {\n        ...config.channels,\n        feishu: nextFeishu,\n      },\n    };\n\n    if (writeConfig) {\n      writeConfigToPath(configPath, nextConfig);\n      console.log(`✅ Feishu configuration saved to ${configPath}\\n`);\n    } else {\n      console.log('✅ Feishu credentials acquired (--credentials-only: config not updated).\\n');\n    }\n\n    return {\n      ok: true,\n      message: `Feishu login complete (App ID: ${credentials.appId}).`,\n      accountId: accountId ?? undefined,\n    };\n  },\n};\n"],"mappings":";;;;;;;;;;AAyBA,SAAS,mBAAmB,YAA4B;AACtD,KAAI;EACF,MAAM,MAAMA,OAAG,aAAa,YAAY,OAAO;AAC/C,SAAO,KAAK,MAAM,IAAI;SAChB;AACN,SAAO,EAAE;;;AAIb,SAAS,kBAAkB,YAAoB,QAAsB;AACnE,QAAG,cAAc,YAAY,KAAK,UAAU,QAAQ,MAAM,EAAE,GAAG,MAAM,OAAO;;AAG9E,SAAS,mBAAmB,QAAyB;CACnD,MAAM,SAAS,OAAO,UAAU;AAChC,KAAI,CAAC,OAAQ,QAAO;CACpB,MAAM,QAAQ,OAAO,OAAO,UAAU,WAAW,OAAO,MAAM,MAAM,GAAG;CACvE,MAAM,YAAY,OAAO,OAAO,cAAc,WAAW,OAAO,UAAU,MAAM,GAAG;AACnF,QAAO,QAAQ,SAAS,UAAU;;AAGpC,SAAS,kBAAkB,KAAqC;AAC9D,KAAI,CAAC,IAAI,MAAM,CAAE,QAAO,EAAE;AAC1B,QAAO,IACJ,MAAM,WAAW,CACjB,KAAK,UAAU,MAAM,MAAM,CAAC,CAC5B,OAAO,QAAQ,CACf,KAAK,UAAU;EACd,MAAM,WAAW,SAAS,OAAO,GAAG;AACpC,SAAO,CAAC,MAAM,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,WAAW;GACnE;;AAGN,eAAe,mBAAmB,QAQ/B;CACD,MAAM,SAAS,MAAM,OAAqB;EACxC,SAAS;EACT,SAAS,CACP;GAAE,OAAO;GAAU,MAAM;GAA2B,aAAa;GAAkB,EACnF;GAAE,OAAO;GAAQ,MAAM;GAA6B,aAAa;GAAwB,CAC1F;EACD,SAAS;EACV,CAAC;AAUF,KAPgB,MADM,oBAAoB,OAAO,GAE7C,MAAM,QAAQ;EACZ,SAAS;EACT,SAAS;EACV,CAAC,GACF,OAES;AACX,UAAQ,IAAI,2DAA2D;EACvE,MAAM,QAAQ,MAAM,qBAAqB,OAAO;AAChD,QAAM,YAAY,MAAM,MAAM;AAC9B,UAAQ,IAAI,kCAAkC;EAE9C,MAAM,cAAc,KAAK,IAAI,MAAM,aAAa,KAAK,MAAM,OAAO,YAAY,IAAK,CAAC;EACpF,MAAM,UAAU,MAAM,oBAAoB;GACxC,YAAY,MAAM;GAClB,aAAa,MAAM;GACnB;GACA,eAAe;GAChB,CAAC;AAEF,MAAI,QAAQ,WAAW,WAAW;AAChC,WAAQ,IAAI,2BAA2B,QAAQ,OAAO,OAAO,MAAM;AACnE,UAAO;IACL,OAAO,QAAQ,OAAO;IACtB,WAAW,QAAQ,OAAO;IAC1B,QAAQ,QAAQ,OAAO;IACvB,aAAa,QAAQ,OAAO;IAC7B;;EAGH,MAAM,SACJ,QAAQ,WAAW,kBACf,+BACA,QAAQ,WAAW,YACjB,qBACA,QAAQ,WAAW,YACjB,oBACA,UAAU,aAAa,UAAU,QAAQ,UAAU;AAC7D,UAAQ,IAAI,GAAG,OAAO,kCAAkC;;AAG1D,SAAQ,IAAI,mFAAmF;AAiB/F,QAAO;EAAE,QAdP,MAAM,MAAM;GACV,SAAS;GACT,SAAS,OAAO,iBAAiB,KAAA;GACjC,WAAW,UAAU,MAAM,MAAM,CAAC,SAAS,KAAK;GACjD,CAAC,EACF,MASY;EAAE,YANd,MAAM,MAAM;GACV,SAAS;GACT,WAAW,UAAU,MAAM,MAAM,CAAC,SAAS,KAAK;GACjD,CAAC,EACF,MAEuB;EAAE;EAAQ;;AAGrC,eAAe,uBAAuB,aAMnC;CACD,MAAM,WAAW,MAAM,OAAiB;EACtC,SAAS;EACT,SAAS;GACP;IAAE,OAAO;IAAW,MAAM;IAA0B,aAAa;IAAwB;GACzF;IAAE,OAAO;IAAa,MAAM;IAAa,aAAa;IAA0B;GAChF;IAAE,OAAO;IAAQ,MAAM;IAAQ,aAAa;IAAiB;GAC7D;IAAE,OAAO;IAAY,MAAM;IAAY,aAAa;IAAe;GACpE;EACD,SAAS;EACV,CAAC;CAEF,IAAI,YAAoC,EAAE;AAC1C,KAAI,aAAa,aAAa;EAC5B,MAAM,eAAe,eAAe;AAKpC,cAAY,kBAAkB,MAJZ,MAAM;GACtB,SAAS;GACT,SAAS;GACV,CAAC,IACmC,aAAa;;CAGpD,MAAM,cAAc,MAAM,OAAoB;EAC5C,SAAS;EACT,SAAS;GACP;IAAE,OAAO;IAAa,MAAM;IAA4B,aAAa;IAA2B;GAChG;IAAE,OAAO;IAAQ,MAAM;IAAQ,aAAa;IAAsB;GAClE;IAAE,OAAO;IAAY,MAAM;IAAY,aAAa;IAAkB;GACvE;EACD,SAAS;EACV,CAAC;CAEF,IAAI,iBAAyC,EAAE;AAC/C,KAAI,gBAAgB,YAKlB,kBAAiB,kBAAkB,MAJjB,MAAM;EACtB,SAAS;EACT,SAAS;EACV,CAAC,CACqC;CAGzC,MAAM,iBAAiB,MAAM,QAAQ;EACnC,SAAS;EACT,SAAS;EACV,CAAC;AAEF,QAAO;EAAE;EAAU;EAAa;EAAW;EAAgB;EAAgB;;AAG7E,MAAa,wBAAgD,EAC3D,MAAM,SAAS,QAAQ;CACrB,MAAM,EAAE,YAAY,SAAS,YAAY,MAAS,WAAW,cAAc,SAAS;AAEpF,KAAI,QACF,SAAQ,IAAI,6BAA6B,WAAW,cAAc,YAAY;CAGhF,MAAM,SAAS,mBAAmB,WAAW;CAC7C,MAAM,iBAAiB,OAAO,UAAU;CACxC,MAAM,gBAAgB,OAAO,gBAAgB,UAAU,WAAW,eAAe,QAAQ;CACzF,MAAM,oBAAoB,mBAAmB,OAAO;AAEpD,SAAQ,IAAI,KAAK,IAAI,OAAO,GAAG,GAAG;AAClC,SAAQ,IAAI,yBAAyB;AACrC,SAAQ,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI;AAElC,KAAI;MAKE,CAAC,MAJqB,QAAQ;GAChC,SAAS,yCAAyC,cAAc;GAChE,SAAS;GACV,CAAC,EACgB;AAChB,WAAQ,IAAI,oCAAoC;AAChD,UAAO;IAAE,IAAI;IAAM,SAAS;IAAgC;IAAW;;;CAI3E,MAAM,cAAc,MAAM,mBAAmB;EAC3C;EACA;EACD,CAAC;CAEF,MAAM,WAAW,MAAM,uBAAuB,YAAY,YAAY;CAEtE,MAAM,aAAsC;EAC1C,GAAI,kBAAkB,EAAE;EACxB,SAAS;EACT,OAAO,YAAY;EACnB,WAAW,YAAY;EACvB,QAAQ,YAAY;EACpB,gBAAiB,gBAAgB,kBAA6B;EAC9D,UAAU,SAAS;EACnB,aAAa,SAAS;EACtB,WAAW,SAAS;EACpB,gBAAgB,SAAS;EACzB,gBAAgB,SAAS;EAC1B;CAED,MAAM,aAAqB;EACzB,GAAG;EACH,UAAU;GACR,GAAG,OAAO;GACV,QAAQ;GACT;EACF;AAED,KAAI,aAAa;AACf,oBAAkB,YAAY,WAAW;AACzC,UAAQ,IAAI,mCAAmC,WAAW,IAAI;OAE9D,SAAQ,IAAI,4EAA4E;AAG1F,QAAO;EACL,IAAI;EACJ,SAAS,kCAAkC,YAAY,MAAM;EAC7D,WAAW,aAAa,KAAA;EACzB;GAEJ"}

package/dist/extensions/feishu/src/adapters/onboard-cli.js

@@ -1,3 +1,4 @@
+import { beginAppRegistration, initAppRegistration, pollAppRegistration, printQrCode } from "../auth/app-registration.js";
 import { confirm, input, select } from "@inquirer/prompts";
 //#region extensions/feishu/src/adapters/onboard-cli.ts
 /**
@@ -5,10 +6,6 @@ import { confirm, input, select } from "@inquirer/prompts";
 *
 * This configures the single-account layout under `channels.feishu.*`.
 */
-const FEISHU_ACCOUNTS_URL = "https://accounts.feishu.cn";
-const LARK_ACCOUNTS_URL = "https://accounts.larksuite.com";
-const REGISTRATION_PATH = "/oauth/v1/app/registration";
-const REQUEST_TIMEOUT_MS = 1e4;
 function isFeishuConfigured(config) {
 	const feishu = config.channels?.feishu;
 	if (!feishu) return false;
@@ -23,107 +20,6 @@ function parseAllowlistRaw(raw) {
 		return !isNaN(num) && String(num) === e ? num : e;
 	});
 }
-function accountsBaseUrl(domain) {
-	return domain === "lark" ? LARK_ACCOUNTS_URL : FEISHU_ACCOUNTS_URL;
-}
-async function postRegistration(baseUrl, body) {
-	return await (await fetch(`${baseUrl}${REGISTRATION_PATH}`, {
-		method: "POST",
-		headers: { "Content-Type": "application/x-www-form-urlencoded" },
-		body: new URLSearchParams(body).toString(),
-		signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
-	})).json();
-}
-async function initAppRegistration(domain) {
-	try {
-		const res = await postRegistration(accountsBaseUrl(domain), { action: "init" });
-		return Boolean(res.supported_auth_methods?.includes("client_secret"));
-	} catch {
-		return false;
-	}
-}
-async function beginAppRegistration(domain) {
-	const res = await postRegistration(accountsBaseUrl(domain), {
-		action: "begin",
-		archetype: "PersonalAgent",
-		auth_method: "client_secret",
-		request_user_info: "open_id"
-	});
-	const qrUrl = new URL(res.verification_uri_complete);
-	qrUrl.searchParams.set("from", "xopc_onboard");
-	qrUrl.searchParams.set("tp", "ob_cli_app");
-	return {
-		deviceCode: res.device_code,
-		qrUrl: qrUrl.toString(),
-		intervalSec: res.interval || 5,
-		expireInSec: res.expire_in || 600
-	};
-}
-async function sleep(ms) {
-	await new Promise((r) => setTimeout(r, ms));
-}
-async function pollAppRegistration(params) {
-	let domain = params.initialDomain;
-	let intervalSec = params.intervalSec;
-	let domainSwitched = false;
-	const deadline = Date.now() + params.expireInSec * 1e3;
-	while (Date.now() < deadline) {
-		let pollRes;
-		try {
-			pollRes = await postRegistration(accountsBaseUrl(domain), {
-				action: "poll",
-				device_code: params.deviceCode,
-				tp: "ob_cli_app"
-			});
-		} catch {
-			await sleep(intervalSec * 1e3);
-			continue;
-		}
-		if (pollRes.user_info?.tenant_brand) {
-			const isLark = pollRes.user_info.tenant_brand === "lark";
-			if (!domainSwitched && isLark) {
-				domain = "lark";
-				domainSwitched = true;
-				continue;
-			}
-		}
-		if (pollRes.client_id && pollRes.client_secret) return {
-			status: "success",
-			result: {
-				appId: pollRes.client_id,
-				appSecret: pollRes.client_secret,
-				domain,
-				openId: pollRes.user_info?.open_id
-			}
-		};
-		if (pollRes.error) if (pollRes.error === "authorization_pending") {} else if (pollRes.error === "slow_down") intervalSec += 5;
-		else if (pollRes.error === "access_denied") return { status: "access_denied" };
-		else if (pollRes.error === "expired_token") return { status: "expired" };
-		else return {
-			status: "error",
-			message: `${pollRes.error}: ${pollRes.error_description ?? "unknown"}`
-		};
-		await sleep(intervalSec * 1e3);
-	}
-	return { status: "timeout" };
-}
-async function printQrCode(url) {
-	try {
-		const qrcodeTerminal = await import(
-			/* @vite-ignore */
-			"qrcode-terminal"
-);
-		await new Promise((resolve) => {
-			qrcodeTerminal.default.generate(url, { small: true }, (qr) => {
-				process.stdout.write(qr.endsWith("\n") ? qr : `${qr}\n`);
-				resolve();
-			});
-		});
-	} catch {
-		console.log("Open this URL in a browser to scan:\n");
-		console.log(url);
-	}
-}
 async function configureFeishu(config) {
 	console.log(`\n${"=".repeat(50)}`);
 	console.log("📱 Feishu / Lark setup");

package/dist/extensions/feishu/src/adapters/onboard-cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"onboard-cli.js","names":[],"sources":["../../../../../extensions/feishu/src/adapters/onboard-cli.ts"],"sourcesContent":["/**\n * Feishu interactive onboarding (CLI onboard) — {@link ChannelOnboardAdapter}.\n *\n * This configures the single-account layout under `channels.feishu.*`.\n */\n\nimport { confirm, input, select } from '@inquirer/prompts';\n\nimport type { Config } from '@xopcai/xopc/config/schema.js';\nimport type { ChannelOnboardAdapter } from '@xopcai/xopc/channels/plugins/types.adapters.js';\n\ntype DmPolicy = 'pairing' | 'allowlist' | 'open' | 'disabled';\ntype GroupPolicy = 'open' | 'disabled' | 'allowlist';\ntype Domain = 'feishu' | 'lark';\ntype RenderMode = 'auto' | 'raw' | 'card';\ntype ConnectionMode = 'websocket' | 'webhook';\ntype ReactionNotifications = 'off' | 'own' | 'all';\n\ntype AppRegistrationResult = {\n  appId: string;\n  appSecret: string;\n  domain: Domain;\n  openId?: string;\n};\n\nconst FEISHU_ACCOUNTS_URL = 'https://accounts.feishu.cn';\nconst LARK_ACCOUNTS_URL = 'https://accounts.larksuite.com';\nconst REGISTRATION_PATH = '/oauth/v1/app/registration';\nconst REQUEST_TIMEOUT_MS = 10_000;\n\nfunction isFeishuConfigured(config: Config): boolean {\n  const feishu = config.channels?.feishu as Record<string, unknown> | undefined;\n  if (!feishu) return false;\n  const appId = typeof feishu.appId === 'string' ? feishu.appId.trim() : '';\n  const appSecret = typeof feishu.appSecret === 'string' ? feishu.appSecret.trim() : '';\n  const enabled = feishu.enabled === true;\n  return enabled && Boolean(appId && appSecret);\n}\n\nfunction parseAllowlistRaw(raw: string): Array<string | number> {\n  if (!raw.trim()) return [];\n  const entries = raw\n    .split(/[,\\s\\n]+/)\n    .map((s) => s.trim())\n    .filter(Boolean);\n  return entries.map((e) => {\n    const num = parseInt(e, 10);\n    return !isNaN(num) && String(num) === e ? num : e;\n  });\n}\n\nfunction accountsBaseUrl(domain: Domain): string {\n  return domain === 'lark' ? LARK_ACCOUNTS_URL : FEISHU_ACCOUNTS_URL;\n}\n\nasync function postRegistration<T>(baseUrl: string, body: Record<string, string>): Promise<T> {\n  const res = await fetch(`${baseUrl}${REGISTRATION_PATH}`, {\n    method: 'POST',\n    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\n    body: new URLSearchParams(body).toString(),\n    signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),\n  });\n  // Registration poll returns 4xx for pending/error states with a JSON body.\n  return (await res.json()) as T;\n}\n\nasync function initAppRegistration(domain: Domain): Promise<boolean> {\n  type InitResponse = { supported_auth_methods?: string[] };\n  try {\n    const res = await postRegistration<InitResponse>(accountsBaseUrl(domain), { action: 'init' });\n    return Boolean(res.supported_auth_methods?.includes('client_secret'));\n  } catch {\n    return false;\n  }\n}\n\nasync function beginAppRegistration(domain: Domain): Promise<{\n  deviceCode: string;\n  qrUrl: string;\n  intervalSec: number;\n  expireInSec: number;\n}> {\n  type RawBeginResponse = {\n    device_code: string;\n    verification_uri_complete: string;\n    interval?: number;\n    expire_in?: number;\n  };\n  const res = await postRegistration<RawBeginResponse>(accountsBaseUrl(domain), {\n    action: 'begin',\n    archetype: 'PersonalAgent',\n    auth_method: 'client_secret',\n    request_user_info: 'open_id',\n  });\n  const qrUrl = new URL(res.verification_uri_complete);\n  qrUrl.searchParams.set('from', 'xopc_onboard');\n  qrUrl.searchParams.set('tp', 'ob_cli_app');\n  return {\n    deviceCode: res.device_code,\n    qrUrl: qrUrl.toString(),\n    intervalSec: res.interval || 5,\n    expireInSec: res.expire_in || 600,\n  };\n}\n\nasync function sleep(ms: number): Promise<void> {\n  await new Promise<void>((r) => setTimeout(r, ms));\n}\n\nasync function pollAppRegistration(params: {\n  deviceCode: string;\n  intervalSec: number;\n  expireInSec: number;\n  initialDomain: Domain;\n}): Promise<\n  | { status: 'success'; result: AppRegistrationResult }\n  | { status: 'access_denied' | 'expired' | 'timeout'; message?: string }\n  | { status: 'error'; message: string }\n> {\n  type PollResponse = {\n    client_id?: string;\n    client_secret?: string;\n    user_info?: { open_id?: string; tenant_brand?: 'feishu' | 'lark' };\n    error?: string;\n    error_description?: string;\n  };\n\n  let domain: Domain = params.initialDomain;\n  let intervalSec = params.intervalSec;\n  let domainSwitched = false;\n  const deadline = Date.now() + params.expireInSec * 1000;\n\n  while (Date.now() < deadline) {\n    let pollRes: PollResponse;\n    try {\n      pollRes = await postRegistration<PollResponse>(accountsBaseUrl(domain), {\n        action: 'poll',\n        device_code: params.deviceCode,\n        tp: 'ob_cli_app',\n      });\n    } catch {\n      await sleep(intervalSec * 1000);\n      continue;\n    }\n\n    // Auto-detect domain based on tenant.\n    if (pollRes.user_info?.tenant_brand) {\n      const isLark = pollRes.user_info.tenant_brand === 'lark';\n      if (!domainSwitched && isLark) {\n        domain = 'lark';\n        domainSwitched = true;\n        continue;\n      }\n    }\n\n    if (pollRes.client_id && pollRes.client_secret) {\n      return {\n        status: 'success',\n        result: {\n          appId: pollRes.client_id,\n          appSecret: pollRes.client_secret,\n          domain,\n          openId: pollRes.user_info?.open_id,\n        },\n      };\n    }\n\n    if (pollRes.error) {\n      if (pollRes.error === 'authorization_pending') {\n        // keep waiting\n      } else if (pollRes.error === 'slow_down') {\n        intervalSec += 5;\n      } else if (pollRes.error === 'access_denied') {\n        return { status: 'access_denied' };\n      } else if (pollRes.error === 'expired_token') {\n        return { status: 'expired' };\n      } else {\n        return {\n          status: 'error',\n          message: `${pollRes.error}: ${pollRes.error_description ?? 'unknown'}`,\n        };\n      }\n    }\n\n    await sleep(intervalSec * 1000);\n  }\n\n  return { status: 'timeout' };\n}\n\nasync function printQrCode(url: string): Promise<void> {\n  try {\n    const qrcodeTerminal = await import(/* @vite-ignore */ 'qrcode-terminal');\n    await new Promise<void>((resolve) => {\n      qrcodeTerminal.default.generate(url, { small: true }, (qr: string) => {\n        process.stdout.write(qr.endsWith('\\n') ? qr : `${qr}\\n`);\n        resolve();\n      });\n    });\n  } catch {\n    console.log('Open this URL in a browser to scan:\\n');\n    console.log(url);\n  }\n}\n\nasync function configureFeishu(config: Config): Promise<Config> {\n  console.log(`\\n${'='.repeat(50)}`);\n  console.log('📱 Feishu / Lark setup');\n  console.log(`${'='.repeat(50)}\\n`);\n\n  const existing = config.channels?.feishu as Record<string, unknown> | undefined;\n  const existingAppId = typeof existing?.appId === 'string' ? existing.appId : '';\n  const existingDomain = typeof existing?.domain === 'string' ? existing.domain : '';\n\n  if (existing?.enabled === true && existingAppId) {\n    const keep = await confirm({\n      message: 'A Feishu config already exists. Reconfigure it?',\n      default: false,\n    });\n    if (!keep) return config;\n  }\n\n  const initialDomain = await select<Domain>({\n    message: 'Feishu/Lark domain:',\n    choices: [\n      { value: 'feishu', name: 'feishu (open.feishu.cn)', description: 'China / Feishu' },\n      { value: 'lark', name: 'lark (open.larksuite.com)', description: 'International / Lark' },\n    ],\n    default: existingDomain === 'lark' ? 'lark' : 'feishu',\n  });\n\n  const canScanToCreate = await initAppRegistration(initialDomain);\n  const useScanToCreate = canScanToCreate\n    ? await confirm({\n        message: 'Create an app by scanning a QR code (recommended)?',\n        default: true,\n      })\n    : false;\n\n  let appId = '';\n  let appSecret = '';\n  let domain: Domain = initialDomain;\n  let ownerOpenId: string | undefined;\n\n  if (useScanToCreate) {\n    console.log('\\nScan this QR code with Feishu/Lark to create an app:\\n');\n    const begin = await beginAppRegistration(initialDomain);\n    await printQrCode(begin.qrUrl);\n    console.log('\\nWaiting for confirmation...\\n');\n    const outcome = await pollAppRegistration({\n      deviceCode: begin.deviceCode,\n      intervalSec: begin.intervalSec,\n      expireInSec: begin.expireInSec,\n      initialDomain,\n    });\n    if (outcome.status !== 'success') {\n      console.log('Scan-to-create did not complete. Falling back to manual input.\\n');\n    } else {\n      appId = outcome.result.appId;\n      appSecret = outcome.result.appSecret;\n      domain = outcome.result.domain;\n      ownerOpenId = outcome.result.openId;\n      console.log(`✅ App created. Domain detected as \"${domain}\".\\n`);\n    }\n  }\n\n  if (!appId || !appSecret) {\n    console.log('📝 Feishu app credentials (from Feishu Open Platform developer console):\\n');\n\n    appId = (await input({\n      message: 'App ID (cli_xxx):',\n      default: existingAppId || undefined,\n      validate: (v) => v.trim().length > 0 || 'App ID cannot be empty',\n    })).trim();\n\n    appSecret = (await input({\n      message: 'App Secret:',\n      validate: (v) => v.trim().length > 0 || 'App Secret cannot be empty',\n    })).trim();\n\n    domain = initialDomain;\n  }\n\n  const connectionMode = await select<ConnectionMode>({\n    message: 'Connection mode:',\n    choices: [\n      { value: 'websocket', name: 'websocket  [recommended]', description: 'Socket Mode (persistent connection)' },\n      { value: 'webhook', name: 'webhook', description: 'Local HTTP server receives events' },\n    ],\n    default: 'websocket',\n  });\n\n  let verificationToken: string | undefined;\n  let encryptKey: string | undefined;\n  let webhookHost: string | undefined;\n  let webhookPort: number | undefined;\n  let webhookPath: string | undefined;\n  if (connectionMode === 'webhook') {\n    console.log('\\n🪝 Webhook secrets (from Feishu event subscription settings):\\n');\n    verificationToken = (await input({\n      message: 'Verification Token:',\n      validate: (v) => v.trim().length > 0 || 'Verification Token cannot be empty',\n    })).trim();\n    encryptKey = (await input({\n      message: 'Encrypt Key:',\n      validate: (v) => v.trim().length > 0 || 'Encrypt Key cannot be empty',\n    })).trim();\n    webhookHost = (await input({\n      message: 'Webhook host:',\n      default: typeof existing?.webhookHost === 'string' ? existing.webhookHost : '127.0.0.1',\n    })).trim();\n    webhookPort = Number(\n      (await input({\n        message: 'Webhook port:',\n        default: typeof existing?.webhookPort === 'number' ? String(existing.webhookPort) : '3000',\n      })).trim(),\n    );\n    webhookPath = (await input({\n      message: 'Webhook path:',\n      default: typeof existing?.webhookPath === 'string' ? existing.webhookPath : '/feishu/events',\n    })).trim();\n  }\n\n  const dmPolicy = await select<DmPolicy>({\n    message: 'DM (private chat) policy:',\n    choices: [\n      { value: 'pairing', name: 'pairing  [recommended]', description: 'New users must /pair before chatting' },\n      { value: 'allowlist', name: 'allowlist', description: 'Only allowlisted users can DM' },\n      { value: 'open', name: 'open', description: 'Anyone can DM (not recommended)' },\n      { value: 'disabled', name: 'disabled', description: 'Disable DMs' },\n    ],\n    default: 'pairing',\n  });\n\n  let allowFrom: Array<string | number> | undefined;\n  if (dmPolicy === 'allowlist') {\n    const defaultAllow =\n      ownerOpenId && (existing?.allowFrom == null || (Array.isArray(existing.allowFrom) && existing.allowFrom.length === 0))\n        ? ownerOpenId\n        : '';\n    const raw = await input({\n      message: 'Allowed user open_id / union_id / numeric ids (comma-separated):',\n      default: defaultAllow,\n    });\n    allowFrom = parseAllowlistRaw(raw || defaultAllow);\n  }\n\n  const groupPolicy = await select<GroupPolicy>({\n    message: 'Group chat policy:',\n    choices: [\n      { value: 'allowlist', name: 'allowlist  [recommended]', description: 'Only allowlisted groups can use the bot' },\n      { value: 'open', name: 'open', description: 'All groups allowed' },\n      { value: 'disabled', name: 'disabled', description: 'Disable groups' },\n    ],\n    default: 'allowlist',\n  });\n\n  let groupAllowFrom: Array<string | number> | undefined;\n  if (groupPolicy === 'allowlist') {\n    const raw = await input({\n      message: 'Allowed group chat IDs (comma-separated, e.g. oc_xxx):',\n      default: '',\n    });\n    groupAllowFrom = parseAllowlistRaw(raw);\n  }\n\n  const requireMention = await confirm({\n    message: 'Require @mention in groups?',\n    default: true,\n  });\n\n  const renderMode = await select<RenderMode>({\n    message: 'Default render mode:',\n    choices: [\n      { value: 'auto', name: 'auto', description: 'Let xopc decide (default)' },\n      { value: 'raw', name: 'raw', description: 'Send plain text only' },\n      { value: 'card', name: 'card', description: 'Prefer interactive cards (CardKit streaming)' },\n    ],\n    default: 'auto',\n  });\n\n  const streaming = await confirm({\n    message: 'Enable streaming updates (Thinking… + incremental output)?',\n    default: false,\n  });\n\n  const reactionNotifications = await select<ReactionNotifications>({\n    message: 'Reaction notifications:',\n    choices: [\n      { value: 'off', name: 'off', description: 'Disable reaction notifications' },\n      { value: 'own', name: 'own  [recommended]', description: 'Only notify reactions to bot messages' },\n      { value: 'all', name: 'all', description: 'Notify all reactions (noisy)' },\n    ],\n    default: 'own',\n  });\n\n  const enableFeishuTools = await select<'minimal' | 'docs' | 'full'>({\n    message: 'Enable Feishu tools (docs/wiki/drive/etc.)?',\n    choices: [\n      { value: 'minimal', name: 'minimal', description: 'No extra tools (chat only)' },\n      { value: 'docs', name: 'docs', description: 'Enable doc/wiki/drive/scopes (common)' },\n      { value: 'full', name: 'full', description: 'Enable doc/wiki/drive/bitable/perm/scopes' },\n    ],\n    default: 'docs',\n  });\n\n  const tools =\n    enableFeishuTools === 'minimal'\n      ? { doc: false, wiki: false, drive: false, perm: false, bitable: false, scopes: true }\n      : enableFeishuTools === 'docs'\n        ? { doc: true, wiki: true, drive: true, perm: false, bitable: true, scopes: true }\n        : { doc: true, wiki: true, drive: true, perm: true, bitable: true, scopes: true };\n\n  const nextFeishu: Record<string, unknown> = {\n    ...(existing ?? {}),\n    enabled: true,\n    appId,\n    appSecret,\n    domain,\n    connectionMode,\n    ...(connectionMode === 'webhook'\n      ? {\n          verificationToken,\n          encryptKey,\n          webhookHost,\n          webhookPort,\n          webhookPath,\n        }\n      : {}),\n    dmPolicy,\n    groupPolicy,\n    allowFrom: allowFrom ?? (existing?.allowFrom as any) ?? [],\n    groupAllowFrom: groupAllowFrom ?? (existing?.groupAllowFrom as any) ?? [],\n    requireMention,\n    renderMode,\n    streaming,\n    reactionNotifications,\n    actions: { reactions: true },\n    tools,\n    historyLimit: typeof existing?.historyLimit === 'number' ? existing.historyLimit : 50,\n    textChunkLimit: typeof existing?.textChunkLimit === 'number' ? existing.textChunkLimit : 4000,\n  };\n\n  const newConfig: Config = {\n    ...config,\n    channels: {\n      ...config.channels,\n      feishu: nextFeishu,\n    },\n  };\n\n  console.log('\\n✅ Feishu configuration complete\\n');\n  return newConfig;\n}\n\nexport const feishuOnboardAdapter: ChannelOnboardAdapter = {\n  isConfigured: isFeishuConfigured,\n  configure: configureFeishu,\n};\n\n"],"mappings":";;;;;;;AAyBA,MAAM,sBAAsB;AAC5B,MAAM,oBAAoB;AAC1B,MAAM,oBAAoB;AAC1B,MAAM,qBAAqB;AAE3B,SAAS,mBAAmB,QAAyB;CACnD,MAAM,SAAS,OAAO,UAAU;AAChC,KAAI,CAAC,OAAQ,QAAO;CACpB,MAAM,QAAQ,OAAO,OAAO,UAAU,WAAW,OAAO,MAAM,MAAM,GAAG;CACvE,MAAM,YAAY,OAAO,OAAO,cAAc,WAAW,OAAO,UAAU,MAAM,GAAG;AAEnF,QADgB,OAAO,YAAY,QACjB,QAAQ,SAAS,UAAU;;AAG/C,SAAS,kBAAkB,KAAqC;AAC9D,KAAI,CAAC,IAAI,MAAM,CAAE,QAAO,EAAE;AAK1B,QAJgB,IACb,MAAM,WAAW,CACjB,KAAK,MAAM,EAAE,MAAM,CAAC,CACpB,OAAO,QACI,CAAC,KAAK,MAAM;EACxB,MAAM,MAAM,SAAS,GAAG,GAAG;AAC3B,SAAO,CAAC,MAAM,IAAI,IAAI,OAAO,IAAI,KAAK,IAAI,MAAM;GAChD;;AAGJ,SAAS,gBAAgB,QAAwB;AAC/C,QAAO,WAAW,SAAS,oBAAoB;;AAGjD,eAAe,iBAAoB,SAAiB,MAA0C;AAQ5F,QAAQ,OAAM,MAPI,MAAM,GAAG,UAAU,qBAAqB;EACxD,QAAQ;EACR,SAAS,EAAE,gBAAgB,qCAAqC;EAChE,MAAM,IAAI,gBAAgB,KAAK,CAAC,UAAU;EAC1C,QAAQ,YAAY,QAAQ,mBAAmB;EAChD,CAAC,EAEgB,MAAM;;AAG1B,eAAe,oBAAoB,QAAkC;AAEnE,KAAI;EACF,MAAM,MAAM,MAAM,iBAA+B,gBAAgB,OAAO,EAAE,EAAE,QAAQ,QAAQ,CAAC;AAC7F,SAAO,QAAQ,IAAI,wBAAwB,SAAS,gBAAgB,CAAC;SAC/D;AACN,SAAO;;;AAIX,eAAe,qBAAqB,QAKjC;CAOD,MAAM,MAAM,MAAM,iBAAmC,gBAAgB,OAAO,EAAE;EAC5E,QAAQ;EACR,WAAW;EACX,aAAa;EACb,mBAAmB;EACpB,CAAC;CACF,MAAM,QAAQ,IAAI,IAAI,IAAI,0BAA0B;AACpD,OAAM,aAAa,IAAI,QAAQ,eAAe;AAC9C,OAAM,aAAa,IAAI,MAAM,aAAa;AAC1C,QAAO;EACL,YAAY,IAAI;EAChB,OAAO,MAAM,UAAU;EACvB,aAAa,IAAI,YAAY;EAC7B,aAAa,IAAI,aAAa;EAC/B;;AAGH,eAAe,MAAM,IAA2B;AAC9C,OAAM,IAAI,SAAe,MAAM,WAAW,GAAG,GAAG,CAAC;;AAGnD,eAAe,oBAAoB,QASjC;CASA,IAAI,SAAiB,OAAO;CAC5B,IAAI,cAAc,OAAO;CACzB,IAAI,iBAAiB;CACrB,MAAM,WAAW,KAAK,KAAK,GAAG,OAAO,cAAc;AAEnD,QAAO,KAAK,KAAK,GAAG,UAAU;EAC5B,IAAI;AACJ,MAAI;AACF,aAAU,MAAM,iBAA+B,gBAAgB,OAAO,EAAE;IACtE,QAAQ;IACR,aAAa,OAAO;IACpB,IAAI;IACL,CAAC;UACI;AACN,SAAM,MAAM,cAAc,IAAK;AAC/B;;AAIF,MAAI,QAAQ,WAAW,cAAc;GACnC,MAAM,SAAS,QAAQ,UAAU,iBAAiB;AAClD,OAAI,CAAC,kBAAkB,QAAQ;AAC7B,aAAS;AACT,qBAAiB;AACjB;;;AAIJ,MAAI,QAAQ,aAAa,QAAQ,cAC/B,QAAO;GACL,QAAQ;GACR,QAAQ;IACN,OAAO,QAAQ;IACf,WAAW,QAAQ;IACnB;IACA,QAAQ,QAAQ,WAAW;IAC5B;GACF;AAGH,MAAI,QAAQ,MACV,KAAI,QAAQ,UAAU,yBAAyB,YAEpC,QAAQ,UAAU,YAC3B,gBAAe;WACN,QAAQ,UAAU,gBAC3B,QAAO,EAAE,QAAQ,iBAAiB;WACzB,QAAQ,UAAU,gBAC3B,QAAO,EAAE,QAAQ,WAAW;MAE5B,QAAO;GACL,QAAQ;GACR,SAAS,GAAG,QAAQ,MAAM,IAAI,QAAQ,qBAAqB;GAC5D;AAIL,QAAM,MAAM,cAAc,IAAK;;AAGjC,QAAO,EAAE,QAAQ,WAAW;;AAG9B,eAAe,YAAY,KAA4B;AACrD,KAAI;EACF,MAAM,iBAAiB,MAAM;;GAA0B;;AACvD,QAAM,IAAI,SAAe,YAAY;AACnC,kBAAe,QAAQ,SAAS,KAAK,EAAE,OAAO,MAAM,GAAG,OAAe;AACpE,YAAQ,OAAO,MAAM,GAAG,SAAS,KAAK,GAAG,KAAK,GAAG,GAAG,IAAI;AACxD,aAAS;KACT;IACF;SACI;AACN,UAAQ,IAAI,wCAAwC;AACpD,UAAQ,IAAI,IAAI;;;AAIpB,eAAe,gBAAgB,QAAiC;AAC9D,SAAQ,IAAI,KAAK,IAAI,OAAO,GAAG,GAAG;AAClC,SAAQ,IAAI,yBAAyB;AACrC,SAAQ,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI;CAElC,MAAM,WAAW,OAAO,UAAU;CAClC,MAAM,gBAAgB,OAAO,UAAU,UAAU,WAAW,SAAS,QAAQ;CAC7E,MAAM,iBAAiB,OAAO,UAAU,WAAW,WAAW,SAAS,SAAS;AAEhF,KAAI,UAAU,YAAY,QAAQ;MAK5B,CAAC,MAJc,QAAQ;GACzB,SAAS;GACT,SAAS;GACV,CAAC,CACS,QAAO;;CAGpB,MAAM,gBAAgB,MAAM,OAAe;EACzC,SAAS;EACT,SAAS,CACP;GAAE,OAAO;GAAU,MAAM;GAA2B,aAAa;GAAkB,EACnF;GAAE,OAAO;GAAQ,MAAM;GAA6B,aAAa;GAAwB,CAC1F;EACD,SAAS,mBAAmB,SAAS,SAAS;EAC/C,CAAC;CAGF,MAAM,kBAAkB,MADM,oBAAoB,cAAc,GAE5D,MAAM,QAAQ;EACZ,SAAS;EACT,SAAS;EACV,CAAC,GACF;CAEJ,IAAI,QAAQ;CACZ,IAAI,YAAY;CAChB,IAAI,SAAiB;CACrB,IAAI;AAEJ,KAAI,iBAAiB;AACnB,UAAQ,IAAI,2DAA2D;EACvE,MAAM,QAAQ,MAAM,qBAAqB,cAAc;AACvD,QAAM,YAAY,MAAM,MAAM;AAC9B,UAAQ,IAAI,kCAAkC;EAC9C,MAAM,UAAU,MAAM,oBAAoB;GACxC,YAAY,MAAM;GAClB,aAAa,MAAM;GACnB,aAAa,MAAM;GACnB;GACD,CAAC;AACF,MAAI,QAAQ,WAAW,UACrB,SAAQ,IAAI,mEAAmE;OAC1E;AACL,WAAQ,QAAQ,OAAO;AACvB,eAAY,QAAQ,OAAO;AAC3B,YAAS,QAAQ,OAAO;AACxB,iBAAc,QAAQ,OAAO;AAC7B,WAAQ,IAAI,sCAAsC,OAAO,MAAM;;;AAInE,KAAI,CAAC,SAAS,CAAC,WAAW;AACxB,UAAQ,IAAI,6EAA6E;AAEzF,WAAS,MAAM,MAAM;GACnB,SAAS;GACT,SAAS,iBAAiB,KAAA;GAC1B,WAAW,MAAM,EAAE,MAAM,CAAC,SAAS,KAAK;GACzC,CAAC,EAAE,MAAM;AAEV,eAAa,MAAM,MAAM;GACvB,SAAS;GACT,WAAW,MAAM,EAAE,MAAM,CAAC,SAAS,KAAK;GACzC,CAAC,EAAE,MAAM;AAEV,WAAS;;CAGX,MAAM,iBAAiB,MAAM,OAAuB;EAClD,SAAS;EACT,SAAS,CACP;GAAE,OAAO;GAAa,MAAM;GAA4B,aAAa;GAAuC,EAC5G;GAAE,OAAO;GAAW,MAAM;GAAW,aAAa;GAAqC,CACxF;EACD,SAAS;EACV,CAAC;CAEF,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;AACJ,KAAI,mBAAmB,WAAW;AAChC,UAAQ,IAAI,oEAAoE;AAChF,uBAAqB,MAAM,MAAM;GAC/B,SAAS;GACT,WAAW,MAAM,EAAE,MAAM,CAAC,SAAS,KAAK;GACzC,CAAC,EAAE,MAAM;AACV,gBAAc,MAAM,MAAM;GACxB,SAAS;GACT,WAAW,MAAM,EAAE,MAAM,CAAC,SAAS,KAAK;GACzC,CAAC,EAAE,MAAM;AACV,iBAAe,MAAM,MAAM;GACzB,SAAS;GACT,SAAS,OAAO,UAAU,gBAAgB,WAAW,SAAS,cAAc;GAC7E,CAAC,EAAE,MAAM;AACV,gBAAc,QACX,MAAM,MAAM;GACX,SAAS;GACT,SAAS,OAAO,UAAU,gBAAgB,WAAW,OAAO,SAAS,YAAY,GAAG;GACrF,CAAC,EAAE,MAAM,CACX;AACD,iBAAe,MAAM,MAAM;GACzB,SAAS;GACT,SAAS,OAAO,UAAU,gBAAgB,WAAW,SAAS,cAAc;GAC7E,CAAC,EAAE,MAAM;;CAGZ,MAAM,WAAW,MAAM,OAAiB;EACtC,SAAS;EACT,SAAS;GACP;IAAE,OAAO;IAAW,MAAM;IAA0B,aAAa;IAAwC;GACzG;IAAE,OAAO;IAAa,MAAM;IAAa,aAAa;IAAiC;GACvF;IAAE,OAAO;IAAQ,MAAM;IAAQ,aAAa;IAAmC;GAC/E;IAAE,OAAO;IAAY,MAAM;IAAY,aAAa;IAAe;GACpE;EACD,SAAS;EACV,CAAC;CAEF,IAAI;AACJ,KAAI,aAAa,aAAa;EAC5B,MAAM,eACJ,gBAAgB,UAAU,aAAa,QAAS,MAAM,QAAQ,SAAS,UAAU,IAAI,SAAS,UAAU,WAAW,KAC/G,cACA;AAKN,cAAY,kBAAkB,MAJZ,MAAM;GACtB,SAAS;GACT,SAAS;GACV,CAAC,IACmC,aAAa;;CAGpD,MAAM,cAAc,MAAM,OAAoB;EAC5C,SAAS;EACT,SAAS;GACP;IAAE,OAAO;IAAa,MAAM;IAA4B,aAAa;IAA2C;GAChH;IAAE,OAAO;IAAQ,MAAM;IAAQ,aAAa;IAAsB;GAClE;IAAE,OAAO;IAAY,MAAM;IAAY,aAAa;IAAkB;GACvE;EACD,SAAS;EACV,CAAC;CAEF,IAAI;AACJ,KAAI,gBAAgB,YAKlB,kBAAiB,kBAAkB,MAJjB,MAAM;EACtB,SAAS;EACT,SAAS;EACV,CAAC,CACqC;CAGzC,MAAM,iBAAiB,MAAM,QAAQ;EACnC,SAAS;EACT,SAAS;EACV,CAAC;CAEF,MAAM,aAAa,MAAM,OAAmB;EAC1C,SAAS;EACT,SAAS;GACP;IAAE,OAAO;IAAQ,MAAM;IAAQ,aAAa;IAA6B;GACzE;IAAE,OAAO;IAAO,MAAM;IAAO,aAAa;IAAwB;GAClE;IAAE,OAAO;IAAQ,MAAM;IAAQ,aAAa;IAAgD;GAC7F;EACD,SAAS;EACV,CAAC;CAEF,MAAM,YAAY,MAAM,QAAQ;EAC9B,SAAS;EACT,SAAS;EACV,CAAC;CAEF,MAAM,wBAAwB,MAAM,OAA8B;EAChE,SAAS;EACT,SAAS;GACP;IAAE,OAAO;IAAO,MAAM;IAAO,aAAa;IAAkC;GAC5E;IAAE,OAAO;IAAO,MAAM;IAAsB,aAAa;IAAyC;GAClG;IAAE,OAAO;IAAO,MAAM;IAAO,aAAa;IAAgC;GAC3E;EACD,SAAS;EACV,CAAC;CAEF,MAAM,oBAAoB,MAAM,OAAoC;EAClE,SAAS;EACT,SAAS;GACP;IAAE,OAAO;IAAW,MAAM;IAAW,aAAa;IAA8B;GAChF;IAAE,OAAO;IAAQ,MAAM;IAAQ,aAAa;IAAyC;GACrF;IAAE,OAAO;IAAQ,MAAM;IAAQ,aAAa;IAA6C;GAC1F;EACD,SAAS;EACV,CAAC;CAEF,MAAM,QACJ,sBAAsB,YAClB;EAAE,KAAK;EAAO,MAAM;EAAO,OAAO;EAAO,MAAM;EAAO,SAAS;EAAO,QAAQ;EAAM,GACpF,sBAAsB,SACpB;EAAE,KAAK;EAAM,MAAM;EAAM,OAAO;EAAM,MAAM;EAAO,SAAS;EAAM,QAAQ;EAAM,GAChF;EAAE,KAAK;EAAM,MAAM;EAAM,OAAO;EAAM,MAAM;EAAM,SAAS;EAAM,QAAQ;EAAM;CAEvF,MAAM,aAAsC;EAC1C,GAAI,YAAY,EAAE;EAClB,SAAS;EACT;EACA;EACA;EACA;EACA,GAAI,mBAAmB,YACnB;GACE;GACA;GACA;GACA;GACA;GACD,GACD,EAAE;EACN;EACA;EACA,WAAW,aAAc,UAAU,aAAqB,EAAE;EAC1D,gBAAgB,kBAAmB,UAAU,kBAA0B,EAAE;EACzE;EACA;EACA;EACA;EACA,SAAS,EAAE,WAAW,MAAM;EAC5B;EACA,cAAc,OAAO,UAAU,iBAAiB,WAAW,SAAS,eAAe;EACnF,gBAAgB,OAAO,UAAU,mBAAmB,WAAW,SAAS,iBAAiB;EAC1F;CAED,MAAM,YAAoB;EACxB,GAAG;EACH,UAAU;GACR,GAAG,OAAO;GACV,QAAQ;GACT;EACF;AAED,SAAQ,IAAI,sCAAsC;AAClD,QAAO;;AAGT,MAAa,uBAA8C;CACzD,cAAc;CACd,WAAW;CACZ"}
+{"version":3,"file":"onboard-cli.js","names":[],"sources":["../../../../../extensions/feishu/src/adapters/onboard-cli.ts"],"sourcesContent":["/**\n * Feishu interactive onboarding (CLI onboard) — {@link ChannelOnboardAdapter}.\n *\n * This configures the single-account layout under `channels.feishu.*`.\n */\n\nimport { confirm, input, select } from '@inquirer/prompts';\n\nimport type { Config } from '@xopcai/xopc/config/schema.js';\nimport type { ChannelOnboardAdapter } from '@xopcai/xopc/channels/plugins/types.adapters.js';\n\nimport {\n  initAppRegistration,\n  beginAppRegistration,\n  pollAppRegistration,\n  printQrCode,\n  type FeishuDomain,\n} from '../auth/app-registration.js';\n\ntype DmPolicy = 'pairing' | 'allowlist' | 'open' | 'disabled';\ntype GroupPolicy = 'open' | 'disabled' | 'allowlist';\ntype RenderMode = 'auto' | 'raw' | 'card';\ntype ConnectionMode = 'websocket' | 'webhook';\ntype ReactionNotifications = 'off' | 'own' | 'all';\n\nfunction isFeishuConfigured(config: Config): boolean {\n  const feishu = config.channels?.feishu as Record<string, unknown> | undefined;\n  if (!feishu) return false;\n  const appId = typeof feishu.appId === 'string' ? feishu.appId.trim() : '';\n  const appSecret = typeof feishu.appSecret === 'string' ? feishu.appSecret.trim() : '';\n  const enabled = feishu.enabled === true;\n  return enabled && Boolean(appId && appSecret);\n}\n\nfunction parseAllowlistRaw(raw: string): Array<string | number> {\n  if (!raw.trim()) return [];\n  const entries = raw\n    .split(/[,\\s\\n]+/)\n    .map((s) => s.trim())\n    .filter(Boolean);\n  return entries.map((e) => {\n    const num = parseInt(e, 10);\n    return !isNaN(num) && String(num) === e ? num : e;\n  });\n}\n\nasync function configureFeishu(config: Config): Promise<Config> {\n  console.log(`\\n${'='.repeat(50)}`);\n  console.log('📱 Feishu / Lark setup');\n  console.log(`${'='.repeat(50)}\\n`);\n\n  const existing = config.channels?.feishu as Record<string, unknown> | undefined;\n  const existingAppId = typeof existing?.appId === 'string' ? existing.appId : '';\n  const existingDomain = typeof existing?.domain === 'string' ? existing.domain : '';\n\n  if (existing?.enabled === true && existingAppId) {\n    const keep = await confirm({\n      message: 'A Feishu config already exists. Reconfigure it?',\n      default: false,\n    });\n    if (!keep) return config;\n  }\n\n  const initialDomain = await select<FeishuDomain>({\n    message: 'Feishu/Lark domain:',\n    choices: [\n      { value: 'feishu', name: 'feishu (open.feishu.cn)', description: 'China / Feishu' },\n      { value: 'lark', name: 'lark (open.larksuite.com)', description: 'International / Lark' },\n    ],\n    default: existingDomain === 'lark' ? 'lark' : 'feishu',\n  });\n\n  const canScanToCreate = await initAppRegistration(initialDomain);\n  const useScanToCreate = canScanToCreate\n    ? await confirm({\n        message: 'Create an app by scanning a QR code (recommended)?',\n        default: true,\n      })\n    : false;\n\n  let appId = '';\n  let appSecret = '';\n  let domain: FeishuDomain = initialDomain;\n  let ownerOpenId: string | undefined;\n\n  if (useScanToCreate) {\n    console.log('\\nScan this QR code with Feishu/Lark to create an app:\\n');\n    const begin = await beginAppRegistration(initialDomain);\n    await printQrCode(begin.qrUrl);\n    console.log('\\nWaiting for confirmation...\\n');\n    const outcome = await pollAppRegistration({\n      deviceCode: begin.deviceCode,\n      intervalSec: begin.intervalSec,\n      expireInSec: begin.expireInSec,\n      initialDomain,\n    });\n    if (outcome.status !== 'success') {\n      console.log('Scan-to-create did not complete. Falling back to manual input.\\n');\n    } else {\n      appId = outcome.result.appId;\n      appSecret = outcome.result.appSecret;\n      domain = outcome.result.domain;\n      ownerOpenId = outcome.result.openId;\n      console.log(`✅ App created. Domain detected as \"${domain}\".\\n`);\n    }\n  }\n\n  if (!appId || !appSecret) {\n    console.log('📝 Feishu app credentials (from Feishu Open Platform developer console):\\n');\n\n    appId = (await input({\n      message: 'App ID (cli_xxx):',\n      default: existingAppId || undefined,\n      validate: (v) => v.trim().length > 0 || 'App ID cannot be empty',\n    })).trim();\n\n    appSecret = (await input({\n      message: 'App Secret:',\n      validate: (v) => v.trim().length > 0 || 'App Secret cannot be empty',\n    })).trim();\n\n    domain = initialDomain;\n  }\n\n  const connectionMode = await select<ConnectionMode>({\n    message: 'Connection mode:',\n    choices: [\n      { value: 'websocket', name: 'websocket  [recommended]', description: 'Socket Mode (persistent connection)' },\n      { value: 'webhook', name: 'webhook', description: 'Local HTTP server receives events' },\n    ],\n    default: 'websocket',\n  });\n\n  let verificationToken: string | undefined;\n  let encryptKey: string | undefined;\n  let webhookHost: string | undefined;\n  let webhookPort: number | undefined;\n  let webhookPath: string | undefined;\n  if (connectionMode === 'webhook') {\n    console.log('\\n🪝 Webhook secrets (from Feishu event subscription settings):\\n');\n    verificationToken = (await input({\n      message: 'Verification Token:',\n      validate: (v) => v.trim().length > 0 || 'Verification Token cannot be empty',\n    })).trim();\n    encryptKey = (await input({\n      message: 'Encrypt Key:',\n      validate: (v) => v.trim().length > 0 || 'Encrypt Key cannot be empty',\n    })).trim();\n    webhookHost = (await input({\n      message: 'Webhook host:',\n      default: typeof existing?.webhookHost === 'string' ? existing.webhookHost : '127.0.0.1',\n    })).trim();\n    webhookPort = Number(\n      (await input({\n        message: 'Webhook port:',\n        default: typeof existing?.webhookPort === 'number' ? String(existing.webhookPort) : '3000',\n      })).trim(),\n    );\n    webhookPath = (await input({\n      message: 'Webhook path:',\n      default: typeof existing?.webhookPath === 'string' ? existing.webhookPath : '/feishu/events',\n    })).trim();\n  }\n\n  const dmPolicy = await select<DmPolicy>({\n    message: 'DM (private chat) policy:',\n    choices: [\n      { value: 'pairing', name: 'pairing  [recommended]', description: 'New users must /pair before chatting' },\n      { value: 'allowlist', name: 'allowlist', description: 'Only allowlisted users can DM' },\n      { value: 'open', name: 'open', description: 'Anyone can DM (not recommended)' },\n      { value: 'disabled', name: 'disabled', description: 'Disable DMs' },\n    ],\n    default: 'pairing',\n  });\n\n  let allowFrom: Array<string | number> | undefined;\n  if (dmPolicy === 'allowlist') {\n    const defaultAllow =\n      ownerOpenId && (existing?.allowFrom == null || (Array.isArray(existing.allowFrom) && existing.allowFrom.length === 0))\n        ? ownerOpenId\n        : '';\n    const raw = await input({\n      message: 'Allowed user open_id / union_id / numeric ids (comma-separated):',\n      default: defaultAllow,\n    });\n    allowFrom = parseAllowlistRaw(raw || defaultAllow);\n  }\n\n  const groupPolicy = await select<GroupPolicy>({\n    message: 'Group chat policy:',\n    choices: [\n      { value: 'allowlist', name: 'allowlist  [recommended]', description: 'Only allowlisted groups can use the bot' },\n      { value: 'open', name: 'open', description: 'All groups allowed' },\n      { value: 'disabled', name: 'disabled', description: 'Disable groups' },\n    ],\n    default: 'allowlist',\n  });\n\n  let groupAllowFrom: Array<string | number> | undefined;\n  if (groupPolicy === 'allowlist') {\n    const raw = await input({\n      message: 'Allowed group chat IDs (comma-separated, e.g. oc_xxx):',\n      default: '',\n    });\n    groupAllowFrom = parseAllowlistRaw(raw);\n  }\n\n  const requireMention = await confirm({\n    message: 'Require @mention in groups?',\n    default: true,\n  });\n\n  const renderMode = await select<RenderMode>({\n    message: 'Default render mode:',\n    choices: [\n      { value: 'auto', name: 'auto', description: 'Let xopc decide (default)' },\n      { value: 'raw', name: 'raw', description: 'Send plain text only' },\n      { value: 'card', name: 'card', description: 'Prefer interactive cards (CardKit streaming)' },\n    ],\n    default: 'auto',\n  });\n\n  const streaming = await confirm({\n    message: 'Enable streaming updates (Thinking… + incremental output)?',\n    default: false,\n  });\n\n  const reactionNotifications = await select<ReactionNotifications>({\n    message: 'Reaction notifications:',\n    choices: [\n      { value: 'off', name: 'off', description: 'Disable reaction notifications' },\n      { value: 'own', name: 'own  [recommended]', description: 'Only notify reactions to bot messages' },\n      { value: 'all', name: 'all', description: 'Notify all reactions (noisy)' },\n    ],\n    default: 'own',\n  });\n\n  const enableFeishuTools = await select<'minimal' | 'docs' | 'full'>({\n    message: 'Enable Feishu tools (docs/wiki/drive/etc.)?',\n    choices: [\n      { value: 'minimal', name: 'minimal', description: 'No extra tools (chat only)' },\n      { value: 'docs', name: 'docs', description: 'Enable doc/wiki/drive/scopes (common)' },\n      { value: 'full', name: 'full', description: 'Enable doc/wiki/drive/bitable/perm/scopes' },\n    ],\n    default: 'docs',\n  });\n\n  const tools =\n    enableFeishuTools === 'minimal'\n      ? { doc: false, wiki: false, drive: false, perm: false, bitable: false, scopes: true }\n      : enableFeishuTools === 'docs'\n        ? { doc: true, wiki: true, drive: true, perm: false, bitable: true, scopes: true }\n        : { doc: true, wiki: true, drive: true, perm: true, bitable: true, scopes: true };\n\n  const nextFeishu: Record<string, unknown> = {\n    ...(existing ?? {}),\n    enabled: true,\n    appId,\n    appSecret,\n    domain,\n    connectionMode,\n    ...(connectionMode === 'webhook'\n      ? {\n          verificationToken,\n          encryptKey,\n          webhookHost,\n          webhookPort,\n          webhookPath,\n        }\n      : {}),\n    dmPolicy,\n    groupPolicy,\n    allowFrom: allowFrom ?? (existing?.allowFrom as any) ?? [],\n    groupAllowFrom: groupAllowFrom ?? (existing?.groupAllowFrom as any) ?? [],\n    requireMention,\n    renderMode,\n    streaming,\n    reactionNotifications,\n    actions: { reactions: true },\n    tools,\n    historyLimit: typeof existing?.historyLimit === 'number' ? existing.historyLimit : 50,\n    textChunkLimit: typeof existing?.textChunkLimit === 'number' ? existing.textChunkLimit : 4000,\n  };\n\n  const newConfig: Config = {\n    ...config,\n    channels: {\n      ...config.channels,\n      feishu: nextFeishu,\n    },\n  };\n\n  console.log('\\n✅ Feishu configuration complete\\n');\n  return newConfig;\n}\n\nexport const feishuOnboardAdapter: ChannelOnboardAdapter = {\n  isConfigured: isFeishuConfigured,\n  configure: configureFeishu,\n};\n\n"],"mappings":";;;;;;;;AAyBA,SAAS,mBAAmB,QAAyB;CACnD,MAAM,SAAS,OAAO,UAAU;AAChC,KAAI,CAAC,OAAQ,QAAO;CACpB,MAAM,QAAQ,OAAO,OAAO,UAAU,WAAW,OAAO,MAAM,MAAM,GAAG;CACvE,MAAM,YAAY,OAAO,OAAO,cAAc,WAAW,OAAO,UAAU,MAAM,GAAG;AAEnF,QADgB,OAAO,YAAY,QACjB,QAAQ,SAAS,UAAU;;AAG/C,SAAS,kBAAkB,KAAqC;AAC9D,KAAI,CAAC,IAAI,MAAM,CAAE,QAAO,EAAE;AAK1B,QAJgB,IACb,MAAM,WAAW,CACjB,KAAK,MAAM,EAAE,MAAM,CAAC,CACpB,OAAO,QACI,CAAC,KAAK,MAAM;EACxB,MAAM,MAAM,SAAS,GAAG,GAAG;AAC3B,SAAO,CAAC,MAAM,IAAI,IAAI,OAAO,IAAI,KAAK,IAAI,MAAM;GAChD;;AAGJ,eAAe,gBAAgB,QAAiC;AAC9D,SAAQ,IAAI,KAAK,IAAI,OAAO,GAAG,GAAG;AAClC,SAAQ,IAAI,yBAAyB;AACrC,SAAQ,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI;CAElC,MAAM,WAAW,OAAO,UAAU;CAClC,MAAM,gBAAgB,OAAO,UAAU,UAAU,WAAW,SAAS,QAAQ;CAC7E,MAAM,iBAAiB,OAAO,UAAU,WAAW,WAAW,SAAS,SAAS;AAEhF,KAAI,UAAU,YAAY,QAAQ;MAK5B,CAAC,MAJc,QAAQ;GACzB,SAAS;GACT,SAAS;GACV,CAAC,CACS,QAAO;;CAGpB,MAAM,gBAAgB,MAAM,OAAqB;EAC/C,SAAS;EACT,SAAS,CACP;GAAE,OAAO;GAAU,MAAM;GAA2B,aAAa;GAAkB,EACnF;GAAE,OAAO;GAAQ,MAAM;GAA6B,aAAa;GAAwB,CAC1F;EACD,SAAS,mBAAmB,SAAS,SAAS;EAC/C,CAAC;CAGF,MAAM,kBAAkB,MADM,oBAAoB,cAAc,GAE5D,MAAM,QAAQ;EACZ,SAAS;EACT,SAAS;EACV,CAAC,GACF;CAEJ,IAAI,QAAQ;CACZ,IAAI,YAAY;CAChB,IAAI,SAAuB;CAC3B,IAAI;AAEJ,KAAI,iBAAiB;AACnB,UAAQ,IAAI,2DAA2D;EACvE,MAAM,QAAQ,MAAM,qBAAqB,cAAc;AACvD,QAAM,YAAY,MAAM,MAAM;AAC9B,UAAQ,IAAI,kCAAkC;EAC9C,MAAM,UAAU,MAAM,oBAAoB;GACxC,YAAY,MAAM;GAClB,aAAa,MAAM;GACnB,aAAa,MAAM;GACnB;GACD,CAAC;AACF,MAAI,QAAQ,WAAW,UACrB,SAAQ,IAAI,mEAAmE;OAC1E;AACL,WAAQ,QAAQ,OAAO;AACvB,eAAY,QAAQ,OAAO;AAC3B,YAAS,QAAQ,OAAO;AACxB,iBAAc,QAAQ,OAAO;AAC7B,WAAQ,IAAI,sCAAsC,OAAO,MAAM;;;AAInE,KAAI,CAAC,SAAS,CAAC,WAAW;AACxB,UAAQ,IAAI,6EAA6E;AAEzF,WAAS,MAAM,MAAM;GACnB,SAAS;GACT,SAAS,iBAAiB,KAAA;GAC1B,WAAW,MAAM,EAAE,MAAM,CAAC,SAAS,KAAK;GACzC,CAAC,EAAE,MAAM;AAEV,eAAa,MAAM,MAAM;GACvB,SAAS;GACT,WAAW,MAAM,EAAE,MAAM,CAAC,SAAS,KAAK;GACzC,CAAC,EAAE,MAAM;AAEV,WAAS;;CAGX,MAAM,iBAAiB,MAAM,OAAuB;EAClD,SAAS;EACT,SAAS,CACP;GAAE,OAAO;GAAa,MAAM;GAA4B,aAAa;GAAuC,EAC5G;GAAE,OAAO;GAAW,MAAM;GAAW,aAAa;GAAqC,CACxF;EACD,SAAS;EACV,CAAC;CAEF,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;AACJ,KAAI,mBAAmB,WAAW;AAChC,UAAQ,IAAI,oEAAoE;AAChF,uBAAqB,MAAM,MAAM;GAC/B,SAAS;GACT,WAAW,MAAM,EAAE,MAAM,CAAC,SAAS,KAAK;GACzC,CAAC,EAAE,MAAM;AACV,gBAAc,MAAM,MAAM;GACxB,SAAS;GACT,WAAW,MAAM,EAAE,MAAM,CAAC,SAAS,KAAK;GACzC,CAAC,EAAE,MAAM;AACV,iBAAe,MAAM,MAAM;GACzB,SAAS;GACT,SAAS,OAAO,UAAU,gBAAgB,WAAW,SAAS,cAAc;GAC7E,CAAC,EAAE,MAAM;AACV,gBAAc,QACX,MAAM,MAAM;GACX,SAAS;GACT,SAAS,OAAO,UAAU,gBAAgB,WAAW,OAAO,SAAS,YAAY,GAAG;GACrF,CAAC,EAAE,MAAM,CACX;AACD,iBAAe,MAAM,MAAM;GACzB,SAAS;GACT,SAAS,OAAO,UAAU,gBAAgB,WAAW,SAAS,cAAc;GAC7E,CAAC,EAAE,MAAM;;CAGZ,MAAM,WAAW,MAAM,OAAiB;EACtC,SAAS;EACT,SAAS;GACP;IAAE,OAAO;IAAW,MAAM;IAA0B,aAAa;IAAwC;GACzG;IAAE,OAAO;IAAa,MAAM;IAAa,aAAa;IAAiC;GACvF;IAAE,OAAO;IAAQ,MAAM;IAAQ,aAAa;IAAmC;GAC/E;IAAE,OAAO;IAAY,MAAM;IAAY,aAAa;IAAe;GACpE;EACD,SAAS;EACV,CAAC;CAEF,IAAI;AACJ,KAAI,aAAa,aAAa;EAC5B,MAAM,eACJ,gBAAgB,UAAU,aAAa,QAAS,MAAM,QAAQ,SAAS,UAAU,IAAI,SAAS,UAAU,WAAW,KAC/G,cACA;AAKN,cAAY,kBAAkB,MAJZ,MAAM;GACtB,SAAS;GACT,SAAS;GACV,CAAC,IACmC,aAAa;;CAGpD,MAAM,cAAc,MAAM,OAAoB;EAC5C,SAAS;EACT,SAAS;GACP;IAAE,OAAO;IAAa,MAAM;IAA4B,aAAa;IAA2C;GAChH;IAAE,OAAO;IAAQ,MAAM;IAAQ,aAAa;IAAsB;GAClE;IAAE,OAAO;IAAY,MAAM;IAAY,aAAa;IAAkB;GACvE;EACD,SAAS;EACV,CAAC;CAEF,IAAI;AACJ,KAAI,gBAAgB,YAKlB,kBAAiB,kBAAkB,MAJjB,MAAM;EACtB,SAAS;EACT,SAAS;EACV,CAAC,CACqC;CAGzC,MAAM,iBAAiB,MAAM,QAAQ;EACnC,SAAS;EACT,SAAS;EACV,CAAC;CAEF,MAAM,aAAa,MAAM,OAAmB;EAC1C,SAAS;EACT,SAAS;GACP;IAAE,OAAO;IAAQ,MAAM;IAAQ,aAAa;IAA6B;GACzE;IAAE,OAAO;IAAO,MAAM;IAAO,aAAa;IAAwB;GAClE;IAAE,OAAO;IAAQ,MAAM;IAAQ,aAAa;IAAgD;GAC7F;EACD,SAAS;EACV,CAAC;CAEF,MAAM,YAAY,MAAM,QAAQ;EAC9B,SAAS;EACT,SAAS;EACV,CAAC;CAEF,MAAM,wBAAwB,MAAM,OAA8B;EAChE,SAAS;EACT,SAAS;GACP;IAAE,OAAO;IAAO,MAAM;IAAO,aAAa;IAAkC;GAC5E;IAAE,OAAO;IAAO,MAAM;IAAsB,aAAa;IAAyC;GAClG;IAAE,OAAO;IAAO,MAAM;IAAO,aAAa;IAAgC;GAC3E;EACD,SAAS;EACV,CAAC;CAEF,MAAM,oBAAoB,MAAM,OAAoC;EAClE,SAAS;EACT,SAAS;GACP;IAAE,OAAO;IAAW,MAAM;IAAW,aAAa;IAA8B;GAChF;IAAE,OAAO;IAAQ,MAAM;IAAQ,aAAa;IAAyC;GACrF;IAAE,OAAO;IAAQ,MAAM;IAAQ,aAAa;IAA6C;GAC1F;EACD,SAAS;EACV,CAAC;CAEF,MAAM,QACJ,sBAAsB,YAClB;EAAE,KAAK;EAAO,MAAM;EAAO,OAAO;EAAO,MAAM;EAAO,SAAS;EAAO,QAAQ;EAAM,GACpF,sBAAsB,SACpB;EAAE,KAAK;EAAM,MAAM;EAAM,OAAO;EAAM,MAAM;EAAO,SAAS;EAAM,QAAQ;EAAM,GAChF;EAAE,KAAK;EAAM,MAAM;EAAM,OAAO;EAAM,MAAM;EAAM,SAAS;EAAM,QAAQ;EAAM;CAEvF,MAAM,aAAsC;EAC1C,GAAI,YAAY,EAAE;EAClB,SAAS;EACT;EACA;EACA;EACA;EACA,GAAI,mBAAmB,YACnB;GACE;GACA;GACA;GACA;GACA;GACD,GACD,EAAE;EACN;EACA;EACA,WAAW,aAAc,UAAU,aAAqB,EAAE;EAC1D,gBAAgB,kBAAmB,UAAU,kBAA0B,EAAE;EACzE;EACA;EACA;EACA;EACA,SAAS,EAAE,WAAW,MAAM;EAC5B;EACA,cAAc,OAAO,UAAU,iBAAiB,WAAW,SAAS,eAAe;EACnF,gBAAgB,OAAO,UAAU,mBAAmB,WAAW,SAAS,iBAAiB;EAC1F;CAED,MAAM,YAAoB;EACxB,GAAG;EACH,UAAU;GACR,GAAG,OAAO;GACV,QAAQ;GACT;EACF;AAED,SAAQ,IAAI,sCAAsC;AAClD,QAAO;;AAGT,MAAa,uBAA8C;CACzD,cAAc;CACd,WAAW;CACZ"}

package/dist/extensions/feishu/src/auth/app-registration.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Feishu/Lark App Registration — QR scan-to-create and OAuth device flow.
+ *
+ * Shared between `cli-login.ts` (channels login) and `onboard-cli.ts` (onboard wizard).
+ */
+export type FeishuDomain = 'feishu' | 'lark';
+export type AppRegistrationResult = {
+    appId: string;
+    appSecret: string;
+    domain: FeishuDomain;
+    openId?: string;
+};
+/**
+ * Check if the Feishu/Lark app registration endpoint supports scan-to-create.
+ */
+export declare function initAppRegistration(domain: FeishuDomain): Promise<boolean>;
+/**
+ * Start the device-code flow and return a QR URL for the user to scan.
+ */
+export declare function beginAppRegistration(domain: FeishuDomain): Promise<{
+    deviceCode: string;
+    qrUrl: string;
+    intervalSec: number;
+    expireInSec: number;
+}>;
+/**
+ * Poll the registration endpoint until the user scans and confirms.
+ */
+export declare function pollAppRegistration(params: {
+    deviceCode: string;
+    intervalSec: number;
+    expireInSec: number;
+    initialDomain: FeishuDomain;
+}): Promise<{
+    status: 'success';
+    result: AppRegistrationResult;
+} | {
+    status: 'access_denied' | 'expired' | 'timeout';
+    message?: string;
+} | {
+    status: 'error';
+    message: string;
+}>;
+/**
+ * Print a QR code to the terminal (falls back to URL if qrcode-terminal is unavailable).
+ */
+export declare function printQrCode(url: string): Promise<void>;

package/dist/extensions/feishu/src/auth/app-registration.js

@@ -0,0 +1,122 @@
+//#region extensions/feishu/src/auth/app-registration.ts
+const FEISHU_ACCOUNTS_URL = "https://accounts.feishu.cn";
+const LARK_ACCOUNTS_URL = "https://accounts.larksuite.com";
+const REGISTRATION_PATH = "/oauth/v1/app/registration";
+const REQUEST_TIMEOUT_MS = 1e4;
+function accountsBaseUrl(domain) {
+	return domain === "lark" ? LARK_ACCOUNTS_URL : FEISHU_ACCOUNTS_URL;
+}
+async function postRegistration(baseUrl, body) {
+	return await (await fetch(`${baseUrl}${REGISTRATION_PATH}`, {
+		method: "POST",
+		headers: { "Content-Type": "application/x-www-form-urlencoded" },
+		body: new URLSearchParams(body).toString(),
+		signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
+	})).json();
+}
+/**
+* Check if the Feishu/Lark app registration endpoint supports scan-to-create.
+*/
+async function initAppRegistration(domain) {
+	try {
+		const result = await postRegistration(accountsBaseUrl(domain), { action: "init" });
+		return Boolean(result.supported_auth_methods?.includes("client_secret"));
+	} catch {
+		return false;
+	}
+}
+/**
+* Start the device-code flow and return a QR URL for the user to scan.
+*/
+async function beginAppRegistration(domain) {
+	const result = await postRegistration(accountsBaseUrl(domain), {
+		action: "begin",
+		archetype: "PersonalAgent",
+		auth_method: "client_secret",
+		request_user_info: "open_id"
+	});
+	const qrUrl = new URL(result.verification_uri_complete);
+	qrUrl.searchParams.set("from", "xopc_onboard");
+	qrUrl.searchParams.set("tp", "ob_cli_app");
+	return {
+		deviceCode: result.device_code,
+		qrUrl: qrUrl.toString(),
+		intervalSec: result.interval || 5,
+		expireInSec: result.expire_in || 600
+	};
+}
+/**
+* Poll the registration endpoint until the user scans and confirms.
+*/
+async function pollAppRegistration(params) {
+	let domain = params.initialDomain;
+	let intervalSec = params.intervalSec;
+	let domainSwitched = false;
+	const deadline = Date.now() + params.expireInSec * 1e3;
+	while (Date.now() < deadline) {
+		let pollResponse;
+		try {
+			pollResponse = await postRegistration(accountsBaseUrl(domain), {
+				action: "poll",
+				device_code: params.deviceCode,
+				tp: "ob_cli_app"
+			});
+		} catch {
+			await sleep(intervalSec * 1e3);
+			continue;
+		}
+		if (pollResponse.user_info?.tenant_brand) {
+			const isLark = pollResponse.user_info.tenant_brand === "lark";
+			if (!domainSwitched && isLark) {
+				domain = "lark";
+				domainSwitched = true;
+				continue;
+			}
+		}
+		if (pollResponse.client_id && pollResponse.client_secret) return {
+			status: "success",
+			result: {
+				appId: pollResponse.client_id,
+				appSecret: pollResponse.client_secret,
+				domain,
+				openId: pollResponse.user_info?.open_id
+			}
+		};
+		if (pollResponse.error) if (pollResponse.error === "authorization_pending") {} else if (pollResponse.error === "slow_down") intervalSec += 5;
+		else if (pollResponse.error === "access_denied") return { status: "access_denied" };
+		else if (pollResponse.error === "expired_token") return { status: "expired" };
+		else return {
+			status: "error",
+			message: `${pollResponse.error}: ${pollResponse.error_description ?? "unknown"}`
+		};
+		await sleep(intervalSec * 1e3);
+	}
+	return { status: "timeout" };
+}
+/**
+* Print a QR code to the terminal (falls back to URL if qrcode-terminal is unavailable).
+*/
+async function printQrCode(url) {
+	try {
+		const qrcodeTerminal = await import(
+			/* @vite-ignore */
+			"qrcode-terminal"
+);
+		await new Promise((resolve) => {
+			qrcodeTerminal.default.generate(url, { small: true }, (qr) => {
+				process.stdout.write(qr.endsWith("\n") ? qr : `${qr}\n`);
+				resolve();
+			});
+		});
+	} catch {
+		console.log("Open this URL in a browser to scan:\n");
+		console.log(url);
+	}
+}
+function sleep(ms) {
+	return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//#endregion
+export { beginAppRegistration, initAppRegistration, pollAppRegistration, printQrCode };
+
+//# sourceMappingURL=app-registration.js.map