@zhin.js/adapter-lark 1.1.26 → 1.1.27

package/agents/lark/skills/lark-group-admin/tools/update_chat/index.js

@@ -1,22 +1,21 @@
 // Generated by build-plugin-runtime-entries.mjs. Do not edit.
 import { messages as t } from "../../../../messages.js";
+import { currentChat } from "../../../../conversation.js";
 import { defineAgentTool } from '@zhin.js/tool';
 import { z } from 'zod';
-import { platformPermission } from '@zhin.js/permission';
 export default defineAgentTool({
-    description: '更新飞书群聊信息（群名、描述）',
+    description: '更新当前飞书群聊信息（群名、描述）',
     inputSchema: z.object({
-        chat_id: z.string().describe('群聊 ID'),
         name: z.string().optional().describe('新群名（可选）'),
         description: z.string().optional().describe('新描述（可选）'),
     }),
     adapter: 'lark',
     scopes: ["group"],
     tags: ['lark'],
-    permissions: [platformPermission('lark', 'chat_admin')],
-    async execute({ chat_id, name, description }, context) {
+    permissions: ['platform:admin', 'bot:admin'],
+    async execute({ name, description }, context) {
         const endpoint = context.$client;
-        const success = await endpoint.updateChatInfo(chat_id, { name, description });
+        const success = await endpoint.updateChatInfo(currentChat(context), { name, description });
         return { success, message: success ? t(context.locale, 'chatInfoUpdated') : t(context.locale, 'updateFailed') };
     },
 });

package/agents/lark/skills/lark-group-admin/tools/update_chat/index.ts

@@ -1,22 +1,21 @@
 import { messages as t } from "../../../../messages.js";
+import { currentChat } from "../../../../conversation.js";
 import { defineAgentTool } from '@zhin.js/tool';
 import { z } from 'zod';
-import { platformPermission } from '@zhin.js/permission';
 
-export default defineAgentTool<{ chat_id: string; name?: string; description?: string }>({
-  description: '更新飞书群聊信息（群名、描述）',
+export default defineAgentTool<{ name?: string; description?: string }>({
+  description: '更新当前飞书群聊信息（群名、描述）',
   inputSchema: z.object({
-    chat_id: z.string().describe('群聊 ID'),
     name: z.string().optional().describe('新群名（可选）'),
     description: z.string().optional().describe('新描述（可选）'),
   }),
   adapter: 'lark',
   scopes: ["group"],
   tags: ['lark'],
-  permissions: [platformPermission('lark', 'chat_admin')],
-  async execute({ chat_id, name, description   }: { chat_id: string; name?: string; description?: string }, context) {
+  permissions: ['platform:admin', 'bot:admin'],
+  async execute({ name, description }, context) {
     const endpoint = context.$client;
-    const success = await endpoint.updateChatInfo(chat_id, { name, description });
+    const success = await endpoint.updateChatInfo(currentChat(context), { name, description });
     return { success, message: success ? t(context.locale, 'chatInfoUpdated') : t(context.locale, 'updateFailed') };
   },
 });

package/lib/client.js

@@ -11,7 +11,6 @@ import { createEndpointLifecycle, createEndpointOperation, createRecallEndpointC
 import { formatCompact, getAdapterLogger } from '@zhin.js/logger';
 import { buildImageUploadForm, readOutboundImageMedia, resolveMediaBinary, } from './media-upload.js';
 import { formatInboundContent, formatOutboundBody, generateMessageId, isLarkBotMentioned, larkInboundConversation, resolveChatType, resolveSender, } from './protocol.js';
-import { normalizeLarkSenderForPermit } from './platform-permit.js';
 import { registerLarkWebhookRoutes } from './webhook.js';
 import { createLarkLongConnection } from './long-connection.js';
 import { openLarkReplyStream, supportsLarkReplyStream } from './reply-stream.js';
@@ -19,6 +18,7 @@ import { openLarkReplyStream, supportsLarkReplyStream } from './reply-stream.js'
 const OUTBOUND_TIMEOUT_MS = 30_000;
 /** Feishu/Lark OpenAPI client surface carried by every Endpoint event. */
 const LARK_CHAT_MANAGER_CACHE_TTL_MS = 60_000;
+const LARK_CHAT_MANAGER_FAILURE_TTL_MS = 10_000;
 export class LarkClient extends SdkClient {
     #logger;
     #options;
@@ -47,6 +47,27 @@ export class LarkClient extends SdkClient {
             return groups;
         },
         listGroupMembers: ({ groupId, signal }) => this.#listAllPages(`/im/v1/chats/${encodeURIComponent(groupId)}/members`, { params: { member_id_type: 'open_id' }, signal }),
+        /**
+         * ADR 0056 §1：机器人自身在群里的地位（chat.get：群主为本应用 → owner；在 bot_manager_id_list →
+         * admin；有 owner_id 且都不是 → member）。查询失败或缺 owner_id 为未知。
+         */
+        inspectSelfStanding: async ({ conversation, signal }) => {
+            if (conversation.kind !== 'group')
+                return undefined;
+            const appId = this.#options.config.appId;
+            const data = await createEndpointOperation({ signal }).run(() => this.#request(`/im/v1/chats/${encodeURIComponent(conversation.id)}`, { method: 'GET' }));
+            const info = data?.data;
+            if (!info || !appId)
+                return undefined;
+            if (info.owner_id_type === 'app_id' && info.owner_id === appId)
+                return { standing: 'owner' };
+            const managers = Array.isArray(info.bot_manager_id_list) ? info.bot_manager_id_list.map(String) : [];
+            if (managers.includes(appId))
+                return { standing: 'admin' };
+            // chat.get may omit owner_id (e.g. when this app owns the group): without it the Bot is not
+            // provably a plain member, so the standing stays unknown.
+            return typeof info.owner_id === 'string' && info.owner_id ? { standing: 'member' } : undefined;
+        },
     });
     endpointControl = createRecallEndpointControl((id, signal) => this.recallMessage(id, { signal }));
     get endpointStreaming() {
@@ -65,6 +86,8 @@ export class LarkClient extends SdkClient {
     #chatManagers = new TtlLookupCache({
         ttlMs: LARK_CHAT_MANAGER_CACHE_TTL_MS,
     });
+    /** chat.get failures: the standing stays unknown for a short while instead of retrying every message. */
+    #chatManagerFailures = new TtlLookupCache({ ttlMs: LARK_CHAT_MANAGER_FAILURE_TTL_MS });
     #startupGeneration = 0;
     #pendingInbound = [];
     #bindSignal;
@@ -313,11 +336,10 @@ export class LarkClient extends SdkClient {
     async #emitInbound(msg, conversation, nativeEvent) {
         const chatType = resolveChatType(msg.chat_id, msg.chat_type);
         const senderId = resolveSender(msg);
-        const permit = senderId && chatType === 'group' && msg.chat_id
-            ? normalizeLarkSenderForPermit(await this.#resolveChatRole(msg.chat_id, senderId))
+        // ADR 0056 §1：群主 / 群管理员 / 成员 → sender.platform.standing（飞书群无原生角色与权限位）；未知不上报。
+        const role = senderId && chatType === 'group' && msg.chat_id
+            ? await this.#resolveChatRole(msg.chat_id, senderId)
             : undefined;
-        // 规范角色 owner / admin 进 roles；细粒度能力放 senderPermissions
-        const role = permit?.role === 'owner' || permit?.role === 'admin' ? permit.role : undefined;
         const mentioned = isLarkBotMentioned(msg);
         const replyToId = msg.parent_id || msg.root_id;
         await this.publishEvent('message.receive', {
@@ -325,32 +347,43 @@ export class LarkClient extends SdkClient {
             conversation,
             message: { conversation, id: generateMessageId(msg) },
             content: formatInboundContent(msg),
-            ...(senderId ? { sender: { id: senderId, ...(role ? { roles: [role] } : {}) } } : {}),
+            ...(senderId ? { sender: { id: senderId, ...(role ? { platform: { standing: role } } : {}) } } : {}),
             endpointId: this.#options.config.id,
             ...(mentioned ? { mentioned: true } : {}),
             ...(replyToId ? { replyTo: { id: replyToId } } : {}),
             metadata: Object.freeze({
                 messageType: msg.message_type,
                 chatType,
-                ...(role ? { senderRole: role } : {}),
-                ...(role && permit?.permissions?.length ? { senderPermissions: [...permit.permissions] } : {}),
             }),
         });
     }
-    /** 群主 / 群管理员来自 chat.get（owner_id + 管理员列表），按群缓存；失败时保守地视为普通成员。 */
+    /**
+     * 群主 / 群管理员来自 chat.get（owner_id + 管理员列表），按群缓存 60 秒。chat.get 失败时地位未知
+     * （负缓存 10 秒，不报确定的 member）；未返回 owner_id（如群主是机器人应用）时只能确认管理员，
+     * 其余发送者地位未知。
+     */
     async #resolveChatRole(chatId, senderId) {
+        if (this.#chatManagerFailures.get(chatId))
+            return undefined;
         const entry = await this.#chatManagers.getOrLoad(chatId, async () => {
             const info = await this.getChatInfo(chatId);
-            const admins = Array.isArray(info?.user_manager_id_list) ? info.user_manager_id_list.map(String) : [];
+            if (!info) {
+                this.#chatManagerFailures.set(chatId, true);
+                return undefined;
+            }
+            const admins = Array.isArray(info.user_manager_id_list) ? info.user_manager_id_list.map(String) : [];
             return {
-                ...(typeof info?.owner_id === 'string' && info.owner_id ? { owner: info.owner_id } : {}),
+                ...(typeof info.owner_id === 'string' && info.owner_id ? { owner: info.owner_id } : {}),
                 admins: new Set(admins),
             };
-        });
-        return {
-            isOwner: entry.owner !== undefined && entry.owner === senderId,
-            isAdmin: entry.admins.has(senderId),
-        };
+        }, { cacheWhen: entry => entry !== undefined });
+        if (!entry)
+            return undefined;
+        if (entry.owner !== undefined && entry.owner === senderId)
+            return 'owner';
+        if (entry.admins.has(senderId))
+            return 'admin';
+        return entry.owner !== undefined ? 'member' : undefined;
     }
     /** Only correlate callbacks to a card actually sent by this endpoint. */
     admitCardAction(event) {

package/lib/index.d.ts

@@ -1,6 +1,6 @@
-export { formatInboundContent, formatOutboundBody, generateMessageId, headerValue, larkInboundConversation, normalizeWebhookPath, readTextBody, resolveChatType, resolveLarkConfig, resolveSender, verifySignature, type AccessToken, type LarkEndpointConfig, type LarkApiResponse, type LarkEventBody, type LarkMessage, type LarkSendBody, type LarkWireSegment, type ResolvedLarkConfig, } from './protocol.js';
+export { formatInboundContent, formatOutboundBody, generateMessageId, headerValue, larkInboundConversation, normalizeWebhookPath, resolveChatType, resolveLarkConfig, resolveSender, decryptLarkEvent, verifySignature, type AccessToken, type LarkEndpointConfig, type LarkApiResponse, type LarkEventBody, type LarkMessage, type LarkSendBody, type LarkWireSegment, type ResolvedLarkConfig, } from './protocol.js';
 export { type LarkClientEventMap } from './client.js';
-export { checkLarkPlatformPermit, larkGroupPermitResolver, normalizeLarkSenderForPermit, platformPermit, } from './platform-permit.js';
+export { platformPermit } from './platform-permit.js';
 export { LarkEndpoint, type LarkEndpointOptions, type LarkFetch, } from './endpoint.js';
 export { buildImageUploadForm, readOutboundImageMedia, resolveMediaBinary, type MediaBinary, } from './media-upload.js';
 export { registerLarkWebhookRoutes, handleLarkWebhookRequest, type LarkWebhookHandler, } from './webhook.js';

package/lib/index.js

@@ -1,5 +1,5 @@
-export { formatInboundContent, formatOutboundBody, generateMessageId, headerValue, larkInboundConversation, normalizeWebhookPath, readTextBody, resolveChatType, resolveLarkConfig, resolveSender, verifySignature, } from './protocol.js';
-export { checkLarkPlatformPermit, larkGroupPermitResolver, normalizeLarkSenderForPermit, platformPermit, } from './platform-permit.js';
+export { formatInboundContent, formatOutboundBody, generateMessageId, headerValue, larkInboundConversation, normalizeWebhookPath, resolveChatType, resolveLarkConfig, resolveSender, decryptLarkEvent, verifySignature, } from './protocol.js';
+export { platformPermit } from './platform-permit.js';
 export { LarkEndpoint, } from './endpoint.js';
 export { buildImageUploadForm, readOutboundImageMedia, resolveMediaBinary, } from './media-upload.js';
 export { registerLarkWebhookRoutes, handleLarkWebhookRequest, } from './webhook.js';

package/lib/platform-permit.d.ts

@@ -1,14 +1,7 @@
 /**
- * 飞书 Lark platform permit
+ * 飞书 Lark platform permit helper（ADR 0056 §5）。
+ *
+ * 平台身份由适配器上报到 `sender.platform`，permit 由内置评估器（`@zhin.js/permission`）判断；
+ * 适配器不再导出自有的 permit 解析器或检查函数。
  */
-import type { PermissionSubject } from '@zhin.js/permission';
 export declare function platformPermit(perm: string): string;
-export declare function larkGroupPermitResolver(logicalPerm: string): string;
-export declare function normalizeLarkSenderForPermit(input: {
-    isOwner?: boolean;
-    isAdmin?: boolean;
-}): {
-    role?: string;
-    permissions?: string[];
-};
-export declare function checkLarkPlatformPermit(perm: string, subject: PermissionSubject): boolean;

package/lib/platform-permit.js

@@ -1,35 +1,9 @@
-const ADAPTER = 'lark';
+/**
+ * 飞书 Lark platform permit helper（ADR 0056 §5）。
+ *
+ * 平台身份由适配器上报到 `sender.platform`，permit 由内置评估器（`@zhin.js/permission`）判断；
+ * 适配器不再导出自有的 permit 解析器或检查函数。
+ */
 export function platformPermit(perm) {
-    return `platform(${ADAPTER},${perm})`;
-}
-const FACTORY_PERM_MAP = {
-    scene_admin: 'chat_admin',
-    scene_owner: 'chat_owner',
-};
-export function larkGroupPermitResolver(logicalPerm) {
-    return platformPermit(FACTORY_PERM_MAP[logicalPerm] ?? logicalPerm);
-}
-export function normalizeLarkSenderForPermit(input) {
-    if (input.isOwner) {
-        return { role: 'owner', permissions: ['chat_owner', 'chat_admin', 'manage_managers'] };
-    }
-    if (input.isAdmin) {
-        return { role: 'admin', permissions: ['chat_admin'] };
-    }
-    return { role: 'member', permissions: [] };
-}
-export function checkLarkPlatformPermit(perm, subject) {
-    const role = subject.sender?.role?.[0];
-    const permissions = subject.sender?.permissions ?? [];
-    const has = (t) => permissions.includes(t);
-    switch (perm) {
-        case 'chat_owner':
-            return role === 'owner' || has('chat_owner');
-        case 'chat_admin':
-            return role === 'owner' || role === 'admin' || has('chat_admin') || has('chat_owner');
-        case 'manage_managers':
-            return role === 'owner' || has('chat_owner');
-        default:
-            return false;
-    }
+    return `platform-permission:${perm}`;
 }

package/lib/protocol.d.ts

@@ -1,6 +1,5 @@
 import type { EndpointProfileConfiguration } from 'zhin.js/adapter';
 import type { Locale } from 'zhin.js/i18n';
-import type { IncomingMessage } from 'node:http';
 import { type ConversationRef } from '@zhin.js/im-contract';
 /** One endpoint config after AdapterIndex expands `plugins.<instanceKey>.endpoints`. */
 export interface LarkEndpointConfig extends EndpointProfileConfiguration {
@@ -72,6 +71,8 @@ export interface LarkEventBody {
     readonly ts?: string;
     readonly type?: string;
     readonly challenge?: string;
+    /** Present instead of every other field when the app has an Encrypt Key. */
+    readonly encrypt?: string;
     readonly event?: {
         readonly sender?: LarkMessage['sender'];
         readonly message?: LarkMessage;
@@ -118,6 +119,13 @@ export declare function formatInboundContent(msg: LarkMessage): string;
 /** 验签时间戳时效窗口（防重放）。 */
 export declare const LARK_SIGNATURE_MAX_AGE_MS: number;
 export declare function verifySignature(encryptKey: string, timestamp: string, nonce: string, body: string, signature: string, nowMs?: number): boolean;
+/**
+ * Decrypt an `{"encrypt": "..."}` webhook payload (Lark/Feishu open-platform
+ * spec): key = SHA-256(Encrypt Key), base64 payload = 16-byte IV followed by
+ * AES-256-CBC ciphertext with PKCS#7 padding. Throws when the payload cannot
+ * be decrypted with this key.
+ */
+export declare function decryptLarkEvent(encryptKey: string, encrypted: string): string;
 /** timing-safe 比较 webhook verification token（长度不同快速失败）。 */
 export declare function verifyToken(token: string, expected: string): boolean;
 /**
@@ -125,7 +133,4 @@ export declare function verifyToken(token: string, expected: string): boolean;
  * Segment canonicalization is intentionally not done here.
  */
 export declare function formatOutboundBody(payload: unknown, locale?: Locale): LarkSendBody;
-export declare function headerValue(headers: IncomingMessage['headers'], name: string): string;
-export declare function readTextBody(request: IncomingMessage, options?: {
-    readonly limit?: number;
-}): Promise<string>;
+export declare function headerValue(headers: Headers, name: string): string;

package/lib/protocol.js

@@ -3,7 +3,7 @@ import { validateLarkWebApiProxy } from './web-api-proxy.js';
  * Lark/Feishu protocol helpers — no legacy Adapter/Endpoint / segment-mapper.
  * Canonicalization is owned by gateway/core before endpoint.send.
  */
-import { createHash, timingSafeEqual } from 'node:crypto';
+import { createDecipheriv, createHash, timingSafeEqual } from 'node:crypto';
 import { EndpointDeliveryError, isMediaRef } from '@zhin.js/im-contract';
 import { formatCompact, getLogger } from '@zhin.js/logger';
 import { formatLarkCard } from './cards.js';
@@ -150,6 +150,21 @@ export function verifySignature(encryptKey, timestamp, nonce, body, signature, n
         return false;
     }
 }
+/**
+ * Decrypt an `{"encrypt": "..."}` webhook payload (Lark/Feishu open-platform
+ * spec): key = SHA-256(Encrypt Key), base64 payload = 16-byte IV followed by
+ * AES-256-CBC ciphertext with PKCS#7 padding. Throws when the payload cannot
+ * be decrypted with this key.
+ */
+export function decryptLarkEvent(encryptKey, encrypted) {
+    const payload = Buffer.from(encrypted, 'base64');
+    if (payload.length <= 16 || (payload.length - 16) % 16 !== 0) {
+        throw new Error('Malformed encrypted Lark event');
+    }
+    const key = createHash('sha256').update(encryptKey).digest();
+    const decipher = createDecipheriv('aes-256-cbc', key, payload.subarray(0, 16));
+    return Buffer.concat([decipher.update(payload.subarray(16)), decipher.final()]).toString('utf8');
+}
 /** timing-safe 比较 webhook verification token（长度不同快速失败）。 */
 export function verifyToken(token, expected) {
     try {
@@ -323,23 +338,5 @@ export function formatOutboundBody(payload, locale) {
     };
 }
 export function headerValue(headers, name) {
-    const value = headers[name] ?? headers[name.toLowerCase()];
-    if (Array.isArray(value))
-        return value[0] ?? '';
-    return value ?? '';
-}
-export async function readTextBody(request, options = {}) {
-    const limit = options.limit ?? 1_048_576;
-    const chunks = [];
-    let size = 0;
-    for await (const chunk of request) {
-        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-        size += buffer.length;
-        if (size > limit) {
-            request.destroy();
-            throw new Error(`Request body exceeds ${limit} bytes`);
-        }
-        chunks.push(buffer);
-    }
-    return Buffer.concat(chunks).toString('utf8');
+    return headers.get(name) ?? '';
 }

package/lib/webhook.d.ts

@@ -1,8 +1,7 @@
 /**
- * Lark/Feishu webhook HTTP: verification → signature → challenge/event → admit.
+ * Lark/Feishu webhook HTTP: signature → decrypt → verification token → challenge/event → admit.
  */
 import type { LarkCardAction } from './cards.js';
-import type { IncomingMessage, ServerResponse } from 'node:http';
 import type { HttpHost, HttpRouteRegistration } from '@zhin.js/host-http';
 import { type LarkMessage, type ResolvedLarkConfig } from './protocol.js';
 export interface LarkWebhookHandler {
@@ -13,4 +12,4 @@ export interface LarkWebhookHandler {
     admitCardAction?(event: LarkCardAction): void;
 }
 export declare function registerLarkWebhookRoutes(http: HttpHost, handler: LarkWebhookHandler): HttpRouteRegistration[];
-export declare function handleLarkWebhookRequest(request: IncomingMessage, response: ServerResponse, handler: LarkWebhookHandler): Promise<void>;
+export declare function handleLarkWebhookRequest(request: Request, handler: LarkWebhookHandler): Promise<Response>;

package/lib/webhook.js

@@ -1,15 +1,14 @@
+import { readTextBody } from '@zhin.js/host-http-contract';
 import { formatCompact, getLogger } from '@zhin.js/logger';
-import { headerValue, readTextBody, verifySignature, verifyToken, } from './protocol.js';
+import { decryptLarkEvent, headerValue, verifySignature, verifyToken, } from './protocol.js';
 const logger = getLogger('lark');
 export function registerLarkWebhookRoutes(http, handler) {
     const path = handler.config.webhookPath;
     return [
-        http.route('POST', path, async (request, response) => {
-            await handleLarkWebhookRequest(request, response, handler);
-        }, { summary: 'Lark/Feishu event webhook', tags: ['lark'] }),
+        http.route('POST', path, (request) => handleLarkWebhookRequest(request, handler), { summary: 'Lark/Feishu event webhook', tags: ['lark'] }),
     ];
 }
-export async function handleLarkWebhookRequest(request, response, handler) {
+export async function handleLarkWebhookRequest(request, handler) {
     try {
         const rawBody = await readTextBody(request);
         let event;
@@ -17,20 +16,9 @@ export async function handleLarkWebhookRequest(request, response, handler) {
             event = JSON.parse(rawBody);
         }
         catch {
-            response.writeHead(200, { 'Content-Type': 'application/json' });
-            response.end(JSON.stringify({ code: 0, msg: 'success' }));
-            return;
-        }
-        if (handler.config.verificationToken) {
-            const bodyToken = event.header?.token ?? event.token;
-            const token = typeof bodyToken === 'string' ? bodyToken : headerValue(request.headers, 'x-lark-request-token');
-            if (!verifyToken(token, handler.config.verificationToken)) {
-                logger.warn(formatCompact({ op: 'webhook', ok: false, error: 'invalid verification token' }));
-                response.writeHead(403, { 'Content-Type': 'text/plain' });
-                response.end('Forbidden');
-                return;
-            }
+            return new Response(JSON.stringify({ code: 0, msg: 'success' }), { status: 200, headers: { 'Content-Type': 'application/json' } });
         }
+        // Signature first: it covers the raw (possibly encrypted) body.
         if (handler.config.encryptKey) {
             const timestamp = headerValue(request.headers, 'x-lark-request-timestamp');
             const nonce = headerValue(request.headers, 'x-lark-request-nonce');
@@ -40,9 +28,32 @@ export async function handleLarkWebhookRequest(request, response, handler) {
                 || !signature
                 || !verifySignature(handler.config.encryptKey, timestamp, nonce, rawBody, signature)) {
                 logger.warn(formatCompact({ op: 'webhook', ok: false, error: 'invalid signature' }));
-                response.writeHead(403, { 'Content-Type': 'text/plain' });
-                response.end('Forbidden');
-                return;
+                return new Response('Forbidden', { status: 403, headers: { 'Content-Type': 'text/plain' } });
+            }
+        }
+        if (typeof event?.encrypt === 'string') {
+            if (!handler.config.encryptKey) {
+                logger.warn(formatCompact({ op: 'webhook', ok: false, error: 'encrypted event received but encryptKey is not configured' }));
+                return new Response(JSON.stringify({ code: -1, msg: 'Encrypt key is not configured' }), { status: 400, headers: { 'Content-Type': 'application/json' } });
+            }
+            try {
+                event = JSON.parse(decryptLarkEvent(handler.config.encryptKey, event.encrypt));
+            }
+            catch {
+                logger.warn(formatCompact({ op: 'webhook', ok: false, error: 'event decryption failed' }));
+                return new Response(JSON.stringify({ code: -1, msg: 'Decryption failed' }), { status: 400, headers: { 'Content-Type': 'application/json' } });
+            }
+        }
+        if (!event || typeof event !== 'object') {
+            return new Response(JSON.stringify({ code: 0, msg: 'success' }), { status: 200, headers: { 'Content-Type': 'application/json' } });
+        }
+        // Token and challenge live inside the decrypted event.
+        if (handler.config.verificationToken) {
+            const bodyToken = event.header?.token ?? event.token;
+            const token = typeof bodyToken === 'string' ? bodyToken : headerValue(request.headers, 'x-lark-request-token');
+            if (!verifyToken(token, handler.config.verificationToken)) {
+                logger.warn(formatCompact({ op: 'webhook', ok: false, error: 'invalid verification token' }));
+                return new Response('Forbidden', { status: 403, headers: { 'Content-Type': 'text/plain' } });
             }
         }
         if (handler.isOpen) {
@@ -52,9 +63,7 @@ export async function handleLarkWebhookRequest(request, response, handler) {
             handler.admitPlatform(eventName, event);
         }
         if (event.type === 'url_verification') {
-            response.writeHead(200, { 'Content-Type': 'application/json' });
-            response.end(JSON.stringify({ challenge: event.challenge }));
-            return;
+            return new Response(JSON.stringify({ challenge: event.challenge }), { status: 200, headers: { 'Content-Type': 'application/json' } });
         }
         const headerEventType = event.header?.event_type;
         if (headerEventType === 'card.action.trigger' && handler.isOpen)
@@ -66,12 +75,10 @@ export async function handleLarkWebhookRequest(request, response, handler) {
             };
             handler.admit(message, event);
         }
-        response.writeHead(200, { 'Content-Type': 'application/json' });
-        response.end(JSON.stringify({ code: 0, msg: 'success' }));
+        return new Response(JSON.stringify({ code: 0, msg: 'success' }), { status: 200, headers: { 'Content-Type': 'application/json' } });
     }
     catch (error) {
         logger.error('Webhook error:', error);
-        response.writeHead(500, { 'Content-Type': 'application/json' });
-        response.end(JSON.stringify({ code: -1, msg: 'Internal Server Error' }));
+        return new Response(JSON.stringify({ code: -1, msg: 'Internal Server Error' }), { status: 500, headers: { 'Content-Type': 'application/json' } });
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhin.js/adapter-lark",
-  "version": "1.1.26",
+  "version": "1.1.27",
   "description": "Zhin.js Lark/Feishu adapter (HTTP webhook and WebSocket long connection)",
   "type": "module",
   "main": "./lib/index.js",
@@ -35,26 +35,27 @@
   "dependencies": {
     "@larksuiteoapi/node-sdk": "^1.67.0",
     "undici": "6.29.1",
-    "@zhin.js/adapter": "1.1.32",
-    "@zhin.js/agent-feature": "1.1.16",
-    "@zhin.js/console-contract": "1.1.5",
-    "@zhin.js/core": "1.1.60",
-    "@zhin.js/feature-kit": "1.1.15",
-    "@zhin.js/host-http": "1.1.17",
-    "@zhin.js/im-contract": "1.1.13",
-    "@zhin.js/logger": "1.1.2",
-    "@zhin.js/page": "1.1.17",
-    "@zhin.js/skill": "1.1.16",
-    "@zhin.js/tool": "1.1.18"
+    "zod": "^4.6.7",
+    "@zhin.js/adapter": "1.1.33",
+    "@zhin.js/agent-feature": "1.1.17",
+    "@zhin.js/console-contract": "1.1.6",
+    "@zhin.js/core": "1.2.0",
+    "@zhin.js/feature-kit": "1.1.16",
+    "@zhin.js/host-http": "1.2.0",
+    "@zhin.js/host-http-contract": "1.2.0",
+    "@zhin.js/im-contract": "1.1.14",
+    "@zhin.js/logger": "1.1.3",
+    "@zhin.js/page": "1.1.18",
+    "@zhin.js/skill": "1.1.17",
+    "@zhin.js/tool": "1.1.19"
   },
   "peerDependencies": {
-    "zod": "^4.0.0",
-    "@zhin.js/adapter": "^1.1.32",
-    "@zhin.js/command": "^1.1.17",
-    "@zhin.js/core": "^1.1.60",
-    "@zhin.js/host-http": "^1.1.17",
-    "@zhin.js/permission": "^1.1.15",
-    "zhin.js": "^1.1.25"
+    "@zhin.js/adapter": "^1.1.33",
+    "@zhin.js/command": "^1.2.0",
+    "@zhin.js/core": "^1.2.0",
+    "@zhin.js/host-http": "^1.2.0",
+    "@zhin.js/permission": "^1.2.0",
+    "zhin.js": "^1.1.26"
   },
   "peerDependenciesMeta": {
     "@zhin.js/command": {
@@ -62,17 +63,16 @@
     },
     "zhin.js": {
       "optional": true
-    },
-    "zod": {
-      "optional": true
     }
   },
   "devDependencies": {
     "@types/node": "^26.1.2",
+    "@types/ws": "^8.18.1",
+    "ajv": "8.18.0",
     "typescript": "^6.0.3",
     "vitest": "^4.1.10",
-    "zod": "^4.4.3",
-    "zhin.js": "1.1.25"
+    "ws": "^8.21.1",
+    "zhin.js": "1.1.26"
   },
   "files": [
     "adapters",
@@ -82,7 +82,6 @@
     "schema.json",
     "src",
     "lib",
-    "tools",
     "agents",
     "README.md",
     "CHANGELOG.md",
@@ -132,6 +131,6 @@
   "scripts": {
     "build": "tsc",
     "clean": "rimraf lib",
-    "test": "NODE_OPTIONS=--experimental-strip-types vitest run --root ../../.. plugins/adapters/lark/tests"
+    "test": "vitest run --root ../../.. plugins/adapters/lark/tests"
   }
 }

package/plugin.js

@@ -1,7 +1,5 @@
 // Generated by build-plugin-runtime-entries.mjs. Do not edit.
 import { definePlugin } from 'zhin.js';
-import { permissionHostToken } from '@zhin.js/permission';
-import { checkLarkPlatformPermit } from "./lib/platform-permit.js";
 import { createLarkConsoleRpc } from "./lib/console.js";
 export default definePlugin({
     name: 'lark',
@@ -10,12 +8,8 @@ export default definePlugin({
         displayName: 'Lark/Feishu (飞书) Adapter',
     },
     setup(context) {
-        const dispose = context.resources.has(permissionHostToken)
-            ? context.resources.use(permissionHostToken).registerPlatform('lark', checkLarkPlatformPermit)
-            : undefined;
         return {
             consoleRpc: createLarkConsoleRpc(context.resources, () => context.config.get()),
-            ...(dispose ? { dispose } : {}),
         };
     },
 });