cc-lark 0.1.1

package/dist/core/device-flow.js

@@ -0,0 +1,231 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * OAuth 2.0 Device Authorization Grant (RFC 8628) for Lark/Feishu.
+ *
+ * Two-step flow:
+ *   1. `requestDeviceAuthorization` – obtains device_code + user_code.
+ *   2. `pollDeviceToken` – polls the token endpoint until the user authorizes,
+ *      rejects, or the code expires.
+ *
+ * All HTTP calls use the built-in `fetch` (Node 18+). The Lark SDK is not
+ * used here because these OAuth endpoints are outside the SDK's scope.
+ *
+ * Adapted from openclaw-lark for MCP Server architecture.
+ */
+import { logger } from '../utils/logger.js';
+import { getUserAgent } from './version.js';
+const log = logger('device-flow');
+// ---------------------------------------------------------------------------
+// HTTP helper
+// ---------------------------------------------------------------------------
+/**
+ * Header-aware fetch for Lark API calls.
+ *
+ * Drop-in replacement for `fetch()` that automatically injects
+ * the User-Agent header.
+ */
+function larkFetch(url, init) {
+    const headers = {
+        ...init?.headers,
+        'User-Agent': getUserAgent(),
+    };
+    return fetch(url, { ...init, headers });
+}
+// ---------------------------------------------------------------------------
+// Endpoint resolution
+// ---------------------------------------------------------------------------
+/**
+ * Resolve the two OAuth endpoint URLs based on the configured brand.
+ */
+export function resolveOAuthEndpoints(brand) {
+    if (!brand || brand === 'feishu') {
+        return {
+            deviceAuthorization: 'https://accounts.feishu.cn/oauth/v1/device_authorization',
+            token: 'https://open.feishu.cn/open-apis/authen/v2/oauth/token',
+        };
+    }
+    if (brand === 'lark') {
+        return {
+            deviceAuthorization: 'https://accounts.larksuite.com/oauth/v1/device_authorization',
+            token: 'https://open.larksuite.com/open-apis/authen/v2/oauth/token',
+        };
+    }
+    // Custom domain – derive paths by convention.
+    // Smart derivation: open.X → accounts.X for the device authorization endpoint.
+    const base = brand.replace(/\/+$/, '');
+    let accountsBase = base;
+    try {
+        const parsed = new URL(base);
+        if (parsed.hostname.startsWith('open.')) {
+            accountsBase = `${parsed.protocol}//${parsed.hostname.replace(/^open\./, 'accounts.')}`;
+        }
+    }
+    catch {
+        /* fallback to base */
+    }
+    return {
+        deviceAuthorization: `${accountsBase}/oauth/v1/device_authorization`,
+        token: `${base}/open-apis/authen/v2/oauth/token`,
+    };
+}
+// ---------------------------------------------------------------------------
+// Step 1 – Device Authorization Request
+// ---------------------------------------------------------------------------
+/**
+ * Request a device authorization code from the Feishu OAuth server.
+ *
+ * Uses Confidential Client authentication (HTTP Basic with appId:appSecret).
+ * The `offline_access` scope is automatically appended so that the token
+ * response includes a refresh_token.
+ */
+export async function requestDeviceAuthorization(params) {
+    const { appId, appSecret, brand } = params;
+    const endpoints = resolveOAuthEndpoints(brand);
+    // Ensure offline_access is always requested.
+    let scope = params.scope ?? '';
+    if (!scope.includes('offline_access')) {
+        scope = scope ? `${scope} offline_access` : 'offline_access';
+    }
+    const basicAuth = Buffer.from(`${appId}:${appSecret}`).toString('base64');
+    const body = new URLSearchParams();
+    body.set('client_id', appId);
+    body.set('scope', scope);
+    log.info(`requesting device authorization (scope="${scope}") url=${endpoints.deviceAuthorization} token_url=${endpoints.token}`);
+    const resp = await larkFetch(endpoints.deviceAuthorization, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/x-www-form-urlencoded',
+            Authorization: `Basic ${basicAuth}`,
+        },
+        body: body.toString(),
+    });
+    const text = await resp.text();
+    log.info(`response status=${resp.status} body=${text.slice(0, 500)}`);
+    let data;
+    try {
+        data = JSON.parse(text);
+    }
+    catch {
+        throw new Error(`Device authorization failed: HTTP ${resp.status} – ${text.slice(0, 200)}`);
+    }
+    if (!resp.ok || data.error) {
+        const msg = data.error_description ?? data.error ?? 'Unknown error';
+        throw new Error(`Device authorization failed: ${msg}`);
+    }
+    const expiresIn = data.expires_in ?? 240;
+    const interval = data.interval ?? 5;
+    log.info(`device_code obtained, expires_in=${expiresIn}s (${Math.round(expiresIn / 60)}min), interval=${interval}s`);
+    return {
+        deviceCode: data.device_code,
+        userCode: data.user_code,
+        verificationUri: data.verification_uri,
+        verificationUriComplete: data.verification_uri_complete ?? data.verification_uri,
+        expiresIn,
+        interval,
+    };
+}
+// ---------------------------------------------------------------------------
+// Step 2 – Poll Token Endpoint
+// ---------------------------------------------------------------------------
+function sleep(ms, signal) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(resolve, ms);
+        signal?.addEventListener('abort', () => {
+            clearTimeout(timer);
+            reject(new DOMException('Aborted', 'AbortError'));
+        }, { once: true });
+    });
+}
+/**
+ * Poll the token endpoint until the user authorizes, rejects, or the code
+ * expires.
+ *
+ * Handles `authorization_pending` (keep polling), `slow_down` (back off by
+ * +5 s), `access_denied` and `expired_token` (terminal errors).
+ *
+ * Pass an `AbortSignal` to cancel polling from the outside.
+ */
+export async function pollDeviceToken(params) {
+    const MAX_POLL_INTERVAL = 60; // slow_down max interval 60 seconds
+    const MAX_POLL_ATTEMPTS = 200; // Safety limit (well beyond device code expiry)
+    const { appId, appSecret, brand, deviceCode, expiresIn, signal } = params;
+    let interval = params.interval;
+    const endpoints = resolveOAuthEndpoints(brand);
+    const deadline = Date.now() + expiresIn * 1000;
+    let attempts = 0;
+    while (Date.now() < deadline && attempts < MAX_POLL_ATTEMPTS) {
+        attempts++;
+        if (signal?.aborted) {
+            return { ok: false, error: 'expired_token', message: 'Polling was cancelled' };
+        }
+        await sleep(interval * 1000, signal);
+        let data;
+        try {
+            const resp = await larkFetch(endpoints.token, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                body: new URLSearchParams({
+                    grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
+                    device_code: deviceCode,
+                    client_id: appId,
+                    client_secret: appSecret,
+                }).toString(),
+            });
+            data = (await resp.json());
+        }
+        catch (err) {
+            log.warn(`poll network error: ${err}`);
+            interval = Math.min(interval + 1, MAX_POLL_INTERVAL);
+            continue;
+        }
+        const error = data.error;
+        if (!error && data.access_token) {
+            log.info('token obtained successfully');
+            const refreshToken = data.refresh_token ?? '';
+            const expiresIn = data.expires_in ?? 7200;
+            let refreshExpiresIn = data.refresh_token_expires_in ?? 604800;
+            if (!refreshToken) {
+                log.warn('no refresh_token in response, token will not be refreshable');
+                refreshExpiresIn = expiresIn;
+            }
+            return {
+                ok: true,
+                token: {
+                    accessToken: data.access_token,
+                    refreshToken,
+                    expiresIn,
+                    refreshExpiresIn,
+                    scope: data.scope ?? '',
+                },
+            };
+        }
+        if (error === 'authorization_pending') {
+            log.debug('authorization_pending, retrying...');
+            continue;
+        }
+        if (error === 'slow_down') {
+            interval = Math.min(interval + 5, MAX_POLL_INTERVAL);
+            log.info(`slow_down, interval increased to ${interval}s`);
+            continue;
+        }
+        if (error === 'access_denied') {
+            log.info('user denied authorization');
+            return { ok: false, error: 'access_denied', message: 'User denied authorization' };
+        }
+        if (error === 'expired_token' || error === 'invalid_grant') {
+            log.info(`device code expired/invalid (error=${error})`);
+            return { ok: false, error: 'expired_token', message: 'Authorization code expired, please retry' };
+        }
+        // Unknown error – treat as terminal.
+        const desc = data.error_description ?? error ?? 'Unknown error';
+        log.warn(`unexpected error: error=${error}, desc=${desc}`);
+        return { ok: false, error: 'expired_token', message: desc };
+    }
+    if (attempts >= MAX_POLL_ATTEMPTS) {
+        log.warn(`max poll attempts (${MAX_POLL_ATTEMPTS}) reached`);
+    }
+    return { ok: false, error: 'expired_token', message: 'Authorization timed out, please retry' };
+}
+//# sourceMappingURL=device-flow.js.map

package/dist/core/device-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-flow.js","sourceRoot":"","sources":["../../src/core/device-flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,GAAG,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;AA6BlC,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E;;;;;GAKG;AACH,SAAS,SAAS,CAAC,GAA2B,EAAE,IAAkB;IAChE,MAAM,OAAO,GAAG;QACd,GAAG,IAAI,EAAE,OAAO;QAChB,YAAY,EAAE,YAAY,EAAE;KAC7B,CAAC;IAEF,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAgB;IAIpD,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO;YACL,mBAAmB,EAAE,0DAA0D;YAC/E,KAAK,EAAE,wDAAwD;SAChE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO;YACL,mBAAmB,EAAE,8DAA8D;YACnF,KAAK,EAAE,4DAA4D;SACpE,CAAC;IACJ,CAAC;IACD,8CAA8C;IAC9C,+EAA+E;IAC/E,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvC,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,YAAY,GAAG,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC;QAC1F,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB;IACxB,CAAC;IAED,OAAO;QACL,mBAAmB,EAAE,GAAG,YAAY,gCAAgC;QACpE,KAAK,EAAE,GAAG,IAAI,kCAAkC;KACjD,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,wCAAwC;AACxC,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,MAKhD;IACC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IAC3C,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAE/C,6CAA6C;IAC7C,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACtC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,iBAAiB,CAAC,CAAC,CAAC,gBAAgB,CAAC;IAC/D,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE1E,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAEzB,GAAG,CAAC,IAAI,CACN,2CAA2C,KAAK,UAAU,SAAS,CAAC,mBAAmB,cAAc,SAAS,CAAC,KAAK,EAAE,CACvH,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,mBAAmB,EAAE;QAC1D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;YACnD,aAAa,EAAE,SAAS,SAAS,EAAE;SACpC;QACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,GAAG,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,MAAM,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAEtE,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAI,IAAI,CAAC,iBAA4B,IAAK,IAAI,CAAC,KAAgB,IAAI,eAAe,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,SAAS,GAAI,IAAI,CAAC,UAAqB,IAAI,GAAG,CAAC;IACrD,MAAM,QAAQ,GAAI,IAAI,CAAC,QAAmB,IAAI,CAAC,CAAC;IAChD,GAAG,CAAC,IAAI,CACN,oCAAoC,SAAS,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,EAAE,CAAC,kBAAkB,QAAQ,GAAG,CAC3G,CAAC;IAEF,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,WAAqB;QACtC,QAAQ,EAAE,IAAI,CAAC,SAAmB;QAClC,eAAe,EAAE,IAAI,CAAC,gBAA0B;QAChD,uBAAuB,EAAG,IAAI,CAAC,yBAAoC,IAAK,IAAI,CAAC,gBAA2B;QACxG,SAAS;QACT,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAE9E,SAAS,KAAK,CAAC,EAAU,EAAE,MAAoB;IAC7C,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,EAAE,gBAAgB,CACtB,OAAO,EACP,GAAG,EAAE;YACH,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;QACpD,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAQrC;IACC,MAAM,iBAAiB,GAAG,EAAE,CAAC,CAAC,oCAAoC;IAClE,MAAM,iBAAiB,GAAG,GAAG,CAAC,CAAC,gDAAgD;IAE/E,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC1E,IAAI,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC/B,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC;IAC/C,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,IAAI,QAAQ,GAAG,iBAAiB,EAAE,CAAC;QAC7D,QAAQ,EAAE,CAAC;QACX,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;QACjF,CAAC;QAED,MAAM,KAAK,CAAC,QAAQ,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QAErC,IAAI,IAA6B,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,KAAK,EAAE;gBAC5C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,IAAI,eAAe,CAAC;oBACxB,UAAU,EAAE,8CAA8C;oBAC1D,WAAW,EAAE,UAAU;oBACvB,SAAS,EAAE,KAAK;oBAChB,aAAa,EAAE,SAAS;iBACzB,CAAC,CAAC,QAAQ,EAAE;aACd,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA4B,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;YACvC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,iBAAiB,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAA2B,CAAC;QAE/C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAChC,GAAG,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YACxC,MAAM,YAAY,GAAI,IAAI,CAAC,aAAwB,IAAI,EAAE,CAAC;YAC1D,MAAM,SAAS,GAAI,IAAI,CAAC,UAAqB,IAAI,IAAI,CAAC;YACtD,IAAI,gBAAgB,GAAI,IAAI,CAAC,wBAAmC,IAAI,MAAM,CAAC;YAC3E,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,GAAG,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;gBACxE,gBAAgB,GAAG,SAAS,CAAC;YAC/B,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE;oBACL,WAAW,EAAE,IAAI,CAAC,YAAsB;oBACxC,YAAY;oBACZ,SAAS;oBACT,gBAAgB;oBAChB,KAAK,EAAG,IAAI,CAAC,KAAgB,IAAI,EAAE;iBACpC;aACF,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,KAAK,uBAAuB,EAAE,CAAC;YACtC,GAAG,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;YAChD,SAAS;QACX,CAAC;QAED,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;YAC1B,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,iBAAiB,CAAC,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,oCAAoC,QAAQ,GAAG,CAAC,CAAC;YAC1D,SAAS;QACX,CAAC;QAED,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;YAC9B,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;QACrF,CAAC;QAED,IAAI,KAAK,KAAK,eAAe,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;YAC3D,GAAG,CAAC,IAAI,CAAC,sCAAsC,KAAK,GAAG,CAAC,CAAC;YACzD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;QACpG,CAAC;QAED,qCAAqC;QACrC,MAAM,IAAI,GAAI,IAAI,CAAC,iBAA4B,IAAI,KAAK,IAAI,eAAe,CAAC;QAC5E,GAAG,CAAC,IAAI,CAAC,2BAA2B,KAAK,UAAU,IAAI,EAAE,CAAC,CAAC;QAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC9D,CAAC;IAED,IAAI,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,sBAAsB,iBAAiB,WAAW,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;AACjG,CAAC"}

package/dist/core/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * Core module exports for cc-lark MCP Server.
+ */
+export * from './types.js';
+export * from './config.js';
+export * from './api-error.js';
+export * from './lark-client.js';
+export * from './version.js';
+export * from './auth-errors.js';
+export * from './device-flow.js';
+export * from './token-store.js';
+export * from './uat-client.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC"}

package/dist/core/index.js

@@ -0,0 +1,16 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * Core module exports for cc-lark MCP Server.
+ */
+export * from './types.js';
+export * from './config.js';
+export * from './api-error.js';
+export * from './lark-client.js';
+export * from './version.js';
+export * from './auth-errors.js';
+export * from './device-flow.js';
+export * from './token-store.js';
+export * from './uat-client.js';
+//# sourceMappingURL=index.js.map

package/dist/core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC"}

package/dist/core/lark-client.d.ts

@@ -0,0 +1,136 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * Feishu / Lark SDK client management for MCP Server.
+ *
+ * Provides `LarkClient` — a unified manager for Lark SDK client instances,
+ * bot identity probing, and token management.
+ *
+ * Adapted from openclaw-lark for MCP Server architecture.
+ * - Removed OpenClaw runtime dependencies
+ * - Simplified singleton pattern for MCP Server use case
+ * - Works standalone with environment variables
+ */
+import * as Lark from '@larksuiteoapi/node-sdk';
+import type { FeishuConfig, LarkBrand } from './types.js';
+/** Result of probing an app's connectivity / permissions. */
+export interface FeishuProbeResult {
+    ok: boolean;
+    error?: string;
+    appId?: string;
+    botName?: string;
+    botOpenId?: string;
+}
+/** Credentials for creating a LarkClient. */
+export interface LarkClientCredentials {
+    appId?: string;
+    appSecret?: string;
+    brand?: LarkBrand;
+    encryptKey?: string;
+    verificationToken?: string;
+}
+/**
+ * Lark SDK client wrapper for MCP Server.
+ *
+ * Provides:
+ * - Lazy SDK client initialization
+ * - Bot identity probing and caching
+ * - Singleton pattern for global access
+ */
+export declare class LarkClient {
+    private readonly _config;
+    private _sdk;
+    private _botOpenId;
+    private _botName;
+    private _lastProbeResult;
+    private _lastProbeAt;
+    private static _instance;
+    /**
+     * Get the singleton LarkClient instance.
+     * Creates one from environment variables if not already created.
+     */
+    static getInstance(): LarkClient;
+    /**
+     * Create a new LarkClient from environment variables.
+     * This will replace the singleton instance.
+     */
+    static fromEnv(): LarkClient;
+    /**
+     * Create a LarkClient from explicit credentials.
+     * This replaces the singleton instance.
+     */
+    static fromCredentials(credentials: LarkClientCredentials): LarkClient;
+    /**
+     * Reset the singleton instance.
+     * Useful for testing or when credentials change.
+     */
+    static resetInstance(): void;
+    /**
+     * Create a new LarkClient instance.
+     *
+     * @param config - Feishu configuration
+     */
+    constructor(config: FeishuConfig);
+    /** The configuration used by this client. */
+    get config(): FeishuConfig;
+    /** The App ID for this client. */
+    get appId(): string;
+    /** The brand (feishu/lark) for this client. */
+    get brand(): LarkBrand;
+    /**
+     * Get the Lark SDK client instance.
+     * Lazily creates the client on first access.
+     */
+    get sdk(): Lark.Client;
+    /**
+     * Probe bot identity via the `bot/v3/info` API.
+     * Results are cached on the instance for subsequent access via
+     * `botOpenId` / `botName`.
+     *
+     * @param opts - Options including maxAgeMs for cache validity
+     * @returns Probe result with bot info or error
+     */
+    probe(opts?: {
+        maxAgeMs?: number;
+    }): Promise<FeishuProbeResult>;
+    /** Cached bot open_id (available after `probe()`). */
+    get botOpenId(): string | undefined;
+    /** Cached bot name (available after `probe()`). */
+    get botName(): string | undefined;
+    /** Last probe result (cached). */
+    get lastProbeResult(): FeishuProbeResult | null;
+    /**
+     * Get tenant access token.
+     * This is primarily for debugging - the SDK handles tokens automatically.
+     */
+    getTenantAccessToken(): Promise<string | null>;
+    /**
+     * Clear cached probe result.
+     * Call this to force a fresh probe on next call.
+     */
+    clearProbeCache(): void;
+    /**
+     * Dispose of the client.
+     * Clears all caches and the SDK client reference.
+     */
+    dispose(): void;
+    /** Assert credentials exist or throw. */
+    private requireCredentials;
+}
+/**
+ * Get the singleton LarkClient instance.
+ * Creates one from environment variables if not already created.
+ */
+export declare function getLarkClient(): LarkClient;
+/**
+ * Create a LarkClient from environment variables.
+ * This will replace the singleton instance.
+ */
+export declare function createLarkClient(): LarkClient;
+/**
+ * Reset the singleton LarkClient instance.
+ * Useful for testing or when credentials change.
+ */
+export declare function resetLarkClient(): void;
+//# sourceMappingURL=lark-client.d.ts.map

package/dist/core/lark-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lark-client.d.ts","sourceRoot":"","sources":["../../src/core/lark-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,IAAI,MAAM,yBAAyB,CAAC;AAChD,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAU1D,6DAA6D;AAC7D,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,6CAA6C;AAC7C,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAgDD;;;;;;;GAOG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;IACvC,OAAO,CAAC,IAAI,CAA4B;IACxC,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,gBAAgB,CAAkC;IAC1D,OAAO,CAAC,YAAY,CAAK;IAIzB,OAAO,CAAC,MAAM,CAAC,SAAS,CAA2B;IAEnD;;;OAGG;IACH,MAAM,CAAC,WAAW,IAAI,UAAU;IAQhC;;;OAGG;IACH,MAAM,CAAC,OAAO,IAAI,UAAU;IAO5B;;;OAGG;IACH,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,qBAAqB,GAAG,UAAU;IAmBtE;;;OAGG;IACH,MAAM,CAAC,aAAa,IAAI,IAAI;IAS5B;;;;OAIG;gBACS,MAAM,EAAE,YAAY;IAKhC,6CAA6C;IAC7C,IAAI,MAAM,IAAI,YAAY,CAEzB;IAED,kCAAkC;IAClC,IAAI,KAAK,IAAI,MAAM,CAElB;IAED,+CAA+C;IAC/C,IAAI,KAAK,IAAI,SAAS,CAErB;IAID;;;OAGG;IACH,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,CAYrB;IAID;;;;;;;OAOG;IACG,KAAK,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA2DrE,sDAAsD;IACtD,IAAI,SAAS,IAAI,MAAM,GAAG,SAAS,CAElC;IAED,mDAAmD;IACnD,IAAI,OAAO,IAAI,MAAM,GAAG,SAAS,CAEhC;IAED,kCAAkC;IAClC,IAAI,eAAe,IAAI,iBAAiB,GAAG,IAAI,CAE9C;IAID;;;OAGG;IACG,oBAAoB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAyBpD;;;OAGG;IACH,eAAe,IAAI,IAAI;IAOvB;;;OAGG;IACH,OAAO,IAAI,IAAI;IAQf,yCAAyC;IACzC,OAAO,CAAC,kBAAkB;CAQ3B;AAMD;;;GAGG;AACH,wBAAgB,aAAa,IAAI,UAAU,CAE1C;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,UAAU,CAE7C;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAEtC"}