feishu-user-plugin 1.3.5 → 1.3.7

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "feishu-user-plugin",
-  "version": "1.3.5",
-  "description": "All-in-one Feishu plugin for Claude Code — send messages as yourself (incl. real @-mentions), read chats (with auto-expanded merge_forward), manage docs (with image read/write) / bitable / wiki (native + move_docs_to_wiki) / drive / OKR / calendar. 75 tools + 9 skills, 3 auth layers. v1.3.5: cross-process UAT refresh lock, bot-fallback warning, download_file.",
+  "version": "1.3.7",
+  "description": "All-in-one Feishu plugin for Claude Code — send messages as yourself, read chats (auto-expanded merge_forward), manage docs / bitable / wiki (full CRUD) / drive / OKR (with progress writes) / calendar (read+write) / Tasks v2 / multi-profile. 80 tools + 9 prompts, 3 auth layers.",
   "author": {
     "name": "EthanQC"
   },

package/CHANGELOG.md

@@ -4,6 +4,28 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/), and this project adheres to [Semantic Versioning](https://semver.org/).
 
+## [1.3.6] - 2026-05-03
+
+### Added
+- **Upload completeness**: `uploadDocMedia` → `uploadMedia` accepting 8 `parent_type`s (docx / sheet / bitable × image / file + legacy doc_*). New `create_doc_block` modes for files (`file_path` / `file_token`, block_type 23, auto view-wrap). `update_doc_block` accepts `file_token` to swap existing file blocks. New `upload_drive_file` (`drive/v1/files/upload_all`; optional `wiki_space_id` auto-attaches via `move_docs_to_wiki`). New `upload_bitable_attachment` (`parent_type=bitable_image|bitable_file`).
+- **`batch_send` tool**: fan-out the same or different content to multiple targets in one call. Each target dispatches sequentially with anti-rate-limit throttling and reports per-target `ok` / `error`. Identity is the cookie user unless `target.via=bot`.
+- **Multi-profile support**: `list_profiles` / `switch_profile` tools + `LARK_PROFILES_JSON` env. Hot-swap credentials without restarting the MCP server; cached client instances rebuild against the new profile.
+- **`send_card_as_user` (bot-routed default)**: send Feishu interactive cards. v1.3.6 routes through the bot identity; the `as_user` suffix is reserved for v1.3.7's reverse-engineered cookie path. `via="user"` returns an explicit not-yet-implemented error.
+
+### Changed
+- OAuth scopes added: `drive:file:upload` (narrower scope for `drive/v1/files/upload_all`), `sheets:spreadsheet` (sheet image / file uploads). Existing users must re-run `npx feishu-user-plugin oauth` to pick them up.
+
+## [1.3.5] - 2026-04-24
+
+### Fixed
+- **Cross-process UAT refresh lock**: file lock at `~/.claude/feishu-uat-refresh.lock` (`O_CREAT|O_EXCL`, 30s stale detection) serializes UAT refresh across concurrent MCP processes. Inside the critical section, the lock holder re-reads `~/.claude.json` to see whether a peer already rotated the token; if so it adopts the fresh one. Closes the "Codex spawned 6 MCP servers, all raced to refresh" failure mode that was burning refresh tokens on 2026-04-23.
+- **`get_login_status` UAT health check**: now actually exercises the UAT (calls `listChatsAsUser({pageSize:1})`) instead of just checking presence. Surfaces "configured but 401" cases that previously stayed silent until the next real tool call.
+
+### Added
+- **Bot-fallback ⚠️ warning**: every write tool that silently fell back from UAT to bot identity (`create_doc` / `create_bitable` / `create_folder` / `create_doc_block` / etc.) now appends a `fallbackWarning` to the response so users see the ownership change immediately. Before, callers only learned days later when a teammate could read their "private" resource.
+- **Auto-expand `merge_forward`**: `read_messages` / `read_p2p_messages` walk a `merge_forward` placeholder into its child messages by default (`expand_merge_forward=false` to opt out). Children carry `parentMessageId` (use that, NOT the child id, when downloading their media). Text children get `urls[]` + `feishuDocs[]` extracted so agents can feed them straight into `read_doc` / WebFetch.
+- **`download_file` tool**: download a file attachment (`msg_type=file`). Returns base64 + mimeType + byte count; optional `save_path` writes to disk. Same parent-id rule for `merge_forward` children as `download_image`.
+
 ## [1.3.4] - 2026-04-22
 
 ### Added

package/README.md

@@ -3,10 +3,10 @@
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 [![Node.js](https://img.shields.io/badge/Node.js-%3E%3D18-green.svg)](https://nodejs.org)
 [![MCP](https://img.shields.io/badge/MCP-Compatible-purple.svg)](https://modelcontextprotocol.io)
-[![Tools](https://img.shields.io/badge/Tools-74-orange.svg)](#tools)
+[![Tools](https://img.shields.io/badge/Tools-80-orange.svg)](#tools)
 [![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg)](CONTRIBUTING.md)
 
-**All-in-one Feishu/Lark MCP Server -- 75 tools, 9 skills, 3 auth layers for messaging, docs, bitable, calendar, tasks, drive, OKR, and more.**
+**All-in-one Feishu/Lark MCP Server -- 80 tools, 9 skills, 3 auth layers for messaging, docs, bitable, calendar, tasks, drive, OKR, and more.**
 
 The only MCP server that lets you send messages as your **personal identity** (not a bot), while also integrating the full official Feishu API. Works with Claude Code, Cursor, Windsurf, OpenClaw, and any MCP-compatible client.
 
@@ -337,9 +337,9 @@ Add to `~/.codeium/windsurf/mcp_config.json`:
 }
 ```
 
-## Tools (75 total)
+## Tools (80 total)
 
-### User Identity -- Messaging (8 tools, cookie auth)
+### User Identity -- Messaging (10 tools, cookie auth)
 
 | Tool | Description |
 |------|-------------|
@@ -349,8 +349,8 @@ Add to `~/.codeium/windsurf/mcp_config.json`:
 | `send_image_as_user` | Send image (requires `image_key` from `upload_image`) |
 | `send_file_as_user` | Send file (requires `file_key` from `upload_file`) |
 | `send_post_as_user` | Send rich text with title + formatted paragraphs |
-| `send_sticker_as_user` | Send sticker/emoji |
-| `send_audio_as_user` | Send audio message |
+| `batch_send` | Fan-out send to multiple targets in one call (text / image / file / post). v1.3.6 |
+| `send_card_as_user` | Send a Feishu interactive card. v1.3.6 default routes through bot identity; user-identity is reserved for v1.3.7. |
 
 ### User Identity -- Contacts & Info (5 tools, cookie auth)
 
@@ -390,8 +390,8 @@ Add to `~/.codeium/windsurf/mcp_config.json`:
 | `add_members` | Add users to a group |
 | `remove_members` | Remove users from a group |
 | `upload_image` / `upload_file` | Upload image/file, returns key for sending |
-| `download_image` | Download a chat-message image (message_id + image_key) OR a docx image (image_token + optional doc_token). Returned as MCP image content. For merge_forward children, use the child's `parentMessageId`, not the child id. |
-| `download_file` | Download a file attachment (msg_type=file). Returns base64 + mimeType + byte count; optional `save_path` writes to disk. Same parent-id rule for merge_forward children. (v1.3.5) |
+| `download_message_resource` | v1.3.7 (C2.4): download a message-attached image or file. Args: `message_id`, `key`, `kind=image|file`, `save_path?`. **Required save_path when bytes > 2 MiB** (Anthropic 5 MB inline cap). Replaces v1.3.6 download_image (message mode) + download_file. |
+| `download_doc_image` | v1.3.7 (C2.4): download an image embedded in a docx (image_token + optional doc_token). Same 2 MiB cap. Replaces v1.3.6 download_image (docx mode). |
 
 ### Wiki, OKR, and Calendar (v1.3.4)
 
@@ -407,7 +407,7 @@ Add to `~/.codeium/windsurf/mcp_config.json`:
 
 All docx / bitable tools' `document_id` / `app_token` parameter also accepts a Wiki node token or a full Feishu URL — the plugin resolves it transparently.
 
-### Official API -- Documents (7 tools)
+### Official API -- Documents (5 tools)
 
 | Tool | Description |
 |------|-------------|
@@ -415,58 +415,71 @@ All docx / bitable tools' `document_id` / `app_token` parameter also accepts a W
 | `read_doc` | Read raw text content |
 | `get_doc_blocks` | Get structured block tree |
 | `create_doc` | Create a new document |
-| `create_doc_block` | Insert content blocks into a document |
-| `update_doc_block` | Update a specific block |
-| `delete_doc_blocks` | Delete a range of blocks |
+| `manage_doc_block` | Insert / update / delete blocks (`action=create|update|delete`). Supports generic `children`, image (`image_path`/`image_token`), and file (`file_path`/`file_token`) shortcuts. v1.3.7 consolidates the v1.3.6 trio create_doc_block / update_doc_block / delete_doc_blocks. |
 
-### Official API -- Bitable (17 tools)
+### Official API -- Bitable (6 tools, v1.3.7 consolidation)
 
-| Tool | Description |
-|------|-------------|
-| `create_bitable` | Create a new Bitable app |
-| `list_bitable_tables` / `create_bitable_table` / `delete_bitable_table` | Table management |
-| `list_bitable_fields` / `create_bitable_field` / `update_bitable_field` / `delete_bitable_field` | Field management |
-| `list_bitable_views` | List views |
-| `search_bitable_records` / `get_bitable_record` | Query records |
-| `create_bitable_record` / `update_bitable_record` / `delete_bitable_record` | Single record CRUD |
-| `batch_create_bitable_records` / `batch_update_bitable_records` / `batch_delete_bitable_records` | Batch operations (max 500/call) |
+| Tool | Actions | Description |
+|------|---------|-------------|
+| `manage_bitable_app` | create / copy / get_meta | App-level operations (v1.3.7 consolidates create_bitable / copy_bitable / get_bitable_meta) |
+| `manage_bitable_table` | list / create / update / delete | Table CRUD (rename via update) |
+| `manage_bitable_field` | list / create / update / delete | Field (column) management. `type` required for both create AND update. |
+| `manage_bitable_view` | list / create / delete | Views (grid, kanban, gallery, form, gantt, calendar) |
+| `manage_bitable_record` | search / get / create / update / delete | Record CRUD. create/update/delete accept arrays — single record or up to 500/call. |
+| `upload_bitable_attachment` | — | Upload a file into a Bitable Attachment-type field. Returns `file_token` to write into the field as `[{file_token}]`. v1.3.6 |
 
-### Official API -- Calendar (5 tools)
+### Official API -- Calendar (8 tools, write tools v1.3.7)
 
 | Tool | Description |
 |------|-------------|
 | `list_calendars` | List accessible calendars |
-| `create_calendar_event` | Create a calendar event |
 | `list_calendar_events` | List events in a calendar |
-| `delete_calendar_event` | Delete an event |
-| `get_freebusy` | Check user availability |
+| `get_calendar_event` | Full event details |
+| `create_calendar_event` | Create an event (v1.3.7). Requires `calendar:calendar.event:write`. |
+| `update_calendar_event` | Patch event fields (v1.3.7) |
+| `delete_calendar_event` | Delete an event, optionally dissolve its meeting chat (v1.3.7) |
+| `respond_calendar_event` | RSVP as accept / decline / tentative (v1.3.7) |
+| `get_freebusy` | Freebusy lookup for `user_ids` in a time range (v1.3.7) |
+
+### Official API -- Tasks v2 (7 tools, v1.3.7 new domain)
 
-### Official API -- Tasks (5 tools)
+Identifier is `task_guid` (not v1's numeric `task_id`). Requires `task:task` scope.
 
 | Tool | Description |
 |------|-------------|
-| `create_task` | Create a task |
-| `get_task` | Get task details |
-| `list_tasks` | List tasks |
-| `update_task` | Update a task |
-| `complete_task` | Mark task as complete |
+| `list_tasks` | List the current user's tasks (filter by completed / type) |
+| `get_task` | Full task detail |
+| `create_task` | Create a task (summary required; due/members optional) |
+| `update_task` | Patch fields. **`update_fields` is required** — Feishu only updates the listed keys. |
+| `complete_task` | Mark complete (or uncomplete with `completed=false`) |
+| `delete_task` | Permanent delete |
+| `manage_task_members` | `action=add|remove`, members `[{id, role:"assignee"|"follower"}]` |
 
-### Official API -- Drive (5 tools)
+### Official API -- Drive (4 tools)
 
 | Tool | Description |
 |------|-------------|
 | `list_files` | List files in a folder |
 | `create_folder` | Create a new folder |
-| `copy_file` | Copy a file |
-| `move_file` | Move a file |
-| `delete_file` | Delete a file/folder |
+| `manage_drive_file` | Copy / move / delete a Drive file (`action=copy|move|delete`, `type` required). v1.3.7 consolidates v1.3.6 copy_file / move_file / delete_file. |
+| `upload_drive_file` | Upload a local file into a Drive folder (`drive/v1/files/upload_all`). Optional `wiki_space_id` attaches the upload as a Wiki node atomically. v1.3.6 |
+
+### Official API -- Wiki (8 tools)
+
+| Tool | Description |
+|------|-------------|
+| `list_wiki_spaces` / `search_wiki` / `list_wiki_nodes` / `get_wiki_node` | Wiki spaces, search, browse + resolve a wiki node to underlying obj_token |
+| `create_wiki_node` | Create a new wiki node (doc/sheet/bitable/mindnote/file/docx/slides) inside a space |
+| `update_wiki_node` | Rename a wiki node (title only — content edits via docx/bitable tools) |
+| `move_wiki_node` | Move a wiki node to a different parent or different space |
+| `copy_wiki_node` | Deep-copy a wiki node to a different location (optionally to a different space) |
 
-### Official API -- Wiki & Contacts (4 tools)
+### Plugin -- Profiles (2 tools, v1.3.6)
 
 | Tool | Description |
 |------|-------------|
-| `list_wiki_spaces` / `search_wiki` / `list_wiki_nodes` | Wiki spaces, search, browse |
-| `find_user` | Find user by email or mobile number |
+| `list_profiles` | List available identity profiles (default + extras from `LARK_PROFILES_JSON`) and the active one |
+| `switch_profile` | Hot-swap active profile; cached client instances rebuild against new credentials |
 
 ## Claude Code Slash Commands (9 skills)
 
@@ -526,7 +539,7 @@ feishu-user-plugin/
 │       ├── SKILL.md         # Main skill definition (trigger, tools, auth)
 │       └── references/      # 8 skill reference docs + CLAUDE.md
 ├── src/
-│   ├── index.js             # MCP server entry point (75 tools)
+│   ├── index.js             # MCP server entry point (78 tools)
 │   ├── client.js            # User identity client (Protobuf gateway)
 │   ├── official.js          # Official API client (REST, UAT)
 │   ├── utils.js             # ID generators, cookie parser
@@ -555,6 +568,19 @@ Issues and PRs welcome! See [CONTRIBUTING.md](CONTRIBUTING.md) for development s
 
 If Feishu updates their protocol and something breaks, please [open an issue](https://github.com/EthanQC/feishu-user-plugin/issues/new?template=bug_report.md) with the error details.
 
+### Automated sync hooks
+
+This repo uses husky to enforce several invariants on every commit:
+
+- **CLAUDE.md sync** — staging `CLAUDE.md` automatically regenerates `AGENTS.md` (identical body, different first line) and `skills/feishu-user-plugin/references/CLAUDE.md` (verbatim copy). Both are re-staged in the same commit.
+- **Version triangle** — if `package.json`, `.claude-plugin/plugin.json`, or `skills/feishu-user-plugin/SKILL.md` are staged, all three `version` fields must agree or the commit is rejected.
+- **Tool-count badge** — if `src/server.js` or any file under `src/tools/` is staged, the `N tools` badge in `README.md` must match the actual `TOOLS.length` exported by `src/server.js`.
+- **Smoke test** — any change under `src/` triggers `npm run smoke` to catch schema regressions before commit.
+
+CI (`.github/workflows/validate.yml`) runs the same checks on every PR to `main`, so bypassing the local hook still gets caught.
+
+On the maintainer's machine, a post-merge hook (`scripts/sync-team-skills.sh`) auto-opens a sync PR in the `~/team-skills` repo after every merge to main. The hook silently skips if `~/team-skills` is absent.
+
 ## License
 
 [MIT](LICENSE)

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "feishu-user-plugin",
-  "version": "1.3.5",
-  "description": "All-in-one Feishu plugin for Claude Code & Codex — messaging (with merge_forward expansion), docs (with image read/write), bitable, wiki (native + move_docs_to_wiki), drive, OKR, calendar. 75 tools + 9 skills, 3 auth layers. v1.3.5: cross-process UAT refresh lock + bot-fallback warning + auto-expand merge_forward + download_file.",
+  "version": "1.3.7",
+  "description": "All-in-one Feishu plugin for Claude Code & Codex — messaging (with merge_forward expansion + batch_send), docs (image + file blocks read/write), bitable, wiki (full CRUD), drive, OKR (with progress writes), calendar (read+write), Tasks v2, multi-profile. 80 tools + 9 prompts, 3 auth layers.",
   "main": "src/index.js",
   "bin": {
     "feishu-user-plugin": "src/cli.js"
@@ -11,7 +11,11 @@
     "test": "node src/test-all.js",
     "test:quick": "node src/test-send.js",
     "oauth": "node src/oauth.js",
-    "prepublishOnly": "node scripts/confirm-version.js"
+    "smoke": "node scripts/smoke.js diff",
+    "smoke:baseline": "node scripts/smoke.js write-baseline",
+    "test:tools": "node scripts/test-all-tools.js",
+    "prepublishOnly": "node scripts/check-version.js && node scripts/check-tool-count.js && node scripts/confirm-version.js",
+    "prepare": "husky"
   },
   "keywords": [
     "feishu",
@@ -55,5 +59,8 @@
     "@modelcontextprotocol/sdk": "^1.12.1",
     "dotenv": "^16.4.7",
     "protobufjs": "^7.4.0"
+  },
+  "devDependencies": {
+    "husky": "^9.1.7"
   }
 }

package/scripts/check-tool-count.js

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+'use strict';
+const path = require('path');
+const fs = require('fs');
+const { TOOLS } = require(path.join(__dirname, '..', 'src', 'server'));
+const readme = fs.readFileSync(path.join(__dirname, '..', 'README.md'), 'utf8');
+// Find the canonical "N tools" reference. Pick the highest-confidence match.
+const m = readme.match(/(\d+)\s+tools/);
+if (!m) { console.error('No "N tools" badge in README.md'); process.exit(1); }
+const claimed = parseInt(m[1], 10);
+if (claimed !== TOOLS.length) {
+  console.error(`README claims ${claimed} tools, src/server.js has ${TOOLS.length}`);
+  process.exit(1);
+}
+console.log(`OK: ${TOOLS.length} tools`);

package/scripts/check-version.js

@@ -0,0 +1,40 @@
+#!/usr/bin/env node
+'use strict';
+const fs = require('fs');
+const path = require('path');
+
+const ROOT = path.join(__dirname, '..');
+
+// Source 1: package.json
+const pkg = JSON.parse(fs.readFileSync(path.join(ROOT, 'package.json'), 'utf8'));
+const pkgVersion = pkg.version;
+
+// Source 2: .claude-plugin/plugin.json
+const plugin = JSON.parse(fs.readFileSync(path.join(ROOT, '.claude-plugin', 'plugin.json'), 'utf8'));
+const pluginVersion = plugin.version;
+
+// Source 3: skills/feishu-user-plugin/SKILL.md frontmatter version line
+const skillMd = fs.readFileSync(path.join(ROOT, 'skills', 'feishu-user-plugin', 'SKILL.md'), 'utf8');
+const skillMatch = skillMd.match(/^version:\s*["']?([^"'\s]+)["']?/m);
+if (!skillMatch) {
+  console.error('ERROR: Could not find version in skills/feishu-user-plugin/SKILL.md frontmatter');
+  process.exit(1);
+}
+const skillVersion = skillMatch[1];
+
+const sources = [
+  { label: 'package.json', version: pkgVersion, path: 'package.json' },
+  { label: '.claude-plugin/plugin.json', version: pluginVersion, path: '.claude-plugin/plugin.json' },
+  { label: 'skills/feishu-user-plugin/SKILL.md', version: skillVersion, path: 'skills/feishu-user-plugin/SKILL.md' },
+];
+
+const versions = sources.map((s) => s.version);
+const allEqual = versions.every((v) => v === versions[0]);
+
+if (!allEqual) {
+  console.error('ERROR: Version triangle mismatch!');
+  sources.forEach((s) => console.error(`  ${s.path}: ${s.version}`));
+  process.exit(1);
+}
+
+console.log(`OK: version ${pkgVersion}`);

package/scripts/smoke.js

@@ -0,0 +1,224 @@
+#!/usr/bin/env node
+// scripts/smoke.js — MCP smoke test for refactor before/after diff.
+// Spawns src/index.js as a child via stdio, sends:
+//   1. tools/list                   → dumps sorted (name, description, inputSchema) to stdout
+//   2. tools/call get_login_status  → dumps recursive Object.keys (not values) to stdout
+//   3. prompts/list                 → dumps sorted (name, description, arguments) to stdout
+// Exits 0 on success, 1 on protocol error. Diff output against tests/baseline/*.json.
+//
+// Cred sourcing: src/index.js only reads process.env.LARK_*; this script injects
+// creds from ~/.claude.json via readCredentials() so the spawned MCP server has
+// the same auth it would have when launched by Claude Code. Without this the
+// baseline captures the not-configured login_status shape.
+//
+// Usage:
+//   node scripts/smoke.js dump            # print normalized current snapshot to stdout
+//   node scripts/smoke.js diff            # compare against tests/baseline/* and exit non-zero on mismatch
+//   node scripts/smoke.js write-baseline  # overwrite tests/baseline/*.json with current snapshot
+
+const { spawn } = require('child_process');
+const path = require('path');
+const fs = require('fs');
+const { readCredentials } = require('../src/config');
+
+const SERVER_PATH = path.join(__dirname, '..', 'src', 'index.js');
+const BASELINE_DIR = path.join(__dirname, '..', 'tests', 'baseline');
+const TOOLS_BASELINE = path.join(BASELINE_DIR, 'tools-list.json');
+const LOGIN_BASELINE = path.join(BASELINE_DIR, 'login-status-shape.json');
+const PROMPTS_BASELINE = path.join(BASELINE_DIR, 'prompts-list.json');
+
+function jsonrpc(id, method, params) {
+  return JSON.stringify({ jsonrpc: '2.0', id, method, params }) + '\n';
+}
+
+function normalizeSchema(s) {
+  if (!s || typeof s !== 'object') return s;
+  if (Array.isArray(s)) return s.map(normalizeSchema);
+  const out = {};
+  for (const k of Object.keys(s).sort()) {
+    out[k] = k === 'required' && Array.isArray(s[k]) ? [...s[k]].sort() : normalizeSchema(s[k]);
+  }
+  return out;
+}
+
+function shapeOnly(v) {
+  if (v === null || v === undefined) return v === null ? 'null' : 'undefined';
+  if (Array.isArray(v)) return v.length === 0 ? '[]' : ['<' + (typeof v[0] === 'object' ? 'object' : typeof v[0]) + '>'];
+  if (typeof v === 'object') {
+    const out = {};
+    for (const k of Object.keys(v).sort()) out[k] = shapeOnly(v[k]);
+    return out;
+  }
+  return typeof v;
+}
+
+function waitFor(fn, timeoutMs) {
+  return new Promise((resolve, reject) => {
+    const start = Date.now();
+    const tick = () => {
+      if (fn()) return resolve();
+      if (Date.now() - start > timeoutMs) return reject(new Error(`timeout after ${timeoutMs}ms`));
+      setTimeout(tick, 50);
+    };
+    tick();
+  });
+}
+
+async function runSmoke() {
+  const creds = readCredentials() || {};
+  const childEnv = { ...process.env };
+  for (const k of ['LARK_COOKIE', 'LARK_APP_ID', 'LARK_APP_SECRET', 'LARK_USER_ACCESS_TOKEN', 'LARK_USER_REFRESH_TOKEN', 'LARK_PROFILES_JSON']) {
+    if (creds[k] && !childEnv[k]) childEnv[k] = creds[k];
+  }
+
+  const child = spawn('node', [SERVER_PATH], {
+    stdio: ['pipe', 'pipe', 'pipe'],
+    env: childEnv,
+  });
+
+  let buf = '';
+  const responses = new Map();
+  child.stdout.on('data', (d) => {
+    buf += d.toString();
+    const lines = buf.split('\n');
+    buf = lines.pop();
+    for (const line of lines) {
+      if (!line.trim()) continue;
+      try {
+        const msg = JSON.parse(line);
+        if (msg.id != null) responses.set(msg.id, msg);
+      } catch {}
+    }
+  });
+  child.stderr.on('data', () => {}); // discard
+
+  let exitErr = null;
+  child.on('exit', (code) => { if (code !== 0 && code !== null) exitErr = new Error(`server exited with code ${code}`); });
+
+  child.stdin.write(jsonrpc(1, 'initialize', {
+    protocolVersion: '2024-11-05',
+    capabilities: {},
+    clientInfo: { name: 'smoke', version: '0' },
+  }));
+  await waitFor(() => responses.has(1) || exitErr, 8000);
+  if (exitErr) throw exitErr;
+
+  child.stdin.write(jsonrpc(2, 'tools/list', {}));
+  await waitFor(() => responses.has(2) || exitErr, 8000);
+  if (exitErr) throw exitErr;
+
+  child.stdin.write(jsonrpc(3, 'tools/call', { name: 'get_login_status', arguments: {} }));
+  await waitFor(() => responses.has(3) || exitErr, 15000);
+  if (exitErr) throw exitErr;
+
+  child.stdin.write(jsonrpc(4, 'prompts/list', {}));
+  await waitFor(() => responses.has(4) || exitErr, 8000);
+  if (exitErr) throw exitErr;
+
+  child.kill('SIGTERM');
+
+  const tools = (responses.get(2)?.result?.tools || []).map((t) => ({
+    name: t.name,
+    description: t.description,
+    inputSchema: normalizeSchema(t.inputSchema),
+  })).sort((a, b) => a.name.localeCompare(b.name));
+
+  let loginShape = null;
+  const txt = responses.get(3)?.result?.content?.[0]?.text;
+  if (typeof txt === 'string') {
+    try {
+      loginShape = shapeOnly(JSON.parse(txt));
+    } catch {
+      // Not JSON — capture as a plain text shape (length stays unstable so just record it's a string).
+      loginShape = { _format: 'text', _length_bucket: txt.length < 100 ? '<100' : txt.length < 1000 ? '<1000' : '>=1000' };
+    }
+  } else {
+    loginShape = { _error: 'no response', _raw: shapeOnly(responses.get(3)?.result) };
+  }
+
+  const prompts = (responses.get(4)?.result?.prompts || []).map((p) => ({
+    name: p.name,
+    description: p.description,
+    ...(p.arguments && p.arguments.length > 0 ? { arguments: p.arguments } : {}),
+  })).sort((a, b) => a.name.localeCompare(b.name));
+
+  return { tools, loginShape, prompts };
+}
+
+(async () => {
+  const cmd = process.argv[2] || 'dump';
+  let snap;
+  try {
+    snap = await runSmoke();
+  } catch (err) {
+    console.error('SMOKE FAIL:', err.message);
+    process.exit(1);
+  }
+
+  if (cmd === 'dump') {
+    process.stdout.write(JSON.stringify(snap, null, 2) + '\n');
+    return;
+  }
+  if (cmd === 'write-baseline') {
+    fs.mkdirSync(BASELINE_DIR, { recursive: true });
+    fs.writeFileSync(TOOLS_BASELINE, JSON.stringify(snap.tools, null, 2) + '\n');
+    fs.writeFileSync(LOGIN_BASELINE, JSON.stringify(snap.loginShape, null, 2) + '\n');
+    fs.writeFileSync(PROMPTS_BASELINE, JSON.stringify(snap.prompts, null, 2) + '\n');
+    console.error(`Baseline written: ${snap.tools.length} tools, ${snap.prompts.length} prompts, login_status shape captured`);
+    return;
+  }
+  if (cmd === 'diff') {
+    if (!fs.existsSync(TOOLS_BASELINE) || !fs.existsSync(LOGIN_BASELINE)) {
+      console.error('No baseline found. Run: node scripts/smoke.js write-baseline');
+      process.exit(2);
+    }
+    const expectedTools = JSON.parse(fs.readFileSync(TOOLS_BASELINE, 'utf8'));
+    const expectedLogin = JSON.parse(fs.readFileSync(LOGIN_BASELINE, 'utf8'));
+    const expectedPrompts = fs.existsSync(PROMPTS_BASELINE)
+      ? JSON.parse(fs.readFileSync(PROMPTS_BASELINE, 'utf8'))
+      : null;
+    const actualToolsStr = JSON.stringify(snap.tools, null, 2);
+    const expectedToolsStr = JSON.stringify(expectedTools, null, 2);
+    let ok = true;
+    if (actualToolsStr !== expectedToolsStr) {
+      ok = false;
+      const expectedNames = new Set(expectedTools.map(t => t.name));
+      const actualNames = new Set(snap.tools.map(t => t.name));
+      const added = [...actualNames].filter(n => !expectedNames.has(n));
+      const removed = [...expectedNames].filter(n => !actualNames.has(n));
+      console.error('TOOLS MISMATCH');
+      console.error(`expected ${expectedTools.length} tools, got ${snap.tools.length}`);
+      if (added.length) console.error(`  added:   ${added.join(', ')}`);
+      if (removed.length) console.error(`  removed: ${removed.join(', ')}`);
+      // Find tools whose schema/description changed
+      const expByName = Object.fromEntries(expectedTools.map(t => [t.name, t]));
+      const changed = snap.tools.filter(t => expByName[t.name] && JSON.stringify(t) !== JSON.stringify(expByName[t.name])).map(t => t.name);
+      if (changed.length) console.error(`  changed: ${changed.join(', ')}`);
+    }
+    if (JSON.stringify(snap.loginShape) !== JSON.stringify(expectedLogin)) {
+      ok = false;
+      console.error('LOGIN STATUS SHAPE MISMATCH');
+      console.error('expected:', JSON.stringify(expectedLogin, null, 2));
+      console.error('actual:  ', JSON.stringify(snap.loginShape, null, 2));
+    }
+    if (expectedPrompts !== null && JSON.stringify(snap.prompts, null, 2) !== JSON.stringify(expectedPrompts, null, 2)) {
+      ok = false;
+      const expectedNames = new Set(expectedPrompts.map(p => p.name));
+      const actualNames = new Set(snap.prompts.map(p => p.name));
+      const added = [...actualNames].filter(n => !expectedNames.has(n));
+      const removed = [...expectedNames].filter(n => !actualNames.has(n));
+      console.error('PROMPTS MISMATCH');
+      console.error(`expected ${expectedPrompts.length} prompts, got ${snap.prompts.length}`);
+      if (added.length) console.error(`  added:   ${added.join(', ')}`);
+      if (removed.length) console.error(`  removed: ${removed.join(', ')}`);
+      const expByName = Object.fromEntries(expectedPrompts.map(p => [p.name, p]));
+      const changed = snap.prompts.filter(p => expByName[p.name] && JSON.stringify(p) !== JSON.stringify(expByName[p.name])).map(p => p.name);
+      if (changed.length) console.error(`  changed: ${changed.join(', ')}`);
+    }
+    if (!ok) process.exit(1);
+    console.error(`OK: ${snap.tools.length} tools, ${snap.prompts.length} prompts, login_status shape matches`);
+    return;
+  }
+  console.error('usage: smoke.js [dump|diff|write-baseline]');
+  process.exit(2);
+})();

package/scripts/sync-claude-md.sh

@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+set -e
+ROOT="$(git rev-parse --show-toplevel)"
+cd "$ROOT"
+if git diff --cached --name-only | grep -qx "CLAUDE.md"; then
+  tail -n +2 CLAUDE.md > /tmp/feishu-claude-body.$$
+  { echo "# feishu-user-plugin — Codex Instructions"; cat /tmp/feishu-claude-body.$$; } > AGENTS.md
+  rm -f /tmp/feishu-claude-body.$$
+  cp CLAUDE.md skills/feishu-user-plugin/references/CLAUDE.md
+  git add AGENTS.md skills/feishu-user-plugin/references/CLAUDE.md
+  echo "[hook] CLAUDE.md → AGENTS.md + skill reference synced"
+fi

package/scripts/sync-team-skills.sh

@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+set -e
+TEAM_SKILLS="/Users/abble/team-skills/plugins/feishu-user-plugin"
+if [ ! -d "$TEAM_SKILLS" ]; then echo "[hook] team-skills not present, skip"; exit 0; fi
+ROOT="$(git rev-parse --show-toplevel)"
+cd "$ROOT"
+cp -r skills/. "$TEAM_SKILLS/skills/"
+cp .claude-plugin/plugin.json "$TEAM_SKILLS/.claude-plugin/"
+cd "$TEAM_SKILLS/.."
+VERSION=$(node -e "console.log(require('$TEAM_SKILLS/.claude-plugin/plugin.json').version)")
+BRANCH="sync/feishu-v$VERSION"
+if git rev-parse --verify "$BRANCH" >/dev/null 2>&1; then
+  echo "[hook] branch $BRANCH already exists, skipping"; exit 0
+fi
+git checkout -b "$BRANCH"
+git add "plugins/feishu-user-plugin/"
+git commit -m "chore: sync feishu-user-plugin v$VERSION skills + plugin.json" || { echo "[hook] nothing to sync"; exit 0; }
+git push -u origin "$BRANCH"
+gh pr create --title "Sync feishu-user-plugin v$VERSION" --body "Auto-sync from feishu-user-plugin main."
+PR_NUM=$(gh pr view --json number --jq .number)
+gh pr merge "$PR_NUM" --auto --merge
+echo "[hook] team-skills sync PR #$PR_NUM created with auto-merge"